Qilin Claims Ransomware Attack on UK Consultancy
Ransomware.live records a Qilin claim targeting UK consultancy Absolute Consultancy Services, alleging disruption to access to company systems and data. The post says the claim is unverified.
Ransom Monitor
Monitors ransomware victims, threat groups, leak-site activity, and newly disclosed ransomware incidents.
2781 articles
LockBit 5 Claims Attack on American Plan Administrators in Mexico
LockBit 5 listed American Plan Administrators, associated with apatpa[.]com in Mexico, in a ransomware claim threatening data exposure and service disruption. The claim is unverified.
Falcon Claims 2.96 TB Data Theft from Globus Medical
Falcon claims it extracted 2.96 TB from Globus Medical, including more than 51,000 customer records and regulatory, safety, corporate, and clinical documents. The article says the claims are unconfirmed.
Falcon ransomware group claims 344 GB theft from DistributionNOW
Falcon allegedly claims to have exfiltrated 344 GB from DistributionNOW, including financial, employee, and industrial-control data. The post attributes the claim to the group’s leak site and says it is unverified.
Falcon Claims Theft of 2.96 TB From Globus Medical
Ransomware group Falcon claims it exfiltrated 2.96 TB from Globus Medical, including clinical, regulatory, patient, and business records. The post says the claims have not been independently confirmed.
Wallstreet Ransomware Claim Targets Andover, Massachusetts
A ransomware.live post attributes a claim against the Town of Andover, Massachusetts, to Wallstreet and says municipal operations were disrupted. The post says the claim is unconfirmed.
Qilin Claims Ransomware Attack on AFSARD in North Macedonia
A ransomware.live monitoring post says Qilin claimed to target AFSARD in North Macedonia, alleging file encryption and operational disruption. The post says the claim is unconfirmed.
Direwolf Claims Attack on Hospital Clínico Universidad de Chile
A ransomware.live monitoring post says Direwolf targeted Hospital Clínico Universidad de Chile and claims hospital disruption and encrypted data. The post says the claims are unconfirmed.
Direwolf Claims Ransomware Attack on Turkey’s Erdem Hospital
A ransomware group identified as Direwolf claims it targeted Erdem Hospital in Turkey, disrupting hospital operations and access to critical systems. The report says the claim could not be independently confirmed.
Direwolf Claims Ransomware Attack on THQ Nordic in Sweden
Ransomware.live reports that Direwolf claimed an attack on Sweden-based THQ Nordic, alleging disruption to availability and operations. The post says the claim has not been independently confirmed.
Thegentlemen Allegedly Claims 531 GB Data Theft From G R Infraprojects
A ransomware.live monitoring post says thegentlemen allegedly stole more than 531 GB of data from Indian infrastructure firm G R Infraprojects. The post lists sensitive files and says the claim is unconfirmed.
Glassdoor Named in Unverified Ransomware Claim by thegentlemen
A ransomware-monitoring post says thegentlemen publicly claimed to target Glassdoor to disrupt services. The post says the claim is unverified; it lists discovery on Aug. 30, 2026, and publication on Aug. 28, 2026.
Qilin Claims Ransomware Attack on AUM Construction
Ransomware.live lists AUM Construction as a Qilin victim, with claims of operational disruption and encrypted files. The post says the group's claims are unconfirmed.
Orova Claims Ransomware Incident Involving ITC Properties Group
Ransomware[.]live lists ITC Properties Group Limited as the subject of an unconfirmed ransomware claim attributed to Orova, published Aug. 29, 2026. The article provides no independent confirmation or details of affected systems or data.
Incransom Claims Access to Wittmann’s Confidential Files
Ransomware.live lists Wittmann, a manufacturing company in Mexico, in an Incransom claim. The group alleges unauthorized access to confidential files, including client data, R&D and financial documents; the claim is unconfirmed.
Qilin Claims LAPoco Architects as a Ransomware Victim
A ransomware claim attributed to Qilin names US architecture firm LAPoco Architects. The claim is linked to the group's leak site and monitored by ransomware.live; the information is unconfirmed.
ShinyHunters’ Final Ransomware Warning to Neogen Sets September 1 Deadline
A ransomware.live post attributes a final warning to ShinyHunters, demanding that Neogen Corporation contact the group by September 1, 2026, or face threatened data leakage and digital disruptions. The claims are unconfirmed.
Qilin Claims Bandit Industries as a Ransomware Victim
Ransomware[.]live lists Bandit Industries in the US as a Qilin ransomware claim, with a leak-site source and Aug. 29, 2026 timestamps. The post says the claim is unconfirmed; disruption and data compromise are not independently established.
Qilin claims CareClinics attack in Malaysia
Ransomware.live lists CareClinics in Malaysia as a Qilin claim. The post alleges encrypted files and business disruption but says the group's claims are unconfirmed.
Qilin Claims Ransomware Attack on Argentina’s Neumaticos Corral S.A.
Qilin claims it targeted Argentina’s Neumaticos Corral S.A., causing disruption and encrypting data. The report is based on the group’s public claim and is unconfirmed.
Emperador Claims Uniguacu Network Compromise in Ransomware Extortion Post
Emperador claims it compromised Uniguacu’s network and accessed confidential and financial information. The group reportedly set a 13-day negotiation deadline; the claims are unconfirmed.
Qilin Claims BLISS 1041 in Malta as a Ransomware Victim
A ransomware.live monitoring post attributes a ransomware claim against BLISS 1041 in Malta to Qilin. The post says the claim was published on August 29, 2026, but notes it could not confirm the information.
Qilin Claims Ransomware Attack on La Maison Des Travaux
Ransomware.live lists La Maison Des Travaux in France as a Qilin ransomware claim dated Aug. 29, 2026. The post attributes claims of data encryption, ransom demand, and operational impact to the group; they are unconfirmed.
Qilin Claims Ransomware Attack on Australia's The Frame Group
Ransomware.live lists Australian retail and e-commerce company The Frame Group as a Qilin ransomware target. The claim is unverified; the article provides no independent confirmation of disruption or data exposure.