Monitors ransomware victims, threat groups, leak-site activity, and newly disclosed ransomware incidents.
2813 articles
A monitoring record attributes a ransomware claim against UAE-based Inter Power Engineering to Qilin. The claim is unconfirmed, and the article says it cannot verify the group's information.
A ransomware.live monitoring post attributes a ransomware claim against Sun Dolphin Boats to Qilin. The post says encryption and business disruption occurred but states the group’s claims are unconfirmed.
ransomware[.]live reports Qilin’s claim that it targeted Belgian technology company Sintax, allegedly encrypting files and disrupting operations. The claim is unconfirmed.
A ransomware.live record attributes a claim about bergdemo[.]com in Germany to settra and names Berg / Crushing Corporation of America. The post says the claim is unconfirmed.
A ransomware.live monitoring post attributes to CRPxO a claim that 37 GB of data was leaked from AMHWA Biopharm Co., Ltd. in China. The post says the claim is unconfirmed.
A ransomware.live monitoring post attributes to CRPxO a claim that Creative Smiles Pediatric Dentistry in the US was targeted and that 2.5 GB of data was leaked. The post says the claims are unconfirmed.
A ransomware[.]live monitoring post says the pear group listed Tostrud & Temp, S.C., a La Crosse CPA firm, as a US victim. The post says the claim is unconfirmed; it provides no independent confirmation of compromise.
Nightspire reportedly claimed an attack on PCCC Realty LLC in the US. The post says details about stolen or encrypted data are unavailable and notes the claim has not been independently confirmed.
Akira reportedly claims Wade’s Dairy data will be released, potentially including employee personal information, financial records, customer data, projects and contracts. The claim is unconfirmed; the article gives conflicting location context.
Akira listed Todd, Hamaker & Johnson, LLP on its leak site and claims it obtained about 40 GB of company and client data. Monitoring firms documented the listing; the firm did not respond to a request for comment.
Ransomware[.]live lists Shelby Manufacturing de México as a Krybit target and reports alleged manufacturing disruption. The post attributes the claim to Krybit and says it is unconfirmed.
Ransomware.live reports that Krybit claimed an attack on Shanghai Xuerong Biotechnology (xuerong[.]com), with the claim linked to the actor's blog. The post says the claim is unconfirmed.
Ransomware.live records a Qilin claim that S.J. Louis in Brazil was affected. The post alleges file encryption and operational disruption, but the claims are unconfirmed.
Ransomware.live reports that spacebears claims access to Biessse employee and client personal information, financial documents, and an SQL database. The claim is unconfirmed.
Ransomware.live attributes an unconfirmed breach claim to Chaos, alleging access to CorePharma[.]com’s internal network, operational archive, and regulatory/compliance information.
Ransomware group Chaos claims it breached Opportune LLP and obtained its internal data environment. The claim is unconfirmed; ransomware.live attributes it to a group post.
A ransomware.live monitoring post attributes a claim naming Kosmos to thegentlemen. The post says the claim is unconfirmed; it provides no incident details or evidence of compromise.
Ransomware.live monitoring attributes a ransomware claim against Keifert GmbH in Germany to thegentlemen. The post says operations were affected but states the claim has not been independently confirmed.
Thegentlemen claims it targeted the RATP Works Council platform and disrupted access to employee benefits and social and cultural services. The post says the claims are unconfirmed.
Ransomware.live monitored a public claim by thegentlemen naming Oman-based Arabia Falcon Insurance Company SAOG as a victim. The post says the claim’s accuracy is unconfirmed.
A ransomware.live monitoring record attributes a claim targeting hiddeenn to thegentlemen. The post says the claim is unconfirmed; it gives no sector or impact details.
Ransomware.live reports that thegentlemen claimed Spedidam as a victim. The post says the claim is unconfirmed and offers to share any official statement from the organization.
A ransomware claim naming Malaysia’s Quanterm Logistics Sdn Bhd and thegentlemen was monitored by ransomware[.]live. The post attributes the information to public group claims and says it cannot confirm their accuracy.
A ransomware.live monitoring record attributes an unconfirmed claim naming the Virginia Historical Society to thegentlemen. The article provides no details of the alleged incident.
