Qilin Claims Ransomware Attack on Belgium's Connections
Ransomware.live reports that Qilin claimed an attack on Connections in Belgium, allegedly encrypting files and disrupting operations. The post says the claims are unconfirmed.
Ransom Monitor
Monitors ransomware victims, threat groups, leak-site activity, and newly disclosed ransomware incidents.
2796 articles
Global Secret Group Claims Columbia University Dental Data in Ransomware Post
Ransomware.live reports that Global Secret Group claimed Columbia University Information (Dental) in New York, citing an alleged 296 GB footprint. The post says the claim is unconfirmed.
Coinbasecartel Claims Sweet Water Holdings as a Ransomware Victim
Ransomware.live lists Sweet Water Holdings as a victim claimed by coinbasecartel. The post says the claim could not be independently confirmed.
Coinbasecartel Claims Data Theft From Serruya Private Equity
Coinbasecartel claimed Serruya Private Equity in Israel was targeted, alleging unauthorized access and data theft as part of extortion demands. The claim is unverified and was monitored by ransomware.live.
CoinbaseCartel Claims Turner and Townsend Was Targeted
Ransomware.live reports a coinbasecartel claim targeting Turner and Townsend. The post says the claim is unconfirmed; the article provides no independent evidence of encryption or operational impact.
Qilin Claims It Targeted Radiant in Singapore
A ransomware[.]live monitoring post says Qilin targeted Radiant in Singapore and alleges file encryption and operational disruption; it states the claims are unconfirmed.
Rhysida Claims Pierce Township Ransomware Incident
Rhysida’s leak-site listing, monitored by ransomware.live, claims Pierce Township records were exposed, including employee PII, judicial materials, legal and financial records, and officials’ email archives. The claims are unconfirmed.
Qilin Claims Aletex Group as a Ransomware Victim
A ransomware.live monitoring record attributes a claim targeting Aletex Group in Spain to Qilin. The group’s claims of encrypted or disrupted systems and ransom demands are unconfirmed.
Storm Claims 3-point Australia as a Ransomware Target
Storm claims it targeted 3-point Australia and affected its Melbourne operations. The claim is attributed to the group and monitored by ransomware.live; the article says it cannot confirm the information.
Storm Claims Hinman Straub as a Ransomware Victim
A ransomware.live monitoring post attributes a claim against Albany law firm Hinman Straub to Storm. The group reportedly claimed the firm's operational systems were compromised; the information is unconfirmed.
Clop Claims 8TB Exfiltration from ZEBRA.COM
A ransomware.live monitoring post attributes an unconfirmed claim to Clop that ZEBRA[.]COM in the US was targeted and 8TB of database, project and CAD files were exfiltrated. It also cites an estimated $5.6 billion revenue loss.
BlackNevas Claims Ransomware Attack on Italian Manufacturer ASCOM
A ransomware.live-monitored record attributes a ransomware claim against Italian manufacturer ASCOM S.p.A. to blacknevas. The post alleges operational disruption, but says the group’s claims are unconfirmed.
Incransom Claims Cambria Law Firm in Canada Was Targeted
Incransom claims it encrypted files and stole sensitive data from Cambria Law Firm in Canada, including personal and medical card data. The claim is unconfirmed.
Incransom Claims Pacific Construction Data Theft
Ransomware.live reports that Incransom claims it compromised Pacific Construction in the UK and encrypted or exfiltrated project, client, and contract data. The claim is unverified.
SilentRansomGroup Claims Reminger as a Ransomware Victim
A ransomware.live-monitored post attributes a ransomware claim against law firm Reminger to SilentRansomGroup. The post alleges unauthorized access and possible disruption and data impact, but says the claims are unconfirmed.
Payload Claims Ransomware Incident at Zara Investment Holding
Payload claimed a ransomware incident targeting Zara Investment Holding in Jordan on Aug. 13, 2026. The article says the company asserted that its operations and assets were affected, but the claim is unconfirmed.
Rhysida Claims SIA Medical Centre Data Exposure
Rhysida claims SIA Medical Centre data was exposed, including about 20,000 patient records, staff documents, system credentials, and legal and financial files. The article says the claim is unconfirmed.
Coinbasecartel Claims Hitachi High-Tech Ransomware Incident
A ransomware.live record attributes a ransomware claim targeting Hitachi High-Tech to coinbasecartel. The article says the claim is unconfirmed; operational impact and data compromise are not independently established.
Akira Claims to Have Encrypted CF Supply Data
Akira claims it encrypted CF Supply data and says a dataset containing client information, projects, personal information, contracts, and agreements may be uploaded. The claim is unconfirmed.
Qilin Claims D & J Beverage Service as a Victim
Ransomware.live lists D & J Beverage Service as a Qilin ransomware claim dated Aug. 13, 2026. The post says the claim is unverified and has not been confirmed by the organization.
DragonForce Claims GB Group S.A. as a Ransomware Target
Ransomware.live reports that DragonForce claimed to target GB Group S.A. The article says the claim came from the group’s blog but notes it could not verify the information.
AiLock Claims Ransomware Attack on Japanese Retailer Yaomasa
A ransomware.live monitoring post attributes an unconfirmed claim that AiLock targeted Japanese retailer Yaomasa and encrypted or disrupted its IT environment. The post says the claim’s accuracy has not been confirmed.
AiLock Claims Ransomware Attack on Japan’s DAISEN
Ransomware.live listed Japan-based manufacturer DAISEN on Aug. 13, 2026, citing public claims by AiLock. The post alleges disruption and system encryption but says it could not verify the claims.
Incransom Claims diabetesandmetabolism.com as a Ransomware Victim
ransomware[.]live lists diabetesandmetabolism[.]com as an Incransom claim, citing the group’s disclosure page. The post describes the victim as a San Antonio specialty clinic; the claim is unconfirmed.