Coinbasecartel Claims It Stole 1.5 TB of Data From Idera
The ransomware group coinbasecartel claims it exfiltrated 1.5 TB of data from Idera and threatened to release it unless a ransom was paid. The claim is unconfirmed.
Ransom Monitor
Monitors ransomware victims, threat groups, leak-site activity, and newly disclosed ransomware incidents.
2840 articles
WorldLeaks Claims Deaconess Health System as Ransomware Victim
The worldleaks group claims Deaconess Health System was breached, with systems encrypted and data exfiltrated. ransomware[.]live monitors the leak-site claim; the post says it cannot confirm the allegations.
Krybit Claims Gerald Zisser GmbH as a Ransomware Victim
A ransomware claim attributed to krybit lists Gerald Zisser GmbH as a target. The monitoring post says the company is Austrian but tags the incident as Germany; the claim is unconfirmed.
Handala Claims Intrusion Into PSK WIND Technologies’ Defense Networks
Handala Hack claims it infiltrated PSK WIND Technologies’ defense networks as part of operations against military infrastructure. The article cites Handala’s site and says ransomware[.]live monitors the claim; the incident is unconfirmed.
Handala Claims Control of St. Joseph County IT and 2 TB Data Exfiltration
Handala claims it took control of St. Joseph County, Indiana’s centralized IT infrastructure and exfiltrated over 2 TB of data. The post attributes the claim to the group; it remains unconfirmed.
Payload Claims El Wastani Petroleum Company (WASCO) as a Victim
A ransomware claim attributed to Payload names El Wastani Petroleum Company (WASCO). The monitoring post says the claim is unconfirmed; no independent evidence of compromise is provided.
Incransom Claims Pacific West Injury Law as a Victim
Incransom claims Pacific West Injury Law (pacificwestinjury[.]com) as a victim. ransomware[.]live attributes the claim to the group’s leak-site disclosure; the information is unconfirmed.
Qilin Claims File Encryption at www.bnc.com.ve
A ransomware.live monitoring post attributes an alleged file-encryption and ransom claim targeting www[.]bnc[.]com[.]ve in Venezuela to Qilin. The post says the claim is unconfirmed.
Akira Claims Research & Planning Consultants Data Will Be Published
The Akira ransomware group claims it plans to publish 33 GB of Research & Planning Consultants data, including project, financial, client, and employee information. The claim is unconfirmed.
Insomnia Claims Noble Inc. as a Ransomware Victim
Ransomware.live lists Noble Inc. in the United States as an Insomnia ransomware claim, citing the actor’s onion page. The post says the claim is unconfirmed; it does not establish compromise or data impact.
Akira Claims Access to CMD Outsourcing Solutions Data
Akira claims access to CMD Outsourcing Solutions data, including employee documents, financial files and NDAs, and threatens to upload it. The claims are unverified.
Lynx Claims Smith Dollar Law Firm Systems Compromised and Client Data Exposed
A ransomware.live-monitored entry attributes an unverified claim to Lynx that it compromised Smith Dollar, a Santa Rosa law firm, and exposed client data. The article says it cannot confirm the claim.
DragonForce claims ransomware attack on Bit-Wizards
DragonForce reportedly claimed Bit-Wizards, a Florida-based technology company, as a ransomware victim. The monitoring post says the claim is unconfirmed.
DragonForce Claims Ransomware Incident at AnchorsGordon
AnchorsGordon is listed in a ransomware claim attributed to dragonforce. The post mentions possible operational disruption and data exposure, but says the claims are unconfirmed.
Akira Claims It Will Publish Gauthier Connectique Data
Akira claims it will soon publish 42GB of Gauthier Connectique data, including employee documents and company files. The claim is unverified and is attributed to public claims by the group.
Play ransomware group claims Morphosis as a victim
A monitoring post attributes a ransomware claim naming Morphosis, a US technology company, to Play. The post says the claim is based on the group's public statements and has not been independently confirmed.
Nightspire Claims Ransomware Deployment at French Pyrotechnic Safety Organization
Nightspire claims it compromised Cabinet d’Étude en Sécurité Pyrotechnique in France using ransomware. The post says data is not currently available and identifies ransomware.live as the monitoring service; the claim is unconfirmed.
Spacebears Claim Brooklands of Mornington Data Theft
Spacebears claim they compromised Brooklands of Mornington and took employee and guest information, financial documents, and other files. The group threatens to release or monetize the data unless a ransom is paid; the claims are unconfirmed.
Safepay Claims Ransomware Compromise of AcademyHealth
Safepay claims it compromised AcademyHealth, a U.S. nonprofit in the healthcare sector. The claim is attributed to the group’s leak site and monitored by ransomware[.]live; the article says it is unconfirmed.
Play Ransomware Group Claims Crystal Point
A ransomware.live monitoring record names Crystal Point as a victim in a claim attributed to “play.” The post says the claim is based on public information and that its accuracy could not be confirmed.
Akira Claims Aqua-Serv Engineers Data, Threatens to Publish 17GB
A post monitored by ransomware.live attributes to Akira a threat to publish 17GB of Aqua-Serv Engineers data, allegedly including employee documents, technical materials, client information and financials. The claim is unconfirmed.
Anubis Claims Ransomware Incident at Tesla Systems
Ransomware.live lists an Anubis ransomware claim targeting Tesla Systems, dated April 6, 2026. The post alleges a careless IT contractor jeopardized client security, but says the group's claims are unconfirmed.
Bravox Claims Aculab as Ransomware Victim
Bravox allegedly claims it targeted UK communications provider Aculab, alleging system encryption, data exfiltration, and a ransom demand. The post says the claim is unconfirmed.
Payload Claims Breaches of Tscherne Consulting and United Finance Egypt
Payload ransomware claims it took 104 GB of corporate data from Tscherne Consulting and 327 GB, including customer information, from United Finance Egypt. The claims are not independently confirmed in the article.