Monitors ransomware victims, threat groups, leak-site activity, and newly disclosed ransomware incidents.
2843 articles
A monitoring post lists Brazil-based Marborges Agroindustria as a ransomware claim attributed to Exitium. The post says the claim is unconfirmed; it provides no independently verified incident details.
Insomnia claims it accessed Atlas Ocean Voyages’ internal systems and data. The ransomware.live record attributes the claim to the group but says it cannot confirm the information.
A monitoring record attributes a ransomware claim targeting France’s Groupe SFPI to Qilin, alleging data encryption and a ransom demand. The post says the claim has not been independently confirmed.
Akira reportedly threatens to upload 50 GB of CONCEPTNET GmbH data, including employee information and corporate records. The claim is unconfirmed and is attributed to the group by ransomware.live.
Akira reportedly claims Nafco as a victim and threatens to release 150 GB of corporate data, including employee personal information, financials, and contracts. The claim is unconfirmed.
Safepay claims five organizations in Portugal, Canada, Germany and the U.S. were compromised. The group has not detailed what data, if any, was allegedly exfiltrated.
Alp-001 claims it compromised Pellenc and exfiltrated 228GB of corporate data. The group reportedly set a nine-day deadline before allegedly publishing the files; the claim is unconfirmed.
ShinyHunters claim to have breached Infinite Campus and Ameriprise Financial and demand contact by March 25, 2026, before allegedly releasing data that includes Salesforce records and more than 200GB of Ameriprise SharePoint files.
Ransomware[.]live records a Qilin claim naming Southwire as a victim. The claim is unconfirmed; the post reports no ransom amount or specific encryption details.
Ransomware.live lists Southern Commercial Real Estate as a Qilin ransomware victim, citing a group claim. The post says the claim is unconfirmed and provides no details on scope, impact, or ransom demand.
Incransom claims it stole 700GB of data from JDV Products and threatens to publish it within a week. The claim is unconfirmed; the post attributes it to the actor’s disclosure page and ransomware.live monitoring.
ShinyHunters claims it compromised Infinite Campus Salesforce records containing PII and other internal data, threatening to leak them by March 25, 2026, and cause further digital disruptions. The claim is unverified.
ShinyHunters claims it compromised Ameriprise Financial Salesforce records containing PII and more than 200GB of compressed SharePoint data, threatening a leak and additional disruption unless contacted by March 25, 2026. The claim is unconfirmed.
ransomware.live reports an unverified SilentRansomGroup claim that it compromised Phelps Dunbar, a U.S. law firm. The claim was listed on March 22, 2026.
A ransomware.live monitoring record attributes a claim about HOPPECKE Singapore to Payload. The claim alleges encryption or operational disruption, but the article says it cannot confirm the information.
Thegentlemen made an unverified ransomware claim against SATS Sports Club Sweden, alleging data theft and threatening publication. The post attributes the claim to public group statements and says it has not been independently confirmed.
A ransomware claim attributed to thegentlemen alleges a breach of PTT Philippines and threatens system encryption and data exfiltration. The post says the claim is unconfirmed.
A monitoring post records an unconfirmed Qilin ransomware claim against Nanxun Enterprise Co., Ltd. in Taiwan. The post says methods, scope and impact are not available.
A ransomware.live monitoring record attributes a claim naming US-based Millerfoto as a victim to Qilin. The claim is unconfirmed, and no additional incident details are disclosed.
ALP-001 claims responsibility for an attack on irco[.]com, citing 5.9 TB of storage and $7.7 billion in revenue. The monitoring post says the claims are unconfirmed.
Qilin claims it compromised and encrypted Grupo Coril in Peru and threatens to publish stolen data if the ransom is not paid. The post is based on the group’s public claim; the information is unconfirmed.
ALP-001 claims it compromised Hikvision (hikvision[.]com), alleging access to 19.9 TB of data and setting a March 30, 2026 release deadline. The claim is unverified; ransomware[.]live says it cannot confirm the information.
A ransomware.live monitoring record attributes a ransomware claim involving UK victim Muffett to Qilin. The claim is unverified; the article provides no further incident details.
Nightspire claims it accessed Fidanque Hermanos e Hijos, S.A. and lists financial documents, internal documents, and an MSSQL database. The claim is unconfirmed and attributed to ransomware.live monitoring.
