Ransomhouse Claims to Have Targeted Namibia’s Defence Force
Ransomhouse claims it compromised the Namibian Defence Force’s systems and sought a ransom. The post attributes the claim to the group and says it cannot confirm its accuracy.
Ransom Monitor
Monitors ransomware victims, threat groups, leak-site activity, and newly disclosed ransomware incidents.
2774 articles
Safepay Claims Attack on Swiss Kitchen Company Stöcklin Küchen
Safepay claims it attacked Swiss kitchen company Stöcklin Küchen. The monitoring post lists the claim’s source and September 15, 2026 publication and discovery times, but says it cannot confirm the claim.
Safepay Claims Meterex.com as a Ransomware Victim
A ransomware.live monitoring record says Safepay publicly listed meterex.com, a technology company in Germany. The publisher says it cannot confirm the claim.
SafePay Claims Ransomware Attack on Mexican Healthcare Provider
Ransomware.live recorded a SafePay claim targeting laconcepcion[.]com[.]mx in Mexico, published September 15, 2026. The site says it could not confirm the claim.
Safepay Claims Attack on US Healthcare Organization triniticaring.org
A ransomware.live monitoring post attributes a claimed attack on US healthcare organization triniticaring.org to Safepay and reports operational disruption. The post says the group’s claims are unconfirmed.
DragonForce Claims Ransomware Incident at UK Optometry Practice
A ransomware.live post attributes a ransomware claim against UK optometry practice Owen Leigh Optometry to DragonForce, which claimed more than 400 GB of data loss. The post says the claim is unconfirmed.
DragonForce Claims 200+ GB Data Impact at Community Property Management
A ransomware.live monitoring post says DragonForce claimed a ransomware incident affecting Community Property Management and reported 200+ GB of data impact. The claim is unverified.
Qilin Claims Ransomware Attack on Sweden’s Aarsleff
Ransomware.live reports that Qilin claimed an attack on Swedish manufacturer Aarsleff on September 16, 2026, with disruption and possible data encryption. The claim is unconfirmed.
SafePay Claims Neumerkel GmbH in Germany as a Ransomware Victim
SafePay claimed Neumerkel GmbH in Germany as a ransomware victim on Sept. 15, 2026. The monitoring post says it cannot verify the claim.
Safepay Claims Ransomware Attack on Marlin HVAC
A ransomware group identified as Safepay claimed an attack on Marlin HVAC, listed as marlinhvac[.]com. The monitoring post gives September 15, 2026, as the discovery and publication date and says the claim is unconfirmed.
Vexy Ransomware Claims It Encrypted Hashimoto Jimuki Systems in Japan
A ransomware.live post reports Vexy Ransomware’s claim that it encrypted critical IT systems at Japanese company Hashimoto Jimuki, disrupting operations. The claim has not been independently confirmed.
Dark Project Claims Theft of 489 GB of Data From Cumar Marble & Granite
Dark Project claims it stole 489 GB of data from Cumar Marble & Granite, including personal information, technical drawings and financial documents. The report says the claims are unconfirmed.
Interlock Claims 5.6 TB Ransomware Leak from Fort Smith
Interlock claims it compromised Fort Smith and leaked 5.6 TB of data, including public safety, infrastructure, law enforcement, and resident information. The claims have not been independently confirmed.
Metaencryptor Claims Ransomware Attack on SFA Engineering
Ransomware.live reported a metaencryptor claim targeting South Korean manufacturer SFA Engineering Corporation, with disruption reported. The post is based on the group’s public claim, which the publisher could not verify.
Qilin Claims ADM as a Ransomware Victim
A ransomware.live monitoring post says Qilin claimed ADM as a victim on September 15, 2026. The post attributes the claim to the group and says it could not confirm its accuracy; attack details and outcomes were not provided.
Qilin Claims Ransomware Attack on Winston Contracting
A ransomware.live post attributes an incident involving encryption-related impacts at US-based Winston Contracting to Qilin. The post says the claims are unverified.
Anubis Claims Better Accounting Solutions Was Breached
A ransomware-monitoring post records Anubis’s claim of a data breach at Better Accounting Solutions, but says the claim could not be confirmed.
Qilin Claims Ransomware Attack on Spain-Based Geieg
Ransomware.live reports that Qilin claimed an attack on Geieg in Spain, with encrypted or disrupted data and ransom demands. The post says the group's claims are unconfirmed.
ShadowByt3$ Claims HandyTrac Data Theft and Threatens Leak
Ransomware group ShadowByt3$ claims it obtained sensitive HandyTrac data and demands negotiation within 72 hours to prevent a leak. The post says the claims are unverified.
Ransomware Group Claims 1.9 TiB of Veritiv Data
The group iah6477 claimed responsibility for a ransomware incident involving about 1.9 TiB of Veritiv data. The monitoring post says the claim could not be confirmed.
Panzer Claims Ransomware Attack on Honda Peru
A ransomware.live record says Panzer targeted Honda Peru and claims the attack disrupted operations and data access. The post says the group’s claims are unconfirmed.
Qilin Claims Ransomware Attack on Foremost Mfg
Qilin claimed it targeted US manufacturer Foremost Mfg; the monitoring post reports system and data disruption but says the claim could not be confirmed.
Genesis Claims Ransomware Attack on Dorfman Abrams Music, P.C.
Ransomware.live recorded an unverified Genesis claim targeting US CPA firm Dorfman Abrams Music, P.C. The claim was published September 13, 2026, and discovered September 14.
Unsafe Claims Ransomware Attack on geekybunch.com, Citing $5 Million in Lost Revenue
The ransomware group unsafe claimed an attack on geekybunch[.]com and cited $5 million in lost revenue. The monitoring post says the claim is unconfirmed.