Lamashtu Claims Ransomware Attack on ROTH-TECHNIK AUSTRIA
A post attributed to ransomware group lamashtu alleges an attack on ROTH-TECHNIK AUSTRIA and claims its operations were disrupted. The article says the claim is unconfirmed.
Ransom Monitor
Monitors ransomware victims, threat groups, leak-site activity, and newly disclosed ransomware incidents.
2830 articles
Payload Claims Ransomware Incident at Singapore Law Firm Elohim Law Corporation
A ransomware claim attributed to the “payload” actor names Singapore law firm Elohim Law Corporation. The monitoring post says the information is based on public claims and has not been independently confirmed.
Payload Claims Tang Seng Nitrogen & Pump Systems as a Victim
Ransomware.live records a Payload claim naming Singapore-based Tang Seng Nitrogen & Pump Systems Pte. Ltd. The claim is unconfirmed; the post says it is based on the group’s public claims.
Nightspire Claims Ransomware Attack on Vantage Energy LLC
A monitoring record attributes an unverified ransomware claim involving Vantage Energy LLC to Nightspire. Details of any affected or stolen data are unavailable.
Safepay Claims Attack on adlan.com in Canada
Safepay claimed it targeted Canadian company adlan.com and disrupted its IT infrastructure. The claim was listed on the group’s blog and monitored by ransomware.live; the article says it could not confirm the information.
Nova Claims Data Theft and Extortion Against Asian Lite International
Nova claims it exfiltrated data from Asian Lite International and requested a “tree” and samples after the company contacted its support team. The article says the claim is unconfirmed.
Nova Claims Data Theft at Nordfjord Hotell
A ransomware.live post attributes an unverified data-theft claim involving Nordfjord Hotell in Norway to Nova. The post says the group offered data samples through the hotel's support channel.
SafePay Claims Ashley Timber as a Ransomware Victim
SafePay claims ashleytimber[.]co[.]uk, a UK construction company, as a ransomware victim. ransomware.live records the claim on May 18, 2026, and says it cannot confirm its accuracy.
Safepay Claims Disruption to MediaFrance’s Business Model
Safepay alleges its ransomware claim against mediafrance[.]de involved disruption to the French media company’s business model. The claim was published May 18, 2026, and remains unconfirmed.
SafePay Claims German Dermatology Clinic as Ransomware Victim
SafePay's leak site reportedly listed hautarzt-budihardja[.]de, a German dermatology clinic. The monitoring post says the group's claim is unconfirmed.
SafePay Claims Printroom.co.uk as a Ransomware Victim
SafePay reportedly listed printroom[.]co[.]uk, a UK print agency, in a ransomware claim dated May 18, 2026. The post alleges disruption and data impact, but the article says the claims are unconfirmed.
Safepay Claims Ransomware Attack Targeting harrisoncountywv.com
Safepay allegedly claimed an attack on harrisoncountywv[.]com, with disruption to county Commission operations reported. The monitoring post attributes the claim to the group; the information is unconfirmed.
Akira Claims It Stole 40 GB of Data from Vacu-Lug
Akira allegedly stole about 40 GB of Vacu-Lug corporate data and threatens to publish it. The claim, involving employee and business records, is unconfirmed.
Akira Claims Healthtrax Fitness Data, Says 10 GB Will Be Uploaded
Akira reportedly claims it will upload 10 GB of Healthtrax Fitness & Wellness data, including personal and confidential records. The claim is unconfirmed.
SafePay Claims Berlinmobil.de as a Ransomware Victim
Ransomware.live lists Berlinmobil[.]de, a German transportation company, as a SafePay ransomware claim; the post says the claim is unconfirmed.
AiLock Claim Links Jazz Hipster to Ransomware Incident
Ransomware[.]live lists Jazz Hipster, a US speaker manufacturer, in an unverified ransomware claim attributed to AiLock. The post says operations and data access were disrupted, but provides no independent confirmation.
Qilin Claims Attack on Musée du Bas-Saint-Laurent
A ransomware.live monitoring post attributes an unverified ransomware claim against Musée du Bas-Saint-Laurent in Canada to Qilin. It reports alleged disruption, encryption and a ransom demand, but says the claims could not be confirmed.
AuditTeam Claims Attack on Senegal’s Public Treasury
AuditTeam claims its ransomware campaign targeted Senegal’s public treasury (DGCPT), alleging disruption to public finance operations and data availability. The post says the group’s claims are unconfirmed.
Qilin Claims Buckeye Paper as Ransomware Victim
A ransomware.live record says Qilin publicly claimed Buckeye Paper, a US manufacturer, as a victim on May 17, 2026, alleging file encryption and operational disruption. The claims are unconfirmed.
Chaos Ransomware Group Claims Targeting Diversified Fall Protection, Threatens Data Release
The Chaos ransomware group claims it targeted Diversified Fall Protection (fallprotect[.]com) and gave management 72 hours to respond, threatening to publish confidential data. ransomware.live says it cannot verify the claim.
Incransom Claims It Will Publish 1TB of Bergen Community College Data
Incransom claims it will publish 1TB of data linked to Bergen Community College within a week. The ransomware.live report says the claim is unconfirmed.
Chaos Claims CST Industries Breach, Threatens to Publish Data
Chaos claims it breached CST Industries and threatens to publish confidential data unless company management makes contact within 72 hours. The claim is unverified and attributed to ransomware.live monitoring.
Chaos ransomware claims WTI Transport infiltration and threatens data release
Chaos claims it infiltrated WTI Transport in Germany and threatens to publish confidential data unless management makes contact within 72 hours. The monitoring post says the claim is unconfirmed.
Chaos Claims Challenge Manufacturing as a Victim, Threatens Data Release
ransomware.live reports an unconfirmed Chaos claim targeting Challenge Manufacturing (challenge-mfg[.]com). The actor reportedly gave the company 72 hours to make contact or face publication of confidential data.