Monitors ransomware victims, threat groups, leak-site activity, and newly disclosed ransomware incidents.
2765 articles
The Storm ransomware group claimed it targeted Nipigon District Memorial Hospital in Canada, with reported disruptions to hospital services. The post says the claim has not been independently confirmed.
A ransomware.live record says Incransom listed acmestamping[.]com on its disclosure site. The post says the group’s claim is unverified.
Ransomware group UmBra claimed an attack on Beni Suef Technological University in Egypt, with the claim listed on October 6, 2026. The report says the claim has not been independently confirmed.
Ransomware group Panzer claimed EDFelectronics, a Polish engineering company, as a victim. The claim was recorded on October 6, 2026, and has not been independently confirmed.
The Deadlock ransomware group reportedly targeted Italian business Greggio Argento and claimed to expose about 500 GB of data. The post says the claim is unverified.
A ransomware.live entry records Panzer’s claim involving US professional-services company SweetRush. The article says the claim is unverified; it does not confirm encryption, data theft, or operational disruption.
The Akira ransomware group claims it exfiltrated employee information, project details, specifications, and NDA-related data from Hygrade Safety. The claim has not been independently confirmed.
Ransomware group UmBra claims it targeted Four Hands LLC, a U.S.-based home furnishings company, and disrupted operations. The claim was published on October 6, 2026, and has not been independently confirmed.
A ransomware.live monitoring post says Qilin targeted J&D Financial. The claim was published on October 6, 2026, and has not been independently confirmed.
Qilin claims it impacted Corby Rock Mill in Ireland with ransomware, disrupting access to systems and data. The report says the claim has not been independently confirmed.
VYPR claimed it targeted Agio International in the United States, reportedly disrupting production and business continuity. The claim has not been independently confirmed.
Ransomware group VYPR allegedly targeted Medical Data Rx in the US. The claim says medical-related data handled by Technical Solutions Group was affected; its accuracy has not been confirmed.
A ransomware monitoring post says Qilin claimed an attack on Finland’s Delta Marine. The group’s claims are unconfirmed.
A ransomware.live record says Qilin claimed an attack on US professional services firm Global Security Concepts. The claim is unverified; the post says it cannot confirm the information.
A ransomware.live post records netrunner’s claim that a U.S. organization was targeted, its data encrypted, and a ransom demanded. The post says the claims are unconfirmed.
SilentRansomGroup claims A…n was targeted; the company’s full name is pending disclosure. The claim has not been independently confirmed.
Global Secret Group claims it encrypted 328 GB across 26,503 files and 446 folders at Turn5, a Pennsylvania auto parts company. The claim is unverified.
A ransomware.live monitoring post records SilentRansomGroup’s unverified claim involving Nelson Mullins Riley & Scarborough and says $8 million was offered to prevent data publication.
A ransomware group identified as Interlock claims it compromised O2 Dental Group and accessed patient health records, billing and insurance documents, and consent forms. The claims have not been independently confirmed.
A ransomware.live record says Qilin claimed an attack on Malaysia’s Asia Era One, alleging data compromise and operational disruption. The post says the claims are unverified.
Ransomware.live reports that Eclipse claimed an attack on part02[.]simplexengg[.]in in India, alleging file encryption and operational disruption. The post says the claim has not been independently confirmed.
BYOD claims it stole more than 700GB of Franklin Empire data, including cloud and API keys, SMTP credentials, customer PII, and business records. The claims are unverified.
Ransomware.live lists an upcoming Doommageddon claim against Cam Group LLC, discovered and published on Oct. 5, 2026, with a stated deadline of Oct. 15. The claim is unverified.
Ransomware.live records an unverified Doommageddon claim of a planned operation against ENKA Schools in Turkey, marked upcoming with a deadline of October 15, 2026.
