SafePay Claims Ransomware Attack on Compunnel
SafePay allegedly deployed ransomware against Compunnel and disrupted its services. The claim was published and recorded on September 11, 2026; the report says it could not confirm the group's claims.
Ransom Monitor
Monitors ransomware victims, threat groups, leak-site activity, and newly disclosed ransomware incidents.
2776 articles
Nightspire Claims Ozel & Ozel Laws Office as a Victim
A ransomware.live monitoring post says Nightspire targeted Ozel & Ozel Laws Office in Turkey. The claim is unverified, and the post says data information is unavailable.
NightSpire Claims Data from Perimetral Oriental de Bogotá
NightSpire claims it affected Colombian transportation company Perimetral Oriental de Bogotá S.A.S. and obtained customers’ interior designs and internal documents. The post says the claims are unconfirmed.
Nightspire Claims Ransomware Attack on UAE-Based DiamondLease
A post monitoring ransomware claims says Nightspire targeted UAE-based DiamondLease, alleging encryption and disruption to critical systems. The claim’s accuracy is unconfirmed.
Pear Ransomware Group Claims Foss Inc. as a Victim
Ransomware.live reports that the pear group claimed Foss Inc., a US energy-services provider, as a victim. The claim was published September 9, 2026, and is unconfirmed.
Direwolf Claims Ransomware Attack on Malaysia’s Port of Tanjung Pelepas
A ransomware.live monitoring post attributes an attack on Malaysia’s Port of Tanjung Pelepas to direwolf and reports operational disruption. The post says the claim is unconfirmed.
Nightspire Claims Theft of Tuboaços da Amazônia Ltda. Drawings and Customized Projects
Nightspire claims it targeted Brazilian manufacturer Tuboaços da Amazônia Ltda. and stole drawings and customized customer projects. The monitoring post says the claims are unconfirmed.
Fulcrumsec Claims Ransomware Impacted Sweden’s Dustin Group
Ransomware actor fulcrumsec claimed an incident involving Swedish IT provider Dustin Group, with disruption reportedly affecting operations in Sweden. The publisher says it cannot confirm the claim.
AuditTeam Allegedly Claims Ransomware Attack on Japan-Based ki***jp
A ransomware group claim attributed to AuditTeam names Japan-based ki***jp as a victim. The monitoring post lists September 9–10, 2026 dates but says the claims could not be confirmed.
Beast ransomware group claims attack on Hong Kong firms M800 and CINNOX
A ransomware.live monitoring post attributes a claim targeting Hong Kong firms M800 and CINNOX to the Beast group. The post says services were disrupted but notes the claims are unconfirmed.
DragonForce Claims Ransomware Attack on Medical Department Store
A ransomware.live monitoring post records a DragonForce claim targeting Medical Department Store in the US, published September 10, 2026. The post says the claim has not been independently confirmed.
Vexy Ransomware Claims Attack on India’s i2k2 Networks
A ransomware.live post reports that Vexy Ransomware targeted India’s i2k2 Networks. The claim is attributed to the ransomware group and has not been independently confirmed.
Global Secret Group Claims Ransomware Activity Targeted CO-OP Urban Bank
A ransomware.live record attributes an alleged attack on India’s CO-OP URBAN BANK LTD to Global Secret Group, claiming 41.3 GB across 125,988 files and 14,641 folders. The claim is unconfirmed.
Panzer Claims to Have Compromised Spain’s National Meteorological Agency
Ransomware group Panzer claims it compromised Spain’s national meteorological agency, Agencia Estatal de Meteorología. The monitoring post lists the claim as published and discovered on September 11, 2026, but says it could not be confirmed.
Chaos ransomware group claims attack on Mankato Clinic
A ransomware.live monitoring post attributes a ransomware claim involving Mankato Clinic to the Chaos group. The post lists a source and September 10, 2026 timestamps, but says the claim could not be confirmed.
RansomHouse Claims Ransomware Attack on California School Employees Association
RansomHouse claims it deployed ransomware against the California School Employees Association. The report lists the claim as published August 21, 2026, and discovered September 10, but says it cannot verify the information.
Wallstreet Claims Ransomware Attack on Goldston Oil Corporation
A ransomware.live post attributes a ransomware incident affecting Goldston Oil Corporation to Wallstreet, but says the group’s public claims are unconfirmed.
Wallstreet Claims Ransomware Incident at On Demand Occupational Medicine
A ransomware.live post reports that the Wallstreet group claimed an incident involving On Demand Occupational Medicine in the US. The post says operations were disrupted but notes the claim could not be confirmed.
Wallstreet Claims Ransomware Attack on NcbChurch
A ransomware.live monitoring post attributes a claim involving NcbChurch to Wallstreet. The post says the claim is unconfirmed; it lists September 10, 2026, as the discovery and publication date.
Clop Claims Ransomware Incident at Henry Pratt Company
A ransomware group identified as Clop claimed an incident involving Henry Pratt Company, a US industrial valve manufacturer. The post says US operations were affected but notes the claim could not be confirmed.
Ransomware Group Claims EASY JOB S.A.S. Data Exposure in Colombia
The ransomware group emperador reportedly claimed to have encrypted or exposed 17,000 documents (2.7 GB) at Colombian firm EASY JOB S.A.S. The monitoring post says the claim is unconfirmed.
ShadowByt3$ Claims to Have Stolen 14,476 John Engel Team Customer Profiles
ShadowByt3$ claims it stole 14,476 customer profiles and other business data from John Engel Team and threatens to leak or sell the data unless negotiations occur within 72 hours. The claims are unverified.
Qilin Claims Ransomware Attack on Mitsuwa Trading in Japan
A ransomware.live monitoring post attributes a ransomware claim involving Japan’s Mitsuwa Trading Co., Ltd. to Qilin. The post says the claim is unverified.
TheGentlemen Claims Ransomware Incident at Taiwan’s PharmaEssentia
Ransomware.live listed PharmaEssentia Corporation in Taiwan as a ransomware victim attributed to thegentlemen, with a claim published and discovered on September 9, 2026. The post says the claim is unconfirmed.