Qilin Claims Ransomware Attack on The Myers Y Cooper
Qilin claims it targeted US-based The Myers Y Cooper, exfiltrated data and deployed ransomware. The monitoring post says the claim is unverified.
Ransom Monitor
Monitors ransomware victims, threat groups, leak-site activity, and newly disclosed ransomware incidents.
2807 articles
Qilin Claims Ransomware Attack on Plitvička Jezera National Park
A ransomware.live monitoring post attributes a ransomware claim targeting Plitvička Jezera National Park in Croatia to Qilin. The post says the claim is unconfirmed.
Qilin Claims Ransomware Attack on Jubilee Jobs in Nigeria
Ransomware.live reports that Qilin claimed an attack on Jubilee Jobs in Nigeria, with alleged encryption and disruption affecting access to data and systems. The claim is unconfirmed.
Nova Claims SistNet as a Ransomware Victim
Ransomware[.]live lists SistNet in a Nova claim alleging data theft and offering decryption support. The post says the claims are unconfirmed.
m3rx Claims 460 GB Data Exfiltration from AusProof
Ransomware actor m3rx claims it exfiltrated 460 GB across 373,495 files from AusProof. ransomware.live lists the claim as published July 24, 2026; the information is unconfirmed.
securotrop Claim Against Advantage Sintered Metals Awaits Status
Ransomware.live lists Advantage Sintered Metals as an awaiting-status claim by securotrop, with 503 GB reportedly affected. The post says the claim is unconfirmed.
Safepay Claims Attack on GVSurgicalArts.com
Ransomware.live reports Safepay's ransomware claim against gvsurgicalarts[.]com, a Montana surgical practice, dated July 24, 2026. The claim is unconfirmed; no independent evidence or victim response is provided.
SafePay Claims Upland.k12.ca.us in Ransomware Listing
Ransomware.live lists Upland.k12.ca.us as a SafePay ransomware victim, citing the group’s onion post. The claim is unconfirmed; the record describes a 14-school K–12 district and reports disruption.
Unsafe Claims Jiva Health in Ransomware Listing
Ransomware[.]live lists India-based Jiva Health as a victim claimed by the ransomware actor Unsafe. The post alleges operational disruption, but the article says the group’s public claims are unconfirmed.
Nova Claims Compromise of Center Of Information Technologies in Finance
Nova reportedly claimed it compromised the Center Of Information Technologies in Finance and offered data samples and a directory tree. The monitoring post says the claim is unconfirmed.
Qilin Claims Ransomware Attack on GOP in the UK
Ransomware.live records a Qilin claim targeting GOP in the UK, alleging file encryption and operational disruption. The post says the claims are unconfirmed.
DragonForce Claims ID Engineering as a Ransomware Victim
Ransomware.live reports that DragonForce listed ID Engineering as a victim on July 24, 2026. The claim is unverified, with no independent confirmation provided.
Qilin Claims Stryker as a Ransomware Victim
Ransomware.live lists Stryker as a Qilin ransomware victim, citing a Qilin leak-site post dated July 24, 2026. The listing alleges unauthorized access and encryption; the post says the claims are unconfirmed.
Triple X Claims Bank of Baroda Customer Data Exposure
A ransomware.live monitoring record attributes an unverified claim to Triple X that Bank of Baroda customer data, including banking records and identity documents, was exposed.
Akira Claims Emerge2 Digital Infiltration, Threatens 30GB Data Release
Akira claims it infiltrated Emerge2 Digital and threatens to disclose or encrypt about 30GB of data, allegedly including passports, client information, financial records and contracts. The claim is unconfirmed.
Pear Claims Metropolitan Construction Systems as a Ransomware Victim
A ransomware claim attributed to pear names Metropolitan Construction Systems, a New York City roofing company. The claim reportedly involves encryption and a ransom demand, but the information has not been independently confirmed.
Booba Project Claims Data Theft from Zynex
Booba Project reportedly claimed it stole 1.4 GB of data from Switzerland-based Zynex. The monitoring post says the claim is unconfirmed.
Qilin Claims Highline Community College Was Targeted in Ransomware Attack
Ransomware[.]live lists Highline Community College as a Qilin victim based on a group claim published July 24, 2026. The post says the claim is unconfirmed; the supplied content provides no independent evidence of access, encryption, or data theft.
Qilin Claims Kean University as a Ransomware Target
Ransomware.live reports that Qilin claimed Kean University as a target. The post says the claim is unconfirmed and provides no independently verified incident details.
Qilin Claims Ransomware Attack on Argentine Army
A monitoring record attributes to Qilin a ransomware claim targeting the Argentine Army, with alleged service disruption and file encryption. The article says the group’s claims are unconfirmed.
Krybit Claims Ransomware Targeted Nilepet.com
Ransomware.live attributes a claim that actor krybit targeted nilepet[.]com, identified as Nile Petroleum Corporation. The post alleges an impact on data availability but says the group’s claims are unconfirmed.
Qilin Claims ABM Enviro as Ransomware Victim
A ransomware.live monitoring post attributes to Qilin claims that ABM Enviro in Canada was targeted, with disruption of critical systems and access to data. The claims are unconfirmed.
Qilin Claims Targeting Machinerie P&W in Canada
A ransomware.live monitoring post records Qilin's claim that it targeted Canadian manufacturer Machinerie P&W. The post says the claim is unconfirmed.
cmdorganization Claims T Simon Jewelers as a Ransomware Victim
A ransomware.live monitoring record attributes an unconfirmed ransomware claim against T Simon Jewelers in Door County, US, to cmdorganization. The article provides no independent confirmation or incident details.