Monitors ransomware victims, threat groups, leak-site activity, and newly disclosed ransomware incidents.
2821 articles
A ransomware.live monitoring entry attributes to shinyhunters an unverified claim that American Tower data, including over 5.2 million records and tower access codes, was exposed. The group set a 15 June 2026 contact deadline.
ShinyHunters claims it exposed hundreds of thousands of records from JCPenney and affiliated companies, including personal and tax data. The group issued a final extortion warning; the claims are unconfirmed.
ShinyHunters claims it compromised more than 26 million records containing customer PII and internal corporate data at Madison Square Garden Sports Corp. The group threatened to leak data unless contacted by June 15, 2026; the claim is unconfirmed.
A ransomware.live monitoring post attributes a public claim to nightspire naming Italy-based Pattono S.r.l.; encryption and business disruption are described as suspected and remain unconfirmed.
Ransomware.live lists CCS GLOBAL TECH as a bravox ransomware-claim victim. The group’s claim alleges service disruption and encrypted data; the article says it cannot confirm the information.
Ransomware[.]live lists The Vant Group as a victim claimed by the ransomware group insomnia. The record cites an onion source and says the claim is unconfirmed.
A ransomware.live monitoring post names Cyprus-based Jewelex as a Direwolf ransomware target and alleges operational disruption. The post says the group's claim is unconfirmed.
Ransomware.live lists an unverified m3rx claim that fasadeconsult[.]no in Norway had 84 GB across 390,000 files stolen; the post says the claim could not be independently confirmed.
A ransomware.live monitoring post attributes a claim to m3rx alleging data theft from W.S. Werkstoff Service GmbH in Germany: 1.82 TB across 1,719,610 files. The company’s incident is unconfirmed.
A ransomware.live monitoring post attributes a claim to m3rx concerning HB Consultants (hbexperts-conseils[.]ca). The group reportedly claims 105 GB of data across 68,000 files were stolen; the claim is unconfirmed.
The m3rx ransomware group reportedly claimed SuppCenter Global’s systems were compromised; ransomware.live lists suppcenter[.]global and suppcentersa[.]com in Argentina. The post says the claim is unverified.
A ransomware.live post attributes a claim to m3rx that 2.33 TB across 1,612,094 files was stolen from Marin/Goodman LLP. The post says the claim is unconfirmed.
Ransomware.live lists Signazon_USA as targeted by the incransom group, citing the group's leak-site disclosure. The post claims access to printing and order-production systems was impacted; the claim is unconfirmed.
A ransomware.live record attributes a claim listing Astec Valves & Fittings Pvt to DragonForce on June 11, 2026. The information is unconfirmed; no compromise or data theft is independently established.
A ransomware.live post attributes a claim that DragonForce targeted Hong Kong Parkview to the group’s blog. The post says the claim is unconfirmed.
Ransomware.live lists a Lynx claim naming CommonWealth Partners Properties. The post says the claim is unconfirmed; its assertion of service disruption is not independently verified.
ransomware.live records Qilin’s unverified claim that Bekman Marder Hopper Malarkey & Perlin was targeted in Maryland; the article says the claim could not be confirmed.
A ransomware claim attributed to Qilin names US-based Efficient Home. The article says the claim involved system disruption and access to encrypted data, but notes the information is based on the group’s public claims and is unconfirmed.
Ransomware.live reported a Qilin claim naming German organization Plaxen & Adler on June 10, 2026. The post says the claim is unverified and offers to share an official statement from the organization.
A Ransomware.live entry attributes a ransomware claim against AltaVista Strategic Partners in Mexico to Qilin. The post alleges disruption and encrypted data, but the claims are unconfirmed.
A Qilin leak-site listing reportedly names Iliff as a ransomware victim. The claim, monitored by ransomware.live, is unconfirmed; the article provides no independent evidence of compromise or impact.
Ransomware.live lists Miller & Zois, a US business-services organization, as targeted by Qilin; the post says it is based on the group’s public claim and is unconfirmed.
Ransomware.live lists PatayaFood, a Thai food manufacturer, as a victim claimed by lamashtu on June 10, 2026. The post alleges impacts to production and supporting operations; the claim is unconfirmed.
Akira claims it targeted The Midland Theatre and plans to publish corporate data, including employee, financial, client and guest information. The monitoring post says the claim is unconfirmed and lists GB, while also describing the venue in Newark, Ohio.
