Skip to content

Ransomware Statistics API

The Ransomware Statistics API provides aggregated statistics on ransomware attacks, allowing you to analyze trends by country, group, and industry sector.

GET/api/v2/stats/countries

Retrieve statistics on the number of ransomware attacks detected against different countries.

NameTypeRequiredDescription
countriesstringNoCountry list following ISO 3166-1 alpha-2 codes (e.g., UK, FR, ES)
gtestringNoStart date (Unix timestamp, YYYY-MM-DD, or YYYY-MM-DDThh:mm:ss)
ltestringNoEnd date (Unix timestamp, YYYY-MM-DD, or YYYY-MM-DDThh:mm:ss)
Terminal window
curl "https://api.vysion.ai/api/v2/stats/countries?countries=ES,FR" \
--header 'Accept: application/json' \
--header 'x-api-key: YOUR_API_KEY'
{
"data": {
"total": 2,
"hits": [
{
"key": "ES",
"doc_count": 45
},
{
"key": "FR",
"doc_count": 32
}
]
},
"error": null
}
GET/api/v2/stats/groups

Retrieve statistics on the number of attacks performed by different ransomware groups.

NameTypeRequiredDescription
countriesstringNoCountry list following ISO 3166-1 alpha-2 codes (e.g., UK, FR, ES)
gtestringNoStart date (Unix timestamp, YYYY-MM-DD, or YYYY-MM-DDThh:mm:ss)
ltestringNoEnd date (Unix timestamp, YYYY-MM-DD, or YYYY-MM-DDThh:mm:ss)
Terminal window
curl "https://api.vysion.ai/api/v2/stats/groups" \
--header 'Accept: application/json' \
--header 'x-api-key: YOUR_API_KEY'
{
"data": {
"total": 3,
"hits": [
{
"key": "lockbit",
"doc_count": 156
},
{
"key": "alphv",
"doc_count": 89
},
{
"key": "play",
"doc_count": 67
}
]
},
"error": null
}
GET/api/v2/stats/sector

Retrieve statistics on the number of attacks based on the victim’s industry sector, using NAICS (North American Industry Classification System) codes.

NameTypeRequiredDescription
countriesstringNoCountry list following ISO 3166-1 alpha-2 codes (e.g., UK, FR, ES)
gtestringNoStart date (Unix timestamp, YYYY-MM-DD, or YYYY-MM-DDThh:mm:ss)
ltestringNoEnd date (Unix timestamp, YYYY-MM-DD, or YYYY-MM-DDThh:mm:ss)
Terminal window
curl "https://api.vysion.ai/api/v2/stats/sector" \
--header 'Accept: application/json' \
--header 'x-api-key: YOUR_API_KEY'
{
"data": {
"total": 4,
"hits": [
{
"key": "54",
"doc_count": 78
},
{
"key": "31-33",
"doc_count": 65
},
{
"key": "62",
"doc_count": 43
},
{
"key": "52",
"doc_count": 32
}
]
},
"error": null
}

All statistics endpoints return the same response structure:

FieldTypeDescription
data.totalintegerTotal number of statistic buckets
data.hitsarrayArray of statistic objects
data.hits[].keystringThe category key (country code, group name, or NAICS code)
data.hits[].doc_countintegerNumber of attacks for this category
errorobjectError information (null if successful)

Here are some common NAICS sector codes you might encounter:

CodeIndustry
11Agriculture, Forestry, Fishing and Hunting
21Mining, Quarrying, and Oil and Gas Extraction
22Utilities
23Construction
31-33Manufacturing
42Wholesale Trade
44-45Retail Trade
48-49Transportation and Warehousing
51Information
52Finance and Insurance
53Real Estate and Rental and Leasing
54Professional, Scientific, and Technical Services
55Management of Companies and Enterprises
56Administrative and Support and Waste Management
61Educational Services
62Health Care and Social Assistance
71Arts, Entertainment, and Recreation
72Accommodation and Food Services
81Other Services (except Public Administration)
92Public Administration

Statistics endpoints may return these error codes:

StatusError CodeDescription
401UnauthorizedInvalid or missing API key
422Unprocessable EntityInvalid parameters
429Too Many RequestsRate limit exceeded
500Internal Server ErrorServer error