Monitors ransomware victims, threat groups, leak-site activity, and newly disclosed ransomware incidents.
2809 articles
A ransomware.live monitoring post attributes an unverified claim to Interlock that Converting Equipment International’s confidential and personal data were exposed; it says the claim is based on the group’s public claims and is unconfirmed.
Ransomware.live reports a DragonForce claim involving Southport Outdoor Living, alleging an incident that impacted UK operations. The claim is unconfirmed; the article provides no independent verification.
Ransomware.live lists Kee Wah Bakery as the subject of a DragonForce claim dated July 16, 2026. The post says the group threatened access to systems supporting production and customer services; the claim is unconfirmed.
A ransomware.live monitoring post attributes a ransomware claim against Sinai Grand Casino in Egypt to DragonForce. The post says the claim may involve operational disruption but notes that the information is unconfirmed.
A ransomware-monitoring post attributes a claim involving Saint George’s School in Colombia to cmdorganization. The post says the claim is unconfirmed.
Settra claims torsiongroup[.]co[.]uk was affected by ransomware. The post says operations were disrupted but notes the claim is unconfirmed and based on the group's leak-site post.
Ransomware.live reports a Settra claim targeting acilab[.]com in Brazil. The group’s leak page reportedly includes information about financing and rental arrangements involving the owners’ other companies; the claims are unconfirmed.
Ransomware[.]live lists Ferrovial as a claimed AiLock victim, alleging disruption to its infrastructure, mobility, project and toll-road operations. The post says it cannot confirm the claims.
A ransomware.live monitoring post attributes a claim targeting Japan-based Solid Advance Inc. to AiLock. The post says operations and services were disrupted, but notes the group’s claims are unconfirmed.
AiLock is reported to have claimed Nihon Kotsu Co., Ltd. as a target; the post is monitored by ransomware[.]live and says the claim is unconfirmed.
Ransomware.live lists South Plains Rural Health Services, Inc. as a victim of a ransomware claim by actor “pear.” The post alleges disruption to care services in West Texas, but says the claim is unconfirmed.
A ransomware.live monitoring post records an unconfirmed claim by the ransomware group pear naming Carient Heart & Vascular, a healthcare provider in Northern Virginia, as a victim.
The Booba Project reportedly claimed it stole 12 GB of data from US facilities services company Jani-King. The monitoring post says the claim is unconfirmed.
Ransomware.live reports an unverified Qilin claim targeting International Delights in the US; the post alleges files were accessed and encrypted, but provides no independent confirmation.
A ransomware claim attributed to coinbasecartel names PanasonicAero as the victim. The monitoring post says the claim is unconfirmed; ransomware.live recorded it on July 15, 2026.
Ransomhouse allegedly claimed it compromised Fidelity Services Group systems and encrypted data to extort payment. The claim is unconfirmed; ransomware.live says it is based on the group's public claims.
Ransomware.live listed Stephens Precision, a Vermont manufacturer, as a DragonForce victim on July 15, 2026. The post alleges operational disruption, but the claim is unconfirmed.
Ransomware.live lists Shillen Mackall & Seldon as a DragonForce ransomware victim; the post says the group's claim is unconfirmed and invites an official response.
A ransomware.live-monitored record attributes a claim against Hughes Atwood & Mullaly PLLC to DragonForce. The claim was published July 15, 2026, and is unconfirmed.
A monitoring record attributes to DragonForce claims that it will publish correspondence, identification data, contracts, certificates, intellectual property and other information related to Isegen South Africa. The claims are unconfirmed.
Akira claims it stole about 168 GB of Pioneer Construction data and threatens to leak it. The unconfirmed claim includes employee identity documents, financial records, contracts and other business information.
Ransomware.live lists Heritage Mechanical LLC as targeted by DragonForce, citing the group’s public claim. The company, sector and U.S. location are identified; the publisher says the claim is unconfirmed.
Ransomware.live reports an unverified ArcusMedia claim naming Canadian data and AI company COREBI (NowVertical), with a listed deadline of July 21, 2026. The post says it could not confirm the claim.
Ransomware.live lists South African travel company Be Travel as an alleged arcusmedia ransomware victim, with a July 21, 2026 deadline. The post says the claim is unconfirmed.
