Monitors ransomware victims, threat groups, leak-site activity, and newly disclosed ransomware incidents.
2802 articles
A ransomware[.]live record attributes an unverified ransomware claim against King International LLC to Gammax. The article says the group claimed the incident disrupted operations and data availability.
Akira reportedly claims it stole 104 GB from Basic Grain Products and plans to disclose it. The post says the data may include employee identity and tax documents, financial records, contracts, and client information; the claim is unconfirmed.
RansomHouse claims it targeted lya Construtora’s US operations. The claim is attributed to the group’s leak site and monitored by ransomware.live; the article says it could not confirm the information.
A monitoring post attributes a ransomware claim against the City of Beacon to RansomHouse, alleging municipal disruption and a ransom demand. The post says the claims are unconfirmed.
Ransomware.live lists U.S. eye-care provider Primary Eye Care as a DragonForce ransomware victim, based on the group's public claim. The listing's accuracy is unconfirmed.
A ransomware monitoring post attributes an unconfirmed attack claim against U.S. retailer Hope’s Windows to cry0, including claims of encrypted systems and demands. The post says details are “Coming soon.”
Ransomware.live lists EduSpa in a DragonForce ransomware claim and cites an onion blog as its source. The claim is unverified; the accompanying company profile refers to Parkmungak rather than EduSpa.
Ransomware.live reports an unverified Panzer claim targeting Festina Group, a Swiss watch and jewelry company. The post says operations in Switzerland were impacted; no independent confirmation is provided.
A ransomware.live-monitored post attributes a ransomware incident involving Surakarta University in Indonesia to Panzer. The post says the claim is unconfirmed.
Ransomware.live reports that incransom claimed Virginia Peninsula Regional Jail (vprj[.]org) was hit by ransomware and operations were disrupted; the post says the claim is unconfirmed.
Ransomware.live records a Qilin claim targeting Austrian manufacturer STADLER Sensorik CNC-Technik. The post says systems and data availability were disrupted, but the claim is unconfirmed.
A ransomware.live monitoring post says DragonForce claimed Mike Graham Heating And Air Conditioning as a victim. The post says the claim is unconfirmed.
A ransomware.live-monitored post attributes a ransomware claim against Houston-based P. A. Inc. (Performance Alloys) to DragonForce and reports operational disruption. The post says the claims are unconfirmed.
A ransomware claim attributed to Everest names Colombian public utility EPM as a victim. The claim is unconfirmed; ransomware.live says it is based on the group’s public claims.
Ransomware.live reports that Qilin claimed an August 5, 2026 attack on Stade Francais, alleging data encryption and a ransom demand. The claim is unconfirmed, and no statement from the victim is provided.
A ransomware.live monitoring post attributes to Triple X an unconfirmed claim that Henshaw Law faces exposure of about 1 TB of data, including personal files, identity documents, court records and scanned forms and emails.
Orova allegedly hacked FixIT Tek’s Syncro MSP panel and stole client data, according to a claim monitored by ransomware.live. The article says the claim is unconfirmed.
A ransomware.live-monitored post says the Gunra group targeted Indonesian company PT All Cosmos Biotek. The post attributes this to the group’s public claim and says the information is unconfirmed.
A ransomware.live monitoring post attributes a ransomware claim involving Brazil's PontoBR Sistemas to Spacebears. The post cites a leak-site listing but says the claim is unconfirmed.
A ransomware.live record attributes to chaos a threat to release 235 GB of Healthcare Highways company and client records unless representatives make contact within 24 hours. The claim is unconfirmed.
Ransomware[.]live lists Control Concepts Technology as a victim claimed by thegentlemen. The post attributes the claim to the group but says it could not verify its accuracy.
TheGentlemen allegedly claimed ransomware activity against US financial services company TopMark Funding, saying it disrupted the company’s commercial financing operations. The claim is unconfirmed.
A ransomware.live monitoring post records blacknevas's unconfirmed claim that it stole more than 1 TB of data from Arkın Group properties in Turkey. The post also links the intrusion to CryptoRex, leaving the actor attribution unresolved.
A ransomware.live monitoring post attributes to incransom a claim that Loyalist College was warned about the disclosure of hundreds of personal data. The claim is unconfirmed.
