Direwolf Claims Photon Health, Inc. as Ransomware Victim
Ransomware.live lists Photon Health, Inc. as a direwolf ransomware claim, alleging disruption, encryption and potential data exposure. The post says the claims are unconfirmed.
Ransom Monitor
Monitors ransomware victims, threat groups, leak-site activity, and newly disclosed ransomware incidents.
2793 articles
Incransom Claims Ransomware Attack on nyklawfirm.com and nyk.ae
Ransomware.live lists an unconfirmed Incransom claim naming nyklawfirm[.]com and nyk[.]ae in the UAE; it alleges encrypted files and operational disruption. The article says the claim's accuracy is unconfirmed.
Play Ransomware Group Claims Coltrane Systems Incident
A ransomware.live monitoring record attributes an unverified claim against Coltrane Systems to the Play ransomware group, alleging encryption and operational disruption in the United States.
SilentRansomGroup Claims Second Attack on Troutman Pepper Locke
SilentRansomGroup reportedly claimed a second attack on Troutman Pepper Locke within a year, alleging physical access and ransomware deployment. The post says the claims are unconfirmed.
DragonForce Claims R&D Machine and Engineering as a Victim
An Unverified ransomware.live record says DragonForce claimed R&D Machine and Engineering as a victim. The claim was published on August 18, 2026; the post says it cannot confirm the information.
Securotrop Claims ADL Embedded Solutions as Ransomware Victim
A ransomware.live monitoring record attributes an unconfirmed ransomware claim against ADL Embedded Solutions to securotrop. The record lists the case as AWAITING and claims 925 GB of data.
Incransom Claims SSF International GmbH as a Victim
Ransomware.live records an incransom claim targeting SSF International GmbH in Germany. The group’s claim alleges operational disruption; the post says it could not confirm the information.
Incransom Claims 416 GB Data Leak at Mauritius Firm SpearFin
A ransomware.live monitoring post attributes a June 26, 2026, claim of a 416 GB data leak at Mauritius-based SpearFin Ltd to incransom. The post says the material includes KYC/AML records and financial and corporate documents; the claim is unconfirmed.
Akira Claims Borchert & LaSpina Data Leak Is Forthcoming
A ransomware.live-monitored post attributes to Akira a claim that it will soon upload Borchert & LaSpina corporate data. The post says personal, financial and legal information is expected, but the claim is unconfirmed.
Gunra Claims Ransomware Attack on Honduras Contractor BOMOHSA
Ransomware[.]live lists Honduras contractor BOMOHSA as a gunra ransomware target on Aug. 18, 2026. The post attributes the claim to gunra and says it is unconfirmed; no official statement is included.
Qilin Claims Ransomware Incident at Berlin Brandenburgische Wohnungsbaugenossenschaft
A ransomware.live-monitored record attributes a ransomware claim against Berlin Brandenburgische Wohnungsbaugenossenschaft in Germany to Qilin. The post says disruption and potential data exposure are alleged but cannot be independently confirmed.
ShinyHunters Threaten Logitech/Streamlabs With Data Leak
A ransomware.live record says ShinyHunters issued Logitech/Streamlabs a final warning to respond by Aug. 21, 2026, or face a data leak and disruptive actions. The claim is unconfirmed.
Storm Ransomware Claim Names WindRose Health Network
A ransomware.live monitoring record attributes a ransomware claim naming WindRose Health Network, a healthcare provider in Indiana, to Storm. The claim is unconfirmed.
Emperador Claims Attack on Brazil’s Prefeitura Municipal de Arcos
The ransomware actor emperador claims it accessed and encrypted systems at Brazil’s Prefeitura Municipal de Arcos and exfiltrated 462.3 MB. The claim threatens publication and permanent loss unless the victim responds within 14 days; it is unconfirmed.
Incransom Claims 1.2 TB Data Leak at Foresee Pharmaceuticals
Incransom claims it leaked 1.2 TB of Foresee Pharmaceuticals data, including regulatory, R&D, financial and clinical-study materials. The claim is unconfirmed.
Storm Claims Westco Motors Cairns as a Ransomware Target
Ransomware.live records Storm’s unverified claim targeting Westco Motors Cairns, an Australian dealership. The post says customers and business operations were affected, but provides no independent confirmation.
Storm Claims Standard Tool & Die as a Victim
Ransomware.live lists U.S. manufacturer Standard Tool & Die in a Storm ransomware-group claim published Aug. 17, 2026. The post says the claim is unverified.
Storm Claims Valor Defense Solutions as a Ransomware Victim
Ransomware.live reports that Storm claimed Valor Defense Solutions, a U.S. defense contractor, as a victim and alleged operational disruption. The claim is unconfirmed.
Qilin Claims Ransomware Attack on the University of the West Indies
Qilin reportedly claimed to target the University of the West Indies in Trinidad and Tobago. The monitoring post says the claim involved system disruption and data access, but notes the information is unconfirmed.
Qilin Claims White-Daters & Associates Was Targeted by Ransomware
Ransomware.live records a Qilin claim naming White-Daters & Associates, Inc., a US professional-services firm. The post cites a Qilin leak-site source; the claim has not been independently confirmed.
Qilin Claims GSW Gemeinschaftsstadtwerke GmbH as a Victim
Ransomware.live records Qilin's claim naming Germany's GSW Gemeinschaftsstadtwerke GmbH as a victim. The post says the claim was published on August 17, 2026, but its accuracy is unconfirmed.
Global Secret Group Claims Attack on The Rubber Group
Ransomware.live reports that Global Secret Group claimed The Rubber Group in New Hampshire was affected, alleging 162 GB across 207,203 files and 21,624 folders. The claim is unconfirmed.
Incransom Claims Attack on Lansing Urgent Care
Ransomware.live lists Lansing Urgent Care as a victim claimed by incransom. The post says operations were disrupted across multiple Lansing-area locations, but states that it cannot independently confirm the claim.
xpl0itrs Claims Ransomware Attack on BMW Group
A ransomware.live monitoring post attributes an unconfirmed ransomware claim targeting BMW Group to xpl0itrs. The post says the claim was published on August 17, 2026; the incident is not independently confirmed.