Monitors ransomware victims, threat groups, leak-site activity, and newly disclosed ransomware incidents.
2780 articles
A ransomware.live monitoring post says LockBit5 claimed access to U.S. manufacturer PSC Industries (psciindustries[.]com). The claim was published and discovered on September 4, 2026, and has not been independently confirmed.
A post monitored by ransomware[.]live reports DYSPHOR1A’s unverified claim that MBT Telecom’s database was compromised and 209,970 user records, including personal information, passwords, and device data, were exposed.
Qilin claimed it attacked Complete Packaging Solutions, a manufacturing company, and encrypted files, disrupting operations. The monitoring post says the claim has not been independently confirmed.
The aurora ransomware group claims it exposed EDIF S.p.A. data, including credentials, customer and employee records, and internal files. The post says the claim has not been independently confirmed.
A post reports that Gunra claimed a ransomware attack on Occidental in Venezuela, with operations reportedly disrupted. The post says the claim is unverified.
A ransomware.live monitoring post says Gunra targeted Uruguayan law firm Blanco & Etcheverry. The post attributes the information to the group’s public claims and says it cannot confirm their accuracy.
A ransomware.live monitoring post attributes an alleged attack on PIT.local in Colombia to AuditTeam, claiming unauthorized access, encrypted files, and a ransom demand. The information is unverified.
Ransomware.live records an AuditTeam claim of ransomware impact on Russian agricultural enterprise mansurovogroup. The claim is unverified, and the post says it cannot confirm the information.
A ransomware claim by SilentRansomGroup names Katten Muchin Rosenman. The monitoring post says it cannot confirm the claim.
Ransomware group spacebears reportedly claimed an incident involving Studio Oculistico Ciraci, an ophthalmology clinic in Bari, Italy. The claim was published September 3, 2026, and has not been confirmed by the clinic.
Ransomware group settra claims it encrypted systems and stole documents from Australian retailer Verve Portraits, demanding ransom. The post says operations were affected but notes the claims are unconfirmed.
Ransomware.live lists Maglin, Miskiv & Associates as a claimed victim of the insomnia group. The post says the claim is based on public group claims and has not been independently confirmed.
Settra claims it encrypted documents belonging to Brazilian company Industrias Alegre in an incident involving ialegre[.]com. The ransomware.live post cites the group’s leak site and says the claims are unverified.
A ransomware.live post attributes an incident affecting McDonald’s Ecuador’s nationwide restaurant operations to Vexy Ransomware. The post says the claim is unconfirmed.
Ransomware group krybit claimed an incident involving Guatemala’s INCAN cancer hospital, with alleged healthcare-service disruption and ransom pressure. The post says the claims are unconfirmed.
Storm claims a ransomware incident disrupted Star Aviation, a U.S. commercial aerospace repair company. The claim was published September 2, 2026; the monitor says it cannot confirm the information.
A ransomware.live monitoring post attributes a ransomware incident affecting Petrocare Construction in Canada to Storm. It claims construction management operations were disrupted; the information is unconfirmed.
A ransomware.live monitoring post says Vexy Ransomware claimed Engefitas, a Brazilian adhesives manufacturer, as a victim. The claim is unconfirmed.
Ransomware group incransom listed Panamanian manufacturer Metales Panamericanos on its disclosure site. The monitoring post says the claim is unverified.
Ransomware.live reports that the incransom group claimed Multiver Ltée, a Canadian glass manufacturer, as a victim. The post attributes the claim to the group and says it could not verify its accuracy.
Incransom claims it encrypted critical systems at Italian healthcare network Policlinico Triestino and disrupted services. The monitoring post says the claim is unconfirmed.
SilentRansomGroup reportedly targeted U.S. law firm Greenberg Traurig. The monitoring post attributes an operational-disruption claim to the group but says it cannot confirm the information.
A ransomware.live monitoring post records SilentRansomGroup’s claim targeting a redacted company, with a full data timer active. The post says the claim has not been independently confirmed.
SilentRansomGroup allegedly deployed ransomware against a company identified only as “G… …g.” A full-data timer is active. The claim was published on September 2, 2026, and the source says it cannot confirm its accuracy.
