🚨 Victim Database¶
672 organisations named in threat-actor claims (mostly leak-site listings), newest first. These are attacker claims, not confirmed breaches — verify before acting (Methodology). Click any column header to sort by threat actor, date, country, industry, or threat type. Each actor links to its battle card.
| Victim | Threat actor | Date | Country | Industry | Threat type | Sources |
|---|---|---|---|---|---|---|
| Agencia Estatal de Meteorología (AEMET) | Panzer | 2026-09-11 | Spain | Government & Public Sector | Ransomware | EscudoDigital · Ransomware.live |
| i2k2 Networks | Vexy | 2026-09-10 | IN | Technology & Software | Ransomware | Ransomware.live |
| General Santos Doctors Hospital | Rhysida | 2026-09-10 | Philippines | Healthcare & Life Sciences | Ransomware | Ransomware.live |
| Mathspace | Unknown | 2026-09-08 | Australia | Education | Ransomware | https://www.helpnetsecurity.com/2026/09/08/mathspace-data-breach-metabase-vulnerability/ · https://www.bleepingcomputer.com/news/security/mathspace-discloses-data-breach-affecting-over-1-million-people/ |
| Florida DAVID (Highway Safety and Motor Vehicles) | ShinyHunters | 2026-09-08 | USA | Government & Public Sector | Extortion | https://www.bleepingcomputer.com/news/security/shinyhunters-hackers-claim-breach-of-florida-david-dmv-database/ |
| Veradigm | The Gentlemen | 2026-09-08 | US | Healthcare & Life Sciences | Ransomware | BleepingComputer · The Record |
| GT Distributors | Play | 2026-09-08 | US | Consumer & Retail | Ransomware | RedPacketSecurity |
| ST Engineering | Metaencryptor | 2026-09-07 | Singapore | Industrials & Manufacturing | Ransomware | https://www.ransomware.live/id/U1QgRW5naW5lZXJpbmdAbWV0YWVuY3J5cHRvcg== |
| Lightcast | Direwolf | 2026-09-07 | US | Professional & Business Services | Ransomware | https://www.redpacketsecurity.com/direwolf-ransomware-victim-lightcast/ |
| United Group | Vexy | 2026-09-07 | India | Industrials & Manufacturing | Ransomware | https://www.redpacketsecurity.com/vexy-ransomware-ransomware-victim-united-group/ |
| Master Manufacturing Co., Inc. | Dark Project | 2026-09-07 | US | Industrials & Manufacturing | Ransomware | https://www.redpacketsecurity.com/dark-project-ransomware-victim-master-manufacturing-co-inc/ |
| Conde Nast | Unknown | 2026-09-07 | US | Media & Telecom | Ransomware | SecurityAffairs · Cybernews |
| Manchester Airports Group | FulcrumSec | 2026-09-04 | UK | Transportation & Logistics | Ransomware | https://www.securityweek.com/manchester-airports-group-data-on-8-8-million-people-leaked-after-ransom-refusal/ · https://www.bleepingcomputer.com/news/security/fulcrumsec-claims-manchester-airports-hack-theft-of-86-gb-of-data/ |
| EDIF S.p.A. | Aurora | 2026-09-04 | Italy | Industrials & Manufacturing | Ransomware | https://www.dexpose.io/aurora-targets-italian-wholesale-distributor-edif-s-p-a/ · https://www.redpacketsecurity.com/aurora-ransomware-victim-edif-s-p-a/ |
| Blanco & Etcheverry | Gunra | 2026-09-04 | Uruguay | Professional & Business Services | Ransomware | https://ransomware.live/id/QmxhbmNvICYgRXRjaGV2ZXJyeUBndW5yYQ== · https://www.redpacketsecurity.com/gunra-ransomware-victim-blanco-etcheverry/ |
| Occidental | Gunra | 2026-09-04 | Venezuela | Financial Services | Ransomware | https://ransomware.live/id/T2NjaWRlbnRhbEBndW5yYQ== · https://www.redpacketsecurity.com/gunra-ransomware-victim-occidental/ |
| Berlin Senate (urban development, transport, environment departments) | Rhysida | 2026-09-04 | DE | Government & Public Sector | Ransomware | https://cybernews.com/news/stolen-berlin-government-files-dumped-on-dark-web-rhysida/ https://www.bankinfosecurity.com/berlin-rejects-rhysida-ransomware-blackmail-a-32731 |
| DiaSorin S.p.A. | Settra | 2026-09-03 | Italy | Healthcare & Life Sciences | Ransomware | https://www.dexpose.io/settra-ransomware-attack-on-diasorin-s-p-a/ |
| MedEvolve | Settra | 2026-09-03 | USA | Healthcare & Life Sciences | Ransomware | https://www.dexpose.io/settra-ransomware-attack-on-medevolve/ |
| Complete Packaging Solutions | Qilin | 2026-09-03 | UK | Professional & Business Services | Ransomware | https://www.dexpose.io/qilin-ransomware-targets-complete-packaging-solutions/ |
| Katten Muchin Rosenman | SilentRansomGroup | 2026-09-03 | US | Professional & Business Services | Ransomware | https://www.redpacketsecurity.com/silentransomgroup-ransomware-victim-katten-muchin-rosenman/ |
| IDScan.net | Unknown | 2026-09-03 | US | Technology & Software | Ransomware | https://krebsonsecurity.com/2026/09/fbi-probes-service-selling-153m-drivers-licenses/ https://www.securityweek.com/153-million-driver-license-images-offered-on-dark-web/ |
| Greenberg Traurig | SilentRansomGroup | 2026-09-02 | US | Professional & Business Services | Ransomware | https://www.dexpose.io/silentransomgroup-compromises-greenberg-traurig/ |
| Holland & Knight | SilentRansomGroup | 2026-09-01 | US | Professional & Business Services | Ransomware | https://www.hookphish.com/blog/ransomware-group-silentransomgroup-hits-holland-and-knight/ |
| AFSARD | Qilin | 2026-08-30 | GBR | Government & Public Sector | Ransomware | https://www.hookphish.com/blog/ransomware-group-qilin-hits-afsard/ |
| Bandit Industries | Qilin | 2026-08-29 | USA | Industrials & Manufacturing | Ransomware | https://www.ransomware.live/summary/ |
| LAPoco Architects | Qilin | 2026-08-29 | USA | Professional & Business Services | Ransomware | https://www.ransomware.live/summary/ |
| Berlin State Government (Senate Department for Mobility and Environment) | Rhysida | 2026-08-28 | DEU | Government & Public Sector | Ransomware | https://thehackernews.com/2026/08/berlin-refuses-to-pay-hackers-who-stole.html |
| Manchester Airports Group | Unknown | 2026-08-27 | UK | Transportation & Logistics | Ransomware | https://www.theregister.com/security/2026/08/27/cybercrooks-jet-off-with-manchester-airports-group-customer-data/5292943 · https://cybernews.com/security/manchester-airport-cyber-attack-9-million-wifi-data-breach/ |
| Providence Investments | Qilin | 2026-08-27 | USA | Financial Services | Ransomware | https://www.redpacketsecurity.com/qilin-ransomware-victim-providence-investments/ · https://ransomware.live/group/qilin |
| Displaydata | Qilin | 2026-08-27 | UK | Technology & Software | Ransomware | https://www.redpacketsecurity.com/qilin-ransomware-victim-displaydata/ · https://ransomware.live/id/RGlzcGxheWRhdGFAcWlsaW4= |
| Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF) | Qilin | 2026-08-26 | USA | Government & Public Sector | Ransomware | https://cybernews.com/news/qilin-ransomware-bureau-alcohol-tobacco-firearms-atf-cyberattack/ |
| Air International Thermal Systems | Qilin | 2026-08-26 | USA | Industrials & Manufacturing | Ransomware | https://www.dexpose.io/qilin-ransomware-strikes-air-international-thermal-systems/ |
| Metal Conversions | Qilin | 2026-08-26 | USA | Industrials & Manufacturing | Ransomware | https://www.dexpose.io/qilin-ransomware-strikes-metal-conversions/ |
| National Kidney Registry | Direwolf | 2026-08-25 | US | Healthcare & Life Sciences | Ransomware | https://www.ransomware.live/group/direwolf |
| Johnson City Honda | Global Secret Group | 2026-08-25 | US | Industrials & Manufacturing | Ransomware | https://ransomware.live/ |
| PCA Group Sdn. Bhd. | Majinahanashi | 2026-08-25 | Malaysia | Unknown | Ransomware | https://ransomware.live/ |
| McKesson Corporation | ShinyHunters | 2026-08-25 | USA | Healthcare & Life Sciences | Extortion | https://www.bleepingcomputer.com/news/security/mckesson-discloses-breach-after-shinyhunters-claims-patient-data-theft/ |
| Boston Scientific | Unknown | 2026-08-25 | USA | Healthcare & Life Sciences | Ransomware | https://techcrunch.com/2026/08/26/medical-device-maker-boston-scientific-says-a-cyberattack-is-causing-a-global-disruption-to-its-operations/ |
| Espac | The Gentlemen | 2026-08-24 | Chile | Industrials & Manufacturing | Ransomware | https://www.dexpose.io/thegentlemen-ransomware-attack-on-espac/ |
| Clear Align | Qilin | 2026-08-23 | USA | Technology & Software | Ransomware | https://www.dexpose.io/qilin-ransomware-attack-on-clear-align/ |
| Difor | Qilin | 2026-08-23 | Chile | Transportation & Logistics | Ransomware | https://www.dexpose.io/qilin-ransomware-group-strikes-chilean-company-difor/ |
| Aurore Development S.p.A. | Qilin | 2026-08-23 | Italy | Professional & Business Services | Ransomware | https://www.dexpose.io/qilin-targets-aurore-development-s-p-a-in-ransomware-attack/ |
| PenLink | Qilin | 2026-08-22 | USA | Technology & Software | Ransomware | https://www.galaxywarden.com/blog/breach/penlink-qilin-2026-08 |
| Agunsa | Qilin | 2026-08-22 | Chile | Transportation & Logistics | Ransomware | https://www.galaxywarden.com/blog/breach/agunsa-qilin-2026-08 |
| Thialf | The Gentlemen | 2026-08-22 | Netherlands | Media & Telecom | Ransomware | https://www.ransomware.live/ |
| Promatrix | The Gentlemen | 2026-08-22 | USA | Technology & Software | Ransomware | https://www.ransomware.live/ |
| BOK Financial | ShinyHunters | 2026-08-22 | USA | Financial Services | Extortion | DEXpose · RansomLook |
| NovoCure | ShinyHunters | 2026-08-22 | USA | Healthcare & Life Sciences | Extortion | RansomLook |
| Integrated Health Systems | CoinbaseCartel | 2026-08-22 | USA | Healthcare & Life Sciences | Ransomware | DEXpose |
| RXPE Group | CoinbaseCartel | 2026-08-22 | China | Energy & Utilities | Ransomware | DEXpose |
| Vietnam Electricity (EVNHANOI) | Emperador | 2026-08-22 | Vietnam | Energy & Utilities | Ransomware | RansomLook |
| NTE Italia | Panzer | 2026-08-21 | Italy | Industrials & Manufacturing | Ransomware | https://www.ransomware.live/ |
| JC Sales | Akira | 2026-08-21 | USA | Transportation & Logistics | Ransomware | https://www.ransomware.live/ |
| Apollo Global Management | Falcon/Helix/Pink/Redact | 2026-08-21 | USA | Financial Services | Ransomware | https://techcrunch.com/2026/08/21/private-equity-firm-apollo-confirms-data-breach-amid-hacking-wave-targeting-financial-giants/ |
| Kingston Technology | Everest | 2026-08-20 | USA | Technology & Software | Ransomware | https://www.cyberdaily.au/security/14078-exclusive-ram-maker-kingston-technology-investigating-ransomware-claims |
| Capgemini Engineering | Everest | 2026-08-20 | France | Technology & Software | Ransomware | https://cypro.co.uk/insights/cyber-bulletins/everest-ransomware-claims-capgemini-engineering-listing/ |
| Hospital for Sick Children (SickKids) | Unknown | 2026-08-20 | Canada | Healthcare & Life Sciences | Ransomware | CP24 · BleepingComputer · The Record |
| Senvest Capital | The Gentlemen | 2026-08-19 | USA | Financial Services | Ransomware | https://www.dexpose.io/thegentlemen-ransomware-targets-senvest-capital/ |
| Babcock Africa | The Gentlemen | 2026-08-19 | South Africa | Industrials & Manufacturing | Ransomware | https://ransomware.live/id/QmFiY29ja0B0aGVnZW50bGVtZW4= |
| Zebra Technologies | Clop | 2026-08-18 | USA | Technology & Software | Extortion | https://www.dexpose.io/clop-ransomware-targets-zebra-com-in-major-data-breach/ |
| Logitech | ShinyHunters | 2026-08-18 | USA | Technology & Software | Extortion | https://www.cyberdaily.au/security/14076-pay-or-leak-shinyhunters-delivers-ultimatum-to-logitech |
| R&D Machine and Engineering | DragonForce | 2026-08-18 | USA | Industrials & Manufacturing | Ransomware | https://www.dexpose.io/dragonforce-strikes-r-d-machine-and-engineering/ |
| Direction Generale des Finances Publiques (DGFiP) | ZeroBytes (individual threat actor) | 2026-08-14 | FRA | Government & Public Sector | Ransomware | https://therecord.media/french-tax-authority-dgfip-confirms-data-breach |
| Baxter International | ShinyHunters | 2026-08-14 | USA | Healthcare & Life Sciences | Extortion | https://www.hookphish.com/blog/ransomware-group-shinyhunters-hits-baxter-international-inc/ |
| D&J Beverage Service | Qilin | 2026-08-13 | US | Consumer & Retail | Ransomware | https://www.ransomware.live/group/qilin |
| SIA Medical Centre | Rhysida | 2026-08-13 | AU | Healthcare & Life Sciences | Ransomware | https://www.ransomware.live/group/rhysida |
| CF Supply | Akira | 2026-08-13 | US | Transportation & Logistics | Ransomware | https://www.ransomware.live/group/akira |
| GB Group S.A. | DragonForce | 2026-08-13 | Unknown | Unknown | Ransomware | https://www.ransomware.live/group/dragonforce |
| Shell | Clop | 2026-08-13 | NLD | Energy & Utilities | Extortion | https://www.technadu.com/shell-and-philips-confirm-investigation-following-cl0p-data-theft-claims-targeting-nearly-50-companies-including-fiserv-and-ge/633182/ |
| Philips | Clop | 2026-08-13 | NLD | Healthcare & Life Sciences | Extortion | https://www.technadu.com/shell-and-philips-confirm-investigation-following-cl0p-data-theft-claims-targeting-nearly-50-companies-including-fiserv-and-ge/633182/ |
| General Electric | Clop | 2026-08-13 | USA | Industrials & Manufacturing | Extortion | https://www.bleepingcomputer.com/news/security/clop-ransomware-targets-windchill-flexplm-in-data-theft-attacks/ |
| B Wright Drywall | Qilin | 2026-08-12 | CAN | Industrials & Manufacturing | Ransomware | https://www.ransomware.live/group/qilin |
| Fiserv | Clop | 2026-08-12 | US | Financial Services | Extortion | https://www.bleepingcomputer.com/news/security/ |
| Pennsylvania Attorney General's Office | Unknown | 2026-08-11 | US | Government & Public Sector | Ransomware | https://therecord.media/pennsylvania-attorney-general-office-ransomware-attack-recovery |
| Stade Français Paris | Qilin | 2026-08-11 | FR | Media & Telecom | Ransomware | https://www.redpacketsecurity.com/qilin-ransomware-victim-stade-francais/ |
| Otter Tail County | INC Ransom | 2026-08-11 | USA | Government & Public Sector | Ransomware | https://www.ransomware.live/id/T3R0ZXIgVGFpbCBDb3VudHksIE1pbm5lc290YUBpbmNyYW5zb20= |
| ATMS & Co. LLP | INC Ransom | 2026-08-10 | IN | Professional & Business Services | Ransomware | https://thehackernews.com/2026/08/inc-ransomware-emerges-as-dominant.html |
| Astro Electroplating | Qilin | 2026-08-10 | US | Industrials & Manufacturing | Ransomware | https://www.ransomware.live/ |
| Chung Tai Shin Chemical Industry Co. | Qilin | 2026-08-10 | TW | Industrials & Manufacturing | Ransomware | https://www.ransomware.live/ |
| AIMS Group | The Gentlemen | 2026-08-10 | AE | Industrials & Manufacturing | Ransomware | https://www.ransomware.live/ |
| Canopy Support Services | The Gentlemen | 2026-08-10 | CA | Government & Public Sector | Ransomware | https://www.ransomware.live/ |
| Actini Group | KRYBIT | 2026-08-10 | FR | Industrials & Manufacturing | Ransomware | https://www.redpacketsecurity.com/krybit-ransomware-victim-www-actini-com/ |
| Unlimited Technology Systems | Unknown | 2026-08-10 | US | Healthcare & Life Sciences | Ransomware | https://www.securityweek.com/3-8-million-impacted-by-unlimited-technology-systems-data-breach/ |
| Quironsalud | Direwolf | 2026-08-10 | Spain | Healthcare & Life Sciences | Ransomware | https://www.dexpose.io/direwolf-ransomware-attack-on-quironsalud-spains-health-giant/ |
| Studio Associato Tibaldi | Unknown | 2026-08-09 | ITA | Professional & Business Services | Ransomware | https://www.ransomware.live/ |
| Siam Oil Product Co. Ltd. | Unknown | 2026-08-09 | THA | Energy & Utilities | Ransomware | https://www.ransomware.live/ |
| Filtronic plc | Qilin | 2026-08-08 | UK | Industrials & Manufacturing | Ransomware | https://www.hendryadrian.com/ransom-filtronic-aug-2026/ |
| Clausing Industrial | Qilin | 2026-08-08 | US | Industrials & Manufacturing | Ransomware | https://www.ransomware.live/group/qilin |
| CLLS Co Ltd | Qilin | 2026-08-08 | Unknown | Unknown | Ransomware | https://www.ransomware.live/group/qilin |
| Louisville Bar Association | INC Ransom | 2026-08-08 | US | Professional & Business Services | Ransomware | https://www.ransomware.live/group/incransom |
| Daily Trust | Unknown | 2026-08-08 | NGA | Media & Telecom | Ransomware | https://www.ransomware.live/ |
| Levi Strauss | Unknown | 2026-08-07 | US | Consumer & Retail | Ransomware | https://therecord.media/levis-data-breach-social-engineering |
| IEH Corporation | Unknown | 2026-08-07 | US | Industrials & Manufacturing | Ransomware | https://therecord.media/military-device-manufacturer-discloses-cyber-incident |
| Stade Français | Unknown | 2026-08-07 | France | Media & Telecom | Ransomware | https://therecord.media |
| Morguard Corporation | Helix | 2026-08-07 | CA | Professional & Business Services | Ransomware | https://ransomware.live/id/TW9yZ3VhcmRASGVsaXg= |
| Signature Services | Play | 2026-08-06 | US | Professional & Business Services | Ransomware | https://ransomware.live/id/U2lnbmF0dXJlIFNlcnZpY2VzQHBsYXk= |
| TechVentures Bank S.A. | RansomHouse | 2026-08-06 | Unknown | Financial Services | Ransomware | https://www.ransomware.live/group/ransomhouse |
| Allied Telesis | Everest | 2026-08-05 | JPN | Technology & Software | Ransomware | https://www.dexpose.io/everest-ransomware-group-targets-allied-telesis/ |
| FIS Global | Clop | 2026-08-05 | USA | Financial Services | Extortion | https://malware.news/t/clop-ransomware-targets-fis-global/124620 |
| Trulite Glass and Aluminum Solutions | INC Ransomware | 2026-08-04 | US | Industrials & Manufacturing | Ransomware | https://thehackernews.com/2026/08/inc-ransomware-emerges-as-dominant.html |
| BLACKBURN's Physicians Pharmacy | Anubis | 2026-08-04 | US | Healthcare & Life Sciences | Ransomware | https://www.ransomware.live/ |
| RUPP Spritzguss | Qilin | 2026-08-04 | Germany | Industrials & Manufacturing | Ransomware | https://www.ransomware.live/ |
| North Carolina Ports (Wilmington, Morehead City, Charlotte Inland Port) | Unknown | 2026-08-04 | US | Transportation & Logistics | Ransomware | https://therecord.media/cyberattack-north-carolina-ports |
| Amgen | Unknown | 2026-08-03 | US | Healthcare & Life Sciences | Ransomware | https://therecord.media/amgen-hackers-cyberattack-sec https://www.bleepingcomputer.com/news/security/amgen-says-cloud-data-breach-exposed-patient-health-proprietary-info/ |
| Winn-Dixie | Anubis | 2026-08-03 | US | Consumer & Retail | Ransomware | https://www.ransomware.live/ |
| Cameron Regional Medical Center | Anubis | 2026-08-03 | US | Healthcare & Life Sciences | Ransomware | https://www.ransomware.live/ |
| Service Electric | Qilin | 2026-08-03 | US | Media & Telecom | Ransomware | https://www.ransomware.live/ |
| Encore Enterprises | CRPxO | 2026-08-02 | US | Professional & Business Services | Ransomware | https://www.ransomware.live/id/RW5jb3JlIEVudGVycHJpc2VzLCBJbmMuQENSUHhP |
| ProHealth Medical Group | Krybit | 2026-08-02 | Singapore | Healthcare & Life Sciences | Ransomware | https://www.dexpose.io/krybit-ransomware-targets-singapores-prohealth-medical-group/ · https://www.redpacketsecurity.com/krybit-ransomware-victim-www-prohealth-sg/ |
| ProHealth Medical Group Pte Ltd | Krybit | 2026-08-02 | SGP | Healthcare & Life Sciences | Ransomware | https://www.dexpose.io/krybit-ransomware-targets-singapores-prohealth-medical-group/ |
| Philippine Savings Bank | The Gentlemen | 2026-08-01 | PH | Financial Services | Ransomware | https://www.redpacketsecurity.com/thegentlemen-ransomware-victim-philippine-savings-bank/ |
| Sigma Plastics Group | Play | 2026-08-01 | US | Industrials & Manufacturing | Ransomware | https://www.redpacketsecurity.com/play-ransomware-victim-sigma-plastics-group/ |
| The Butcher Brothers | Play | 2026-08-01 | US | Consumer & Retail | Ransomware | https://www.ransomware.live/id/VGhlIEJ1dGNoZXIgQnJvdGhlcnNAcGxheQ== |
| Questel SAS | ShinyHunters | 2026-08-01 | France | Professional & Business Services | Extortion | https://breachnews.com/breaches/shinyhunters-lists-questel-alcon-and-lumenis-on-leak-site-with-new-extortion-claims/ https://www.dexpose.io/shinyhunters-breach-questel-sas-french-ip-giant-under-siege/ |
| Alcon Inc. | ShinyHunters | 2026-08-01 | Switzerland | Healthcare & Life Sciences | Extortion | https://www.redpacketsecurity.com/shinyhunters-ransomware-victim-alcon-inc/ https://www.dexpose.io/shinyhunters-breach-alcon-inc/ |
| Lumenis Ltd. | ShinyHunters | 2026-08-01 | Israel | Healthcare & Life Sciences | Extortion | https://www.redpacketsecurity.com/shinyhunters-ransomware-victim-lumenis-ltd/ https://breachnews.com/breaches/shinyhunters-lists-questel-alcon-and-lumenis-on-leak-site-with-new-extortion-claims/ |
| Brinks Home | ShinyHunters | 2026-07-31 | US | Cybersecurity | Extortion | https://www.bleepingcomputer.com/news/security/shinyhunters-claims-brinks-home-breach-threatens-to-leak-stolen-data/ https://www.theregister.com/security/2026/07/31/the-most-famous-brand-in-physical-security-got-pwned-by-shinyhunters/5281924 |
| Kuveyt Turk / Finansbank / Anadolubank / Turkish Airlines (THY) | CRPxO | 2026-07-31 | Turkey | Financial Services | Ransomware | https://www.ransomware.live/ |
| Hawaii Family Dental | Qilin | 2026-07-31 | US | Healthcare & Life Sciences | Ransomware | https://www.ransomware.live/ https://cybersecuritynews.com/qilin-ransomware-claims-1358-victims/ |
| Hyundai Motor Türkiye | CRPxO | 2026-07-31 | Turkey | Industrials & Manufacturing | Ransomware | https://gbhackers.com/crpx0-ransomware-claims-hyundai-turkey-breach/amp/ · https://cyberpress.org/crpx0-ransomware-claims-hyundai-turkey-breach/ |
| Southeastern Oklahoma State University | Interlock | 2026-07-31 | USA | Education | Ransomware | https://www.kxii.com/video/2026/08/03/southeastern-oklahoma-state-university-reopen-tuesday-after-cybersecurity-incident/ |
| Indus Protech Solutions | The Gentlemen | 2026-07-30 | India | Industrials & Manufacturing | Ransomware | https://www.redpacketsecurity.com/thegentlemen-ransomware-victim-indus-protech-solutions/ · https://www.ransomware.live/ |
| Malaysian Nuclear Agency | The Gentlemen | 2026-07-30 | Malaysia | Government & Public Sector | Ransomware | https://www.breachsense.com/breaches/ · https://www.ransomware.live/ |
| MicroPhase Corporation | The Gentlemen | 2026-07-30 | US | Industrials & Manufacturing | Ransomware | https://www.breachsense.com/breaches/ · https://www.ransomware.live/ |
| Kontact Consortium India | INC Ransom | 2026-07-30 | India | Industrials & Manufacturing | Ransomware | https://www.breachsense.com/breaches/ · https://www.ransomware.live/ |
| StellarRAD Systems | Space Bears | 2026-07-29 | US | Technology & Software | Ransomware | https://www.ransomware.live/ |
| Bretford Manufacturing | Aurora | 2026-07-29 | US | Industrials & Manufacturing | Ransomware | https://www.ransomware.live/ |
| Administratia Nationala a Penitenciarelor (ANP) | Unknown | 2026-07-29 | RO | Government & Public Sector | Ransomware | https://www.ransomware.live/ |
| Analog Devices | ExfilSquad | 2026-07-29 | US | Technology & Software | Ransomware | https://www.securityweek.com/semiconductor-firm-analog-devices-discloses-data-breach/ https://www.bloomberg.com/news/articles/2026-07-29/analog-devices-discloses-data-breach-after-unauthorized-access |
| Accenture | 888 | 2026-07-29 | US | Professional & Business Services | Ransomware | https://www.securityweek.com/accenture-confirms-data-breach-after-hacker-claims-source-code-theft/ https://www.bleepingcomputer.com/news/security/accenture-confirms-breach-after-hacker-offers-stolen-data-for-sale/ |
| CEVA Logistics | Unknown | 2026-07-29 | NLD | Transportation & Logistics | Ransomware | https://techcrunch.com/2026/08/10/a-data-breach-at-shipping-giant-ceva-logistics-is-rippling-across-banks-retailers-steam-gamers-and-beyond/ |
| Affinia Healthcare | Termite | 2026-07-28 | US | Healthcare & Life Sciences | Ransomware | https://www.redpacketsecurity.com/termite-ransomware-victim-affinia-healthcare/ |
| Swiss Federal IT Office (FOITT/BIT) | Unknown | 2026-07-28 | CHE | Government & Public Sector | Ransomware | https://www.bleepingcomputer.com/news/security/swiss-government-sharepoint-breach-compromised-200-accounts/ |
| MCBS (Medical Computer Business Services) | PEAR | 2026-07-27 | US | Healthcare & Life Sciences | Ransomware | https://www.securityweek.com/mcbs-data-breach-affects-1-2-million-individuals/ |
| Ernst and Young | ShinyHunters | 2026-07-27 | US | Professional & Business Services | Extortion | https://www.bleepingcomputer.com/news/security/ernst-and-young-data-breach-claimed-by-shinyhunters-extortion-gang/ |
| Multiple Minnesota Water and Wastewater Utilities (30+) | CyberAv3ngers | 2026-07-26 | US | Energy & Utilities | Ransomware | https://www.bleepingcomputer.com/news/security/hackers-target-over-30-minnesota-water-utilities-in-coordinated-ot-attack/ · https://www.securityweek.com/dozens-of-minnesota-water-utilities-targeted-in-coordinated-ot-attacks/ |
| UK Police National Legal Database (PNLD) | ExfilSquad | 2026-07-26 | UK | Government & Public Sector | Ransomware | https://www.bleepingcomputer.com/news/security/exfilsquad-hackers-leak-info-of-over-100-000-uk-police-officers-staff/amp/ https://thehackernews.com/2026/08/pnld-breach-exposes-uk-police-and.html |
| Wesco International | ExfilSquad | 2026-07-26 | USA | Technology & Software | Ransomware | https://www.bleepingcomputer.com/news/security/wesco-confirms-security-incident-after-exfilsquad-claims-data-theft/ |
| Traffic Control and Road Safety Services | Qilin | 2026-07-25 | Unknown | Government & Public Sector | Ransomware | https://www.ransomware.live/ |
| Guntert & Zimmerman | Qilin | 2026-07-25 | DE | Industrials & Manufacturing | Ransomware | https://www.ransomware.live/ |
| Plitvicka Jezera Nacionalni Park | Qilin | 2026-07-25 | HR | Government & Public Sector | Ransomware | https://www.ransomware.live/ |
| Principle Diagnostics Laboratory | Qilin | 2026-07-25 | Unknown | Healthcare & Life Sciences | Ransomware | https://www.ransomware.live/ |
| GURR Abdichtungstechnik GmbH | Qilin | 2026-07-25 | DE | Industrials & Manufacturing | Ransomware | https://www.ransomware.live/ |
| Yourway Transportation | Moneymessage | 2026-07-25 | US | Transportation & Logistics | Ransomware | https://www.ransomware.live/ |
| SistNet | Nova | 2026-07-25 | Unknown | Technology & Software | Ransomware | https://www.ransomware.live/ |
| Jubilee Jobs | Qilin | 2026-07-25 | Unknown | Professional & Business Services | Ransomware | https://www.ransomware.live/ |
| The Myers Y Cooper | Qilin | 2026-07-25 | Unknown | Professional & Business Services | Ransomware | https://www.ransomware.live/ |
| Health Law Advocates | INC Ransom | 2026-07-25 | US | Professional & Business Services | Ransomware | https://www.ransomware.live/ |
| AnMed Health System | Unknown | 2026-07-25 | US | Healthcare & Life Sciences | Ransomware | https://www.hipaajournal.com/anmed-closes-almost-80-facilities-while-it-grapples-with-cyberattack/ · https://www.healthcareitnews.com/news/anmed-given-72-hours-respond-demands-ransomware-incident |
| Bank of Baroda | Triple X | 2026-07-24 | India | Financial Services | Ransomware | https://www.ransomware.live/ |
| Origin Energy | Unattributed | 2026-07-23 | Australia | Energy & Utilities | Breach | https://therecord.media/australia-origin-energy-data-breach |
| Czech Philharmonic | The Gentlemen | 2026-07-23 | Czech Republic | Media & Telecom | Ransomware | https://www.ransomware.live/ |
| LAXAI Life Sciences | Krybit | 2026-07-23 | India | Healthcare & Life Sciences | Ransomware | https://www.dexpose.io/krybit-ransomware-targets-laxai-life-sciences-in-india/ · https://www.cyfirma.com/news/weekly-intelligence-report-31-jul-2026/ |
| Nidec Corporation | Blackfield | 2026-07-22 | JP | Industrials & Manufacturing | Ransomware | https://www.bleepingcomputer.com/ |
| South Korean National Diplomatic Academy | Unattributed (suspected DPRK) | 2026-07-22 | KR | Government & Public Sector | Ransomware | https://therecord.media/south-korea-cyberattack-foreign-ministry |
| Estee Lauder | Clop | 2026-07-22 | US | Consumer & Retail | Extortion | https://www.bleepingcomputer.com/news/security/est-e-lauder-discloses-data-breach-via-oracle-e-business-flaw/ |
| Recsa | Qilin | 2026-07-22 | South Africa | Cybersecurity | Ransomware | https://www.dexpose.io/qilin-ransomware-strikes-recsa-in-south-africa/ |
| Ingersoll Rand | Everest | 2026-07-22 | US | Industrials & Manufacturing | Ransomware | https://x.com/FalconFeedsio/status/2079991407490851128 · https://www.dexpose.io/0apt-ransomware-attack-targets-ingersoll-rand/ |
| Fairlife (Coca-Cola subsidiary) | Anubis | 2026-07-21 | US | Consumer & Retail | Ransomware | BleepingComputer · Cybernews · Coca-Cola SEC filing |
| Stadler Rail | Everest | 2026-07-21 | Switzerland | Industrials & Manufacturing | Ransomware | https://www.bleepingcomputer.com/news/security/swiss-rail-giant-stadler-rejects-123m-ransom-demand-after-cyberattack/ |
| Advantage Home Health Care | The Gentlemen | 2026-07-20 | US | Healthcare & Life Sciences | Ransomware | https://www.ransomware.live/ |
| Adventus | LockBit | 2026-07-20 | SG | Technology & Software | Ransomware | https://www.ransomware.live/ · https://www.breachsense.com/breaches/ |
| Alzone Software | Everest | 2026-07-20 | IN | Technology & Software | Ransomware | https://www.ransomware.live/ · https://www.breachsense.com/breaches/ |
| Caterpillar Inc. | CoinbaseCartel | 2026-07-20 | US | Industrials & Manufacturing | Ransomware | DeXpose · HookPhish |
| Stroebel Gruppe | SafePay | 2026-07-20 | Germany | Industrials & Manufacturing | Ransomware | DeXpose |
| TimeTEX GmbH | SafePay | 2026-07-20 | Germany | Education | Ransomware | DeXpose |
| L&A Transport | Akira | 2026-07-20 | US | Transportation & Logistics | Ransomware | DeXpose |
| Brinks Home | Unknown | 2026-07-20 | US | Cybersecurity | Ransomware | https://hoodline.com/2026/07/dallas-alarm-giant-brinks-home-shaken-by-cyber-heist-and-blackmail-threat-6930961/ |
| Eana | Qilin | 2026-07-19 | Argentina | Media & Telecom | Ransomware | https://www.ransomware.live |
| Synergy Products | Qilin | 2026-07-19 | United States | Industrials & Manufacturing | Ransomware | https://www.ransomware.live |
| MER-AL | Nova | 2026-07-19 | Turkey | Industrials & Manufacturing | Ransomware | https://www.ransomware.live |
| Dephub | Nova | 2026-07-19 | Indonesia | Government & Public Sector | Ransomware | https://www.ransomware.live |
| Droguería Martorani | Qilin | 2026-07-18 | Argentina | Healthcare & Life Sciences | Ransomware | https://ransomware.live/id/RHJvZ3VlcsOtYSBNYXJ0b3JhbmlAcWlsaW4= |
| Abbott Laboratories (Exact Sciences) | ShinyHunters | 2026-07-18 | US | Healthcare & Life Sciences | Extortion | https://www.bleepingcomputer.com/news/security/abbott-laboratories-probes-two-cyber-incidents-amid-extortion-claims/ · https://cybernews.com/news/abbott-laboratories-breach-shinyhunters/ · https://www.abbott.com/en-us/corpnewsroom/diagnostics-testing/abbott-statement-on-cyber-incident-in-cancer-diagnostics-business |
| Salina Supply | Qilin | 2026-07-18 | United States | Consumer & Retail | Ransomware | https://www.ransomware.live |
| Reatile Group | INC Ransom | 2026-07-18 | South Africa | Energy & Utilities | Ransomware | https://www.ransomware.live |
| D.MAG New Material Technology | INC Ransom | 2026-07-18 | China | Industrials & Manufacturing | Ransomware | https://www.ransomware.live |
| NewNet S.A. | DragonForce | 2026-07-18 | CO | Technology & Software | Ransomware | https://www.ransomware.live/group/dragonforce |
| PCL Holding Public Co. Ltd | RansomHouse | 2026-07-18 | Thailand | Industrials & Manufacturing | Ransomware | https://www.ransomlook.io/recent |
| Acosol | Qilin | 2026-07-17 | Spain | Energy & Utilities | Ransomware | https://www.ransomware.live/id/QWNvc29sQHFpbGlu · https://www.hendryadrian.com/acosol-suffers-cyberattack-urges-customers-to-stay-alert/ |
| Cafar | Qilin | 2026-07-17 | Argentina | unknown | Ransomware | https://ransomware.live/id/Q2FmYXJAcWlsaW4= |
| Ecopetrol | Unattributed | 2026-07-17 | Colombia | Energy & Utilities | Breach | https://www.prnewswire.com/news-releases/ecopetrol-reports-cybersecurity-incident-302828952.html https://colombiaone.com/2026/07/18/colombia-cyberattack-company-ecopetrol/ |
| Danone | Qilin | 2026-07-17 | FR | Consumer & Retail | Ransomware | https://cybernews.com/news/danone-evian-silk-international-delight-qilin-ransomware-attack/ · https://www.ransomware.live/group/qilin |
| Fairlife LLC (Coca-Cola subsidiary) | Unattributed | 2026-07-16 | US | Consumer & Retail | Breach | https://techcrunch.com/2026/07/16/coca-cola-suspended-production-at-its-fairlife-dairy-after-a-ransomware-attack/ · https://www.theregister.com/cyber-crime/2026/07/17/ransomware-curdles-production-at-coca-colas-fairlife-dairy-biz/5274157 · https://www.helpnetsecurity.com/2026/07/17/coca-cola-fairlife-ransomware-attack/ |
| Converting Equipment International | Interlock | 2026-07-16 | GB | Industrials & Manufacturing | Ransomware | https://socradar.io/free-tools/ransomware-intelligence/victims/converting-equipment-international-interlock-bc57bbfc |
| Nihon Kotsu Co., Ltd. | AiLock | 2026-07-15 | Japan | Transportation & Logistics | Ransomware | https://www.bleepingcomputer.com/news/security/japans-largest-taxi-operator-shuts-systems-after-cyberattack/ |
| Ferrovial | AiLock | 2026-07-15 | Spain | Industrials & Manufacturing | Ransomware | https://ransomware.live/id/RmVycm92aWFsQEFpTG9jaw== |
| BRAC | The Gentlemen | 2026-07-15 | Bangladesh | Government & Public Sector | Ransomware | https://www.ransomware.live/group/the-gentlemen |
| ATCOM Technology | DragonForce | 2026-07-15 | Unknown | Media & Telecom | Ransomware | https://www.ransomware.live/group/dragonforce |
| Panasonic Avionics Corporation | Coinbasecartel | 2026-07-15 | US | Transportation & Logistics | Ransomware | https://ransomware.live/id/UGFuYXNvbmljQWVyb0Bjb2luYmFzZWNhcnRlbA== · https://www.breachsense.com/breaches/panasonic-avionics-data-breach/ |
| Fidelity Services Group | Ransomhouse | 2026-07-15 | South Africa | Cybersecurity | Ransomware | https://ransomware.live/id/RmlkZWxpdHkgU2VydmljZXMgR3JvdXBAcmFuc29taG91c2U= |
| Ernst & Young (EY) | Unattributed | 2026-07-15 | United Kingdom | Professional & Business Services | Breach | https://www.bleepingcomputer.com/news/security/ey-discloses-data-breach-exposing-client-tax-and-financial-records/ |
| Asimar (Asian Marine Service PCL) | DragonForce | 2026-07-14 | Thailand | Transportation & Logistics | Ransomware | https://www.ransomware.live/group/dragonforce |
| Momenta | DragonForce | 2026-07-14 | CN | Technology & Software | Ransomware | https://www.ransomware.live/group/dragonforce |
| Sedemi | Qilin | 2026-07-14 | Unknown | unknown | Ransomware | https://www.ransomware.live/group/qilin |
| Cedar Crest College | NightSpire | 2026-07-14 | USA | Education | Ransomware | https://ransomware.live/group/nightspire |
| Edison Global Networks Limited | DragonForce | 2026-07-14 | Hong Kong | Technology & Software | Ransomware | https://www.hookphish.com/blog/ransomware-group-dragonforce-hits-edison-global-networks-limited/ |
| Allied Plumbing Heating & Cooling | Qilin | 2026-07-13 | US | Professional & Business Services | Ransomware | ransomware.live · breachsense.com |
| Access Group International | DragonForce | 2026-07-13 | US | Professional & Business Services | Ransomware | ransomware.live · purpleops.io |
| Nichirei Corporation | RansomHouse | 2026-07-13 | Japan | Consumer & Retail | Ransomware | https://www.japantimes.co.jp/business/2026/07/22/companies/nichirei-cyberattack-ransomhouse/ |
| Retelit SpA | Qilin | 2026-07-12 | Italy | Technology & Software | Ransomware | ransomware.live · undercodenews.com |
| Carolina Agri-Power | Qilin | 2026-07-12 | US | Industrials & Manufacturing | Ransomware | ransomware.live · breachsense.com |
| Century Equities | Qilin | 2026-07-12 | US | Professional & Business Services | Ransomware | ransomware.live · breachsense.com |
| Alan F. Burke CPA | Qilin | 2026-07-11 | US | Professional & Business Services | Ransomware | [ransomware.live] |
| Bronken's Distributing | Qilin | 2026-07-11 | wholesale/US | Transportation & Logistics | Ransomware | [ransomware.live] |
| Carita | The Gentlemen | 2026-07-11 | France | Consumer & Retail | Ransomware | ransomware.live · breachsense.com |
| Nihon Kotsu | Unattributed | 2026-07-11 | JP | Transportation & Logistics | Breach | https://www.bleepingcomputer.com/news/security/japans-largest-taxi-operator-shuts-systems-after-cyberattack/ https://www.scworld.com/brief/japans-largest-taxi-operator-suffers-cyberattack-disrupts-services |
| The Schuett Companies | Qilin | 2026-07-10 | construction/US | Professional & Business Services | Ransomware | [ransomware.live] |
| Eurodefi | Qilin | 2026-07-10 | EU | Financial Services | Ransomware | [ransomware.live] |
| Sintax | Qilin | 2026-07-10 | Belgium | Professional & Business Services | Ransomware | [ransomware.live] |
| Commune de Castries | Payload | 2026-07-10 | France | Government & Public Sector | Ransomware | [ransomware.live] |
| Robroy Industries | Brain Cipher | 2026-07-10 | US | Industrials & Manufacturing | Ransomware | [ransomware.live] |
| Finance Yorkshire | CMD | 2026-07-10 | UK | Financial Services | Ransomware | [ransomware.live] |
| Envision Unlimited | MoneyMessage | 2026-07-10 | human services/US | Government & Public Sector | Ransomware | [ransomware.live] |
| Lidl | Unattributed | 2026-07-10 | Germany | Consumer & Retail | Breach | BleepingComputer · Help Net Security · SC Media |
| Inter Power Engineering | Qilin | 2026-07-09 | Singapore | Technology & Software | Ransomware | [ransomware.live] |
| IAC International | Brain Cipher | 2026-07-09 | US | Industrials & Manufacturing | Ransomware | [ransomware.live] |
| Greene County Government (GA) | Incrandom | 2026-07-09 | US | Government & Public Sector | Ransomware | https://hoodline.com/2026/07/cyber-scare-knocks-greene-county-computers-offline/ |
| Canadian Armed Forces (forces.gc.ca) | Bavaqai | 2026-07-09 | CAN | Government & Public Sector | Ransomware | https://socradar.io/data-breach/forces-medusalocker-ransomware-2026/ |
| Accelirate Inc. | Qilin | 2026-07-08 | intelligent automation/US | Technology & Software | Ransomware | [SharkStriker] · [ransomware.live] |
| S.J. Louis Construction | Qilin | 2026-07-08 | US | Industrials & Manufacturing | Ransomware | [SharkStriker] · [ransomware.live] |
| Ample Surveyor Services | DragonForce | 2026-07-08 | professional services/unknown region | Industrials & Manufacturing | Ransomware | [SharkStriker] · [ransomware.live] |
| HIVE360 | DragonForce | 2026-07-08 | payroll services/UK | Professional & Business Services | Ransomware | [SharkStriker] · [ransomware.live] |
| Dignity Health St. Mary's Medical Center | Akira | 2026-07-08 | hospital/US | Healthcare & Life Sciences | Ransomware | [ClassAction.org] · [BleepingComputer] |
| Wade's Dairy | Akira | 2026-07-08 | dairy manufacturing/US | Consumer & Retail | Ransomware | [SharkStriker] · [ransomware.live] |
| Aesthetic Surgical Images | INC Ransom | 2026-07-08 | plastic surgery/US | Healthcare & Life Sciences | Ransomware | [SharkStriker] · [ransomware.live] |
| Printronix | Brain Cipher | 2026-07-08 | printer-hardware manufacturing/US | Technology & Software | Ransomware | [ransomware.live] |
| PCCC Realty LLC | NightSpire | 2026-07-08 | US | Professional & Business Services | Ransomware | [ransomware.live] |
| Shanghai Xuerong Biotechnology Co., Ltd. | KRYBIT | 2026-07-08 | China | Healthcare & Life Sciences | Ransomware | [SharkStriker] · [ransomware.live] |
| Shelby Manufacturing de México | KRYBIT | 2026-07-08 | Mexico | Industrials & Manufacturing | Ransomware | [SharkStriker] · [ransomware.live] |
| Conway Data | Everest | 2026-07-08 | US | Technology & Software | Ransomware | [SharkStriker] · [ransomware.live] |
| Greenbotz | Everest | 2026-07-08 | unknown region | Professional & Business Services | Ransomware | [SharkStriker] · [ransomware.live] |
| Next Clinics | Qilin | 2026-07-07 | US | Healthcare & Life Sciences | Ransomware | [ransomware.live] |
| Excalibur Rentals | Akira | 2026-07-07 | US | Industrials & Manufacturing | Ransomware | [DeXpose] · [ransomware.live] |
| RISE Architecture | Akira | 2026-07-07 | US | Industrials & Manufacturing | Ransomware | [GalaxyWarden] · [ransomware.live] |
| Chisholm, Persson & Ball, PC | Akira | 2026-07-07 | law firm/US | Professional & Business Services | Ransomware | [HookPhish] · [ransomware.live] |
| Mercado Libre | The Gentlemen | 2026-07-07 | technology/Argentina | Consumer & Retail | Ransomware | [EscudoDigital] · [Rankiteo] · [ransomware.live] |
| YMCA of Western North Carolina | Interlock | 2026-07-07 | community services/US | Government & Public Sector | Ransomware | [ransomware.live] |
| Precision Steel Services | Qilin | 2026-07-06 | steel service center/US | Industrials & Manufacturing | Ransomware | [DeXpose] · [ransomware.live] |
| Wood Ellis & Wood CPA | Qilin | 2026-07-06 | accounting/US | Professional & Business Services | Ransomware | [DeXpose] · [ransomware.live] |
| Max Fordham | Qilin | 2026-07-06 | building engineering/UK | Professional & Business Services | Ransomware | [DeXpose] · [ransomware.live] |
| Grupo Inteca | Qilin | 2026-07-06 | Mexico | Industrials & Manufacturing | Ransomware | [ransomware.live] |
| CSEC RATP | The Gentlemen | 2026-07-06 | France | Professional & Business Services | Ransomware | [ransomware.live] |
| Arabia Falcon Insurance Company | The Gentlemen | 2026-07-06 | Oman | Financial Services | Ransomware | [ransomware.live] |
| Ahmet Aydeniz Group | APT73 | 2026-07-06 | Turkey | Industrials & Manufacturing | Ransomware | [ransomware.live] |
| CNW Electronics Pte Ltd | Unattributed | 2026-07-06 | electronics/Singapore | Industrials & Manufacturing | Breach | [ransomware.live] |
| AC Beverage | Unattributed | 2026-07-06 | US | Consumer & Retail | Breach | [ransomware.live] |
| Apex Agro LLC | Genesis | 2026-07-06 | US | Industrials & Manufacturing | Ransomware | [ransomware.live] |
| Asisken | Wallstreet | 2026-07-06 | unknown | Healthcare & Life Sciences | Ransomware | [ransomware.live] |
| Sisint | Qilin | 2026-07-04 | Portugal | Technology & Software | Ransomware | [ransomware.live] |
| Sitmatic GmbH | Qilin | 2026-07-04 | Germany | Technology & Software | Ransomware | [ransomware.live] |
| TQ Financial Services | Qilin | 2026-07-04 | unknown | Financial Services | Ransomware | [ransomware.live] |
| Md Lewis | Qilin | 2026-07-04 | US | sector unknown | Ransomware | [ransomware.live] |
| Goodwill Manasota | Qilin | 2026-07-04 | thrift retail/US | Government & Public Sector | Ransomware | [ransomware.live] |
| Chemco | Qilin | 2026-07-04 | Canada | Industrials & Manufacturing | Ransomware | [ransomware.live] |
| Locati Architects | Play | 2026-07-04 | construction/Australia | Industrials & Manufacturing | Ransomware | [ransomware.live] |
| Silvestri & Associates Insurance | Play | 2026-07-04 | insurance/US | Financial Services | Ransomware | [DeXpose] |
| US government entity | Kairos | 2026-07-04 | US | Government & Public Sector | Ransomware | [The Hacker News] · [Security Affairs] |
| Baraga County Memorial Hospital | Wallstreet | 2026-07-04 | US | Healthcare & Life Sciences | Ransomware | [ransomware.live] |
| Edgewood Police Department | Wallstreet | 2026-07-04 | law enforcement/US | Government & Public Sector | Ransomware | [ransomware.live] |
| Gold Standard Automotive | Wallstreet | 2026-07-04 | US | Industrials & Manufacturing | Ransomware | [ransomware.live] |
| Deutsche Bank | UnSafe | 2026-07-04 | financial services/Germany | Financial Services | Ransomware | [ransomware.live] |
| Abbott Laboratories (LabCentral) | ShadowByt3dollar | 2026-07-04 | USA | Healthcare & Life Sciences | Ransomware | https://www.bleepingcomputer.com/news/security/abbott-laboratories-probes-two-cyber-incidents-amid-extortion-claims/ |
| Prince George County | RansomHouse | 2026-07-03 | US Virginia | Government & Public Sector | Ransomware | [WRIC ABC 8News] · [GovTech] · [ransomware.live] · [RedPacket Security] |
| Oak Park | INC Ransom | 2026-07-03 | city/US | Government & Public Sector | Ransomware | [ransomware.live] |
| City of Acworth, Georgia | INC Ransom | 2026-07-03 | US | Government & Public Sector | Ransomware | [ransomware.live] |
| Carvalima Transportes | INC Ransom | 2026-07-03 | Portugal | Transportation & Logistics | Ransomware | [ransomware.live] |
| Estrutural Zortéa | INC Ransom | 2026-07-03 | Brazil | Industrials & Manufacturing | Ransomware | [ransomware.live] |
| CUI Agency | The Gentlemen | 2026-07-03 | US | Financial Services | Ransomware | [DeXpose] |
| MakoLab S.A. | The Gentlemen | 2026-07-03 | Poland | Technology & Software | Ransomware | [DeXpose] |
| Shamrock | The Gentlemen | 2026-07-03 | US | sector unknown | Ransomware | [ransomware.live] |
| Ferrum AG | Anubis | 2026-07-03 | Switzerland | Industrials & Manufacturing | Ransomware | [ransomware.live] · [RansomLook] |
| Dixie Beverage West | Qilin | 2026-07-02 | US | Consumer & Retail | Ransomware | [ransomware.live] |
| Pennant Hills Golf Club | Qilin | 2026-07-02 | Australia | Consumer & Retail | Ransomware | [ransomware.live] · [hendryadrian.com] |
| A. Bianchini Ingeniero S.A. | LockBit | 2026-07-02 | Spain | Industrials & Manufacturing | Ransomware | [ransomware.live] |
| AWO Kreisverband Südost e.V. | SafePay | 2026-07-02 | Germany | Government & Public Sector | Ransomware | [ransomware.live] |
| DIA179 | SafePay | 2026-07-02 | Germany | Industrials & Manufacturing | Ransomware | [ransomware.live] |
| COMHAR | WorldLeaks | 2026-07-02 | Ireland | Government & Public Sector | Ransomware | [ransomware.live] |
| Treet Group of Companies | WorldLeaks | 2026-07-02 | conglomerate/Pakistan | Industrials & Manufacturing | Ransomware | [hendryadrian.com] · [ransomware.live] |
| Service IT | WorldLeaks | 2026-07-02 | Brazil | Technology & Software | Ransomware | [hendryadrian.com] · [ransomware.live] |
| Fluke Corporation | ShinyHunters | 2026-07-02 | test-and-measurement manufacturing/US | Technology & Software | Extortion | [RedPacket Security] · [ransomware.live] |
| Ingram Content Group | ShinyHunters | 2026-07-02 | book distribution/US | Media & Telecom | Extortion | [BreachNews] · [hendryadrian.com] |
| AAI | Krybit | 2026-07-02 | manufacturing/Taiwan | Technology & Software | Ransomware | [ransomware.live] |
| DISS | Krybit | 2026-07-02 | US | Healthcare & Life Sciences | Ransomware | [ransomware.live] |
| Colorado Rehabilitation & Occupational Medicine | INC Ransom | 2026-07-02 | US | Healthcare & Life Sciences | Ransomware | [ransomware.live] |
| Tofutown | Payload | 2026-07-02 | organic plant-based foods/Germany | Consumer & Retail | Ransomware | [ransomware.live] · [hendryadrian.com] |
| Quest Healthcare Solutions | Anubis | 2026-07-02 | US | Healthcare & Life Sciences | Ransomware | [hendryadrian.com] · [ransomware.live] |
| Amtivo | SETTRA | 2026-07-02 | professional services/US | Professional & Business Services | Ransomware | [FalconFeeds] · [ransomware.live] |
| X-Copper Professional Corporation | MoneyMessage | 2026-07-02 | Canada | Professional & Business Services | Ransomware | [hendryadrian.com] |
| A. Bianchini | LockBit | 2026-07-02 | Spain | Industrials & Manufacturing | Ransomware | https://ransomware.live/id/YWJpYW5jaGluaS5lc0Bsb2NrYml0NQ== |
| JS Hotels | LockBit | 2026-07-02 | Spain | Consumer & Retail | Ransomware | https://www.ransomware.live/id/anNob3RlbHMuY29tQGxvY2tiaXQ1 |
| Dennis Waters Rental Properties | Qilin | 2026-07-01 | US | Professional & Business Services | Ransomware | [DeXpose] |
| Dynamic Laser Solutions Ltd. | Qilin | 2026-07-01 | UK | Industrials & Manufacturing | Ransomware | [DeXpose] |
| Laughlin Nunnally Hood & Crum | Qilin | 2026-07-01 | US | Professional & Business Services | Ransomware | [DeXpose] |
| Gies Dienstleistungen | LockBit | 2026-07-01 | Germany | Professional & Business Services | Ransomware | [Breachsense] |
| Refinery Hotel | Akira | 2026-07-01 | hotel/US | Consumer & Retail | Ransomware | [RedPacket Security] · [HookPhish] · [ransomware.live] |
| Starpool | WorldLeaks | 2026-07-01 | spas/Italy | Consumer & Retail | Ransomware | [ransomware.live] · [DeXpose] |
| B'Laofood Joint Stock Company | KRYBIT | 2026-07-01 | Vietnam | Consumer & Retail | Ransomware | [DeXpose] · [ransomware.live] |
| Azienda Ospedaliera Moscati | Krybit | 2026-07-01 | Italy | Healthcare & Life Sciences | Ransomware | [ransomware.live] |
| Roundshield Partners LLP | INC Ransom | 2026-07-01 | private equity/UK | Financial Services | Ransomware | [DeXpose] |
| Boyne City | The Gentlemen | 2026-07-01 | US | Government & Public Sector | Ransomware | [Breachsense] |
| FAC Logistique | The Gentlemen | 2026-07-01 | France | Transportation & Logistics | Ransomware | [Breachsense] |
| Centre Ophtalmologique d'Ermont | The Gentlemen | 2026-07-01 | ophthalmology/France | Healthcare & Life Sciences | Ransomware | [Breachsense] |
| CTM India Limited motherson INDIA | The Gentlemen | 2026-07-01 | automotive manufacturing/India | Industrials & Manufacturing | Ransomware | [RedPacket Security] · [ransomware.live] |
| Golden State Orthopedic | Brain Cipher | 2026-07-01 | orthopedics/US | Healthcare & Life Sciences | Ransomware | [DeXpose] |
| Digital Dynamics Inc. | Brain Cipher | 2026-07-01 | US | Technology & Software | Ransomware | [DeXpose] |
| CQCRM | Icarus | 2026-07-01 | unknown | Technology & Software | Ransomware | [Dark Reading] |
| CBAssociates | Icarus | 2026-07-01 | unknown | Professional & Business Services | Ransomware | [Dark Reading] |
| AeroVision Avionics, Inc. | KRYBIT | 2026-07-01 | Taiwan | Industrials & Manufacturing | Ransomware | [DeXpose] · [ransomware.live] |
| DISS Corporation / DISS Analytics | KRYBIT | 2026-07-01 | digital solutions/US | Technology & Software | Ransomware | [SOCRadar] · [ransomware.live] |
| City Lumber Company | SETTRA | 2026-07-01 | US Tennessee | Industrials & Manufacturing | Ransomware | [DeXpose] · [FalconFeeds] |
| Orion Registrar Inc. | SETTRA | 2026-07-01 | professional services/US | Professional & Business Services | Ransomware | [DeXpose] |
| Nidec Chaun Choung Technology Co., Ltd. | Blackfield | 2026-07-01 | Taiwan | Technology & Software | Ransomware | [BleepingComputer] · [DeXpose] |
| Dolrad | MedusaLocker | 2026-07-01 | UAE | Professional & Business Services | Ransomware | [RedPacket Security] · [ransomware.live] |
| Penticton and District Society for Community Living | MedusaLocker | 2026-07-01 | disability services/Canada | Government & Public Sector | Ransomware | [RedPacket Security] · [ransomware.live] |
| ComTRI GmbH | LockBit | 2026-07-01 | Germany | Technology & Software | Ransomware | https://www.ransomware.live/ |
| Hotel de la Bourse | LockBit | 2026-07-01 | France | Consumer & Retail | Ransomware | https://ransomware.live/id/aG90ZWwtYm91cnNlLmNvbUBsb2NrYml0NQ== |
| Marquis Software | Unknown | 2026-07-01 | US | Financial Services | Ransomware | https://therecord.media/marquis-bank-vendor-data-breach |
| KALIACT ANCHETA et Associés | Qilin | 2026-06-30 | France | Professional & Business Services | Ransomware | [SOCRadar] · [ransomware.live] |
| KUNERT Fashion | Qilin | 2026-06-30 | legwear/Germany | Industrials & Manufacturing | Ransomware | [RedPacket Security] · [ransomware.live] |
| Chamco | Qilin | 2026-06-30 | Canada | Industrials & Manufacturing | Ransomware | [DeXpose] · [ransomware.live] |
| Western Construction | Play | 2026-06-30 | US | Industrials & Manufacturing | Ransomware | [ransomware.live] |
| Agroprime | DragonForce | 2026-06-30 | Brazil | Industrials & Manufacturing | Ransomware | [ransomware.live] · [Breachsense] |
| Hwa Seng Water Resources Biotech Co., Ltd. | DragonForce | 2026-06-30 | Taiwan | Consumer & Retail | Ransomware | [ransomware.live] · [Breachsense] |
| Advanced Business Systems | Akira | 2026-06-30 | technology/US | Professional & Business Services | Ransomware | [DeXpose] |
| Primed Halberstadt Medizintechnik GmbH | Aur0ra | 2026-06-30 | Germany | Healthcare & Life Sciences | Ransomware | [ransomware.live] |
| On-us | Gunra | 2026-06-30 | US | Technology & Software | Ransomware | [DeXpose] |
| Pou Sheng International Holdings | The Gentlemen | 2026-06-30 | China+Hong Kong | Consumer & Retail | Ransomware | [ransomware.live] |
| SDEZ | The Gentlemen | 2026-06-30 | France | Consumer & Retail | Ransomware | [ransomware.live] |
| Mondottica | The Gentlemen | 2026-06-30 | luxury eyewear/Italy | Consumer & Retail | Ransomware | [RedPacket Security] · [ransomware.live] |
| Melcor Developments Ltd | The Gentlemen | 2026-06-30 | construction/Canada | Professional & Business Services | Ransomware | [RedPacket Security] · [ransomware.live] |
| Indra Group | The Gentlemen | 2026-06-30 | aerospace/technology/Spain | Industrials & Manufacturing | Ransomware | [Cybernews] · [Cybersecurity Insiders] · [SOCRadar] |
| PAI Pharma | Brain Cipher | 2026-06-30 | US | Healthcare & Life Sciences | Ransomware | [ransomware.live] |
| Boston Orthotics & Prosthetics | Anubis | 2026-06-30 | orthotics-prosthetics/US | Healthcare & Life Sciences | Ransomware | [ransomware.live] · [Breachsense] |
| ESMS Global | Anubis | 2026-06-30 | UK | Healthcare & Life Sciences | Ransomware | [ransomware.live] · [Breachsense] |
| Port Angeles Composite LLC | CMD | 2026-06-30 | advanced manufacturing/US | Industrials & Manufacturing | Ransomware | [ransomware.live] |
| Medlink Georgia | CMD | 2026-06-30 | federally qualified health center/US | Healthcare & Life Sciences | Ransomware | [DeXpose] · [ransomware.live] |
| Aflac Life Insurance Japan Ltd. | Scattered Spider | 2026-06-30 | Japan | Financial Services | Extortion | [SecurityWeek] · [BleepingComputer] · [Japan Times] |
| Abans Group | BlackNevas | 2026-06-30 | multinational | Financial Services | Ransomware | [ransomware.live] · [Breachsense] |
| Arkın Group | BlackNevas | 2026-06-30 | casino/Northern Cyprus | Consumer & Retail | Ransomware | [ransomware.live] · [RedPacket Security] |
| Brooklyn Defender Services | Genesis | 2026-06-30 | US | Professional & Business Services | Ransomware | [ransomware.live] · [RedPacket Security] |
| Owensboro Grain Company | SETTRA | 2026-06-30 | grain processing/US | Industrials & Manufacturing | Ransomware | [DeXpose] · [RedPacket Security] · [ransomware.live] |
| Tour Edge | SETTRA | 2026-06-30 | golf equipment manufacturing/US | Consumer & Retail | Ransomware | [DeXpose] · [ransomware.live] |
| Ilex Paysages et Urbanisme | SETTRA | 2026-06-30 | urban planning/France | Professional & Business Services | Ransomware | [DeXpose] · [RedPacket Security] · [ransomware.live] |
| Wilfley | SETTRA | 2026-06-30 | US | Industrials & Manufacturing | Ransomware | [ransomware.live] |
| Petra Diamonds | SETTRA | 2026-06-30 | UK | Industrials & Manufacturing | Ransomware | [HookPhish] · [RedPacket Security] · [FalconFeeds] |
| Joy Construction Corp | SETTRA | 2026-06-30 | real estate development/US | Industrials & Manufacturing | Ransomware | [FalconFeeds] · [ransomware.live] |
| VCNY Home | SETTRA | 2026-06-30 | consumer goods/US | Consumer & Retail | Ransomware | [FalconFeeds] · [ransomware.live] |
| Cedrick Frank Associates | SETTRA | 2026-06-30 | US | Professional & Business Services | Ransomware | [FalconFeeds] · [ransomware.live] |
| May Trucking Company | Embargo | 2026-06-30 | transportation/US | Transportation & Logistics | Ransomware | [ransomware.live] · [RedPacket Security] |
| Axionlog | Qilin | 2026-06-29 | supply chain/unknown region | Transportation & Logistics | Ransomware | [ransomware.live] |
| NASCO | Qilin | 2026-06-29 | US | Healthcare & Life Sciences | Ransomware | [ransomware.live] |
| Bristol Place Corporation | Qilin | 2026-06-29 | US | Healthcare & Life Sciences | Ransomware | [ransomware.live] · [Breachsense] |
| Musashino University | Qilin | 2026-06-29 | Japan | Education | Ransomware | [RedPacket Security] |
| STNI Co., Ltd. | DragonForce | 2026-06-29 | South Korea | Technology & Software | Ransomware | [DeXpose] · [ransomware.live] |
| Bonacio Construction | RansomHouse | 2026-06-29 | real estate development/US | Industrials & Manufacturing | Ransomware | [ransomware.live] · [Breachsense] |
| Nissan North America | ShinyHunters | 2026-06-29 | US+Canada+Mexico+Brazil | Industrials & Manufacturing | Extortion | [The Register] · [SC Media] · [Infosecurity Magazine] |
| GDN AR | INC Ransom | 2026-06-29 | food retail/Argentina | Consumer & Retail | Ransomware | [ransomware.live] |
| Clínica La Sabana | Payload | 2026-06-29 | clinic/Colombia | Healthcare & Life Sciences | Ransomware | [Breachsense] · [ransomware.live] |
| Canopy Brands | SETTRA | 2026-06-29 | US | Consumer & Retail | Ransomware | [ransomware.live] · [FalconFeeds] |
| Total Monitoring Services Inc. | SETTRA | 2026-06-29 | Canada | Cybersecurity | Ransomware | [FalconFeeds] · [ransomware.live] |
| Doosan | SETTRA | 2026-06-29 | South Korea | Industrials & Manufacturing | Ransomware | [FalconFeeds] · [ransomware.live] |
| HMC Farms | SETTRA | 2026-06-29 | Canada | Industrials & Manufacturing | Ransomware | [FalconFeeds] · [ransomware.live] |
| DyStar Group | SETTRA | 2026-06-29 | textile dyes/global | Industrials & Manufacturing | Ransomware | [FalconFeeds] · [ransomware.live] |
| Quality Dining Inc. | SETTRA | 2026-06-29 | restaurant operator/US | Consumer & Retail | Ransomware | [ransomware.live] |
| Virginia Glass Products | SETTRA | 2026-06-29 | US | Industrials & Manufacturing | Ransomware | [ransomware.live] |
| 1-800-Dentist | Qilin | 2026-06-28 | dental referral/US | Consumer & Retail | Ransomware | [RedPacket Security] · [ransomware.live] |
| TransCore | Qilin | 2026-06-28 | ITS/US | Transportation & Logistics | Ransomware | [ransomware.live] |
| Higuchi Inc. | Stormous | 2026-06-28 | Japan | Industrials & Manufacturing | Ransomware | [HookPhish] · [SOCRadar] |
| HIGUCHI USA, INC. | Stormous | 2026-06-28 | US | Industrials & Manufacturing | Ransomware | [ransomware.live] |
| EOGB Energy Products Ltd | Stormous | 2026-06-28 | energy products/UK | Industrials & Manufacturing | Ransomware | [ransomware.live] |
| ESHA Research/ESHA Cloud Services | Stormous | 2026-06-28 | nutrition software/US | Consumer & Retail | Ransomware | [HookPhish] · [SOCRadar] |
| Monoprix.tn | Stormous | 2026-06-28 | Tunisia | Consumer & Retail | Ransomware | [ransomware.live] |
| Thyssenkrupp Marine Systems (TKMS) GmbH / Atlas Elektronik | The Gentlemen | 2026-06-28 | Germany | Industrials & Manufacturing | Ransomware | [ransomware.live] · [ransomware.live summary] |
| Ford Motor Company Mexico | KRYBIT | 2026-06-28 | Mexico | Industrials & Manufacturing | Ransomware | [ransomware.live] · [SOCRadar] |
| FCCI Insurance Group | REDACT | 2026-06-28 | financial services/US | Financial Services | Ransomware | [ransomware.live] · [RedPacket Security] |
| Hologic, Inc. | REDACT | 2026-06-28 | healthcare technology/US | Healthcare & Life Sciences | Ransomware | [RedPacket Security] |
| Turbo Data Systems | SETTRA | 2026-06-28 | data broker/US | Technology & Software | Ransomware | [ransomware.live] · [RedPacket Security] |
| Conduril Engenharia S.A. | SETTRA | 2026-06-28 | construction/Portugal | Industrials & Manufacturing | Ransomware | [ransomware.live] · [SOCRadar] |
| LifeVantage Corporation | SETTRA | 2026-06-28 | US | Consumer & Retail | Ransomware | [DeXpose] · [ransomware.live] |
| PChome Online Inc. | SETTRA | 2026-06-28 | Taiwan | Consumer & Retail | Ransomware | [DeXpose] · [GalaxyWarden] · [SOCRadar] |
| KDDI Corporation | Unattributed | 2026-06-28 | Japan | Media & Telecom | Breach | [The Record] · [SecurityWeek] |
| Kuhnline | Play | 2026-06-27 | Germany | Industrials & Manufacturing | Ransomware | [ransomware.live] · [Cyber News Live] |
| hellmold-plank.de | SafePay | 2026-06-27 | Germany | Industrials & Manufacturing | Ransomware | [ransomware.live] |
| Aptora | DragonForce | 2026-06-27 | SaaS/field service management/US | Technology & Software | Ransomware | [ransomware.live] |
| Tokyo Civil Co., Ltd. | SafePay | 2026-06-26 | construction/Japan | Industrials & Manufacturing | Ransomware | [CYFIRMA] · [ransomware.live] |
| Precise Forms, Inc. | Akira | 2026-06-26 | aluminum forms/US | Industrials & Manufacturing | Ransomware | [DeXpose] · [ransomware.live] |
| NSW Rural Fire Service | Nova | 2026-06-26 | emergency services/Australia | Government & Public Sector | Ransomware | [Cyber Daily] · [ransomware.live] |
| VSL Marine Technology Pvt. Ltd. | Nova | 2026-06-26 | 3D scanning/India | Industrials & Manufacturing | Ransomware | [DeXpose] · [ransomware.live] |
| callhorton.com | INC Ransom | 2026-06-26 | US | Professional & Business Services | Ransomware | [ransomware.live] |
| johndufourlaw.com | INC Ransom | 2026-06-26 | US | Professional & Business Services | Ransomware | [ransomware.live] |
| Life Bridges | INC Ransom | 2026-06-26 | social services/US | Government & Public Sector | Ransomware | [DeXpose] · [Breachsense] |
| Salters Propane | SpaceBears | 2026-06-26 | propane distribution/US | Energy & Utilities | Ransomware | [RedPacket Security] · [hendryadrian.com] |
| Ingerman | Chaos | 2026-06-26 | real estate/US | Professional & Business Services | Ransomware | [DeXpose] · [RedPacket Security] |
| 911 Driving School | PrinzEugen | 2026-06-26 | driving instruction/US | Education | Ransomware | [Breachsense] |
| Mosaic Partners | Payload | 2026-06-26 | Switzerland | Technology & Software | Ransomware | [DeXpose] · [RedPacket Security] · [ransomware.live] |
| Software Arge | Payload | 2026-06-26 | data analytics/Turkey | Technology & Software | Ransomware | [DeXpose] · [RedPacket Security] |
| Payload Corporation | Payload | 2026-06-26 | payments/US | Financial Services | Ransomware | [DeXpose] · [ransomware.live] |
| Nachlass Nord | Anubis | 2026-06-26 | Germany | sector unknown | Ransomware | [Breachsense] |
| Clearview Eye Centre | Interlock | 2026-06-26 | ophthalmology/Canada | Healthcare & Life Sciences | Ransomware | [ransomware.live] · [DeXpose] |
| MagMutual Insurance Company | LeakNet | 2026-06-26 | US | Financial Services | Ransomware | [Breachsense] |
| Policía de Turismo | KRYBIT | 2026-06-26 | law enforcement/Dominican Republic | Government & Public Sector | Ransomware | [Breachsense] |
| Hokua Suites | AiLock | 2026-06-26 | luxury residential condominium/US | Professional & Business Services | Ransomware | [DeXpose] · [RedPacket Security] · [ransomware.live] |
| ISOPLUS | Qilin | 2026-06-25 | Greece | Healthcare & Life Sciences | Ransomware | [DeXpose] · [hendryadrian.com] |
| JMS Southeast | Akira | 2026-06-25 | industrial distribution/US | Professional & Business Services | Ransomware | [RedPacket Security] · [malware.news] |
| Padget Technologies | Akira | 2026-06-25 | robotics-automation/US | Industrials & Manufacturing | Ransomware | [RedPacket Security] · [malware.news] |
| San Silvestre School | Krybit | 2026-06-25 | Peru | Education | Ransomware | [FalconFeeds] |
| impulso-store.com | Stormous | 2026-06-25 | Italy | Consumer & Retail | Ransomware | [ransomware.live] · [Breachsense] |
| Au Vieux Campeur | The Gentlemen | 2026-06-25 | France | Consumer & Retail | Ransomware | [FrenchBreaches] · [Cyberattaque.org] · [ransomware.live] |
| Al-Dhow | The Gentlemen | 2026-06-25 | Kuwait | Industrials & Manufacturing | Ransomware | [ransomware.live] · [Breachsense] |
| Gegenbauer Elektrotechnik & IT | The Gentlemen | 2026-06-25 | IT services/Austria | Industrials & Manufacturing | Ransomware | [ransomware.live] · [Breachsense] |
| BDS CZ | The Gentlemen | 2026-06-25 | Czech Republic | Professional & Business Services | Ransomware | [Breachsense] · [ransomware.live] |
| Bell Hardware | The Gentlemen | 2026-06-25 | US | Industrials & Manufacturing | Ransomware | [Breachsense] · [ransomware.live] |
| Beran Concrete, Inc. | The Gentlemen | 2026-06-25 | building materials/US | Industrials & Manufacturing | Ransomware | [Breachsense] · [ransomware.live] |
| I-SYS | AuditTeam | 2026-06-25 | Russia | Technology & Software | Ransomware | [ransomware.live] · [Breachsense] |
| Delegal Poindexter & Underkofler, P.A. | Morpheus | 2026-06-25 | employment law/US | Professional & Business Services | Ransomware | [HookPhish] · [DeXpose] |
| Frosty Acres Brands | Booba | 2026-06-25 | food distribution cooperative/US | Consumer & Retail | Ransomware | [DeXpose] · [Breachsense] |
| Cash Canada | Qilin | 2026-06-24 | Canada | Financial Services | Ransomware | [RedPacket Security] · [ransomware.live] |
| Miami Machine Inc. | Akira | 2026-06-24 | US | Industrials & Manufacturing | Ransomware | [ransomware.live] |
| JIT-EX LLC | Akira | 2026-06-24 | trucking-logistics/US | Transportation & Logistics | Ransomware | [RedPacket Security] · [ransomware.live] |
| Adapt | ShinyHunters | 2026-06-24 | US | sector unknown | Extortion | [DeXpose] |
| Alexandria | Nova | 2026-06-24 | unknown region | Media & Telecom | Ransomware | [ransomware.live] |
| LP Group | Nova | 2026-06-24 | real estate/unknown region | Industrials & Manufacturing | Ransomware | [ransomware.live] |
| Transvill SRL | Nova | 2026-06-24 | Peru | Transportation & Logistics | Ransomware | [ransomware.live] · [RedPacket Security] |
| montechiaro-store.com | Stormous | 2026-06-24 | e-commerce/unknown | Consumer & Retail | Ransomware | [RedPacket Security] |
| mlit.com.my | Stormous | 2026-06-24 | public sector/Malaysia | Government & Public Sector | Ransomware | [RedPacket Security] |
| lorenzoni-store.com | Stormous | 2026-06-24 | knitwear retail/Italy | Consumer & Retail | Ransomware | [RedPacket Security] · [FalconFeeds] |
| maglificioliliana.com | Stormous | 2026-06-24 | knitwear manufacturing/Italy | Consumer & Retail | Ransomware | [HookPhish] · [FalconFeeds] |
| Stadttheater Giessen | The Gentlemen | 2026-06-24 | culture/Germany | Media & Telecom | Ransomware | [RedPacket Security] · [ransomware.live] |
| Quest Health Solutions | Anubis | 2026-06-24 | US | Healthcare & Life Sciences | Ransomware | [DeXpose] · [HookPhish] · [ransomware.live] |
| Sapporo Holdings | Unattributed | 2026-06-24 | Japan | Consumer & Retail | Breach | [The Record] · [Pipeline.co] |
| Lee International | Qilin | 2026-06-23 | US | sector | Ransomware | [RedPacket Security] · [ransomware.live] |
| Leo International | Akira | 2026-06-23 | PVF/HVAC/plumbing products/US | Transportation & Logistics | Ransomware | [ransomware.live] |
| IH Engineers, P.C. | Akira | 2026-06-23 | US | Industrials & Manufacturing | Ransomware | [ransomware.live] |
| Nike, Inc. | WorldLeaks | 2026-06-23 | US | Consumer & Retail | Ransomware | [Infosecurity Magazine] · [Dark Reading] · [Computing] |
| FTL-Fast Transit Line | Nova | 2026-06-23 | Belgium | Transportation & Logistics | Ransomware | [DeXpose] · [ransomware.live] |
| Aerospace & Advanced Composites GmbH | Aur0ra | 2026-06-23 | Austria | Industrials & Manufacturing | Ransomware | [Breachsense] · [ransomware.live] |
| Belpointe Asset Management | INC Ransom | 2026-06-23 | investment/US | Financial Services | Ransomware | [Breachsense] · [ransomware.live] |
| Horizon Eye Care | INC Ransom | 2026-06-23 | ophthalmology/US | Healthcare & Life Sciences | Ransomware | [RedPacket Security] · [ransomware.live] |
| Randa Apparel & Accessories | Chaos | 2026-06-23 | fashion/US | Consumer & Retail | Ransomware | [DeXpose] · [ransomware.live] |
| (Jun 22-23 DLS batch: 15 new victims claimed past 24h incl. healthcare×3, hospitality, manufacturing, transportation | The Gentlemen | 2026-06-23 | — | individual org names not yet enumerated in public feeds; to be split as sources firm up) | Ransomware | [PurpleOps] |
| Canada Wide Media | The Gentlemen | 2026-06-23 | Canada | Media & Telecom | Ransomware | [Breachsense] · [ransomware.live] |
| GIA Partners LLC | The Gentlemen | 2026-06-23 | US | Financial Services | Ransomware | [Breachsense] · [ransomware.live] |
| OneTrust | Icarus | 2026-06-23 | US | Cybersecurity | Ransomware | [SecurityWeek] |
| Global Message Services | Icarus | 2026-06-23 | Switzerland | Technology & Software | Ransomware | [RedPacket Security] · [ransomware.live] |
| LastPass | Icarus | 2026-06-23 | cybersecurity/US | Cybersecurity | Ransomware | [BleepingComputer] · [TechCrunch] · [LastPass Blog] |
| Reynella East College | Interlock | 2026-06-23 | Australia | Education | Ransomware | [Cyber Daily] · [ransomware.live] |
| Gov.br | APT73 | 2026-06-23 | digital infrastructure/Brazil | Government & Public Sector | Ransomware | [BlackFog] · [ransomware.live] · [RedPacket Security] |
| KliknKlik.com | APT73 | 2026-06-23 | computer equipment/Indonesia | Consumer & Retail | Ransomware | [ransomware.live] · [DeXpose] · [CloudSEK] |
| Flughafen Wien AG | APT73 | 2026-06-23 | transportation/Austria | Transportation & Logistics | Ransomware | [DeXpose] · [Aviation.Direct] |
| Coldstat Refrigeration | CMD | 2026-06-23 | US | Industrials & Manufacturing | Ransomware | [ransomware.live] |
| AYA Bank | Lapsus$ | 2026-06-23 | financial services/Myanmar | Financial Services | Ransomware | [ransomware.live] · [RedPacket Security] · [HookPhish] |
| Central Bank of Libya | Qilin | 2026-06-22 | central bank/Libya | Financial Services | Ransomware | [ransomware.live] · [Libya Observer] |
| NationsBuilders Insurance Services | Aur0ra | 2026-06-22 | US | Financial Services | Ransomware | [DeXpose] |
| NTP B.V. Civil Engineering Construction | Aur0ra | 2026-06-22 | Netherlands | Industrials & Manufacturing | Ransomware | [DeXpose] · [ransomware.live] · [RedPacket Security] |
| Hooke Laboratories | The Gentlemen | 2026-06-22 | US | Healthcare & Life Sciences | Ransomware | [RedPacket Security] · [ransomware.live] · [Breachsense] |
| Royal Thai Navy Housing Cooperative | The Gentlemen | 2026-06-22 | housing cooperative/Thailand | Government & Public Sector | Ransomware | [RedPacket Security] · [ransomware.live] |
| Klue | Icarus | 2026-06-22 | Canada | Professional & Business Services | Ransomware | [SecurityWeek] · [BleepingComputer] |
| Huntress | Icarus | 2026-06-22 | US | Cybersecurity | Ransomware | [Huntress] · [SecurityWeek] |
| Recorded Future | Icarus | 2026-06-22 | US | Cybersecurity | Ransomware | [SecurityWeek] |
| Tanium | Icarus | 2026-06-22 | US | Cybersecurity | Ransomware | [BleepingComputer] |
| Jamf | Icarus | 2026-06-22 | US | Technology & Software | Ransomware | [BleepingComputer] |
| HackerOne | Icarus | 2026-06-22 | US | Cybersecurity | Ransomware | [BleepingComputer] |
| Snyk | Icarus | 2026-06-22 | US | Cybersecurity | Ransomware | [BleepingComputer] |
| Kudelski Security | Icarus | 2026-06-22 | Switzerland | Cybersecurity | Ransomware | [BleepingComputer] |
| Insurity | Icarus | 2026-06-22 | US | Financial Services | Ransomware | [BleepingComputer] |
| Gong | Icarus | 2026-06-22 | US | Technology & Software | Ransomware | [BleepingComputer] |
| Sprout Social | Icarus | 2026-06-22 | US | Technology & Software | Ransomware | [BleepingComputer] |
| HDS Corp | Icarus | 2026-06-22 | US | Transportation & Logistics | Ransomware | [DeXpose] · [ransomware.live] |
| KTR Real Estate Advisors | Anubis | 2026-06-22 | real estate advisory/US | Financial Services | Ransomware | [DeXpose] · [RedPacket Security] |
| Xsolis, Inc. | Unattributed | 2026-06-22 | revenue cycle)/US | Healthcare & Life Sciences | Breach | [SecurityWeek] · [HIPAA Journal] · [DataBreaches.net] |
| AryStinger botnet | Unattributed | 2026-06-22 | DIR-818LW and QNAP NAS devices compromised as a distributed recon proxy network; exploits CVE-2013-3307, CVE-2016-5681 and CVE-2025-11837; enables intranet scanning, traffic tunneling, DNS hijacking; geographic concentration: South Korea 48.5%, China 31.8%, Sweden 6.4%; no attacker attribution confirmed; not a named-org victim | 4,300+ D-Link DIR-850L | Breach | [BleepingComputer] · [Malwarebytes] |
| Lockers IT | Nova | 2026-06-21 | Bangladesh | Technology & Software | Ransomware | ransomware.live DLS |
| jktornel | INC Ransom | 2026-06-21 | — | sector unknown | Ransomware | ransomware.live DLS |
| JAG Group | Stormous | 2026-06-21 | US | Professional & Business Services | Ransomware | [DeXpose] · [RedPacket Security] · [ransomware.live] |
| Artistic Smiles | NightSpire | 2026-06-21 | US | Consumer & Retail | Ransomware | ransomware.live DLS / [RedPacket Security] |
| Texas Parks and Wildlife Dept. | Unattributed | 2026-06-21 | US | Government & Public Sector | Breach | [TechTimes] |
| Central Florida Cosmetic & Family Dentistry | Qilin | 2026-06-20 | US | Healthcare & Life Sciences | Ransomware | ransomware.live DLS |
| Pacific Lamp & Supply | Qilin | 2026-06-20 | US | Industrials & Manufacturing | Ransomware | [RedPacket Security] · [ransomware.live] |
| sierravistahospital.com | LockBit | 2026-06-20 | US | Healthcare & Life Sciences | Ransomware | ransomware.live DLS |
| BITS Pilani | DragonForce | 2026-06-20 | India | Education | Ransomware | [RedPacket Security] · [ransomware.live] |
| Access Dental | WorldLeaks | 2026-06-20 | US | Healthcare & Life Sciences | Ransomware | ransomware.live DLS |
| Super Finishing | WorldLeaks | 2026-06-20 | Brazil | Industrials & Manufacturing | Ransomware | [DeXpose] |
| L'Archevêque & Rivest Ltée | WorldLeaks | 2026-06-20 | Canada | Industrials & Manufacturing | Ransomware | [DeXpose] |
| One Believing Interiors | Nova | 2026-06-20 | US | Professional & Business Services | Ransomware | [HookPhish] · [ransomware.live] |
| MIT HJERTE | Nova | 2026-06-20 | Denmark | sector unknown | Ransomware | [HookPhish] · [ransomware.live] |
| Dosab | Nova | 2026-06-20 | Turkey | Industrials & Manufacturing | Ransomware | [RedPacket Security] · [ransomware.live] |
| Newspaper Media Group | INC Ransom | 2026-06-20 | publishing/US | Media & Telecom | Ransomware | [RedPacket Security] |
| Preferred Properties | Payload | 2026-06-20 | property management/US | Professional & Business Services | Ransomware | [RedPacket Security] |
| AmiGest | The Gentlemen | 2026-06-20 | France | Technology & Software | Ransomware | [DeXpose] · [ransomware.live] |
| PJ Daly Contracting | Qilin | 2026-06-19 | Ireland | Industrials & Manufacturing | Ransomware | [RedPacket Security] · [ransomware.live] |
| DaikyoNishikawa Corporation | LockBit | 2026-06-19 | Japan | Industrials & Manufacturing | Ransomware | ransomware.live DLS |
| Como Furniture Enterprises Co., Ltd. | LockBit | 2026-06-19 | Taiwan | Industrials & Manufacturing | Ransomware | ransomware.live DLS |
| ALS Global Limited | Aur0ra | 2026-06-19 | inspection/certification/Australia | Professional & Business Services | Ransomware | [Cyber Daily] · [DeXpose] · [Breachsense] |
| Aflac | Scattered Spider | 2026-06-19 | US | Financial Services | Extortion | The Record / HIPAA Journal |
| Al Khaja Holding | Unattributed | 2026-06-19 | UAE | Industrials & Manufacturing | Breach | breachsense/ransomware.live DLS |
| Alexander Buch Bilanzbuchhalter | Unattributed | 2026-06-19 | Germany | Professional & Business Services | Breach | breachsense/ransomware.live DLS |
| Apptricity Corporation | Unattributed | 2026-06-19 | US | Technology & Software | Breach | breachsense/ransomware.live DLS |
| ATCOM | Unattributed | 2026-06-19 | IT services/Chile | Media & Telecom | Breach | breachsense/ransomware.live DLS |
| Inter-Con Security Systems | ShinyHunters | 2026-06-18 | US | Professional & Business Services | Extortion | [DeXpose] · [RedPacket Security] · [Breachsense] |
| Horizon Family Medical Group | INC Ransom | 2026-06-18 | US | Healthcare & Life Sciences | Ransomware | [DeXpose] · [ransomware.live] · [Malware News] |
| Dean Cosmetic Dentistry | NightSpire | 2026-06-18 | US | Healthcare & Life Sciences | Ransomware | ransomware.live DLS |
| "FortiBleed" mass credential exposure | Unattributed | 2026-06-18 | VPN devices, 194 countries, 21,000+ domains; plaintext creds exposed on attacker server; harvested via ~1.16bn credential attempts + cracked SSL-VPN hashes. Device count confirmed at 86,644 by June 22 . Not a ransomware DLS victim | ~73,900 FortiGate firewall | Breach | — |
| Promepla | RansomHouse | 2026-06-17 | — | Industrials & Manufacturing | Ransomware | ransomware.live DLS |
| SUNASS | Nova | 2026-06-17 | water regulator/Peru | Government & Public Sector | Ransomware | ransomware.live DLS |
| Sumitomo Electric Bordnetze | Aur0ra | 2026-06-17 | — | Industrials & Manufacturing | Ransomware | ransomware.live DLS |
| Allan Brothers, Inc. | Aur0ra | 2026-06-17 | US | Industrials & Manufacturing | Ransomware | ransomware.live DLS |
| Diamond Truck Centres | Aur0ra | 2026-06-17 | Canada | Consumer & Retail | Ransomware | ransomware.live DLS |
| Framesi | INC Ransom | 2026-06-17 | cosmetics manufacturing/Italy | Consumer & Retail | Ransomware | ransomware.live DLS |
| Jasper Plastics Solutions | INC Ransom | 2026-06-17 | US | Industrials & Manufacturing | Ransomware | ransomware.live DLS |
| Ecovacs Robotics | SpaceBears | 2026-06-17 | China | Consumer & Retail | Ransomware | ransomware.live DLS |
| Novo Nordisk | FulcrumSec | 2026-06-17 | Denmark | Healthcare & Life Sciences | Ransomware | ransomware.live DLS |
| iRhythm Technologies | Unattributed | 2026-06-17 | US | Healthcare & Life Sciences | Breach | Dark Reading / DataBreachToday |
| InSite Architects | Akira | 2026-06-16 | US | Industrials & Manufacturing | Ransomware | ransomware.live DLS |
| Golfview Developmental Center | Akira | 2026-06-16 | disability services/US | Healthcare & Life Sciences | Ransomware | ransomware.live DLS |
| Moody Bible Institute | ShinyHunters | 2026-06-16 | US | Education | Extortion | [Google Cloud Blog] · [classaction.org] |
| Kedah State Government | Nova | 2026-06-16 | Malaysia | Government & Public Sector | Ransomware | [DeXpose] · [ransomware.live] |
| River Bank & Trust | Unattributed | 2026-06-16 | financial services/US | Financial Services | Breach | [SEC 8-K] · [1819 News] |
| distinetmurcia.es | Qilin | 2026-06-15 | Spain | Professional & Business Services | Ransomware | ransomware.live DLS |
| Grupo Indi | Qilin | 2026-06-15 | construction/Mexico | Industrials & Manufacturing | Ransomware | [DeXpose] · [ransomware.live] |
| Kawai Musical Instruments Mfg. Co., Ltd. | SafePay | 2026-06-15 | Japan | Consumer & Retail | Ransomware | [DeXpose] · [ransomware.live] · [hendryadrian.com] |
| Hugh Stirling Ltd | SafePay | 2026-06-15 | UK | Industrials & Manufacturing | Ransomware | [DeXpose] · [ransomware.live] |
| ddcnyc.com | Akira | 2026-06-15 | US | Professional & Business Services | Ransomware | ransomware.live DLS |
| Kodak | ShinyHunters | 2026-06-15 | US | Media & Telecom | Extortion | [Cybernews] · [BleepingComputer] · [TechTimes] |
| Sysco | ShinyHunters | 2026-06-15 | US | Consumer & Retail | Extortion | [Cybernews] |
| Glendale Community College | ShinyHunters | 2026-06-15 | US | Education | Extortion | [ransomware.live] · [RedPacket Security] · [Cybernews] |
| Illinois Central College | ShinyHunters | 2026-06-15 | US | Education | Extortion | [DeXpose] · [Breachsense] |
| Deep Well Services | ShinyHunters | 2026-06-15 | US | Energy & Utilities | Extortion | [HookPhish] · [ransomware.live] · [BreachNews] |
| Mahajak Development Co., Ltd. | The Gentlemen | 2026-06-15 | Thailand | Technology & Software | Ransomware | [DeXpose] · [ransomware.live] |
| INK | DragonForce | 2026-06-14 | UK | Media & Telecom | Ransomware | [DeXpose] · [RedPacket Security] |
| Council of Europe | ShinyHunters | 2026-06-14 | France | Government & Public Sector | Extortion | [SecurityWeek] · [BleepingComputer] · [Cybernews] |
| Winona County | NightSpire | 2026-06-14 | US | Government & Public Sector | Ransomware | [GovTech] · [DeXpose] |
| One Medical | ShinyHunters | 2026-06-13 | US | Healthcare & Life Sciences | Extortion | [HIPAA Journal] · [Cybernews] · [BankInfoSecurity] |
| Al Shafar GRC | DragonForce | 2026-06-12 | UAE | Industrials & Manufacturing | Ransomware | [ransomware.live] · [DeXpose] |
| Al Ishrak Contracting | DragonForce | 2026-06-12 | UAE | Industrials & Manufacturing | Ransomware | [ransomware.live] · [DeXpose] |
| JCPenney / Catalyst Brands / Authentic Brands Group | ShinyHunters | 2026-06-12 | US | Consumer & Retail | Extortion | [RedPacket Security] · [Cybernews] · [DeXpose] |
| American Tower Corporation | ShinyHunters | 2026-06-12 | US | Media & Telecom | Extortion | [DeXpose] · [RedPacket Security] · [Breachsense] |
| Zayo Group + Allstream | ShinyHunters | 2026-06-12 | US+Canada | Media & Telecom | Extortion | [DeXpose] · [RedPacket Security] · [ransomware.live] |
| BeyondTrust | Icarus | 2026-06-12 | PAM solutions/US | Cybersecurity | Ransomware | [BeyondTrust] · [SecurityWeek] |
| 8×8 | Icarus | 2026-06-12 | US | Technology & Software | Ransomware | [SecurityWeek] |
| Pendo | Icarus | 2026-06-12 | US | Technology & Software | Ransomware | [SecurityWeek] |
| AlertMedia | Icarus | 2026-06-12 | US | Technology & Software | Ransomware | [SecurityWeek] |
| Blackbaud | Icarus | 2026-06-12 | social-good CRM software/US | Government & Public Sector | Ransomware | [SecurityWeek] |
| Camunda | Icarus | 2026-06-12 | workflow software/Germany | Industrials & Manufacturing | Ransomware | [SecurityWeek] |
| Cresta | Icarus | 2026-06-12 | US | Technology & Software | Ransomware | [SecurityWeek] |
| Deel | Icarus | 2026-06-12 | payroll/global compliance platform/US | Professional & Business Services | Ransomware | [SecurityWeek] |
| Lucanet | Icarus | 2026-06-12 | Germany | Financial Services | Ransomware | [SecurityWeek] |
| Link11 | Icarus | 2026-06-12 | cybersecurity/Germany | Cybersecurity | Ransomware | [SecurityWeek] |
| Tines | Icarus | 2026-06-12 | SOAR/Ireland | Cybersecurity | Ransomware | [SecurityWeek] |
| Nintendo of America | ShadowByt3$ | 2026-06-12 | gaming/US | Media & Telecom | Ransomware | [HackRead] · [Nintendo Life] · [TechNadu] · [DeXpose] |
| Central Romana Corporation | LockBit | 2026-06-11 | Dominican Republic | Industrials & Manufacturing | Ransomware | ransomware.live DLS / FalconFeeds |
| Shougang Hierro Perú S.A.A. | LockBit | 2026-06-11 | Peru | Industrials & Manufacturing | Ransomware | ransomware.live DLS / FalconFeeds |
| Stahlwille B.V. | LockBit | 2026-06-11 | Netherlands | Industrials & Manufacturing | Ransomware | ransomware.live DLS / FalconFeeds |
| JEC Eye Hospitals and Clinics | LockBit | 2026-06-11 | Indonesia | Healthcare & Life Sciences | Ransomware | FalconFeeds |
| Colégio Santo Inácio | LockBit | 2026-06-11 | Brazil | Education | Ransomware | FalconFeeds |
| LBR Engineering and Consulting | LockBit | 2026-06-11 | Brazil | Industrials & Manufacturing | Ransomware | FalconFeeds |
| Areco | DragonForce | 2026-06-11 | Sweden | Industrials & Manufacturing | Ransomware | [DeXpose] · [RedPacket Security] |
| National Association of Insurance Commissioners | ShinyHunters | 2026-06-11 | US | Government & Public Sector | Extortion | [Insurance Journal] · [BleepingComputer] · [TechRadar] |
| Baylor Genetics | Unknown | 2026-06-11 | USA | Healthcare & Life Sciences | Ransomware | https://www.bankinfosecurity.com/genomics-testing-lab-notifies-nearly-310000-hack-a-32618 |
| Sayre Associates | DragonForce | 2026-06-10 | land surveying/US | Industrials & Manufacturing | Ransomware | [DeXpose] · [RedPacket Security] |
| Port Air Express | Akira | 2026-06-10 | — | Transportation & Logistics | Ransomware | ransomware.live DLS |
| Tata Electronics | WorldLeaks | 2026-06-10 | India | Technology & Software | Ransomware | [Cybernews] · [CNBC] |
| Liberty Insurance Corporation | Krybit | 2026-06-10 | Philippines | Financial Services | Ransomware | ransomware.live DLS |
| PROBE S.A. | Krybit | 2026-06-10 | El Salvador | Professional & Business Services | Ransomware | ransomware.live DLS |
| Lösing Filtertechnik | SpaceBears | 2026-06-10 | Germany | Industrials & Manufacturing | Ransomware | ransomware.live DLS |
| Global Schools Foundation | FulcrumSec | 2026-06-10 | Singapore | Education | Ransomware | ransomware.live DLS |
| Mackay Sugar | The Gentlemen | 2026-06-10 | Australia | Industrials & Manufacturing | Ransomware | SecurityWeek / The Record |
| Spray Equipment & Service Center | Akira | 2026-06-09 | US | Industrials & Manufacturing | Ransomware | ransomware.live DLS |
| Rockaway River Country Club | Akira | 2026-06-09 | US | Consumer & Retail | Ransomware | ransomware.live DLS |
| SMPC Architects | Akira | 2026-06-09 | US | Industrials & Manufacturing | Ransomware | ransomware.live DLS |
| Centre Ellipse | Akira | 2026-06-09 | — | Professional & Business Services | Ransomware | ransomware.live DLS |
| Cal Fresh | Termite | 2026-06-09 | US | Government & Public Sector | Ransomware | ransomware.live DLS |
| Apollo Pipes | WorldLeaks | 2026-06-09 | India | Industrials & Manufacturing | Ransomware | ransomware.live DLS |
| GDL Transport | WorldLeaks | 2026-06-09 | Sweden | Transportation & Logistics | Ransomware | ransomware.live DLS |
| M1xchange | WorldLeaks | 2026-06-09 | India | Financial Services | Ransomware | ransomware.live DLS |
| University of Nottingham | ShinyHunters | 2026-06-09 | UK | Education | Extortion | [BleepingComputer] · [The Register] · [Help Net Security] |
| Houston City College | ShinyHunters | 2026-06-09 | US | Education | Extortion | [Google Cloud Blog] · [Higher Ed Dive] |
| Auburn Electrical Construction | Embargo | 2026-06-09 | US | Industrials & Manufacturing | Ransomware | ransomware.live DLS |
| Mid-Cumberland Human Resource Agency | Insomnia | 2026-06-09 | US | Government & Public Sector | Ransomware | ransomware.live DLS |
| Trevi | Nova | 2026-06-09 | Italy | Industrials & Manufacturing | Ransomware | ransomware.live DLS |
| AireSpring | Chaos | 2026-06-09 | US | Media & Telecom | Ransomware | ransomware.live DLS |
| Spratley's of Mortimer | PrinzEugen | 2026-06-09 | UK | Consumer & Retail | Ransomware | ransomware.live DLS |
| Cambridge Law Chambers | Gunra | 2026-06-09 | Bahamas | Professional & Business Services | Ransomware | ransomware.live DLS |
| Katholiek Amersfoort | Stormous | 2026-06-09 | Netherlands | Government & Public Sector | Ransomware | ransomware.live DLS |
| sa2000.com | Stormous | 2026-06-09 | — | Professional & Business Services | Ransomware | ransomware.live DLS |
| Philadelphia Insurance Companies | Ethics | 2026-06-09 | USA | Financial Services | Ransomware | https://www.dexpose.io/ethics-ransomware-group-targets-philadelphia-insurance-companies/ |
| Covenant Health | Qilin | 2026-06-08 | US | Healthcare & Life Sciences | Ransomware | The Record / SecurityWeek |
| The Banyans Health and Wellness | Qilin | 2026-06-08 | Australia | Healthcare & Life Sciences | Ransomware | ransomware.live DLS |
| Kinetic Education | Qilin | 2026-06-08 | Australia | Education | Ransomware | ransomware.live DLS |
| SatCom CX | Qilin | 2026-06-08 | US | Professional & Business Services | Ransomware | ransomware.live DLS |
| Isuzu Motors | Qilin | 2026-06-08 | Thailand | Industrials & Manufacturing | Ransomware | ransomware.live DLS |
| Opéra Comique | Qilin | 2026-06-08 | France | Media & Telecom | Ransomware | ransomware.live DLS |
| Shipping Association of NY and NJ | Qilin | 2026-06-08 | US | Transportation & Logistics | Ransomware | ransomware.live DLS |
| Wiese USA | Termite | 2026-06-08 | US | Industrials & Manufacturing | Ransomware | ransomware.live DLS |
| Roland Machinery | Termite | 2026-06-08 | — | Industrials & Manufacturing | Ransomware | ransomware.live DLS |
| Aegle Aviation | RansomHouse | 2026-06-08 | India | Transportation & Logistics | Ransomware | ransomware.live DLS |
| Ma Pak Leung Company | RansomHouse | 2026-06-08 | Hong Kong | Healthcare & Life Sciences | Ransomware | ransomware.live DLS |
| Plaza Lama | Payload | 2026-06-08 | Dominican Republic | Consumer & Retail | Ransomware | ransomware.live DLS |
| Hansoll Textile | Payload | 2026-06-08 | Vietnam | Industrials & Manufacturing | Ransomware | ransomware.live DLS |
| Villea Hotels | Payload | 2026-06-08 | — | Consumer & Retail | Ransomware | ransomware.live DLS |
| Pearson Ford | Play | 2026-06-06 | US | Consumer & Retail | Ransomware | ransomware.live DLS |
| Avcon Jet | Qilin | 2026-06-05 | Austria | Transportation & Logistics | Ransomware | ransomware.live DLS |
| Trican Well Service | Qilin | 2026-06-05 | Canada | Energy & Utilities | Ransomware | ransomware.live DLS |
| Don Don | Qilin | 2026-06-05 | food | Consumer & Retail | Ransomware | ransomware.live DLS |
| Corley Manufacturing | Play | 2026-06-05 | US | Industrials & Manufacturing | Ransomware | ransomware.live DLS |
| Dallis Law Firm | Play | 2026-06-05 | US | Professional & Business Services | Ransomware | ransomware.live DLS |
| REHA-ACTIV | DragonForce | 2026-06-05 | medical supply/Germany | Healthcare & Life Sciences | Ransomware | [DeXpose] · [RedPacket Security] |
| Madison Square Garden Sports Corp. | ShinyHunters | 2026-06-05 | sports/US | Media & Telecom | Extortion | [The Next Web] · [DeXpose] |
| National Industries | The Gentlemen | 2026-06-04 | India | Industrials & Manufacturing | Ransomware | [DeXpose] · [ransomware.live] |
| Copamex | DragonForce | 2026-06-03 | Mexico | Industrials & Manufacturing | Ransomware | [RedPacket Security] |
| SETS Solutions | DragonForce | 2026-06-03 | Lebanon | Technology & Software | Ransomware | [RedPacket Security] |
| Cropwise | ShadowByt3$ | 2026-06-02 | global | Industrials & Manufacturing | Ransomware | [HackRead] |
| MyPillow | Play | 2026-06-01 | retail/US | Industrials & Manufacturing | Ransomware | Play DLS |
| Energy Action | SafePay | 2026-06-01 | Australia | Energy & Utilities | Ransomware | SafePay DLS |
| Synex International Pvt Ltd | DragonForce | 2026-06-01 | ELV solutions/solar energy/India | Industrials & Manufacturing | Ransomware | [DeXpose] · [HookPhish] · [ransomware.live] |
| The Adviser | Brain Cipher | 2026-06-01 | AU | Media & Telecom | Ransomware | Brain Cipher DLS |
| School Facility Consultants | Abyss | 2026-06-01 | US | Education | Ransomware | [DeXpose] · [HookPhish] |
| Expert MRI | Unattributed | 2026-06-01 | radiology/US | Healthcare & Life Sciences | Breach | — |
| RRCA Accounts Management | Unattributed | 2026-06-01 | US | Financial Services | Breach | — |
| Dairy Farmers of America | Unattributed | 2026-06-01 | US | Industrials & Manufacturing | Breach | The Record |
| Dresden State Art Collections | Unattributed | 2026-06-01 | Germany | Media & Telecom | Breach | The Record |
| DHS Homeland Security Information Network | Unattributed | 2026-06-01 | law enforcement information sharing/US | Government & Public Sector | Breach | [BleepingComputer] · [Nextgov/FCW] |
| Department of Homeland Security (HSIN) | Unknown | 2026-06-01 | US | Government & Public Sector | Ransomware | https://www.bleepingcomputer.com/news/security/dhs-confirms-hackers-breached-hsin-info-sharing-platform/ · https://www.nextgov.com/cybersecurity/2026/07/dhs-network-intrusion-was-twice-ruled-false-positive-breach-confirmed/414724/ |
| VVO Finance | Everest | 2026-05-28 | Germany | Financial Services | Ransomware | [HookPhish] · [RedPacket Security] |
| QLS Group | DragonForce | 2026-05-27 | domestic appliances logistics/Australia | Consumer & Retail | Ransomware | [DeXpose] · [ransomware.live] |
| Carnival Corporation | ShinyHunters | 2026-05-27 | hospitality/US | Consumer & Retail | Extortion | [BleepingComputer] · [The Register] · [Malwarebytes] |
| DentaQuest | ShinyHunters | 2026-05-23 | US | Healthcare & Life Sciences | Extortion | [SecurityAffairs] · [BankInfoSecurity] · [Rescana] · [HIPAA Journal] |
| TVN Media | APT73 | 2026-05-22 | broadcasting/Panama | Media & Telecom | Ransomware | [DeXpose] · [ransomware.live] |
| GitHub Internal | Lapsus$ | 2026-05-20 | US | Technology & Software | Ransomware | [The Record] · [Infosecurity Magazine] · [The Hacker News] · [BleepingComputer] |
| Krum Public Library | NightSpire | 2026-05-15 | US | Education | Ransomware | [Dysruption Hub] · [ransomware.live] |
| Keretapi Tanah Melayu Berhad | The Gentlemen | 2026-05-06 | railway/Malaysia | Transportation & Logistics | Ransomware | [DeXpose] · [ransomware.live] |
| Hokuyo 2006 Co., Ltd. | SafePay | 2026-05-04 | packaging-logistics/Japan | Industrials & Manufacturing | Ransomware | [RedPacket Security] · [ransomware.live] |
| Fiserv Inc. | Everest | 2026-05-03 | US | Financial Services | Ransomware | [DeXpose] · [RedPacket Security] · [Breachsense] |
| Epiq Global | Everest | 2026-05-02 | US | Professional & Business Services | Ransomware | [HookPhish] · [RedPacket Security] |
| TSYS | Everest | 2026-05-02 | US | Financial Services | Ransomware | [HookPhish] · [RedPacket Security] |
| Symcor Inc. | Everest | 2026-05-02 | Canada | Professional & Business Services | Ransomware | [HookPhish] · [DeXpose] |
| BCD Travel | ShinyHunters | 2026-05-01 | Netherlands | Consumer & Retail | Extortion | [Cybernews] · [DutchNews.nl] |
| Cushman & Wakefield | ShinyHunters | 2026-05-01 | US | Professional & Business Services | Extortion | [Cybernews] · [The Register] · [SOCRadar] |
| Liberty Mutual Insurance | Everest | 2026-04-30 | US | Financial Services | Ransomware | [BankInfoSecurity] · [Cybernews] |
| Mediaworks Kft | WorldLeaks | 2026-04-28 | broadcasting/Hungary | Media & Telecom | Ransomware | [The Record] · [RedPacket Security] · [DeXpose] |
| Instructure/Canvas | ShinyHunters | 2026-04-25 | US | Education | Extortion | [Malwarebytes] · [Bitdefender] |
| Udemy | ShinyHunters | 2026-04-24 | US | Education | Extortion | [Cybernews] · [SC Media] |
| Zara | ShinyHunters | 2026-04-21 | Spain | Consumer & Retail | Extortion | [BleepingComputer] · [SecurityAffairs] · [Infosecurity Magazine] |
| 7-Eleven | ShinyHunters | 2026-04-21 | convenience stores/Japan | Consumer & Retail | Extortion | [Cybernews] · [TechRadar] |
| ADT | ShinyHunters | 2026-04-20 | US | Professional & Business Services | Extortion | [BleepingComputer] · [BankInfoSecurity] · [Rescana] |
| Citizens Financial Group | Everest | 2026-04-20 | US | Financial Services | Ransomware | [SC Media] · [American Banker] |
| Frost Bank | Everest | 2026-04-20 | US | Financial Services | Ransomware | [SC Media] · [Cybernews] |
| Cherry Health | Unattributed | 2026-04-19 | FQHC/US | Healthcare & Life Sciences | Breach | [DataBreaches.net] · [HIPAA Journal] · [The Record] |
| Polmed | ShinyHunters | 2026-04-18 | medical scheme/South Africa | Healthcare & Life Sciences | Extortion | [Cape Town Today] · [ITWeb] · [Malwarebytes] |
| Empower Group | DragonForce | 2026-04-16 | UAE | Financial Services | Ransomware | [ransomware.live] · [DeXpose] |
| Standard Bank Group | PrinzEugen | 2026-04-16 | financial services/South Africa | Financial Services | Ransomware | [BleepingComputer] · [ThreatDown] |
| Medtronic | ShinyHunters | 2026-04-13 | US | Healthcare & Life Sciences | Extortion | [SecurityWeek] · [HIPAA Journal] · [BleepingComputer] · [The Record] |
| Mytheresa | ShinyHunters | 2026-04-12 | Germany | Consumer & Retail | Extortion | [Cybernews] · [TechRadar] |
| Marcus & Millichap | ShinyHunters | 2026-04-12 | US | Professional & Business Services | Extortion | [DeXpose] · [HIBP] · [HookPhish] · [Breachsense] |
| Rockstar Games | ShinyHunters | 2026-04-11 | technology/US | Media & Telecom | Extortion | [Benzinga] · [Bitdefender] · [DeepWatch] |
| Pitney Bowes | ShinyHunters | 2026-04-09 | logistics technology/US | Professional & Business Services | Extortion | [The Register] · [DeXpose] · [teiss] |
| Charter Communications | ShinyHunters | 2026-04-01 | US | Media & Telecom | Extortion | [BleepingComputer] · [TechRadar] · [SC Media] |
| Infinite Campus | ShinyHunters | 2026-03-18 | US | Education | Extortion | [BleepingComputer] · [Cybernews] · [TechRadar] |
| AssuranceAmerica | Unattributed | 2026-03-17 | auto/US | Financial Services | Breach | [BleepingComputer] · [SecurityAffairs] · [TechNadu] |
| Kubota North America Corporation | Unattributed | 2026-03-16 | US | Industrials & Manufacturing | Breach | [BleepingComputer] · [ClaimDepot] |
| CareCloud | Unknown | 2026-03-10 | USA | Healthcare & Life Sciences | Ransomware | https://techcrunch.com/2026/08/19/carecloud-confirms-3-7m-patients-had-their-medical-records-stolen-in-data-breach/ |
| Kennedy McLaughlin & Associates | Qilin | 2026-03-01 | Australia | Professional & Business Services | Ransomware | [Cyber Daily] · [ransomware.live] |
| Wynn Resorts | ShinyHunters | 2026-02-24 | US | Consumer & Retail | Extortion | [SecurityWeek] · [BleepingComputer] |
| LexisNexis Legal & Professional | FulcrumSec | 2026-02-24 | information services/US | Professional & Business Services | Ransomware | [BleepingComputer] · [The Record] · [The Register] |
| Strategic Education | Unattributed | 2026-02-24 | US | Education | Breach | — |
| Tepco-Group | DireWolf | 2026-01-13 | Egypt | Technology & Software | Ransomware | [DeXpose] · [RedPacket Security] · [HookPhish] |
| BerlinerLuft Technology GmbH | Ethics | 2025-09-11 | DEU | Industrials & Manufacturing | Ransomware | https://www.ransomlook.io/group/ethics |
| Holstrom, Block & Parke | Ethics | 2025-09-11 | USA | Professional & Business Services | Ransomware | https://www.ransomlook.io/group/ethics |
| Harrods | DragonForce | 2025-05-01 | UK | Consumer & Retail | Ransomware | [Acronis] · [Picus] |
| Co-op | DragonForce | 2025-04-30 | UK | Consumer & Retail | Ransomware | [Infosecurity] |
| Marks & Spencer | DragonForce | 2025-04-22 | UK | Consumer & Retail | Ransomware | [BlackFog] · [Infosecurity] |