Qilin Claims Ransomware Attack on Levin Furniture
Qilin claimed an attack on Levin Furniture, with the claim recorded by ransomware.live and attributed to the group’s leak site. The article says the claim is unconfirmed.
Ransom Monitor
Monitors ransomware victims, threat groups, leak-site activity, and newly disclosed ransomware incidents.
2809 articles
Arcusmedia Claims Ransomware Attack on Distribox
Ransomware.live lists an arcusmedia claim that France-based logistics company Distribox was targeted, with business disruption and encrypted-data access alleged. The post says the claims are unconfirmed.
Securotrop Claims Ransomware Attack on ProDirectional Drilling
Ransomware.live lists ProDirectional Drilling as a securotrop ransomware claim, with a reported data impact size of 4,329 GB. The claim is unconfirmed and its status is listed as AWAITING.
Arcusmedia Claims Ransomware Attack Against Portugal’s Milenia
Ransomware.live records an unconfirmed arcusmedia claim targeting gemese[.]pt, associated with Milenia – Informática e Serviços in Portugal. The post cites the actor’s leak site; no independent confirmation is provided.
Arcusmedia Claims Perpustam as a Ransomware Victim
Ransomware.live lists Malaysia’s Perpustam public library corporation as a victim claimed by arcusmedia. The post alleges service and system disruption, but the report says the claim is unconfirmed.
ShinyHunters Issue Leak Threat Against Abbott-Owned Exact Sciences
A ransomware.live monitoring post records ShinyHunters’ final warning to Abbott-owned Exact Sciences, threatening to publish allegedly exfiltrated data and cause digital disruptions unless contacted by July 18, 2026. The claim is unconfirmed.
Chaos Issues Final Ultimatum to Spectrum Chemical
Ransomware.live reports that the Chaos group issued Spectrum Chemical a “Final Ultimatum” over an alleged security breach, accusing management of refusing to communicate. The group’s claims are unverified.
Chaos Claims Sleeman Breweries Was Targeted
Ransomware.live reports that Chaos claimed to target Sleeman Breweries (sleemanbreweries[.]ca). The article says the group’s claim is unconfirmed; it provides no independent evidence or company response.
CoinbaseCartel Claims Axiom Global as Ransomware Victim
Ransomware.live reports that CoinbaseCartel listed Axiom Global as a victim, claiming data encryption and business disruption. The post says the claims are unconfirmed.
DragonForce Claims Ransomware Attack on Road Ahead Technologies Consultant
Ransomware.live lists Road Ahead Technologies Consultant in China as a DragonForce ransomware claim, alleging operational disruption. The post says the claim is based on the group's public statements and is unconfirmed.
Chaos Claims Theft of 142 GB From Aphena Pharma Solutions
Chaos claims it accessed Aphena Pharma Solutions’ corporate infrastructure and stole 142 GB of data, including financial records. The claims are unverified; ransomware.live says it is monitoring them.
Casta Diva Group Listed in Payoutsking Ransomware Claim
A monitoring post lists Italy’s Casta Diva Group as a ransomware victim claimed by payoutsking. The post says the information is based on the group’s public claims and is unconfirmed.
DragonForce Claims Ransomware Incident at Graphic International Centre
A ransomware.live monitoring entry attributes a ransomware claim against Graphic International Centre to DragonForce. The article says the claim is unconfirmed and provides no independent verification.
DragonForce Claims Ransomware Incident at Italy’s SITAV SpA
A ransomware[.]live monitoring post lists Italian rail-vehicle services company SITAV SpA as a DragonForce ransomware victim. The post attributes the claim to the group and says it is unconfirmed.
DragonForce Claims Edison Global Networks Limited as a Victim
A monitoring record attributes a ransomware claim against Edison Global Networks Limited to DragonForce. The post alleges IT and service disruption but says the group’s claims are unconfirmed.
Qilin Claims Ransomware Attack on Spain’s URH Hoteliers
A ransomware.live monitoring record attributes a ransomware attack against Spain-based URH Hoteliers to Qilin. The post says the group claimed disruption and file encryption, but those claims are unconfirmed.
DragonForce Claims Attack on Asimar Shipyard in Mexico
Ransomware.live records an unverified DragonForce claim targeting Asimar (listed as asimar[.]com) in Mexico; the post alleges disruption to shipyard operations, but the article says it cannot confirm the claims.
BlackNevas Claims L’azurde Systems Were Compromised
Ransomware.live records an unconfirmed blacknevas claim that Saudi jewelry retailer L’azurde was compromised. The post provides no independently verified incident details.
Qilin Claims Hillebrand Home Health as a Ransomware Victim
Qilin’s leak site reportedly listed Hillebrand Home Health, a US healthcare organization. The claim is unconfirmed; the post says it could not verify the information.
Titan ransomware group claims Cooperate consulting CZ s.r.o. as a victim
A ransomware.live record attributes a claim against Czech company Cooperate consulting CZ s.r.o. to Titan. The alleged access, file encryption, disruption and ransom demand are unconfirmed.
cmdorganization Claims Target Energy Solutions in Ransomware Listing
ransomware.live reports an unconfirmed ransomware claim by cmdorganization naming Target Energy Solutions, a US energy-sector company. The post identifies its MEERA platform but provides no independently confirmed incident details.
Titan Claims Ransomware Attack on Czech Firm Ozmit
A ransomware.live monitoring record attributes a ransomware claim against Czech company Ozmit s.r.o. to Titan. The post alleges encrypted files and operational disruption, but the information is unconfirmed.
Titan Claims Ransomware Attack on DataOstrov s.r.o.
A ransomware.live record attributes claims of encryption and service disruption at Czech company DataOstrov s.r.o. to titan. The record says the claims are unconfirmed.
Qilin Claim Names Sedemi in Mexico as a Ransomware Victim
Ransomware.live reports that Qilin claimed Sedemi in Mexico as a victim. The post says it cannot confirm the claim; encryption and operational disruption are not independently verified.