Qilin Claims Db Tarimsal Enerji as a Ransomware Victim
ransomware.live lists Db Tarimsal Enerji as a Qilin ransomware victim in Turkey, citing a public group claim. The claim is unconfirmed.
Ransom Monitor
Monitors ransomware victims, threat groups, leak-site activity, and newly disclosed ransomware incidents.
2804 articles
cmdorganization Claims Ransomware Incident at Collge Mont Notre-Dame de Sherbrooke
A ransomware.live monitoring post lists Collge Mont Notre-Dame de Sherbrooke as a cmdorganization claim dated July 30, 2026. It says the school’s network and services were disrupted but notes the claims are unconfirmed.
Qilin Claims Ransomware Attack on TenSparrows
A ransomware.live monitoring post attributes a ransomware claim against U.S.-based TenSparrows to Qilin. The post alleges disruption and encrypted data, but says the claims are unconfirmed.
Aurora Claims Theft of Pyramid Analytics Source Code and Database Backups
Ransomware.live reports an unverified Aurora claim that Pyramid Analytics B.V. data includes the platform’s source code, full Git histories, and 22 GB of production SQL Server backups, allegedly containing credentials and customer information.
Aurora Claims to Have Compromised Evosys Laser GmbH
Aurora claims it compromised Evosys Laser GmbH and exposed corporate data, including HR records, infrastructure credentials, customer projects and industrial-control files. The claim is unverified; ransomware[.]live cites the group’s public post.
Aurora Claims Data Theft at Van Eijck International Car Rescue
Aurora claims it stole employee files, rental contracts and customer claims data from Van Eijck International Car Rescue, as well as a Google Workspace backup. The monitoring post says the claims are unconfirmed.
Anubis Claims Prelys Courtage Client Data Breach in France
A ransomware.live monitoring record attributes a claim of a Prelys Courtage client data breach in France to Anubis. The post says the claim is unconfirmed.
Black X Claims to Have Targeted Malaysian Manufacturer Tong Kong E & E Sdn Bhd
Black X claims it targeted Malaysian manufacturer Tong Kong E & E Sdn Bhd and involved sensitive customer and banking records. The post attributes the information to the group; the claims are unconfirmed.
Black X Claims Ransomware Attack on Sanaa Hospital in Yemen
Ransomware.live lists Sanaa Hospital in Yemen as a Black X ransomware claim, alleging encryption, payment demands and disruption to healthcare systems. The post says it cannot confirm the claims.
Incransom Claims 12 TB Data Exfiltration from Harwal Group
Ransomware.live reports that Incransom claims to have exfiltrated 12 TB of data from Harwal Group in the UAE. The post cites the group’s disclosure page and says the claim is unconfirmed.
Akira Claims Ransomware Impacted Northwood Country Club
Akira allegedly claimed Northwood Country Club in Meridian, Mississippi, was affected by ransomware and threatened to upload corporate data, including employee information, financials, contracts, and agreements. The claim is unconfirmed.
Insomnia Claims Attack on Panama Distributor Sky Solutions
Insomnia claimed an attack on Panama-based distributor Sky Solutions, which serves more than 4,000 points of sale. The monitoring post says the claim has not been independently confirmed.
Aurora Claims Bretford Manufacturing Data in Ransomware Listing
ransomware[.]live records an unverified aurora claim against Bretford Manufacturing, alleging exposure of workforce, banking, network, HR and engineering records. The post says the claims have not been independently confirmed.
SpaceBears Claims Data Theft at StellarRAD Systems
Ransomware.live lists StellarRAD Systems as a SpaceBears claim, alleging theft of SQL data, DWG plans, employee and client personal information, financial documents, and APP files. The article says the claim is unconfirmed.
Gunra Claims Ransomware Incident at Malaysia’s Weilhotel
Ransomware.live reports a gunra ransomware claim involving Malaysia’s Weilhotel, dated July 29, 2026. The post says the claim is unconfirmed and provides no official statement from the hotel.
Incransom Claims Data Exposure at Della Casa Group AG
Incransom claims it exposed Della Casa Group AG data, including personal and client information, finance records, and project details. The monitored claim lists 86,332 files; the post says it could not confirm the information.
CoinbaseCartel Claims Ransomware Attack on Accesso
Ransomware.live records an unverified ransomware claim by coinbasecartel against UK-based ticketing technology provider Accesso. The article cites the actor’s listing but does not independently confirm the claim.
Deadlock Claims It Targeted AHENK Lab in Turkey
A ransomware.live monitoring post attributes a claim that Deadlock targeted AHENK lab, a medical laboratory in Turkey. The post says the claim is unconfirmed; it provides no evidence of compromise or impact.
Thegentlemen Claims to Have Targeted Buck Knives
A ransomware.live monitoring post attributes to thegentlemen a claim targeting Buck Knives, alleging compromise and disruption to its U.S. operations. The post says the claim could not be verified.
Blacknevas Claims Ransomware Attack and 1 TB Data Theft at Speed Group
Blacknevas claims it breached Speed Group and exfiltrated more than 1 TB of data, including technical documents, customer databases and production data. No official statement has been issued; the claim is unconfirmed.
Qilin Claims Hoc as a Ransomware Victim in the UK
ransomware.live records a Qilin claim naming Hoc, a victim in the UK. The post alleges encryption and service disruption, but the article says the claim has not been confirmed.
Akira Claims Planned 81GB Data Upload from Franz Krause artworksgroup
Ransomware.live lists an unverified Akira claim that 81GB of Franz Krause artworksgroup data will be uploaded, including employee, client, financial and confidential files.
Ransomware Listing Names B-K Tool & Design; Claim Attributed to cmdorganization
Ransomware.live lists B-K Tool & Design as a victim claimed by cmdorganization. The post says the claim is unconfirmed; the record was discovered and published on July 28, 2026.
Chaos Claim Names Craneware; Company Says Exposed Data Was Non-Sensitive
A ransomware.live post attributes a Craneware incident claim to Chaos. Craneware’s public statements and filings describe exposed data as non-sensitive or already-public regulatory information; the post says the claim is unconfirmed.