Monitors ransomware victims, threat groups, leak-site activity, and newly disclosed ransomware incidents.
2833 articles
Akira claims it accessed Taylor Clay Products’ systems and plans to leak 72 GB of data, including employee identity documents, contracts, client information, and project files. The claim is unconfirmed.
A ransomware.live-monitored post attributes to aurora a claim involving Avanti Windows & Doors. The post lists alleged employee, financial, business, and health-related records; the author says the claims are unconfirmed.
Akira claims it accessed and exfiltrated 31 GB of data from Vision 3 Architects, including employee, contract and client information. The claim is unconfirmed.
A ransomware.live monitoring post attributes a claim against Pequod Associates to the Genesis group, alleging unauthorized access, data encryption and extortion demands. The post says the claim is unconfirmed.
The spacebears ransomware group claims it accessed SmilePoint Dental Group data, including patient records and financial reports. The post is based on the group's public claims, which the publisher says it cannot confirm.
A monitoring record lists Rivadeneyra Treviño in Mexico as a ransomware victim claimed by bravox. The claim was posted on the group’s leak site on May 12, 2026, and the article says it is unconfirmed.
Incransom reportedly listed New York-area animal shelter Bideawee in a ransomware disclosure dated May 11, 2026. The post is based on the group's public claim; the publisher says it could not confirm the information.
The incransom group claims it leaked 240 GB of data from RBH Aerospace, including business records and aerospace drawings. The monitoring post says the claim is unconfirmed.
Ransomware.live lists Ayuntamiento de Valdemoro as a Kairos-claimed victim; the post says public administration and citizen services were disrupted but notes the claim is unconfirmed.
A ransomware.live-monitored post attributes an unverified ransomware claim against ARWINI, a Lower Saxony statutory health-insurance audit body, to Kairos. The post says the incident affected operations and threatened audit and billing workflows.
A ransomware.live monitoring post records an unverified Qilin claim naming Keller Williams Real Estate – Exton as a victim, discovered May 11, 2026. The post says the claim’s accuracy is unconfirmed.
Ransomware.live lists Advanced Software Products Group as a victim of a claim by cmdorganization, discovered May 11, 2026. The post says the claim is unconfirmed.
Interlock claims it obtained confidential financial documents, contact information, personal data, and building plans from Kent District Library. The post says the claims are unconfirmed.
Ransomware.live lists the UK-based civil engineering membership organization ice[.]org[.]uk as a BrainCipher ransomware target, citing a group-linked onion post. The claim, dated May 11, 2026, is unconfirmed; no incident impact is established.
Akira claims it will encrypt and exfiltrate Circle U Foods data and says it plans to publish 13 GB. The post attributes the claim to the group and ransomware.live monitoring; it is unconfirmed.
A ransomware.live-monitored post attributes to Akira a claim that it will upload 236 GB of Clarkson Walsh & Coulter data, including personal information and confidential legal and business documents. The claim is unconfirmed.
LeakBazaar claims to offer data attributed to Omax Autos, including financial, operational, and security reports, in an extortion listing. The claim is unverified and is monitored by ransomware[.]live.
A monitoring post attributes a ransomware claim against Accretech America Inc. to AiLock and says U.S. operations were affected. The post says the group’s claims have not been independently confirmed.
A ransomware.live-monitored record attributes an unverified claim to LeakBazaar, which says it exposed 120 GB of Millennium Packages data across 11 categories and offered access for $500–$1,000.
A monitoring post records LeakBazaar’s unverified claim targeting Katahdin Technology and says the incident disrupted its managed IT services. The article provides no independent confirmation or technical details.
Ransomware.live reports a LeakBazaar claim targeting Intuitive Machines, alleging 70GB of data across nine categories and a ransom demand. The post says the claim is unconfirmed.
LeakBazaar's unverified claim says a database from Gastroenterology & Hepatology is for sale, allegedly containing 167,303 patient records, including SSNs and sensitive diagnoses.
A ransomware.live-monitored post attributes to LeakBazaar a claim that e-jones associates LCC client data is for sale. It alleges the dataset covers 2,400 clients; the post says the claim is unconfirmed.
LeakBazaar allegedly claims to have exfiltrated 80 GB of Disk Precision Group data across 10 categories and offers some information for sale or negotiation. The claim is unconfirmed.
