Terms of Service

Ransomwhere.org is provided for informational, research, and defensive security purposes only. The platform aggregates publicly available data to raise awareness about ransomware threats.

You agree to use this platform only for lawful purposes, including:

• Security research and threat intelligence
• Incident response and forensic investigation
• Academic and educational use
• Defensive cybersecurity operations

You agree not to use this platform for:

• Any illegal activity or to facilitate ransomware attacks
• Harassment or targeting of listed victims
• Automated access that degrades service for other users
• Misrepresenting data or attributions from this platform

All data is sourced from third-party open-source intelligence feeds and is provided “as is” without warranty of any kind. We make reasonable efforts to present accurate data, but:

• Victim counts reflect only publicly leaked data and underrepresent actual impact
• Payment data may be incomplete or based on static snapshots
• Group attributions may be inaccurate or outdated
• Country data is based on victim organization location, not attacker origin

Do not make critical security decisions based solely on data from this platform. Always verify with primary sources and professional threat intelligence services.

Our API endpoints are provided for convenience. Data is cached at intervals specified in our API documentation. Excessive requests that degrade service may result in rate limiting.

For high-frequency access, use the upstream data sources directly with your own API keys.

The Ransomwhere.org platform code is open source. Data displayed on this platform originates from third-party sources and is subject to their respective terms. When using data from this platform, you must attribute the original data sources.