DragonForce Claims Breach and Data Theft at Incyte
DragonForce claims it breached Incyte Corporation and exfiltrated data. The monitoring post says the claim's accuracy is unconfirmed.
Ransom Monitor
Monitors ransomware victims, threat groups, leak-site activity, and newly disclosed ransomware incidents.
2835 articles
Incransom Claims Ransomware Attack on KRW Lawyers
Incransom’s disclosure claims it targeted KRW Lawyers (krwlawyers[.]com), encrypted files and threatened to release sensitive data unless a ransom was paid. The monitoring post says the claim is unconfirmed.
Akira Claims S4K Entertainment Data and Threatens to Leak 28GB
A ransomware.live-monitored claim attributed to Akira threatens to upload 28GB of S4K Entertainment data, including employee information, contracts, financials, and client data. The post says the claim is unconfirmed.
DragonForce Claims Attack on Primius Law Firm in Greece
A ransomware.live monitoring record attributes to DragonForce a claim that it breached and encrypted Primius Law Firm's data and threatened to release sensitive client information unless a ransom is paid. The claim is unconfirmed.
Worldleaks Claims Ransomware Attack on Equatorial Coca-Cola Bottling
Worldleaks claims it breached Equatorial Coca-Cola Bottling, encrypted systems, and threatens to release stolen data. The post says the claims are unconfirmed.
dragonforce Claims Ransomware Attack on The Galliher Law Firm
dragonforce claims it accessed The Galliher Law Firm’s systems and data and threatens to release or monetize client and case information unless a ransom is paid. The claim is unconfirmed.
AiLock Claims Ransomware Attack on UK-Based PremCom
AiLock is listed by ransomware[.]live as claiming a ransomware attack against UK-based PremCom; the post says the claim has not been independently confirmed.
Qilin Claims Ten Organizations on April 21 Victim List
Qilin claims its April 21, 2026, victim list names ten organizations across multiple sectors. The article says exact file directories have not been published; the data types it mentions are typical, not confirmed for these victims.
Silentransomgroup Claims Breach of Rutan & Tucker Law Firm
Silentransomgroup claims it breached Rutan & Tucker LLP and lists the firm on its leak site. The article says the actor posted alleged legal files, confidential records, network-drive mappings and a directory tree; compromise is not independently confirmed.
Qilin Claim Targets Kolin Turkey, Ransomware.live Listing Says
Ransomware[.]live lists an unconfirmed Qilin ransomware claim targeting Kolin Turkey, attributed to the group's leak site. The post gives no attack vector or ransom amount.
Qilin Claims Industrial Carrocera Arbuciense as a Ransomware Victim
A ransomware claim attributed to Qilin names Spain-based manufacturer Industrial Carrocera Arbuciense. The claim is unverified; the article provides no details about methods or ransom demands.
SilentRansomGroup Claim Names Rutan & Tucker, LLP
Ransomware[.]live lists Rutan & Tucker, LLP as targeted by SilentRansomGroup, citing the group’s public claim. The post says it cannot verify the information, and the law firm’s confirmation is not provided.
Genesis Claims Ransomware Incident at K2 Electric, Inc.
A ransomware.live monitoring post attributes to Genesis a claim that K2 Electric, Inc. had systems encrypted and operations disrupted. The post says the claims are unconfirmed.
Securotrop Ransomware Claim Names Synergy Engineering, Cites 2,111 GB
Ransomware.live lists an unconfirmed securotrop claim naming U.S. business-services firm Synergy Engineering and citing 2,111 GB of data. Discovered Apr. 21, 2026, the claim’s status is awaiting.
Akira Claims Breach of Arctic Home Living, Threatens Data Release
Akira claims it breached Arctic Home Living and plans to release employee, customer, and agreement data. The claim is unconfirmed and was monitored by ransomware[.]live.
Kairos Claims Ransomware Attack on Nordenta
A ransomware.live-monitored post attributes an unverified ransomware claim against Danish LIFCO subsidiary Nordenta to Kairos. The post says the claim’s accuracy could not be confirmed.
Qilin Claims Ransomware Incident at Roman Catholic Archdiocese of St John
Qilin claimed an incident involving the Roman Catholic Archdiocese of St John, according to a leak-site listing recorded by ransomware.live on April 21, 2026. The claim is unverified; no further details or verified exfiltration evidence are provided.
Anubis Claims Breaches of ViaQuest and Samuel I. White, PC
The Anubis group claims it breached ViaQuest and Samuel I. White, PC, and exposed more than 5 TB of data, including medical records, legal documents, emails, financial records and network passwords. The claims are unverified in the article.
Fulcrumsec Claims 2.2 TB Analog Gold Breach Involving Guyana Mining Records
Fulcrumsec claims it exfiltrated 2.2 TB from Analog Gold and Prospector Portal, including Guyana mining records, and is using a 58 GB highlights package to extort the company. The reported breach and exposed data are unverified.
Anubis Claims Ransomware Attack on ViaQuest
Anubis claims it accessed ViaQuest systems and exfiltrated patient data. The ransomware claim is unverified; the article says it cannot confirm the information.
Anubis Claims Ransomware Attack on Samuel I. White, PC
Ransomware.live lists Samuel I. White, PC as a ransomware claim attributed to Anubis and cites the actor’s leak site. The post says the claim is unconfirmed.
Chaos Claims Polycorp as Ransomware Victim, Threatens to Publish Files
Chaos claims Polycorp was affected and threatens to publish allegedly exfiltrated files unless the company contacts it within 48 hours. The claim is attributed to a leak-site post and is unconfirmed.
Qilin Claims It Encrypted France’s City’Pro
Ransomware.live reports that Qilin claims it encrypted City’Pro’s systems and data in France. The claim is unconfirmed, and the post provides no details beyond a ransom note.
Qilin Claims Ransomware Operation Targeting Germany’s SEL
A ransomware.live record says Qilin claimed an operation targeting SEL (Safety Engineering Laboratory) in Germany. The claim is unconfirmed; impact and techniques are not reported.