Data credits and licenses

KarmaSignal combines public records and openly licensed data with its own analysis. These credits are required by the licenses of the data we use.

Ransomware leak-site claims

Ransomware.live (used with written permission for commercial use) and RansomLook (ransomlook.io), licensed CC BY 4.0.

Published breach datasets

Have I Been Pwned (haveibeenpwned.com), licensed CC BY 4.0.

Group tradecraft

MITRE ATT&CK(R). (c) The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation. Ransomware Vulnerability Matrix and Ransomware Tool Matrix by BushidoUK, licensed CC BY 4.0.

Vulnerabilities

This product uses the NVD API but is not endorsed or certified by the NVD. CISA Known Exploited Vulnerabilities catalog (public domain). GitHub Advisory Database, licensed CC BY 4.0. EPSS scores by FIRST (first.org). Nuclei templates by ProjectDiscovery (MIT). PoC-in-GitHub (CC0).

Official breach records

Public records from US federal and state agencies, and US federal court records made available by the Free Law Project (CourtListener).

IP data

IP address data is powered by IPinfo (ipinfo.io), licensed CC BY-SA 4.0.

Updated 2026-10-27.