ShadowByt3$ Claims Theft of 375.66 MB From Sinar Mas Agribusiness
Ransomware.live records an unconfirmed ShadowByt3$ claim that it stole 375.66 MB of data from Sinar Mas Agribusiness and Food (Golden Agri-Resources).
Ransom Monitor
Monitors ransomware victims, threat groups, leak-site activity, and newly disclosed ransomware incidents.
2786 articles
Majinahanashi Claims Leak of 1,844 PCA Group Files
A ransomware.live monitoring post attributes a claim that 1,844 files from Malaysia’s PCA Group Sdn. Bhd. were exposed to majinahanashi. The claim is unconfirmed.
Dark Project Claims Theft of 115 GB From Pump Engineering Company
Dark Project claims it stole 120,000 files totaling 115 GB from Pump Engineering Company, including customer, insurance, financial and project records. The post says the claim is unconfirmed.
Beast Ransomware Group Claims Cosmon as a Victim
A ransomware.live monitoring record attributes a ransomware claim against engineering software provider Cosmon to the beast group. The article says the claim is unconfirmed.
Akira Claims 392GB Data Theft from Boustead International Heaters
A ransomware.live monitoring record attributes an unverified encryption and data-theft claim to Akira, alleging 392GB was taken from Boustead International Heaters in Germany, including employee and business records.
DragonForce Claims Wozair as a Ransomware Victim
Ransomware.live lists Wozair in the UAE as a DragonForce ransomware claim, citing the group's blog. The post says Wozair's HVAC operations were impacted, but the claim is unconfirmed.
Dragonforce Claims Data Theft From Brookview Financial
A ransomware.live listing attributes to Dragonforce an unverified claim that data from Brookview Financial, including sensitive customer information, was exfiltrated. The post says the information relates to many thousands of customers.
Dark Project Claims Theft of 155 GB from Furnished Quarters
Dark Project claims it stole 155 GB of data from Furnished Quarters, including customer details and banking and financial documents. The post says about 198,000 files are affected; the claim is unconfirmed.
Dark Project Claims Theft of 377GB from Design-Aire Engineering
Dark Project claims it compromised Design-Aire Engineering’s service systems and stole about 377GB of data, including employee personal information and client architectural plans. The monitoring post says the claims are unconfirmed.
Dark Project Claims Data Theft from Jones, Little & Co., CPAs, LLP
Ransomware.live lists Jones, Little & Co., CPAs, LLP as a Dark Project victim. The group claims it stole at least 100 GB of data and encrypted systems; the publisher says the claims are unconfirmed.
Deadlock Claims FBC as Ransomware Victim in South Africa
Ransomware[.]live lists South Africa’s Furniture Bargaining Council (FBC) as impacted by Deadlock. The post attributes the claim to the ransomware group and says it is unconfirmed.
Deadlock Claims Theft of 27 GB of Data from Shaheen Law Group
Deadlock claims it stole 27 GB of files from Shaheen Law Group, including client, financial, identity, medical and transaction records. The monitoring post says the claim is unconfirmed.
Qilin Claims Ransomware Attack on Consultores de Seguros
Qilin claims it compromised Consultores de Seguros and encrypted data, potentially disrupting operations. The claim was listed on August 24, 2026, and is unverified.
Dark Project Claims Ransomware Attack on The Liberty Group
A monitoring post attributes to Dark Project a claim that it stole about 27,000 files from The Liberty Group and encrypted company systems, disrupting operations. The claims are unconfirmed.
SafePay Claims Ransomware Attack on lagegepesca.it
A ransomware.live record attributes a claim against lagegepesca.it to SafePay and links to the group’s leak-site post. The record says systems were encrypted and services disrupted, but notes the group’s claims are unconfirmed.
Incransom Claims FFKR Architects as a Ransomware Victim
Ransomware.live reports an incransom claim against FFKR Architects, an architecture firm with offices in Utah, Arizona, and Idaho. The post says the attack affected US operations but notes the claim is unconfirmed.
DragonForce Claims Criba Data Leak Across Argentina and Uruguay
DragonForce reportedly claimed Criba’s data included financial and client documents and information from Argentina, Uruguay, and other countries. The claim is unconfirmed.
DragonForce Claims Data Leak From Brazil’s Frato
DragonForce claims it exposed data from Brazil’s Frato, including financial, shareholder, employee and client information. The monitoring post says the claim is unconfirmed.
Qilin Claims A&E + SMA Design as a Ransomware Target
Ransomware.live lists A&E + SMA Design as a Qilin ransomware target, citing a Qilin leak-site URL. The record is based on the group’s claim and has not been independently confirmed.
Panzer Claims Senvibe as a Ransomware Victim
ransomware[.]live lists Senvibe as a Panzer ransomware claim, discovered Aug. 24, 2026. The post says the claim is based on the group’s public statements and is unconfirmed.
L Group Claims Ransomware Attack on compendiumusa.net
L Group claims it deployed ransomware against compendiumusa[.]net and threatened disruption to the organization’s data and systems. ransomware[.]live says the claim is unconfirmed.
Qilin Claims Ransomware Attack on Aurore Development S.p.A.
Qilin claimed it attacked Aurore Development S.p.A. in Italy and encrypted files. The ransomware.live post says the claim is unconfirmed.
Storm Claims Ransomware Attack on City of Mitchell
A ransomware.live monitoring record attributes a claim against the City of Mitchell to Storm. The post alleges data encryption and service disruption, but says the claims are unconfirmed.
Storm Ransomware Claims Sharp Motor Group as a Victim
Ransomware.live reports that Storm listed Sharp Motor Group, an automotive dealership group in Tweed Heads, Australia. The claim is unconfirmed; the article provides no independently verified incident details.