m3rx Claims 857 GB Data Theft from Eclective in Ireland
Ransomware.live reports that m3rx claims to have stolen 857 GB across 1,683,762 files from Ireland-based eclective[.]ie; the post says the claim is unconfirmed.
Ransom Monitor
Monitors ransomware victims, threat groups, leak-site activity, and newly disclosed ransomware incidents.
2810 articles
Titan ransomware claim names Eureka Construction INC
A ransomware.live monitoring post attributes a claim naming Eureka Construction INC to the titan ransomware actor. The post alleges access and encryption but says the claims are unconfirmed.
Titan ransomware group claims attack on Cooperate service CZ s.r.o.
A ransomware.live monitoring post attributes a claim against Czech business Cooperate service CZ s.r.o. to the titan group. The post says files were encrypted and operations disrupted, but these claims are unconfirmed.
LockBit5 Claims Ransomware Attack on Ravagnan Group
A ransomware.live record attributes a ransomware claim against Ravagnan Group (ravagnan[.]com) to LockBit5 and links to the actor’s post. The claimed disruption is unconfirmed.
LockBit 5 Claims Ransomware Attack on Media Service Maastricht
Ransomware.live lists Media Service Maastricht in the Netherlands as a LockBit 5 ransomware claim and reports disruption to its audiovisual services. The post says the group's claims are unconfirmed.
LockBit5 Claims ComTRI GmbH in Germany as a Ransomware Victim
ransomware[.]live lists ComTRI GmbH in Germany as a LockBit5 ransomware victim based on a public group claim. The report says it cannot confirm the claim's accuracy.
LockBit5 Claims Ransomware Incident at Spanish Manufacturer BIANCHINI
Ransomware.live lists BIANCHINI, a Spanish steel-wire manufacturer, as a LockBit5 victim based on the group's public claim. The report says it cannot confirm the claim's accuracy.
Qilin Claims Allied Plumbing & Heating as a Ransomware Victim
Ransomware.live lists Allied Plumbing & Heating in New Hampshire as a Qilin ransomware victim. The post attributes the claim to the group and says its accuracy cannot be confirmed.
DragonForce Claims Attack on Australia’s Access Equipment Hire
DragonForce claims it targeted Australian equipment provider Access Equipment Hire. The monitoring post says the attack caused disruption, but provides no independent confirmation.
Qilin Claims Ransomware Incident at Carolina Agri-Power
A ransomware.live monitoring post attributes a claim targeting Carolina Agri-Power to Qilin. The group’s claims of operational disruption and encrypted data are unconfirmed.
Qilin Claims Attack on Italian Telecom Firm Retelit SpA PIVA
Ransomware.live lists Retelit SpA PIVA in Italy as a Qilin victim. The post alleges encryption and operational disruption but says the group’s claims are unconfirmed.
Qilin Claims Ransomware Attack on Century Equities
Qilin claimed a ransomware attack on US financial services firm Century Equities. The monitoring post cites the group's leak site, but says the claim and reported disruption are unconfirmed.
LockBit5 Claims Hotel Bourse in France as a Ransomware Victim
ransomware[.]live reports that LockBit5 listed Hotel Bourse in France as a ransomware victim. The claim says systems or services were encrypted or disrupted, but the article says it cannot confirm the information.
Lockbit5 Claims Attack on JS Hotels
Lockbit5 claims it compromised JS Hotels, associated with jshotels[.]com, and encrypted or exfiltrated data. The claim is unconfirmed and attributed to the group’s leak-site post.
cmdorganization Claims Breach and Disruption at Golden Star Resources’ Wassa Mine
A ransomware claim monitored on July 11, 2026, attributes an alleged breach and disruption of Wassa mine operations in Ghana to cmdorganization. The claim is unconfirmed.
LockBit5 Claims Attack on German Company Gies Dienstleistungen
Ransomware.live reports that LockBit5 claimed an attack on German building-services company Gies Dienstleistungen GmbH, which it says has 19 locations. The publisher says the claim is unconfirmed.
LockBit 5 Claims Breach of Magna Dominicana
LockBit 5 claims it breached Magna Dominicana and impacted systems and data in the Dominican Republic. The report attributes the claim to the group’s leak-site post; the information is unconfirmed.
LockBit5 Claims Ransomware Attack on Bancroft Engineering
Ransomware[.]live lists an unverified LockBit5 ransomware claim against UK-based Bancroft Engineering (bancrofteng[.]com); the post says operations were affected, but offers no independent confirmation.
Deadlock Claims Ransomware Incident at Mexico’s Grupo Vanguardia
Ransomware[.]live lists Mexico’s Grupo Vanguardia in connection with a Deadlock ransomware claim. The post reports disruption and encryption but says the group’s claims are unconfirmed.
Deadlock Claims Data Theft from WiBeats S.r.l. in Italy
Deadlock claims it stole data from Italian company WiBeats S.r.l., including more than 150 GB from an internal email datastore. The post says the claim is unconfirmed.
Deadlock Claims Schlenker and Cantwell, P.A. as a Victim
Ransomware.live reports that Deadlock claimed Schlenker and Cantwell, P.A., a U.S. accounting firm, as a victim on July 10, 2026. The post says the claim is unverified; no compromise details are confirmed.
Deadlock Claims Attack on Argentina’s LA SEVILLANITA SRL
A ransomware.live monitoring post attributes to Deadlock an unconfirmed claim targeting Argentina’s LA SEVILLANITA SRL and alleging disruption to its operations.
dragonforce Claim Names The Schuett Companies as Ransomware Victim
dragonforce reportedly claimed The Schuett Companies as a ransomware victim; ransomware.live says the claim is unconfirmed. The company manages about 1,600 housing units and provides home health care in three states.
Deadlock Claims Data Theft at Morton Grove Park District
Deadlock claims it compromised the Morton Grove Park District and exposed more than 50 GB of sensitive data. The claim reportedly includes employee, client and supplier information, as well as financial and internal policy documents; it is unconfirmed.