Incransom Claims Lantis Enterprises as a Ransomware Victim
Ransomware.live reports that incransom listed Lantis Enterprises (lantisnet[.]com) in a ransomware claim. The post says US systems and operations were affected; the claim is unconfirmed.
Ransom Monitor
Monitors ransomware victims, threat groups, leak-site activity, and newly disclosed ransomware incidents.
2802 articles
Play Ransomware Group Claims Preferred Financial Group Incident
Ransomware.live lists Preferred Financial Group as a Play ransomware victim; the post attributes claims of unauthorized access and business disruption to the group but says they are unconfirmed.
Play Ransomware Claim Names First Tek in Taiwan
Ransomware.live lists First Tek, a technology company in Taiwan, as a Play ransomware target, citing the group’s leak-site claim. The publisher says it could not confirm the claim.
Incransom Claims Data Theft From TRULITE GLASS & ALUMINUM SOLUTIONS
Ransomware.live records an Incransom claim against TRULITE GLASS & ALUMINUM SOLUTIONS, alleging access and theft of more than 8 TB of data and threatening publication. The post says the claims are unconfirmed.
Krybit Claims CESMAC University Center as Ransomware Victim
The krybit ransomware group claims it targeted Brazil's CESMAC University Center. The monitoring post lists the claim as discovered and published on Aug. 4, 2026, and says it could not verify the information.
Qilin Claims Ransomware Attack on German Manufacturer RUPP Spritzguss
Qilin claims it targeted German manufacturer RUPP Spritzguss. The monitoring post attributes the claim to Qilin’s leak site and says disruption and data encryption occurred; the information is unconfirmed.
Qilin Claims Galvin Brothers in Ireland as a Ransomware Victim
A ransomware.live record says Qilin claimed Galvin Brothers, an Irish manufacturing company, as a victim. The post attributes the claim to Qilin’s leak site and says the incident details are unconfirmed.
Akira Claims Data Theft at University SprinklerSystems
Ransomware.live lists University SprinklerSystems as a victim in an Akira claim alleging access to and exfiltration of employee, client, and internal files; the post says it could not verify the claim.
Qilin Claims WD Masonry & Concrete as a Ransomware Victim
Ransomware.live lists WD Masonry & Concrete as a Qilin ransomware claim, citing the group's leak-site post. The monitoring post says the claim is unconfirmed.
Gunra Claims Ransomware Attack on South Korean Automotive Parts Maker Worldtube
Ransomware.live lists Worldtube, a South Korean automotive-parts manufacturer, as a Gunra ransomware target based on the group's public claim; the alleged incident and reported operational impact are unconfirmed.
Orova Claims Ransomware Incident at Taiwan’s DBM Reflex
A ransomware claim attributed to Orova names Taiwan-based DBM Reflex. The report cites a leak-site source and ransomware.live monitoring, but says the claim is unconfirmed.
Orova Claims Agricultural Chemical Solutions as a Ransomware Victim
A ransomware.live monitoring post attributes a ransomware incident claim involving Agricultural Chemical Solutions to Orova. The post says operations were disrupted, but notes the claim is unconfirmed.
Orova Claims SBI Manufacturing as a Ransomware Victim
Ransomware.live lists SBI Manufacturing, a Sioux Falls metal fabrication and machine welding company, as a victim claimed by Orova. The post says operations were disrupted and files encrypted, but these claims are unconfirmed.
Aurora Claims Data from GILDE Handwerk Macrander GmbH & Co. KG
The Aurora ransomware group claims it holds sensitive records from GILDE Handwerk Macrander GmbH & Co. KG, including identity documents, payroll, tax and financial records. The claim is unverified and attributed to the group by ransomware.live.
Incransom Claims Attack on Philippine Retailer LCC
Incransom claims it targeted Philippine retailer and property developer Liberty Commercial Center (LCC), identified as lccgroup[.]com. The ransomware.live post cites the group's disclosure and says the claim is unconfirmed.
Incransom Claims Pushidrosal.id as a Ransomware Victim
Ransomware[.]live lists pushidrosal[.]id as a victim claimed by the incransom group, citing its disclosure page. The report says it cannot confirm the claim.
Aurora Claims US Installation Group, Inc. as a Ransomware Victim
Ransomware.live monitored an Aurora ransomware claim naming US Installation Group, Inc. The group’s claim is unconfirmed, and the article provides no independent evidence of compromise or disruption.
Incransom Claims to Have Obtained Oleoductos del Valle Data
A ransomware.live monitoring record attributes to incransom a claim of obtaining data from Argentina’s Oleoductos del Valle, including HR, financial, tax, and personal records. The claim is unconfirmed.
Incransom Lists Clinton Health Access in Ransomware Claim
Incransom listed Clinton Health Access (clintonhealthaccess[.]org) as a ransomware victim and made unverified allegations involving the Clinton Foundation and cryptocurrency transactions. The monitor says it cannot confirm the claims.
SafePay Claims Hanan-Hov.co.il as Ransomware Victim
Ransomware.live lists hanan-hov[.]co[.]il as a SafePay claim and alleges disruption to logistics operations in Israel. The post says the group's claims are unconfirmed.
SafePay Claims to Have Compromised Spanish Manufacturer Simonrack
Ransomware.live records an unverified SafePay claim targeting Simonrack, a Spanish metal-shelving manufacturer. The claim was posted on SafePay's leak site on August 3, 2026; the article says it cannot confirm the information.
Safepay Claims New-Point.it as a Ransomware Victim in Italy
A ransomware.live record attributes a claim targeting Italy-based new-point[.]it to Safepay and reports operational disruption. The post says the information comes from the group’s public claims and is unconfirmed.
SafePay Claims Ransomware Attack on Pennsylvania Manufacturer
Ransomware.live recorded a SafePay claim naming naskdoorinc[.]com, a Pennsylvania manufacturer, on Aug. 3, 2026. The post alleges operational disruption; the site says it could not verify the claim.
SafePay Claims Ransomware Activity Targeted pradotuylaw.com
SafePay claims it targeted pradotuylaw[.]com, described as a U.S. law firm. The claim was reported by ransomware.live; the article says it could not confirm the information.