Monitors ransomware victims, threat groups, leak-site activity, and newly disclosed ransomware incidents.
2817 articles
Ransomware.live lists Taiwan Sintong Machinery Co., Ltd. as a Qilin ransomware victim, citing a group leak-site post published June 21, 2026. The claim is unverified; no official statement is provided.
The post reports an unverified Stormous claim naming jaggroup[.]com and alleging a full data dump that included credentials, Dynamics GP data, financial reports and system files.
Incransom claims it accessed jktornel’s confidential files, including client data, proprietary R&D, and financial documents. The claim was listed on the group’s disclosure site and is unconfirmed.
Nightspire claimed it deployed ransomware targeting US-based Artistic Smiles. The post says data was unavailable and notes that the claim could not be confirmed.
Nova claims it encrypted files and stole data from Bangladeshi software company Lockers IT, offering data samples and a sample decryption after contact. The claim is unconfirmed.
Nova claims it stole data from HOSAB, an industrial zone in Bursa, and says it can provide file-tree and data samples. The claim is unconfirmed.
A ransomware[.]live monitoring entry attributes a ransomware claim against DOSAB to actor nova. The group allegedly exfiltrated data and offered a tree and samples; the post says the claim is unconfirmed.
Nova claims it encrypted data belonging to a Vietnamese real-estate listing platform and says stolen-data samples were provided. The claim, listed June 21, 2026, is unconfirmed.
RansomExx claimed to have released Go2Joy’s complete database. ransomware.live lists the claim for Vietnam; the information is unconfirmed.
Payload’s leak site reportedly names Preferred Properties, an Ohio housing developer and property manager, as a ransomware victim. The claim is unconfirmed and was monitored by ransomware.live.
Ransomware.live lists Qualiflex Solutions as a victim claimed by Payload, citing the group’s leak-site post. The alleged targeting is unverified, and the article provides no independently confirmed impact details.
The ransomware group payload claimed an incident involving Brazilian music publisher Editora Irmãos Vitale. The monitoring post alleges operational disruption, but the claim is unconfirmed.
Ransomware.live lists Swiss insurance broker ENB Versicherungen in a claim attributed to Payload, which says operations were impacted. The claim was published June 20, 2026, and is unconfirmed.
Ransomware.live reports that Incransom claimed to target Newspaper Media Group; possible disruption to its newspapers and magazines is alleged. The article says the claim is unconfirmed.
Ransomware.live lists Brazilian manufacturer Super Finishing as a WorldLeaks victim. The claim, including reported effects on systems and operations, is based on the group’s public claims and is unconfirmed.
WorldLeaks listed L’Archevque & Rivest Ltée in a leak-site claim, according to ransomware.live. The post says the claim is unconfirmed; it provides no independently verified incident details.
Ransomware.live lists U.S. manufacturer Pacific Lamp & Supply as a Qilin ransomware claim published June 20, 2026. The post says the claim is unconfirmed.
A ransomware.live post attributes an unconfirmed claim to LockBit5, alleging it targeted Brazilian automotive parts distributor 5deagosto[.]com[.]br and disrupted integrated solutions and services.
LockBit5 claims Eternal Beauty Holdings Limited, a Hong Kong-based perfume group, as a ransomware victim. The claim is unverified; ransomware[.]live says it is monitoring the record.
A ransomware claim attributed to cmdorganization alleges an incident affecting Pinnacle Re-Tec and disruption to its operations and services. The report says the claim is unconfirmed and was monitored on June 20, 2026.
LockBit5 reportedly claimed an attack on Probat Bau AG, with alleged encryption or data exfiltration affecting its probat[.]ag environment. The claim is unconfirmed; ransomware.live says it is based on the group's public claims.
Ransomware.live records an unverified Qilin claim targeting the Commune d’Eyguires in France. The post says systems were encrypted or disrupted, but provides no independent confirmation.
Ransomware.live reports that the actor nova claimed to have stolen customer data from Jacksonville-based Desert Micro, including invoices, payment information, databases, and backups. The claim is unverified.
The Qilin ransomware group claimed an attack on Ireland-based PJ Daly Contracting. The monitoring post says files were encrypted and operations disrupted, but the claim has not been independently confirmed.
