Monitors ransomware victims, threat groups, leak-site activity, and newly disclosed ransomware incidents.
2834 articles
A ransomware claim attributed to Qilin names Advanced Laundry Systems in the US. The post says the claim concerns operational disruption and data access, but notes that the information is unconfirmed.
Ransomware.live reports a Qilin ransomware claim targeting CAD-IT UK, dated May 8, 2026. The post says the claim is unconfirmed.
A monitoring post attributes a ransomware claim against Neurotrials Research Inc to Sinobi and reports operational impact. The claim’s accuracy is unconfirmed.
DragonForce claims it accessed CF Evans Construction records, including financial, HR, and accounting documents, passwords, and databases. The monitoring article says the claim is unconfirmed.
A ransomware.live monitoring record attributes a ransomware claim against Mexico-based Imex International to Qilin. The post says the claim is unconfirmed; encryption and operational disruption are not independently verified.
A ransomware[.]live record attributes a ransomware claim against Canadian manufacturer Exco Technologies to Qilin and lists operational disruption; the post says the group's claims are unconfirmed.
Akira reportedly claims to have exposed 38GB of Zojirushi corporate data, including employee document scans, financial information, projects and contracts. The monitoring post says the claim is unconfirmed.
A monitoring post says Akira claims it will soon publish 48 GB of data from Swiss medical imaging network Réseau Radiologique Romand, allegedly including employee and patient information. The claim is unconfirmed.
A ransomware claim attributed to cmdorganization names US-based PennEastern Architects. The post was monitored by ransomware.live and says the claim is unconfirmed.
A ransomware[.]live monitoring post attributes a ransomware claim against Sandberg Phoenix to SilentRansomGroup. The post says the group claimed unauthorized access and disruption, but notes the information is unconfirmed.
A ransomware[.]live monitoring post attributes an unverified claim to SilentRansomGroup targeting Farella Braun + Martel LLP and says $520,000 was offered to prevent publication of allegedly stolen data.
A ransomware claim attributed to SilentRansomGroup names Ropers Majeski PC as a victim and alleges operational disruption. The article says the claim is unconfirmed and is monitored by ransomware.live.
The ransomware actor nova claims Desysweb’s systems were encrypted, affecting more than 60,000 files across multiple servers. The claim appeared on the actor’s leak site and is unconfirmed.
Everest claims it targeted UK healthcare provider Rehab Clinics Group Ltd. The claim was listed on May 7, 2026, and is unconfirmed; the article provides no independent evidence of compromise or impact.
Ransomware[.]live reports that actor bravox claims Soprolux, a French gourmet and specialty-products company, was affected by ransomware; the post says data were encrypted and operations disrupted, but the claim is unconfirmed.
Akira claims it exfiltrated about 41 GB of Clinical Registry Solutions data, including employee, client, financial and contract information, and threatens to publish it. The claim is unconfirmed.
Ransomware.live lists NRT India as a victim claimed by thegentlemen. The post says potential data exfiltration is attributed to the actor but notes the claim is unconfirmed.
Akira claims it will publish 10GB of SDK Environmental data, including employee personal information, client financials, contracts, and other documents. The claim is unconfirmed.
Thegentlemen claim they compromised Japan’s Nostrum Corporation, encrypted systems and threatened to leak data. The monitoring post says the claim is unconfirmed and is attributed to ransomware.live.
ransomware.live lists Heinrich Kopp GmbH, a German manufacturer, in a ransomware claim attributed to thegentlemen. The post says the information is based on the group's public claims and is unconfirmed.
Bavacai claims a ransomware incident involving Australian importer Strategic Imports. The monitoring post cites a QNAP NAS, but says the claim is unconfirmed.
A monitoring post attributes to Stormous claims that it exfiltrated 5 TB of TTT Corporation data and is demanding $900,000. The claims, including alleged theft of sensitive records and designs, are unconfirmed.
Ransomware.live attributes a ransomware claim involving law firm Ropers Majeski to SilentRansomGroup. The post says the firm is assessing the impact, but notes the claim is unconfirmed.
A ransomware.live monitoring record attributes a ransomware claim involving Sysco in the United States to Qilin. The claim is unconfirmed, and the record provides no further incident details.
