Monitors ransomware victims, threat groups, leak-site activity, and newly disclosed ransomware incidents.
2763 articles
Eclipse's leak site claims to hold 832 GB of Taiwan Otsuka Pharmaceutical data and shows a publication countdown. The claim, data volume and contents have not been independently verified.
Ransomware group N0n claims it compromised managed IT provider Chibitek and exposed client financial records, network credentials, configuration secrets, and internal documents. The claim is unverified.
Ransomware.live reports that actor N0n listed a Michigan cannabis operator as a victim and claims company data will be published on October 13. The claims are unverified.
Ransomware.live lists a Nightspire claim against MGT Lojistik A.Ş., a transportation-sector organization in Turkey. The post says the claim is unverified and provides no specific impact details.
BrainCipher allegedly targeted huntcompanies.com in the US. The ransomware group's claim, posted on October 11, 2026, is unverified; the report says the information about the company could not be reliably confirmed.
Ransomware group N0n claims Company #24, a California smart-building and surveillance integration provider, faces data exposure scheduled for October 14. The claim has not been independently confirmed.
The Emperador group claims it stole millions of Spelman Logistics records, accessed partner systems, and is demanding $500,000 in cryptocurrency. The claims have not been independently confirmed.
Ransomware group N0n claims it targeted a neurology practice in New South Wales, Australia. The monitoring post says data exposure is scheduled for October 13, 2026, and notes the claim is unverified.
Ransomware.live lists Company #23, a California smart building and surveillance integrator, as a target claimed by the N0n group. The claim says data exposure is scheduled for October 14; its accuracy is unconfirmed.
Ransomware group N0n claims it targeted a Florida architecture and design company identified as Company #28, with data publication scheduled for October 14, 2026. The claim is unverified.
The N0n ransomware group claims it targeted a California smart-building and surveillance integration company and says data will be published on October 14. The claim has not been independently confirmed.
A ransomware.live monitoring post says Rhysida claimed to expose about 51.3 GB of Reed & Giordano PA files, including financial details and personal information. The claims have not been independently confirmed.
Ransomware.live reports that Qilin claimed an attack on Friendship Christian School in the US. The site says the claim is unverified.
Qilin claims it targeted Morocco’s CNESTEN, with reported disruption and potential data compromise. The monitoring post says the claim has not been independently confirmed.
Ransomware.live lists Cologne bakery chain Schmitz & Nittenwilm as a victim claimed by Majinahanashi. The claim is unverified; the record provides no details about compromised data or operational impact.
A ransomware.live record says Majinahanashi claimed to have encrypted CARIBE / SUBRA’s servers and Hyper-V systems and exfiltrated more than 20,000 sensitive HR files. The claims are unverified.
Ransomware.live reports that the N0n group claims to have targeted a California smart-building and surveillance integration company. The claim is unverified, with data publication scheduled for October 14, 2026.
Dragonforce claims it exfiltrated and released 750 GB of data from Peruvian company TQC S.A. The monitoring post says the claim has not been independently confirmed.
Ransomware.live reports that Rhysida claims to have exposed about 96,456 files from Charles E. Tabor AAL LLC, including sensitive client, medical, identity, tax, and settlement records. The claims are unverified.
The ransomware group N0n claims it targeted a Florida architecture and design firm, with data publication reportedly scheduled for October 14, 2026. The claim has not been independently confirmed.
A ransomware.live record attributes a claim to Majinahanashi that backups for WONDR DIAMONDS and D GEM MOUNT were exposed. The post says the information is based on public claims and is unverified.
A ransomware group claims it encrypted CDA servers and stole more than 100,000 DICOM files containing patient and medical-study information. The claims have not been independently confirmed.
A ransomware.live monitoring post says Qilin claimed an attack on Colombia-based Confipetrol, alleging file encryption and operational disruption. The claims have not been independently confirmed.
Ransomware group Majinahanashi claimed GRUPO STARFOODS in Portugal as a victim. The claim is unverified; the article provides no confirmed details about affected systems, data, or operational impact.
