Qilin Claims Ransomware Attack on Studio BOLDRIN PAOLO in Italy
A ransomware.live monitoring record attributes a ransomware claim against Italy's Studio BOLDRIN PAOLO to Qilin. The post cites the group's leak site but says the claim is unconfirmed.
Ransom Monitor
Monitors ransomware victims, threat groups, leak-site activity, and newly disclosed ransomware incidents.
2787 articles
Qilin Claims Attack on Tecnici Associati STP in Italy
A monitoring post attributes a ransomware claim against Tecnici Associati STP in Italy to Qilin. It says files were encrypted and operations disrupted, but notes the group's claims are unconfirmed.
Krybit Claims Ransomware Attack on Resi
ransomware[.]live records an unverified Krybit claim targeting resi[.]com, a UK-based architectural and home-renovation platform. The post cites the group’s onion-site listing; no independent confirmation is provided.
ShinyHunters Claims CyrusOne Data Theft After $13 Million Demand
Ransomware.live reports an unverified ShinyHunters claim that CyrusOne faces a $13 million demand and alleged theft of 12.9 million Salesforce records and SharePoint files, with a 24-hour deadline before threatened leakage.
Coinbasecartel Claims Ransomware Attack on Westwing Group SE
Ransomware[.]live records an unconfirmed coinbasecartel claim targeting Westwing Group SE, alleging operational impact in Germany.
Genesis Claims Hospitality Health ER in Longview as a Victim
A ransomware.live monitoring record attributes an unconfirmed ransomware claim involving Hospitality Health ER in Longview to genesis. The article says the claim is based on the group’s public statements and has not been independently confirmed.
Ransomware.live Lists Euroflora srl in Unverified Qilin Claim
Ransomware[.]live lists Euroflora srl in Italy as a Qilin ransomware claim, citing the group’s leak-site post. The post says the claim is unconfirmed; no official victim statement is included.
LockBit 5 Claims ADT as a Ransomware Target
A ransomware.live monitoring post says LockBit 5 listed ADT[.]com as a target. The post cites a LockBit leak-site entry and says the claim’s accuracy is unconfirmed.
Qilin Claims S.E.M.P. s.r.l. as a Ransomware Victim
A ransomware.live monitoring post records Qilin’s claim naming Italian manufacturer S.E.M.P. s.r.l. as a victim. The claim is unconfirmed; the article says it cannot verify the information.
KillSec Claims Ransomware Attack on Peru’s Global Go
Ransomware.live reports a KillSec claim targeting Peru-based transportation company Global Go, discovered Aug. 23, 2026. The post alleges disruption and suspected encryption, but says the claim is unconfirmed.
Qilin Claims Black Cat Engineering & Construction WLL as a Ransomware Victim
A ransomware[.]live record attributes a claim against Qatar-based Black Cat Engineering & Construction WLL to Qilin and cites the group’s leak site. The post says the claim is unconfirmed.
Qilin Claim Lists Chilean Technology Firm Difor as Ransomware Victim
Ransomware.live lists Chilean technology firm Difor as a Qilin victim, citing the group's claim. The post says the allegation is unconfirmed and provides no specific incident details.
Qilin Claims Ransomware Attack on Clear Align
Ransomware.live lists Clear Align as a Qilin ransomware victim, citing the group's leak-site post dated Aug. 23, 2026. Claims of targeting, encryption, disruption and data impact are unconfirmed.
Kazu Claims Ransomware Activity Affecting Mobilemed’s Cloud PACS Platform
Ransomware[.]live lists a public ransomware claim by the actor kazu concerning Brazil-based Mobilemed’s cloud PACS platform. The post says the claim is unconfirmed and provides no incident impact details.
Kazu Claims Ransomware Attack on Argentina’s Instituto Ferrero de Neurología y Sueño
A post monitored by ransomware[.]live attributes an unconfirmed ransomware claim against Argentina’s Instituto Ferrero de Neurología y Sueño to kazu, alleging disruption to operations and access to medical and administrative systems.
Kazu Claims Ransomware Attack on PappyJoe Healthcare Platform
Ransomware[.]live records an unverified claim by the kazu group targeting PappyJoe, a healthcare practice-management platform. The article provides no independent confirmation and describes PappyJoe’s location inconsistently as US-based and India-based.
Storm Ransomware Group Claims Ruggles Sign Company as a Target
Ransomware.live lists Ruggles Sign Company as a reported Storm ransomware target, citing the group's public claim. The post does not confirm the claim or describe access, encryption, data theft, or impact.
CoinbaseCartel Claims Ransomware Attack on Kessler Creative
Ransomware.live lists Kessler Creative as a CoinbaseCartel ransomware victim, citing the group’s public claim. The report says systems were disrupted and files accessed, but the publisher says it cannot confirm the claim.
CoinbaseCartel Claims Longhorn Investments as a Ransomware Victim
A ransomware.live monitoring post lists Longhorn Investments as a coinbasecartel victim. The post says the claim is unconfirmed; it does not establish disruption, encryption, or other impact.
ShinyHunters Claim Targets ReliaQuest, LLC
A ransomware.live monitoring record attributes a claim targeting ReliaQuest, LLC to shinyhunters, discovered and published on Aug. 23, 2026. The claim is unconfirmed.
coinbasecartel Lists OTEIS Conseil & Ingénierie in Ransomware Claim
ransomware.live reports that the group coinbasecartel listed OTEIS Conseil & Ingénierie on its leak site. The post says the claim is unconfirmed.
CoinbaseCartel Claims Flecha Bus as a Ransomware Victim
Ransomware.live lists Argentine bus operator Flecha Bus as a claimed target of the coinbasecartel ransomware group. The post says the claim is unconfirmed.
Incransom Claims Access to el-group Files
Incransom claims it accessed el-group’s confidential files, including client data, R&D and financial documents. The claim is unconfirmed and is attributed to the group’s disclosure page and monitoring by ransomware[.]live.
Coinbasecartel Claim Names Tower Insurance as Victim
Ransomware[.]live lists New Zealand insurer Tower Insurance as a Coinbasecartel victim, with a leak-site link and an Aug. 22, 2026 listing date. The post says the group’s claims are unconfirmed.