Monitors ransomware victims, threat groups, leak-site activity, and newly disclosed ransomware incidents.
2843 articles
A ransomware.live monitoring post attributes to Sinobi a claim that Eco Sound Builders’ project and client data were encrypted and will be released unless a ransom is paid. The claim is unconfirmed.
Handala claims it published a list of 180,000 Iranian members of Vahid Offline, including their mobile numbers. The ransomware.live post says the claim is unverified.
ransomware[.]live lists Shwapno in Bangladesh as a Qilin ransomware claim. The post says details are unverified and provides no confirmed impact or technical details.
Ransomware.live lists bestgraphics[.]net as a DragonForce ransomware claim and cites an onion URL. The claim is unverified; the article provides no incident details beyond describing the victim’s printing-equipment business.
The Akira ransomware group claims it breached Pilana Group (TRITCON) and exfiltrated about 93GB, allegedly including employee and client records, financial documents, contracts, technical drawings, and project files. The claim is not independently confirmed in the text.
Akira claims it will soon publish corporate data belonging to Steve Quick Jeweler, including HR, financial, client, contract, NDA, and partner files. The claim is unconfirmed.
A ransomware.live record names Tax & Accounting Plus as a victim of a public claim attributed to Akira. The claim is unconfirmed.
A ransomware.live monitoring post attributes an unverified ransomware claim against PINNACLE TAX INC in the United States to Qilin. The post says the attack vector and impact are unavailable.
Ransomware.live lists Noll and Tam Architects as a claimed victim of the termite ransomware actor, citing a March 16, 2026 post. The publisher says it cannot confirm the claim.
Ransomware.live lists Singleton Schreiber as the target of an alleged ransomware attack by SilentRansomGroup, claiming files were encrypted and payment demanded. The post says the claim is unverified.
Ransomware.live reports a Qilin claim targeting Von Weise Associates, a US-based company. The post says the claim is unverified and provides no verified information about data exfiltration or ransom demands.
Incransom listed mcquaidinjurylaw[.]com in a ransomware disclosure dated March 16, 2026. The monitoring post says the claim is unconfirmed; the supplied content does not independently verify an incident.
ransomware[.]live lists Folet & Rivoire in a Kairos ransomware claim. The post says the claim is unconfirmed; no incident details are provided.
A ransomware.live record attributes an unconfirmed ransomware claim targeting MCC Economics to Qilin. The group reportedly claimed data exfiltration and system encryption; no further incident details or independent confirmation are provided.
Ransomware.live lists Frazer Center as an alleged ransomware victim of the incransom actor, citing the group’s public claim. The post says it cannot confirm the claim.
The Gentlemen claims seven organizations were breached and lists them on its extortion blog with countdowns threatening to publish files. The article says the data types were unspecified; suggested patient, student, and financial data are not confirmed.
Qilin claims it exfiltrated 1.6 TB and over 300,000 files from Ruhnau Clarke, and internal corporate files from Swiss manufacturer Biogel. The alleged data includes personal, financial, technical, and production records.
Payload Ransomware claims it stole 110 GB from Royal Bahrain Hospital and threatens to publish the data unless a ransom is paid by March 23. The article attributes the claim to the group’s Tor leak site; the incident is unconfirmed.
Handala claims it penetrated Stryker’s U.S. network and carried out a 12-petabyte data wipe. The monitoring post says the group released operation documentation; the claims are unconfirmed.
A ransomware claim attributed to Qilin lists Ruhnau Clarke in the United States. The post cites a claim source and says it is monitored by ransomware[.]live; the claim is unconfirmed.
Ransomware.live reports that Qilin listed Swedish manufacturer Biogel as a ransomware victim on March 16, 2026. The claim is unverified, and no further incident details are available.
A ransomware claim attributed to coinbasecartel alleges Novogene was targeted and describes possible data exfiltration or encryption and a ransom demand. The claim is unverified.
A ransomware claim attributed to coinbasecartel alleges that Neochromosome's systems were encrypted and data exfiltrated, with payment demanded and synthetic chromosome design data threatened with release. The record was monitored by ransomware[.]live.
Everest allegedly claimed an attack on Evaluate, a Norstella company, involving encrypted systems and a ransom demand. The monitoring post says the claim is unconfirmed.
