Monitors ransomware victims, threat groups, leak-site activity, and newly disclosed ransomware incidents.
2764 articles
A ransomware.live monitoring post records Qilin’s unverified claim of an attack on Italian manufacturer Melchioni Spa, reportedly involving encryption and operational disruption. The claim was dated October 9, 2026.
A ransomware.live record says the group arcusmedia claimed Ladrillera Mecanizada, a manufacturing company, on October 9, 2026. The claim is unverified, and no country is specified.
Ransomware.live lists an unverified Arcusmedia claim targeting MBL LLP (mblllp.ca). The record provides no country or sector and says the claim is based on public statements by the ransomware group.
A ransomware claim attributed to arcusmedia named AETHOS as a victim on October 9, 2026. The monitoring post says the claim is unverified and that its accuracy could not be confirmed.
A ransomware claim attributed to nightspire names Spain-based Medcom Tech Information as a victim. The report says the claim is unverified and provides no reliable details about the organization or incident.
The ransomware group nightspire claims it compromised and encrypted INAPI’s systems in Algeria, causing disruption. The post says the claim is unverified and that the exact organization could not be confirmed.
Ransomware group Barracuda claims it stole database dumps and documents from Croatia’s Ministry of Agriculture, Forestry and Fisheries, including residents’ personal data. The claims are unverified; the group is offering the data for $50,000.
Ransomware.live reports that the Nightspire group allegedly targeted PMG Project Management Group in the United Arab Emirates. The claim is unverified, and the availability of any data is unknown.
Ransomware.live reports that Nightspire claimed to target the Bernard Osher Foundation in the US. The claim is unverified, and the post says data is not currently available.
A ransomware.live monitoring post says the nightspire group targeted Fondy Food Pantry in the US. The claim is unverified, and whether data was stolen or encrypted is unknown.
The ransomware group nightspire publicly claimed M,äntelhaus Kaiser GmbH & Co. KG as a victim. The claim is unverified, and no reliable details about the alleged incident were provided.
A ransomware group called Nightspire claims it targeted US healthcare company KC Pharmaceuticals, Inc. The report says the claim is unverified.
A public ransomware claim attributed to nightspire names Italian manufacturer Valvorobica Industriale S.p.A. The alleged operational and data impacts have not been independently confirmed.
A ransomware.live post reports that SilentRansomGroup claimed an incident affecting Baker McKenzie’s US operations. The post says the claim has not been independently confirmed.
A ransomware monitoring post reports that Qilin claimed to target Mexico-based MCM Telecom. The post says the claim has not been independently confirmed.
SilentRansomGroup claimed Andersen Group Inc. was affected by its ransomware activity. The claim was recorded on October 8, 2026, and its accuracy has not been confirmed.
The Eclipse ransomware group claims it targeted sanjoseattorneys[.]com, a site described as potentially related to legal services in the US. The claim is unverified, and the site's ownership and operational status could not be confirmed.
Eclipse allegedly targeted Indian manufacturer simplexengg[.]in, encrypting files and disrupting operations. The ransomware group's claims are unverified.
The ransomware group nightspire claimed an attack on Uruguay’s notaries association. The article reports operational disruption but says the group's claims could not be independently confirmed.
The ransomware group Eclipse claimed an attack on Brazilian truck parts distributor DIPECARR, reportedly disrupting operations nationwide. The post says the claim has not been independently confirmed.
LockBit5 claims it impacted Argentina Valores (avsa[.]com[.]ar), disrupting financial-processing and access systems. The post alleges potential data compromise, but the claims are unverified.
BYOD claimed a breach in a sarcastic post referencing Trump Mobile and teasing further information. The claim has not been confirmed.
RunSomeWares claimed responsibility for a ransomware attack that disrupted Morton LTC Pharmacy's operations. The pharmacy says the claim is unverified.
LockBit5 claims it hit grunenwald[.]com, deploying ransomware to encrypt files and disrupt operations. The post says the incident affected Germany; the claims have not been independently confirmed.
