Monitors ransomware victims, threat groups, leak-site activity, and newly disclosed ransomware incidents.
2795 articles
Ransomware.live reports that Qilin claimed Arnall Golden Gregory, a U.S. professional-services firm, as a target on Aug. 16, 2026. The post alleges file encryption and operational disruption but says the claims are unconfirmed.
Qilin claims it targeted French manufacturer Jone Précision and encrypted files, disrupting operations. The ransomware.live record attributes the claim to Qilin’s leak site; the incident remains unconfirmed.
Qilin claimed an attack on Italian education publisher Zanichelli. The monitoring post says operations were disrupted and systems encrypted, but states that the group’s claims have not been confirmed.
Ransomware.live lists servmarmg[.]cl as a claimed victim of actor ms13089 in Chile. The post cites a leak-site listing and says the claim is unconfirmed; it describes the victim as a maritime company.
Ransomware.live lists DXS International, a UK organization described as having healthcare operations, as a direwolf ransomware target. Claims of encryption or data exposure are unconfirmed.
A ransomware.live monitoring post attributes a ransomware attack claim against US healthcare organization PayrHealth to Direwolf. The post alleges encrypted data and healthcare operational disruption; the claims are unconfirmed.
A ransomware.live post attributes a claim about Colla Health to direwolf. The post alleges operational disruption and potential exposure of sensitive data, but says the claims are unconfirmed.
Ransomware.live says the direwolf group listed AAM:HOA Management, a US HOA management organization, on Aug. 15, 2026. The post is based on the group's public claim, which the publisher says it cannot verify.
Dire Wolf reportedly claimed an attack on Indian financial software company DodoPayments. The monitoring post says the group claimed to encrypt financial systems, but the incident has not been independently confirmed.
Ransomware.live reports that the xpl0itrs group claimed RapidFort as a victim. The claim is unconfirmed; the article says it cannot verify the group's statement.
Ransomware.live lists Oz Hair & Beauty as a victim claimed by xpl0itrs. The post says the claim is unconfirmed and offers to share an official statement.
Ransomware group xpl0itrs reportedly claimed Dynatrace as a victim; the post says the alleged incident affected systems and availability in Austria. The publisher says the claim is unconfirmed.
Ransomware[.]live lists Lepi Enterprises in the US as a securotrop ransomware claim, reporting 692 GB of data and an awaiting status. The post says the claim is unconfirmed.
A ransomware.live record says spacebears claimed SEARS (Grupo Sanborns) in Mexico as a target. It anticipates “AttentionDemo” files ahead of a full release; the claim is unconfirmed.
A ransomware.live record attributes to Barracuda an unverified claim that it has 3,000 VR Advogados client documents, including passports and powers of attorney, and threatens to sell the data.
Blackwater claims it breached Shalina in India and blocked systems during an extortion attempt. The claim is unconfirmed; ransomware[.]live attributes the record to the group’s leak-site post.
Ransomware.live lists an unconfirmed Blackwater claim that www[.]amca[.]org[.]ar in Argentina was breached and its data blocked; the post says the claim could not be confirmed.
A ransomware[.]live record attributes an unverified ransomware-compromise and disruption claim against the FiferFox Minecraft Server to BlueWhale; no official confirmation is provided.
A ransomware claim attributed to Panzer names Alpine Electronics Europe as a victim. The post says the claim is unconfirmed.
A ransomware.live monitoring record attributes to Akira a claim of 13 GB of Cozad Asset Management data, including employee and business records. The claim is unconfirmed.
Akira claims it will upload 15 GB of Keystops data, allegedly including personal, financial, and contract information. The claim is unconfirmed.
Ransomware.live reports a SafePay claim involving granjarinya[.]com, a family-owned agriculture company in Albal, Spain. The claim was recorded on Aug. 14, 2026, and is unconfirmed.
A ransomware.live listing names Ferrari Mangimi SRL in Italy as a Qilin ransomware target, with a claim dated August 14, 2026. The post says the group made the claim; its accuracy is unconfirmed.
Ransomware.live lists Connell Enterprises LLC as a victim claimed by Interlock, alleging network data compromise. The post says the claims are unconfirmed; it provides no independent confirmation.
