Krybit Claims Whiskey & Co. as Ransomware Victim
Krybit listed Japan’s Whiskey & Co., Inc. in a ransomware claim dated April 3, 2026. The monitoring post says the claim is unconfirmed.
Ransom Monitor
Monitors ransomware victims, threat groups, leak-site activity, and newly disclosed ransomware incidents.
2841 articles
Infonet Media Named in Unverified incransom Ransomware Claim
The ransomware group incransom reportedly listed Slovenia-based Infonet Media d.o.o., alleging its systems were compromised and radio and media operations disrupted. The claim is unconfirmed.
Nightspire Claims Advanced Vehicle Assemblies as a Ransomware Victim
A ransomware claim attributed to nightspire names Advanced Vehicle Assemblies. The post lists banking, accounting, customer, and engineering information, but says the claims are unconfirmed.
Incransom Claims Community Connections Compromised
Incransom claims it encrypted systems and exfiltrated data from Community Connections, a US behavioral health nonprofit. The claim is attributed to the group and has not been independently confirmed.
Incransom Claims Corona Law Firm as Victim, Threatens Data Leak
Incransom claims it compromised Corona Law Firm (coronapa[.]com) and threatens to leak confidential client data and deploy ransomware unless a ransom is paid. The claim is unconfirmed.
Krybit Claims Ransomware Attack on Kramer Nutzfahrzeug Service Center
Ransomware.live records a krybit claim against Kramer Nutzfahrzeug Service Center GmbH, alleging system encryption and possible data exfiltration; the publisher says it cannot verify the claims.
Krybit Claims Ransomware Attack on BJ Grupo
ransomware.live records a Krybit claim against BJ Grupo, alleging data encryption and extortion. The post says the claim is based on the group’s public statements and is unconfirmed.
AiLock Claims Piet Vijverberg and Berning & Söhne GmbH as Victims
AiLock lists Piet Vijverberg and Berning & Söhne GmbH as alleged victims, claiming it compromised multiple organizations. The group says publication of the allegedly stolen information is coming soon; data types are undisclosed.
Nightspire Claims Ransomware Attack on Dubosson Frères SA
A ransomware claim attributed to nightspire targets Dubosson Frères SA in Switzerland. The post says data is not currently available and states the claim has not been independently confirmed.
Nightspire Claims Ransomware Incident at Southeastern Conference of Seventh-day Adventists
Nightspire claims it compromised the Southeastern Conference of Seventh-day Adventists. The claim is unconfirmed, and the post says data is not currently available.
Akira Claims 11 GB of Data Exfiltrated from Four U.S. Companies
Akira claims to have exfiltrated about 11 GB of data from American Vintage Home, Briggs Plumbing Products, Genco Manufacturing and Associates of Clifton Park. The claim is unconfirmed.
DragonForce Claims Data Theft From 13 Organizations
DragonForce claims it breached 13 named organizations and exfiltrated data ranging from 8.91 GB to 1.05 TB. The group has not specified the types of information allegedly taken.
DragonForce Claim Names Asmar Schor & McKenna as a Ransomware Target
A ransomware.live record attributes a ransomware claim naming Asmar Schor & McKenna to DragonForce. The record says the claim is unconfirmed.
Payload Claims Ransomware Incident at Austrian Tax Firm Tscherne Consulting
Ransomware.live lists Austrian tax firm Tscherne Consulting Steuerberatung GmbH in a claim attributed to the Payload actor. The post says the information is unconfirmed and provides no details about impact.
Payload Claims Ransomware Incident at United Finance Egypt
The ransomware group payload claims it compromised United Finance Egypt’s infrastructure and leaked data, mostly customer information. The article says the claim is unverified.
Beast Claims project1631.com in Ransomware Extortion Post
The ransomware group Beast claims project1631[.]com as a victim, threatening encryption and release of allegedly stolen material unless a ransom is paid. The claim is unconfirmed and was monitored by ransomware[.]live.
Incransom Claims It Downloaded 260 GB of Data from Greek Law Firm VLawyers
Incransom claims it compromised Greek law firm VLawyers and downloaded 260 GB of data. The monitoring post says the claim has not been independently confirmed.
Vect Ransomware and TeamPCP Claim Sportradar Supply-Chain Breach
A dark-web forum broker acting for Vect Ransomware and TeamPCP claims they stole Sportradar data via a Trivy supply-chain attack, including personal records, athlete profiles, credentials and cloud secrets, offered for up to $50,000.
coinbasecartel Claims Data Leak at RAKS Sp. z o.o.
A ransomware.live record attributes to coinbasecartel a claim that it exfiltrated and leaked data from RAKS Sp. z o.o. in Poland. The post says the claim is unconfirmed.
Qilin Claims Breaches of Die Linke, Jursaconsulting, CHEK News and Neurologic Associates
Qilin claims to have breached four organizations in Germany, Canada and the United States. The claims are unverified, and the group has not specified what data, if any, was exfiltrated.
DragonForce Claims Ransomware Attack on Berlin Heating Provider
A ransomware claim attributed to DragonForce names Fernheizwerk Neukölln, which supplies heat to about 40,000 homes, as a target and alleges disruptions to heating services. The information is unconfirmed.
INC Ransom Claims Breach of Fondazione IRPEA
INC Ransom claims Fondazione IRPEA’s network and sensitive files were compromised. The group has not publicly detailed the specific data allegedly exfiltrated; the claim is unconfirmed in the article.
Incransom Claims Data Exfiltration and Ransom Demand Against Fondazione IRPEA
Ransomware.live lists Fondazione IRPEA (irpea[.]it) as an incransom victim; the group allegedly claims data exfiltration and demands a ransom. The post says the claim is unconfirmed.
Nightspire Claims Access to The GMP Group Data
A post monitored by ransomware.live attributes to nightspire a claim of accessing and exfiltrating The GMP Group’s financial, salary, and candidate documents. The post says the claim is unconfirmed.