Monitors ransomware victims, threat groups, leak-site activity, and newly disclosed ransomware incidents.
2821 articles
A ransomware[.]live monitoring record attributes an unconfirmed ransomware claim against Wiese USA to the Termite actor, citing a post on the actor’s leak site. The record says the claim was published June 5, 2026.
RansomHouse claims it targeted Ma Pak Leung Company Limited in Hong Kong and disrupted regional operations. The claim is attributed to the group's leak site and monitored by ransomware[.]live; the article says it cannot be independently confirmed.
Ransomware.live lists Australian education provider Kinetic Education in a Qilin claim alleging file encryption and disruption to critical systems; the article says the claim is unconfirmed.
A ransomware.live monitoring post attributes an unconfirmed targeting claim against India-based Aegle Aviation to ransomhouse; it says aircraft disassembly and component-harvesting operations were reportedly affected.
A ransomware[.]live monitoring record attributes a claim to NightSpire naming US manufacturer Unique Litho, Inc. The post says data details are unavailable and the claim is unconfirmed.
Ransomware.live records a Qilin ransomware claim naming Opera Comique in France on June 8, 2026. The post alleges data encryption and a ransom demand, but says the group’s claims are unconfirmed.
Ransomware.live reported a Qilin claim naming Isuzu Motors in Thailand. The post says the group claimed encryption, extortion, and operational disruption, but the claims are unconfirmed.
A ransomware.live monitoring post attributes an unconfirmed ransomware claim involving GRIP Outreach For Youth to Nightspire. The post says the claim concerns financial, employee, youth participant, and governance records.
A ransomware.live monitoring post attributes to Akira a claim that HRC Sicherheitsdienste was hit and about 24 GB of data was exfiltrated. The post says the claim is unconfirmed.
A ransomware.live record attributes to Qilin a claim targeting the Shipping Association of NY and NJ, with alleged data encryption and operational disruption. The post says the claims are unconfirmed.
Ransomware.live reports an unverified ransomware claim by thegentlemen against Thailand-based wood manufacturer Metroply. The post attributes claims of operational disruption and data encryption to the group.
Ransomware.live lists Central Arkansas Pediatrics of Conway, Arkansas, as a victim claimed by thegentlemen on June 8, 2026. Reported impacts to operations and online resources remain unconfirmed.
A ransomware.live monitoring post attributes a ransomware claim against IP Rings Ltd. to TheGentlemen. The group reportedly claims encryption and operational disruption; the post says these claims are unconfirmed.
Ransomware.live lists Villea Hotels in AttanaHotels as a victim claimed by Payload, citing the actor’s post. The claim is unconfirmed.
Payload's leak site claims Hansoll Textile in Vietnam was targeted and its operations disrupted. The claim is unconfirmed.
Ransomware.live reports that the actor “payload” claimed Plaza Lama, a Dominican Republic retailer, as a victim and allegedly compromised its systems. The claim is unconfirmed.
A ransomware.live monitoring post attributes a ransomware claim involving UK-based Pearson Ford to the Play group. The post says the group claimed disruption and a payment demand but cannot confirm the claim.
BlackWater claims it targeted www[.]utourworld[.]com and says confidential data will be published soon. Ransomware.live lists the claim, which the article says is unconfirmed.
Ransomware.live lists an unconfirmed Incransom ransomware claim against Persona Dental (kelmreuter[.]com), citing the actor’s disclosure page. The post alleges service disruption; it provides no independent confirmation.
A ransomware.live record attributes a stolen-data claim involving Indonesia’s Universitas Nasional to Nova. The group reportedly offered file samples if contacted through the university’s support channel; the claim is unconfirmed.
A ransomware.live monitoring post says worldleaks listed US dental provider Access Dental on its leak site. The claim is unconfirmed; the post offers to share any official response from the company.
Akira claims it will upload 10 GB of Oaks Park data, allegedly including employee and payment information, contracts and NDAs. The claim is unconfirmed; the article gives conflicting location details.
A ransomware.live record attributes a claim targeting Cambridge Mobile Telematics to CoinbaseCartel. The article says the claim is unconfirmed; it does not establish that systems were compromised or disrupted.
A ransomware.live monitoring record attributes an unconfirmed ransomware claim against obrieneng[.]com to incransom. It lists the victim’s sector as construction and references a confidential NDA contract; the claim is not independently confirmed.
