Settra Claims Orion4value.com Documents Were Encrypted
A ransomware.live record attributes to Settra a claim that documents, including financial reports, belonging to Orion4value[.]com in Germany were encrypted. The claim is unconfirmed.
Ransom Monitor
Monitors ransomware victims, threat groups, leak-site activity, and newly disclosed ransomware incidents.
2815 articles
Settra Claims Access to Petra Diamonds Documents
Settra claims it accessed Petra Diamonds Limited documents, including an employee directory. The monitoring post says the claim is unconfirmed.
Settra Claims Ransomware Attack on Ilex Paysages et Urbanisme
Ransomware.live reports that Settra listed Ilex Paysages et Urbanisme (ilex-paysages[.]com) in a ransomware claim, alleging attempted encryption and extortion involving its landscape archive and stored secrets. The publisher says it cannot confirm the claims.
Settra Claims Extortion of owensborograin.com
A claim attributed to Settra says owensborograin.com was targeted and faced an extortion demand. The monitoring post says the claim is unconfirmed; its text includes a fragment about IRS-filed tax returns and a truncated threat.
Akira Claims 31 GB of Advanced Business Systems Data
Akira claims it will upload 31 GB of Advanced Business Systems data, including employee information and business and customer documents. The claim is unconfirmed and monitored by ransomware[.]live.
cmdorganization Claims Port Angeles Composite as Ransomware Victim
Ransomware.live lists Port Angeles Composite, a U.S. aerospace composite supplier, as a victim claimed by cmdorganization on June 30, 2026. The claim is unverified; no independent incident details are provided.
Unsafe Claims Ransomware Attack on straightperformance.de
The ransomware group unsafe claims it targeted straightperformance.de and says operations and data availability were affected. ransomware.live monitored the listing; the claims are unconfirmed.
Qilin Claims Ransomware Attack on Musashino University
A ransomware.live monitoring post records Qilin’s unverified claim targeting Musashino University in Japan. The article says the claim cannot be independently confirmed.
Qilin claims ransomware attack on Kunert Fashion in Germany
Qilin claims it targeted German manufacturer Kunert Fashion with ransomware and demanded payment. The monitoring post says the claim is unconfirmed.
ThreeAM Claims Ransomware Attack on Guardian Barrier Services
Ransomware.live lists Guardian Barrier Services as a victim claimed by the threeam group; the post alleges ransomware deployment and disruption to event infrastructure operations. The claim and impact are unconfirmed.
Qilin Claim Targets Lam Soon in Thailand
Ransomware.live records an unconfirmed Qilin claim targeting Lam Soon in Thailand. The post alleges operational and system/data access disruption, but the article provides no independent confirmation.
Anubis Claims Boston Orthotics & Prosthetics as a Victim
ransomware.live lists Boston Orthotics & Prosthetics as an Anubis target and describes a patient-data breach claim. The post says the group’s claim is unconfirmed.
Anubis Claim Names ESMS Global Limited in Ransomware Listing
A ransomware-monitoring post records an Anubis claim naming UK medical information services firm ESMS Global Limited. The post says the claim is unconfirmed and provides no independently verified incident details.
Stormous Claims ESHA Research Breach and Theft of Product Data
Stormous claims it breached ESHA Research/ESHA Cloud Services and stole product-development, intellectual-property, laboratory, and consumer data. The monitoring post says the group’s claims are unconfirmed.
Stormous Claims Access to EOGB Systems and Exfiltration of Business Documents
Stormous allegedly claimed access to eogb[.]co[.]uk systems and exfiltration of financial, legal, and operational documents. The monitoring post says the claims are unconfirmed.
cmdorganization Claims Ransomware Activity Against METCO Services and Metco Southeast
ransomware.live records a ransomware claim by cmdorganization against METCO Services and Metco Southeast. The post alleges operational disruption, but says the claims have not been independently confirmed.
Stormous Claims HIGUCHI USA, Inc. as a Ransomware Victim
A ransomware.live monitoring record attributes a claim against HIGUCHI USA, Inc. to Stormous. The group allegedly exposed Sage 50 backups and financial and inventory records; the post says the claims are unconfirmed.
Stormous Claims Ransomware Activity Against Higuchi Inc. in Japan
Ransomware.live reports that Stormous claimed an attack on Japan’s higuchi-inc[.]co[.]jp, alleging access to financial statements, Sage 50 backups and operational data; the claims are unverified.
Blackfield Claims Ransomware Attack on Taiwan’s CCIC
Ransomware.live lists Nidec Chaun-Choung Technology Corporation (CCIC) in Taiwan as a Blackfield ransomware-claim victim, alleging operational and data-availability impact. The post says the claim is unconfirmed.
Kazu Claims to Have Stolen 307,133 Patient Records From Canadian Clinics
Actor Kazu allegedly claims to have stolen personal data for 307,133 patients at WELL Health Kensington Medical Centres and demands $70,000 by July 12, 2026, threatening a public sale. The claim is unverified.
Qilin Claims Ransomware Attack on NASCO
Ransomware.live lists NASCO, a U.S. agriculture and food production organization, as a Qilin ransomware victim and reports disruption to system and data access; the post says the group’s claims are unconfirmed.
Qilin Claims Axionlog in the Czech Republic as a Ransomware Victim
A ransomware.live monitoring post attributes a ransomware claim targeting Axionlog in the Czech Republic to Qilin. The post says the group’s claim is unconfirmed.
Payload Claims Ransomware Attack on Villea Hotels in AttanaHo
Ransomware.live reports that Payload claimed an attack on Villea Hotels in AttanaHo, alleging file encryption and operational disruption. The post says the claims could not be confirmed.
Play Ransomware Group Claims J&J Gaming as a Target
Ransomware.live reports that the Play ransomware group claims to have targeted J&J Gaming in the U.S.; the post says it cannot verify the claim.