Monitors ransomware victims, threat groups, leak-site activity, and newly disclosed ransomware incidents.
2810 articles
Deadlock claims it stole 650GB of sensitive data from Hungarian contractor Weinberg ’93 Építő Kft., including commercial, production and financial records. The post says the claim is unconfirmed.
Ransomware[.]live records Deadlock’s unconfirmed claim that it targeted Catcorp. The post alleges business-system encryption and disruption but says the claims have not been independently confirmed.
A ransomware.live monitoring record attributes a claim against UAE-based Navana Real Estate to Qilin. The post says the information is unconfirmed; no official statement from the company is included.
Interlock claims it compromised Borger ISD and is offering 330 GB of data allegedly stolen from the district. The monitoring post says the claim is unconfirmed.
Ransomware.live lists Eurodefi in Morocco as a Qilin ransomware victim, based on the group’s public claim. The post alleges file encryption and operational disruption; these claims are unconfirmed.
Ransomware.live lists Promotora Zacapu, an agriculture and food production organization in Mexico, in a Qilin ransomware claim dated July 10, 2026. The post says the claim is unconfirmed.
A ransomware.live monitoring post attributes a ransomware claim targeting Hilo in Colombia to Qilin. The group reportedly claimed file encryption and demanded a ransom; the post says the claims are unconfirmed.
Akira claims it exfiltrated about 40GB of Vandalia Rental data, including employee and client personal information, financial records, project files, and contracts. The claim is unconfirmed.
Blackwater alleges it compromised txdkj[.]com in China, exfiltrated sensitive data and plans to release it soon. ransomware[.]live says it cannot confirm the claim.
A ransomware claim attributed to the actor “payload” names Austrian manufacturer Roofinox and alleges potential disruption to operations and production. The claim is unconfirmed.
Hospital Di Camp was listed by Doommageddon as an upcoming ransomware claim. The monitoring post reports no encrypted files or data size and says the group’s claims are unconfirmed.
A ransomware.live monitoring post attributes an unverified data-theft claim involving Hynet, a UK technology company, to nova. The post says nova provided the company with a tree and samples of allegedly stolen data.
A ransomware.live-monitored post attributes a ransomware attack on Spain’s New Tiles S.L. to gunra. The post says files were encrypted and operations disrupted, but notes the claims are unconfirmed.
AiLock allegedly claimed a ransomware incident affecting Pinturas Prisa, a manufacturer in Jalisco, Mexico. The monitoring post says the claim concerns operational impact and system access but notes it cannot confirm the information.
A ransomware.live monitoring post lists US business-services firm Hum & Jacoby as targeted by Qilin, citing the group's public claim. The post says the claim is unconfirmed.
A ransomware.live record says Qilin claimed Alan F Burke in the US as a victim on July 9, 2026. The post alleges files were encrypted or inaccessible and operations disrupted; the claim is unconfirmed.
Ransomware.live reports that Qilin claimed an attack on Bronken’s Dist, alleging file encryption and disrupted data availability. The post says the claims are unconfirmed.
Settra claims it targeted gvfsinc[.]com in connection with a self-lease payment scheme involving a California agricultural distributor. The post says the claim is unconfirmed.
Ransomware.live lists Finance Yorkshire as a victim claimed by cmdorganization on July 9, 2026. The post says operations and services were disrupted, but the claim is unconfirmed and no victim statement is reported.
A ransomware.live monitoring record attributes a ransomware claim against iac-intl.com to BrainCipher. Disruption and encryption are alleged; the publisher says it cannot confirm the claim.
A ransomware.live monitoring entry attributes a claim targeting Rob Roy Industries to BrainCipher and says operations were affected. The claim is unconfirmed.
Ransomware[.]live reports that MoneyMessage claimed an incident involving Illinois nonprofit Envision Unlimited. The post says it cannot confirm the claim; the alleged effects on systems and operations are not independently supported.
Ransomware group Settra claims it exfiltrated internal documents, including full credit reports with sensitive data, from UK law firm WT Law LLP. The monitoring post says the claim is unconfirmed.
Payload claims the Commune of Castries was attacked, affecting castries[.]fr and its municipal-services portal. The claim is attributed to the group's leak site and monitored by ransomware[.]live; it is unconfirmed.
