Monitors ransomware victims, threat groups, leak-site activity, and newly disclosed ransomware incidents.
2807 articles
Ransomware.live lists an unconfirmed Worldleaks claim against US manufacturer PinnPACK. The post alleges unauthorized access and disruption to files and systems; no confirmation from PinnPACK is included.
A ransomware.live-monitored post attributes a ransomware claim involving St. Francis Xavier Catholic School System to WorldLeaks. The post says the information is unconfirmed.
ransomware.live reports an unverified ransomware claim by titan against PERTINENT HEALTHCARE BUSINESS SOLUTIONS PRIVATE LIMITED in India. The post attributes the claim to the group; the incident details are not independently confirmed.
Ransomware.live lists Bath Fitter as an Anubis ransomware claim alleging an employee data breach. The post says the group's claim is unconfirmed.
A ransomware.live post attributes an unverified ransomware claim targeting College O’Sullivan de Québec to Kairos. The post says the claim was discovered on July 20, 2026; it provides no independent confirmation or details about affected systems or data.
Ransomware.live lists Postres Reina, a Spain-based food producer, in a Qilin ransomware claim. The post says the group claimed encrypted files and operational disruption; these claims are unconfirmed.
SafePay’s leak site claims an attack on Mende Grundbesitz in Germany and reportedly disrupted its real estate administration operations. The monitoring post says the claim is unconfirmed.
Ransomware.live reports that SafePay listed acsmallmaxwell[.]com[.]au, an Australian accounting and financial services firm. The claim is based on the group’s post and is unconfirmed.
Ransomware.live lists cenesco[.]de in Germany as a SafePay ransomware claim, citing the group's leak-site post. The monitor says the claim is unconfirmed.
Ransomware.live lists industriesjaro[.]com (Jaro, Canada) as a SafePay claim dated July 20, 2026. The post says systems and operations were affected; the publisher says it cannot confirm the claim.
Ransomware.live reports that SafePay claimed an attack on German manufacturer stroebel-gruppe[.]de. The claim was listed on July 20, 2026, and the article says it could not confirm the information.
Ransomware.live lists TimeTEX (timetex[.]de) as a SafePay ransomware claim, citing a leak-site post dated July 20, 2026. The post says the claim is unconfirmed; no incident details are independently verified.
SafePay reportedly claimed LBB-Treuhand, a German tax consultancy, as a ransomware victim. The monitoring post says the claim is based on the group's public post and cannot be independently confirmed.
SafePay claims a ransomware attack against German manufacturer Jaecklin Industrial. The claim was listed on the actor’s blog and monitored by ransomware.live; the article says it could not confirm the claim.
A ransomware claim attributed to SafePay names wdk[.]de in Germany as a victim. The article says the claim is unconfirmed and was monitored by ransomware.live.
Ransomware[.]live reports that coinbasecartel claimed a ransomware deployment against Caterpillar, with alleged U.S. operational impact. The post cites the group's leak-site listing; the claim is unconfirmed.
Incransom claims a ransomware incident affected Ali-Monde’s US operations. The claim is attributed to the group’s disclosure blog and monitored by ransomware.live; the article says it cannot confirm the information.
Ransomware.live lists Collège O’Sullivan de Québec as a Kairos ransomware victim and says the claim alleges disruption to education services. The post says it could not verify the claim.
Ransomware[.]live lists Universidad Nacional de Mar del Plata as a nova extortion target, alleging use of stolen data and that the actor supplied a data tree and samples. The claim is unconfirmed.
A ransomware.live monitoring record says the nova group claims it exfiltrated data from Indonesia’s RSUI hospital and shared samples with the hospital. The claim is unconfirmed.
Nova claims it exfiltrated data from JRD Logistics and threatens to release it unless contacted. The monitoring post says the claim is unconfirmed.
A ransomware.live monitoring record attributes to Chaos an unconfirmed claim that Wikoff Color Corporation (wikoff[.]com) was compromised and 650 GB of data, including board financial reports and proprietary R&D formulas, was exposed.
A ransomware.live monitoring record attributes a ransomware claim naming Bolt & Nut Manufacturing to Qilin. The article says the group's claims are unconfirmed; no impact or data-theft details are provided.
A ransomware.live monitoring record attributes a claim against Indonesian cooperative KOPKARLA to nova and links to the actor’s leak site. The post says the claim is unconfirmed.
