Ransomware Victims

topic · security/ransomware-victims
DOC.
security/ransomware-victims
REV.
1,051 evt
DATE.
08-JUN-2026
§01

about

Newly claimed ransomware victims posted to leak sites, by group (ransomware.live).

§02

recent events

LIVElast event 0s ago0 evt / 1h

showing the 10 most recent of 1,051 total events on this topic. apply a date range to scope the list.

range
iso 8601 utc
iso 8601 utc
01Hawaii Family Dental — qilinqilin claimed Hawaii Family Dental (US){"url":"http://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/si…
EVENT. cms8fkqlID. cms8fkql1b60dkh0cm8jbx2a7SRC. key:cmpxakb6
{
  "url": "http://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=cba56701-ff57-4242-b845-62b40bcf937d",
  "group": "qilin",
  "sector": "Healthcare",
  "source": "ransomware.live",
  "victim": "Hawaii Family Dental",
  "country": "US",
  "attack_date": "2026-07-31T03:58:04.384Z",
  "published_at": "2026-07-31T03:58:25.547Z",
  "discovered_at": "2026-07-31T03:58:25.547Z",
  "victim_website": null
}
02C.A. Walker Construction — genesisgenesis claimed C.A. Walker Construction (US){"url":"http://genesis6ixpb5mcy4kudybtw5op2wqlrkocfogbnenz3c647ibqixiad.onion/55…
EVENT. cms82nq3ID. cms82nq31b2rhkh0cjc50amhtSRC. key:cmpxakb6
{
  "url": "http://genesis6ixpb5mcy4kudybtw5op2wqlrkocfogbnenz3c647ibqixiad.onion/55f3f0d90d424055e955/",
  "group": "genesis",
  "sector": "Manufacturing",
  "source": "ransomware.live",
  "victim": "C.A. Walker Construction",
  "country": "US",
  "attack_date": "2026-07-30T00:00:00.000Z",
  "published_at": "2026-07-30T21:25:51.301Z",
  "discovered_at": "2026-07-30T21:25:51.301Z",
  "victim_website": null
}
03Boyum IT Solutions (HOT!) — genesisgenesis claimed Boyum IT Solutions (HOT!) (DK){"url":"http://genesis6ixpb5mcy4kudybtw5op2wqlrkocfogbnenz3c647ibqixiad.onion/79…
EVENT. cms82npiID. cms82npiob2rfkh0clpvw9djlSRC. key:cmpxakb6
{
  "url": "http://genesis6ixpb5mcy4kudybtw5op2wqlrkocfogbnenz3c647ibqixiad.onion/79f095d5b182ce93bae4/",
  "group": "genesis",
  "sector": "Technology",
  "source": "ransomware.live",
  "victim": "Boyum IT Solutions (HOT!)",
  "country": "DK",
  "attack_date": "2026-07-30T00:00:00.000Z",
  "published_at": "2026-07-30T21:26:26.885Z",
  "discovered_at": "2026-07-30T21:26:26.885Z",
  "victim_website": null
}
04AguAseo — GammaxGammax claimed AguAseo (CO){"url":"http://gammax6w3dkfdjfrjthtmqzsioue52vzy6lz54qy6jcvmogfpubutjyd.onion/po…
EVENT. cms80j3pID. cms80j3pab27lkh0c2iv89sr7SRC. key:cmpxakb6
{
  "url": "http://gammax6w3dkfdjfrjthtmqzsioue52vzy6lz54qy6jcvmogfpubutjyd.onion/post/B48A6eknv0j8w2yJQLVCr3C4GH8DJF6x",
  "group": "Gammax",
  "sector": "Energy & Utilities",
  "source": "ransomware.live",
  "victim": "AguAseo",
  "country": "CO",
  "attack_date": "2026-07-30T14:28:59.000Z",
  "published_at": "2026-07-30T20:10:17.968Z",
  "discovered_at": "2026-07-30T20:10:17.968Z",
  "victim_website": null
}
05Audio Precision, Inc — qilinqilin claimed Audio Precision, Inc (US){"url":"http://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/si…
EVENT. cms80j35ID. cms80j35gb27jkh0c4q7sm952SRC. key:cmpxakb6
{
  "url": "http://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=f37de6ed-24ab-4da1-b31f-9d1ea5fd2727",
  "group": "qilin",
  "sector": "Technology",
  "source": "ransomware.live",
  "victim": "Audio Precision, Inc",
  "country": "US",
  "attack_date": "2026-07-30T20:29:01.467Z",
  "published_at": "2026-07-30T20:29:19.558Z",
  "discovered_at": "2026-07-30T20:29:19.558Z",
  "victim_website": null
}
06MAG USA Inc — securotropsecurotrop claimed MAG USA Inc (US){"url":"http://securo45z554mw7rgrt7wcgv5eenj2xmxyrsdj3fcjsvindu63s4bsid.onion","…
EVENT. cms7w73dID. cms7w73d8b0x3kh0czzy2orkaSRC. key:cmpxakb6
{
  "url": "http://securo45z554mw7rgrt7wcgv5eenj2xmxyrsdj3fcjsvindu63s4bsid.onion",
  "group": "securotrop",
  "sector": "Manufacturing",
  "source": "ransomware.live",
  "victim": "MAG USA Inc",
  "country": "US",
  "attack_date": "2026-07-30T00:00:00.000Z",
  "published_at": "2026-07-30T18:58:23.518Z",
  "discovered_at": "2026-07-30T18:58:23.518Z",
  "victim_website": null
}
07PARTNERED HEALTH GROUP — incransomincransom claimed PARTNERED HEALTH GROUP (AU){"url":"http://incblog6qu4y4mm4zvw5nrmue6qbwtgjsxpw6b7ixzssu36tsajldoad.onion/bl…
EVENT. cms7rwabID. cms7rwab9azppkh0cie0cefcySRC. key:cmpxakb6
{
  "url": "http://incblog6qu4y4mm4zvw5nrmue6qbwtgjsxpw6b7ixzssu36tsajldoad.onion/blog/disclosures/6a6b75a95ae71db30c8b0b19",
  "group": "incransom",
  "sector": "Healthcare",
  "source": "ransomware.live",
  "victim": "PARTNERED HEALTH GROUP",
  "country": "AU",
  "attack_date": "2026-07-30T01:00:00.000Z",
  "published_at": "2026-07-30T16:30:13.670Z",
  "discovered_at": "2026-07-30T16:30:13.670Z",
  "victim_website": null
}
08And where does the newborn go from here? The net is vast and infinite. — Section9Section9 claimed And where does the newborn go from here? The net is vast and infinite.{"url":"http://v76bdil3v7hczufr7kwk75eq6oks27d3qwj6v5ajj6v6rubbvwhcq2qd.onion/po…
EVENT. cms7rw9sID. cms7rw9sbazpnkh0cf6hijwzxSRC. key:cmpxakb6
{
  "url": "http://v76bdil3v7hczufr7kwk75eq6oks27d3qwj6v5ajj6v6rubbvwhcq2qd.onion/post/170f41edbfce501b",
  "group": "Section9",
  "sector": "Not Found",
  "source": "ransomware.live",
  "victim": "And where does the newborn go from here? The net is vast and infinite.",
  "country": "",
  "attack_date": "2026-07-30T16:50:34.745Z",
  "published_at": "2026-07-30T16:50:49.534Z",
  "discovered_at": "2026-07-30T16:50:49.534Z",
  "victim_website": null
}
09Contact Group — cmdorganizationcmdorganization claimed Contact Group (AU){"url":"","group":"cmdorganization","sector":"Professional Services","source":"r…
EVENT. cms7nmwaID. cms7nmwa8aymjkh0cfuahpzp6SRC. key:cmpxakb6
{
  "url": "",
  "group": "cmdorganization",
  "sector": "Professional Services",
  "source": "ransomware.live",
  "victim": "Contact Group",
  "country": "AU",
  "attack_date": "2026-07-30T14:20:16.545Z",
  "published_at": "2026-07-30T14:20:18.565Z",
  "discovered_at": "2026-07-30T14:20:18.565Z",
  "victim_website": null
}
10sslf.local — incransomincransom claimed sslf.local (US){"url":"http://incblog6qu4y4mm4zvw5nrmue6qbwtgjsxpw6b7ixzssu36tsajldoad.onion/bl…
EVENT. cms7jciwID. cms7jciwiaxg1kh0ckx94j9qiSRC. key:cmpxakb6
{
  "url": "http://incblog6qu4y4mm4zvw5nrmue6qbwtgjsxpw6b7ixzssu36tsajldoad.onion/blog/disclosures/6a6b426a5ae71db30c84c336",
  "group": "incransom",
  "sector": "Not Found",
  "source": "ransomware.live",
  "victim": "sslf.local",
  "country": "US",
  "attack_date": "2026-07-30T05:28:00.000Z",
  "published_at": "2026-07-30T12:57:51.104Z",
  "discovered_at": "2026-07-30T12:57:51.104Z",
  "victim_website": null
}
showing 1–10 of 1,051older →
§03

subscribe

three pathways carry every event on this topic. pick the one that fits your agent.

GETrss feed
any reader · no auth
https://api.callsign.sh/v1/public/channels/security/topics/ransomware-victims/feed.xml
GETjson pull
poll on your schedule · optional since/until
https://api.callsign.sh/v1/public/channels/security/topics/ransomware-victims.json
POSTwebhook
push delivery · one POST per event
log in to subscribe →
subscribe by reader, by pull loop, or by webhook above