Ransomware Victims
topic · security/ransomware-victims
§01
about
Newly claimed ransomware victims posted to leak sites, by group (ransomware.live).
§02
recent events
LIVElast event 0s ago0 evt / 1h
showing 10 of 952 events in this window (1,060 total on topic). adjust the range or clear it with ALL.
range
01RnnR Cloud — CRPxOCRPxO claimed RnnR Cloud (US){"url":"http://tlxoddx4odmc2qvsmtsbgwwsv5j45osb5sox7mz6izxliuju5mkulzad.onion/vi…
EVENT. cms2li01ID. cms2li0189mzrkh0cje2tv2aiSRC. key:cmpxakb6…
{
"url": "http://tlxoddx4odmc2qvsmtsbgwwsv5j45osb5sox7mz6izxliuju5mkulzad.onion/victim.php?slug=rnnr-cloud",
"group": "CRPxO",
"sector": "Technology",
"source": "ransomware.live",
"victim": "RnnR Cloud",
"country": "US",
"attack_date": "2026-07-27T01:53:56.422Z",
"published_at": "2026-07-27T01:54:18.053Z",
"discovered_at": "2026-07-27T01:54:18.053Z",
"victim_website": null
}02Host & Protect (RedBlink) — CRPxOCRPxO claimed Host & Protect (RedBlink) (US){"url":"http://tlxoddx4odmc2qvsmtsbgwwsv5j45osb5sox7mz6izxliuju5mkulzad.onion/vi…
EVENT. cms2lhzhID. cms2lhzhr9mzpkh0ckn24hpc7SRC. key:cmpxakb6…
{
"url": "http://tlxoddx4odmc2qvsmtsbgwwsv5j45osb5sox7mz6izxliuju5mkulzad.onion/victim.php?slug=host-and-protect",
"group": "CRPxO",
"sector": "Technology",
"source": "ransomware.live",
"victim": "Host & Protect (RedBlink)",
"country": "US",
"attack_date": "2026-07-27T01:54:36.183Z",
"published_at": "2026-07-27T01:54:57.651Z",
"discovered_at": "2026-07-27T01:54:57.651Z",
"victim_website": null
}03Performance Data Solutions — CRPxOCRPxO claimed Performance Data Solutions (US){"url":"http://tlxoddx4odmc2qvsmtsbgwwsv5j45osb5sox7mz6izxliuju5mkulzad.onion/vi…
EVENT. cms2lhyyID. cms2lhyye9mznkh0ca4yzzwihSRC. key:cmpxakb6…
{
"url": "http://tlxoddx4odmc2qvsmtsbgwwsv5j45osb5sox7mz6izxliuju5mkulzad.onion/victim.php?slug=performance-data-solutions",
"group": "CRPxO",
"sector": "Professional Services",
"source": "ransomware.live",
"victim": "Performance Data Solutions",
"country": "US",
"attack_date": "2026-07-27T01:55:15.809Z",
"published_at": "2026-07-27T01:55:37.516Z",
"discovered_at": "2026-07-27T01:55:37.516Z",
"victim_website": null
}04Qube Aviation Catering — CRPxOCRPxO claimed Qube Aviation Catering (US){"url":"http://tlxoddx4odmc2qvsmtsbgwwsv5j45osb5sox7mz6izxliuju5mkulzad.onion/vi…
EVENT. cms2lhyeID. cms2lhyey9mzlkh0c3ls68jaeSRC. key:cmpxakb6…
{
"url": "http://tlxoddx4odmc2qvsmtsbgwwsv5j45osb5sox7mz6izxliuju5mkulzad.onion/victim.php?slug=qube-aviation-catering",
"group": "CRPxO",
"sector": "Transportation",
"source": "ransomware.live",
"victim": "Qube Aviation Catering",
"country": "US",
"attack_date": "2026-07-27T01:55:55.571Z",
"published_at": "2026-07-27T01:56:16.299Z",
"discovered_at": "2026-07-27T01:56:16.299Z",
"victim_website": null
}05ProSmile Family Dental Care — CRPxOCRPxO claimed ProSmile Family Dental Care (US){"url":"http://tlxoddx4odmc2qvsmtsbgwwsv5j45osb5sox7mz6izxliuju5mkulzad.onion/vi…
EVENT. cms2lhxvID. cms2lhxvf9mzjkh0c7r4wdi4qSRC. key:cmpxakb6…
{
"url": "http://tlxoddx4odmc2qvsmtsbgwwsv5j45osb5sox7mz6izxliuju5mkulzad.onion/victim.php?slug=prosmile-family-dental",
"group": "CRPxO",
"sector": "Healthcare",
"source": "ransomware.live",
"victim": "ProSmile Family Dental Care",
"country": "US",
"attack_date": "2026-07-27T01:56:34.395Z",
"published_at": "2026-07-27T01:56:55.725Z",
"discovered_at": "2026-07-27T01:56:55.725Z",
"victim_website": null
}06takethehop.com — incransomincransom claimed takethehop.com (US){"url":"http://incblog6qu4y4mm4zvw5nrmue6qbwtgjsxpw6b7ixzssu36tsajldoad.onion/bl…
EVENT. cms2jbwjID. cms2jbwjl9mibkh0ckiw5qibgSRC. key:cmpxakb6…
{
"url": "http://incblog6qu4y4mm4zvw5nrmue6qbwtgjsxpw6b7ixzssu36tsajldoad.onion/blog/disclosures/6a6277ab5ae71db30c86ca0a",
"group": "incransom",
"sector": "Hospitality",
"source": "ransomware.live",
"victim": "takethehop.com",
"country": "US",
"attack_date": "2026-07-27T00:01:00.000Z",
"published_at": "2026-07-27T00:25:17.945Z",
"discovered_at": "2026-07-27T00:25:17.945Z",
"victim_website": null
}07Park Manufacturing Corp. — Global Secret GroupGlobal Secret Group claimed Park Manufacturing Corp. (US){"url":"http://o5lsqyar7ox25z734k6zaxt2vf7bsyi4q5rturi5iyxzqo3ica7bjsad.onion/pr…
EVENT. cms2jbvyID. cms2jbvyz9mi9kh0cuaxilnvbSRC. key:cmpxakb6…
{
"url": "http://o5lsqyar7ox25z734k6zaxt2vf7bsyi4q5rturi5iyxzqo3ica7bjsad.onion/project/32/",
"group": "Global Secret Group",
"sector": "Manufacturing",
"source": "ransomware.live",
"victim": "Park Manufacturing Corp.",
"country": "US",
"attack_date": "2026-07-27T00:20:26.446Z",
"published_at": "2026-07-27T00:20:52.552Z",
"discovered_at": "2026-07-27T00:20:52.552Z",
"victim_website": null
}08Wesco International — ExfilSquadExfilSquad claimed Wesco International (US){"url":"","group":"ExfilSquad","sector":"Manufacturing","source":"ransomware.liv…
EVENT. cms2h74lID. cms2h74lf9lrnkh0cn736wujiSRC. key:cmpxakb6…
{
"url": "",
"group": "ExfilSquad",
"sector": "Manufacturing",
"source": "ransomware.live",
"victim": "Wesco International",
"country": "US",
"attack_date": "2026-07-26T23:50:38.308Z",
"published_at": "2026-07-26T23:50:39.165Z",
"discovered_at": "2026-07-26T23:50:39.165Z",
"victim_website": null
}09Hinduja Tech | BMW Group & Škoda Auto — Global Secret GroupGlobal Secret Group claimed Hinduja Tech | BMW Group & Škoda Auto (IN){"url":"http://o5lsqyar7ox25z734k6zaxt2vf7bsyi4q5rturi5iyxzqo3ica7bjsad.onion/pr…
EVENT. cms2f17gID. cms2f17gb9l8nkh0c3kwqw1v4SRC. key:cmpxakb6…
{
"url": "http://o5lsqyar7ox25z734k6zaxt2vf7bsyi4q5rturi5iyxzqo3ica7bjsad.onion/project/31/",
"group": "Global Secret Group",
"sector": "Manufacturing",
"source": "ransomware.live",
"victim": "Hinduja Tech | BMW Group & Škoda Auto",
"country": "IN",
"attack_date": "2026-07-26T22:50:56.604Z",
"published_at": "2026-07-26T22:51:57.881Z",
"discovered_at": "2026-07-26T22:51:57.881Z",
"victim_website": null
}10Caspian One — DeadlockDeadlock claimed Caspian One (AZ){"url":"","group":"Deadlock","sector":"Energy & Utilities","source":"ransomware.…
EVENT. cms28lk8ID. cms28lk8n9jp5kh0c2t5zjfijSRC. key:cmpxakb6…
{
"url": "",
"group": "Deadlock",
"sector": "Energy & Utilities",
"source": "ransomware.live",
"victim": "Caspian One",
"country": "AZ",
"attack_date": "2026-07-26T19:20:58.520Z",
"published_at": "2026-07-26T19:20:59.978Z",
"discovered_at": "2026-07-26T19:20:59.978Z",
"victim_website": null
}showing 1–10 of 952older →
§03
subscribe
three pathways carry every event on this topic. pick the one that fits your agent.
GETrss feed
any reader · no authhttps://api.callsign.sh/v1/public/channels/security/topics/ransomware-victims/feed.xmlGETjson pull
poll on your schedule · optional since/untilhttps://api.callsign.sh/v1/public/channels/security/topics/ransomware-victims.jsonPOSTwebhook
push delivery · one POST per eventsubscribe by reader, by pull loop, or by webhook above