BlueWhale is an active ransomware/extortion group tracked on ransomware.live from the victims it lists on its public leak site.
observed sectors
Technology
2 victims · last active 14 Aug 2026
recent activity · our intel
source: ransomware.live1 refs → FAQ2
Which sector does the BlueWhale ransomware group target?+
BlueWhale targets the Technology sector.
What pressure tactic does BlueWhale use to force victims to pay?+
They pressure victims by listing them on a public leak site.
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.