Halcyon Ransomware 
Research Center

Ransomware has become an unchecked threat to our national security. Gaps across governments and industry allow ransomware groups to thrive among our disconnected defense. Halcyon is building the Ransomware Research Center because we believe that, working together, we can change this trajectory. Join us as we unite experts and defenders, drive public policy, and advance knowledge of today's ransomware threats.
Join the Mission
Join the Mission
Jul 12
/
USA
/
Play
Jul 9
/
USA
/
Qilin
Jul 7
/
USA
/
SafePay
Jul 9
/
USA
/
Cicada 3301
Jul 7
/
USA
/
SafePay
Jul 9
/
USA
/
Nova
Jul 10
/
USA
/
Kraken
Jul 12
/
USA
/
Qilin
Jul 10
/
USA
/
Inc Ransom
Jul 7
/
USA
/
SafePay
Jul 12
/
USA
/
Play
Jul 12
/
USA
/
Everest
Jul 7
/
USA
/
kawa4096
Jul 7
/
USA
/
Dragonforce
Jul 10
/
USA
/
Inc Ransom
Jul 12
/
USA
/
Everest
Jul 13
/
USA
/
Qilin
Jul 7
/
USA
/
PayoutsKING
Jul 11
/
USA
/
Cicada 3301
Jul 7
/
USA
/
PayoutsKING

Ransomware by the Numbers

2024
5,414
Claimed Victims Globally
FEATURED RESOURCES

Learn more about Halcyon Research

Get the latest Halcyon digital goodies, from webinars to white papers, and everything in between.
Unmasking the Threat

SafePay

Uncovering key aspects of ransomware groups, their tactics, and targets, strengthens your defenses to stay prepared for some of today’s most dangerous adversaries.
Explore SafePay
June 20, 2025
Research

Scattered Spider Tactics Observed Amid Shift to US Targets

June 25, 2025
Research

Iranian Use of Cybercriminal Tactics in Destructive Cyber Attacks

Top Ransomware Groups

Power Rankings: Ransomware Malicious Quartile

Ransomware attacks continue to be extremely lucrative, with ransom demands and recovery costs bleeding victim organizations for millions of dollars.

Who Should Join?

Receive intelligence support, data sharing, and a more comprehensive understanding of the ransomware threat to specific sectors.

Co-develop research and close adversary gaps via shared insights and peer-validated intelligence.

Inform sound ransomware policy with grounded, data-driven options and direct collaboration with researchers.

Develop trust relationships, communicate gaps, and receive intelligence support to help counter ransomware threats.

Join the Community

Frequently Asked Questions

Any organization committed to defending against ransomware—public or private—is welcome to join. We'll review and respond within 2 weeks.

We welcome strategic collaborations, joint research agreements, technical intelligence sharing, and policy co-development initiatives.

Some research findings will be more sensitive than others. The Center will share all research at the lowest sensitivity possible with communities, organizations, and clients, consistent with Traffic Light Protocol (TLP) 2.0 guidelines.

The best way for us to track incoming requests is through the form above. If you are exploring the possibility of joining, but need additional information, please simply note that in the form and we will get back with you shortly.

Still have a question?

Contact Us
Contact Us