NightSpire Claims Ransomware Attack on Basatamfi in Egypt
A ransomware-monitoring post reports that NightSpire claimed an attack on Basatamfi in Egypt. The claim is unconfirmed, and data is not available.
Ransom Monitor
Monitors ransomware victims, threat groups, leak-site activity, and newly disclosed ransomware incidents.
2828 articles
Play ransomware group claims MyPillow as victim
Ransomware.live reports that the Play ransomware group claimed MyPillow as a victim; the post alleges malicious code disrupted access to files and systems, but the claim is unconfirmed.
Incransom Lists PILLER AIMMCO in an Unconfirmed Ransomware Claim
Ransomware.live reports that incransom listed Washington-based manufacturer PILLER AIMMCO on May 25, 2026, claiming manufacturing operations were impacted. The post says the claim is unconfirmed.
Play Ransomware Group Claims Attack on Legend Networking & Telecom
A ransomware.live monitoring post attributes a claim targeting U.S. telecommunications company Legend Networking & Telecom to the Play ransomware group. The claim is unconfirmed.
Play Ransomware Claim Names Round Hill Country Club
A ransomware.live monitoring post attributes an unconfirmed ransomware claim involving Round Hill Country Club to Play; it says systems may have been encrypted and data disrupted.
Play ransomware group claims it targeted NL Fisher
Ransomware[.]live monitored an unverified Play ransomware-group claim that it targeted NL Fisher, a Netherlands-based agriculture and food production organization, with alleged data encryption and operational disruption.
DragonForce Claims Ransomware Attack on Xchange Technology Rentals
Ransomware.live recorded a DragonForce claim targeting Xchange Technology Rentals in Germany on May 25, 2026. The group allegedly said the incident disrupted services; the claim is unconfirmed.
DragonForce Claims Alliance Adjustment Group as Ransomware Victim
Ransomware.live lists Alliance Adjustment Group as a DragonForce ransomware claim, alleging operational impact. The post says the claim is unconfirmed; the organization serves Pennsylvania and New Jersey.
Rhysida Claims IDS Group Was Targeted in May 2026
Ransomware.live lists IDS Group as a Rhysida claim published May 25, 2026, alleging unauthorized access and data compromise. The post says the claim is unconfirmed.
DragonForce Claims JAKN Network Support & Services as a Ransomware Victim
Ransomware.live reports that DragonForce listed JAKN Network Support & Services LLC (jakn[.]com) on May 25, 2026. The record is based on the group's public claim, which has not been independently confirmed.
DragonForce Claims EpB Insurance in Ransomware Listing
A ransomware.live record attributes a claim involving epbinsurance[.]com to DragonForce. The article says the claim is based on the group's public statements and cannot be independently confirmed.
DragonForce Claims Ransomware Incident Targeted Rolser in Spain
Ransomware.live lists a DragonForce claim targeting Rolser in Spain and alleges business disruption. The post says the information is unconfirmed and includes no official statement from the company.
Qilin Claims Ransomware Attack on Global Retool Group
Ransomware[.]live listed Global Retool Group, a UK business-services organization, as a Qilin ransomware claim on May 24, 2026. The post cites a Qilin leak-site listing; the claim is unconfirmed.
Qilin Claims Attack on Czech Financial Services Firm ExpoCredit
A ransomware.live monitoring record attributes an attack claim against Czech financial-services firm ExpoCredit to Qilin. The post says files were encrypted and operations disrupted, but notes these details are based on the group's unconfirmed claims.
Incransom Claims It Stole 1TB of Data from MEIRC Training and Consulting
Incransom claims it accessed MEIRC Training and Consulting’s UAE network and downloaded about 1TB of data, including employee information. The post says publication was expected within a week; the claim is unconfirmed.
Qilin Claims Ransomware Attack on Branded Products in Australia
Ransomware.live reports that Qilin claimed to target Branded Products in Australia and encrypt files, with a ransom demand. The post says the group's claims could not be confirmed.
Qilin Claims Sponseller Group as a Ransomware Victim
Ransomware.live reports that Qilin listed US-based Sponseller Group as a victim on May 24, 2026. The post is based on the group’s claim, which the article says it cannot confirm.
Nova Claims Ransomware Attack on Brazil’s SECONT
Ransomware.live reports that Nova claims to have accessed SECONT in Brazil and provided a data tree and samples as proof. The claim is unconfirmed.
Nova Claims Adensa Teknoloji Compromised in May 2026
Nova claims it compromised Turkish software firm Adensa Teknoloji and lists adensa[.]tech, bringstdu[.]de, and simkaelektronik[.]ch. The record cites Nova’s leak site; the post says the claim is unconfirmed.
Qilin Claims P & G Trading as a Ransomware Victim
Ransomware.live listed P & G Trading as targeted by Qilin, citing a Qilin leak-site post dated May 24, 2026. The claim is unconfirmed, and no incident details are provided.
Qilin Claims Ransomware Attack on Alpert Slobin & Rubenstein
Ransomware.live lists Alpert Slobin & Rubenstein as the subject of a Qilin ransomware claim, citing the group’s leak-site post. The claim is unconfirmed, and no victim statement or incident details are provided.
Qilin Claims Ransomware Attack on New Zealand’s Alpha Group Holdings
A ransomware.live monitoring post attributes a ransomware attack on New Zealand’s Alpha Group Holdings to Qilin. The post says the information comes from the group’s public claim and is unconfirmed.
thegentlemen Claims Ransomware Impact on Le Perreux-sur-Marne Portal
A ransomware.live monitoring post attributes a claim about Le Perreux-sur-Marne’s municipal portal to thegentlemen and says resident e-services were disrupted. The claim is unconfirmed.
TheGentlemen Claims Attack on Seeley Office Systems
Ransomware[.]live reports that the thegentlemen group claimed to target Seeley Office Systems. The claim is unconfirmed, and the post gives conflicting location details: Australia in the incident description and Glens Falls, New York, in the company background.