Monitors ransomware victims, threat groups, leak-site activity, and newly disclosed ransomware incidents.
2835 articles
A ransomware.live-monitored post attributes an unconfirmed claim to lapsus$ alleging that CHECKMARX data, including source code, an employee database, API keys, and database credentials, was exfiltrated.
Ransomware.live reports that Qilin claims Cahbo Produkter in Sweden was affected by ransomware. The claim is unconfirmed; no details about the impact or variant are available.
A ransomware group identified as Qilin claims Chase Cooper Limited (RiskLogix Solutions) experienced system encryption and potential data exposure. The monitoring post says the claims are unconfirmed.
Lamashtu claims it attacked Apple Film Group in Germany and says encryption and possible extortion are involved. The claim is unconfirmed; ransomware.live says it is based on the group’s public claim.
Qilin claims it targeted Canadian manufacturer Buckley Powder and threatens to release or encrypt data. The claim and any ransom demand are unverified; no further incident details are available.
A ransomware.live monitoring post attributes a ransomware claim against Dreyfuss Williams & Associates CO LPA to coinbasecartel. The post says the claim has not been independently confirmed.
Ransomware[.]live lists an unverified Lamashtu claim targeting Malaysian NPK Fertilizer Sdn. Bhd., attributed to a post on the group’s leak site. The claim was recorded on April 25, 2026.
A ransomware.live monitoring post attributes an unconfirmed ransomware attack claim against US energy company Progressive Propane to Qilin. The claim was listed on April 24, 2026; ransom and decryption details are unavailable.
A ransomware.live monitoring record attributes a ransomware claim targeting Germany-based Marc Cain to Qilin. The post says the claim is unconfirmed and provides no further incident details.
Ransomware[.]live lists an unverified incransom claim naming German civil engineering firm krauseundco and cites the group’s disclosure page. The incident is not independently confirmed.
Ransomware.live records an unverified Qilin claim targeting Denso in Japan, alleging data theft and a ransom demand. The post cites Qilin's leak-site page; no independent confirmation is provided.
A ransomware claim attributed to Qilin names UK-based Point Four EPoS Solutions. The monitoring post links to a Qilin leak-site listing, but the claim is unconfirmed and provides no further incident details.
A ransomware[.]live monitoring record attributes an unconfirmed claim to Qilin targeting Priests for Life in the US. The claim alleges encrypted files, a ransom demand for decryption keys, and ongoing disruption.
Beast claims it breached Lessard Dental in West Edmonton and encrypted patient data, threatening to release records and disrupt dental services unless a ransom is paid. The claim is unconfirmed.
A Qilin ransomware claim targeting Manulife Wealth was listed on April 23, 2026. The group allegedly encrypted sensitive data and demanded a ransom; the claims are unverified, and no further details are provided.
Qilin claims a ransomware intrusion targeting B to B Visions and alleges business disruption. The claim is unconfirmed; the article provides no further incident details and does not specify a country.
A post attributes a ransomware claim to AiLock, alleging an archive containing Mother’s Market & Kitchen employees’ personal data. The claim is unconfirmed.
A ransomware.live listing attributes a ransomware claim targeting Chartwell Law to SilentRansomGroup. The article says the claim is unconfirmed; it provides no independent evidence of compromise or impact.
A ransomware claim attributed to worldleaks names Virginia Health Services as a victim. The post cites a leak-site listing and ransomware.live monitoring, but says the claim has not been independently confirmed.
A ransomware claim attributed to coinbasecartel alleges that Sea Telecom Br in Brazil was attacked, its critical systems encrypted, and data exfiltrated, with publication threatened unless a ransom is paid. The claims are unconfirmed.
A ransomware post attributed to coinbasecartel lists Indonesia’s Ministry of Agriculture and alleges encryption or data exfiltration; the monitoring record says the claim is unconfirmed.
A ransomware claim attributed to thegentlemen alleges encryption of SmartSystems’ systems and warns of possible data exposure. The post says the claim’s accuracy is unconfirmed.
ransomware[.]live records an Anubis claim involving Tractial and alleged data exposure. The post says the claim is based on public group statements and that its accuracy is unconfirmed.
A ransomware.live monitoring record attributes an unverified claim of access to TruGreen data to incransom. The post identifies TruGreen as the U.S. victim but provides no independent confirmation.
