Incransom Claims Ransomware Incident at BDAC in Australia
Incransom claims a ransomware incident involving Bendigo and District Aboriginal Co-operative (BDAC). The claim is attributed to the group’s disclosure site and remains unconfirmed.
Ransom Monitor
Monitors ransomware victims, threat groups, leak-site activity, and newly disclosed ransomware incidents.
2837 articles
DragonForce Claims Affordable Oil Systems Encrypted, Threatens Data Leak
DragonForce claims it encrypted Affordable Oil’s systems and threatens to leak data unless paid. The monitoring post is based on the group’s claim; the information has not been independently confirmed.
ShinyHunters Claims Amtrak Salesforce Data in Pay-or-Leak Threat
ShinyHunters claims it compromised over 9.4 million Amtrak Salesforce records containing PII and other internal data, demanding payment by April 14, 2026, or threatening to leak the data and cause disruption. The claim is unverified.
ShinyHunters Claim McGraw Hill Salesforce Data Compromised, Demand Payment
ShinyHunters claim McGraw Hill had over 45 million Salesforce records containing PII compromised and demand payment to prevent a leak. The monitoring post says the claim is unconfirmed.
ShinyHunters Claim Ryan, LLC Salesforce Data Compromise
ShinyHunters claim they compromised more than 4.8 million Ryan, LLC Salesforce records containing PII and internal data, and threaten to leak it unless contacted by April 14, 2026. The claim is unconfirmed.
Incransom Claims Straten & Kollegen Tax Advisory Firm in Germany
Incransom claims it breached German tax advisory firm Straten & Kollegen and threatens to leak client data and tax records unless paid. The claim is unconfirmed and is monitored by ransomware.live.
Krybit Claims to Have Encrypted Dencom New Zealand Systems
Krybit claims it encrypted Dencom New Zealand Limited’s systems and threatened to leak sensitive data unless a ransom was paid. The post attributes the claim to Krybit’s leak site and says it is unverified.
ShinyHunters Claims Kemper Corporation Data Compromise
ShinyHunters allegedly claims it compromised more than 13 million Kemper Corporation Salesforce records containing PII and internal data, and threatens to leak them unless contacted by April 14, 2026. The claim is unconfirmed.
Blackwater Claims Ransomware Attack on Medical Park Hospitals in Turkey
Blackwater claims it conducted a ransomware attack against Turkey’s Medical Park Hastaneler Grubu. The claim is attributed to the group and monitored by ransomware[.]live; the article says it is unconfirmed.
ShinyHunters Claims Marcus & Millichap Was Compromised and Threatens to Leak Data
A monitoring post attributes to ShinyHunters a claim that Marcus & Millichap was compromised, alleging exposure of more than 30 million Salesforce records and demanding payment before a threatened leak. The claim is unconfirmed.
ShinyHunters Claim Abrigo Data Theft, Threaten Leak of 1.7M Salesforce Records
ShinyHunters allegedly claim Abrigo had more than 1.7 million Salesforce records containing PII and internal data compromised, and threaten to leak the data unless the company pays. The claim is unconfirmed.
ShinyHunters Claim Rockstar Games Snowflake Metrics Data and Threaten Leak
ShinyHunters claim Rockstar Games’ Snowflake metrics data was compromised via Anodot[.]com and threaten to leak it unless contacted by April 14, 2026. The claim is unverified and monitored by ransomware.live.
Incransom Claims Ransomware Attack on Morgan County, Georgia
Ransomware.live lists an unconfirmed Incransom claim targeting Morgan County, Georgia (morgancountyga[.]gov), with a source link to the group's disclosure. The article provides no independent confirmation of compromise or impact.
Incransom Claims Ransomware Attack on Australian Company Mastercom
A ransomware monitoring record attributes a claim against Australian company Mastercom to incransom. It alleges an intrusion and threatened data theft or disruptive encryption; the claim is unconfirmed.
Nightspire Claims Sahara Air Products Data and Threatens Release
A ransomware claim attributed to nightspire names Sahara Air Products and alleges access to technical drawings, documents, customer invoices, and shipment histories. The claims are unconfirmed.
Qilin Claims TIS as a Ransomware Victim
A ransomware.live record lists TIS as a Qilin ransomware claim, citing a Qilin leak-site listing published April 10, 2026. The post says the claim is unconfirmed.
Krybit Claims CONREP SA as a Ransomware Victim
Ransomware.live lists CONREP SA, a Romanian construction and infrastructure company, as a victim claimed by krybit. The post cites the actor's page and says the claim is unconfirmed.
Qilin Claim Names Sonn Law Group in Unverified Ransomware Listing
Ransomware.live lists Sonn Law Group in a Qilin ransomware claim, citing a post published April 10, 2026. The claim is unverified, and no further incident details are provided.
Qilin Claims Autogalerie Heister in Germany
Qilin's claim names Germany-based Autogalerie Heister as a victim and alleges encrypted systems and potential data impact. The post says the information is unconfirmed.
Qilin Claims Attack on SAAM Towage in Chile
A ransomware.live monitoring record attributes an unverified ransomware attack claim against Chilean company SAAM Towage to Qilin. The post provides no further incident details.
incransom Claims Campbell University Data Breach Involving Up to 500GB
incransom claims Campbell University data was exposed, with up to 500GB reportedly containing sensitive student and staff information. The post says the claim is unconfirmed and identifies the actor’s disclosure page as its source.
Qilin Claims Ransomware Incident at Nan Liu Enterprises
A monitoring post attributes a ransomware claim involving Nan Liu Enterprises to Qilin. The post cites the actor's leak-site listing but says the claim has not been independently confirmed.
Qilin Claims Ransomware Attack on A Roettgers
A monitoring record attributes to Qilin an unconfirmed claim that A Roettgers’ files were encrypted and data exfiltrated unless a ransom is paid. The claim was published on April 10, 2026.
Qilin Claims Ransomware Attack on Chalmers & Kubeck
A ransomware.live entry attributes a ransomware attack claim targeting Chalmers & Kubeck to Qilin. The claim was listed on April 10, 2026, and is unconfirmed by the article.