Monitors ransomware victims, threat groups, leak-site activity, and newly disclosed ransomware incidents.
2797 articles
A ransomware.live monitoring post attributes a ransomware claim targeting US professional-services organization clgroup to incransom. The claim is unconfirmed; the post says it cannot verify the information.
A ransomware.live monitoring record attributes a ransomware claim against Safeware to thegentlemen. The post says the claim is based on the group’s public statements and that its accuracy is unconfirmed.
Ransomware.live lists Brighton East Dental Clinic (BEDC) as a victim in an incransom claim alleging disruption in Australia. The post says the claim is unconfirmed.
Qilin allegedly claimed to target United Association Local Union 345 and compromise files as part of an extortion scheme. The post says the claim is unconfirmed.
Ransomware.live reports that BlackNevas claimed an attack on Jack Rutherford Customs Brokers Ltd., also known as The Rutherford Group, a Canadian customs broker. The claim is unconfirmed.
Ransomware.live reports that incransom listed Gamaus[.]com, the Greater Austin Merchants Cooperative Association, in a claim involving about 400 GB of data. The claim is unverified.
A ransomware.live monitoring post attributes a ransomware claim involving Portable Intelligence Inc. to BlackNevas. The post says the claim targeted warehouse management and automation operations; the information is unconfirmed.
Ransomware.live reports an unconfirmed SilentRansomGroup claim targeting New Jersey law firm Riker Danzig LLP. The article alleges operational and data-availability impacts but says the claim could not be confirmed.
A ransomware claim attributed to Kairos lists Hightech Signs, a sign shop in Charlottesville, Virginia. The monitoring post says the claim was published August 12, 2026, and notes it is unconfirmed.
A ransomware.live monitoring record lists Riker Danzig Scherer Hyland & Perretti as a SilentRansomGroup claim. The post says the group’s public claims are unconfirmed.
Ransomware.live lists Enteroptyx Ophthalmology Products as a victim in an alleged ransomware incident attributed to blacknevas. The post says details are limited and the claim is unconfirmed.
Ransomware.live lists Westbrook Greenhouse Systems as a BlackNevas ransomware claim, published Aug. 12, 2026. The post says the claim is unconfirmed; it provides no independently verified incident details.
Ransomware[.]live lists Tianji Auto Care Service Company in Turkey as a target claimed by nightspire; the post says no data is currently available and that it cannot confirm the claim.
A ransomware.live record attributes to Clop a claim targeting ENTERATEK[.]MXESBERBEVERAGE[.]COM in Mexico, alleging service disruption and threatened data exposure. The report says it cannot confirm the claims.
A ransomware.live record attributes an unverified data-compromise and extortion claim against GATE7LLC[.]COMGBBEV[.]COM in the UK to Clop, citing the group’s onion source.
Ransomware.live lists AOL[.]com in a Clop ransomware claim dated Aug. 12, 2026. The post says AOL operations were impacted but states the claim is unconfirmed.
Ransomware.live lists Philadelphia Insurance Companies as an Ethics ransomware victim, citing the group’s leak-site claim. Alleged operational disruption and potential data compromise are unconfirmed; the record’s discovery date postdates its publication date.
A ransomware.live monitoring record attributes a claim involving Holstrom, Block & Parke to the Ethics group. The article says the claim is unconfirmed; it provides no independently verified incident details.
ransomware.live records an Ethics ransomware claim naming BerlinerLuft. Technology GmbH in Germany. The post says the group claimed disruption, but the claim is unconfirmed.
A Qilin-attributed claim says Wanted in the Netherlands was targeted, with files allegedly encrypted or disrupted and a ransom demanded. The monitoring post says the claim is unconfirmed.
Ransomware.live records Payload’s claim listing B&B Hydraulik, a German hydraulics manufacturer. The claim is unconfirmed; the record cites a Payload leak-site post.
Interlock claims it exposed 710 GB of AngMar Companies data, including patient records and sensitive personal information. The claim is unverified; ransomware.live says it cannot confirm its accuracy.
Ransomware.live reports that spacebears listed Basso Fedele & Figli (Olio Basso) and Villa Raiano. The group claims exposed data includes employee and client personal information, financial documents, and other files; the claim is unconfirmed.
Ransomware.live monitored a Qilin claim naming Pakistan's Crown Group. The post alleges encryption, operational disruption and a ransom demand, but says the claims have not been independently confirmed.
