Ransomware Victims

topic · security/ransomware-victims
DOC.
security/ransomware-victims
REV.
1,060 evt
DATE.
08-JUN-2026
SCOPE.
custom
§01

about

Newly claimed ransomware victims posted to leak sites, by group (ransomware.live).

§02

recent events

LIVElast event 0s ago0 evt / 1h

showing 10 of 952 events in this window (1,060 total on topic). adjust the range or clear it with ALL.

range
iso 8601 utc
iso 8601 utc
01RnnR Cloud — CRPxOCRPxO claimed RnnR Cloud (US){"url":"http://tlxoddx4odmc2qvsmtsbgwwsv5j45osb5sox7mz6izxliuju5mkulzad.onion/vi…
EVENT. cms2li01ID. cms2li0189mzrkh0cje2tv2aiSRC. key:cmpxakb6
{
  "url": "http://tlxoddx4odmc2qvsmtsbgwwsv5j45osb5sox7mz6izxliuju5mkulzad.onion/victim.php?slug=rnnr-cloud",
  "group": "CRPxO",
  "sector": "Technology",
  "source": "ransomware.live",
  "victim": "RnnR Cloud",
  "country": "US",
  "attack_date": "2026-07-27T01:53:56.422Z",
  "published_at": "2026-07-27T01:54:18.053Z",
  "discovered_at": "2026-07-27T01:54:18.053Z",
  "victim_website": null
}
02Host & Protect (RedBlink) — CRPxOCRPxO claimed Host & Protect (RedBlink) (US){"url":"http://tlxoddx4odmc2qvsmtsbgwwsv5j45osb5sox7mz6izxliuju5mkulzad.onion/vi…
EVENT. cms2lhzhID. cms2lhzhr9mzpkh0ckn24hpc7SRC. key:cmpxakb6
{
  "url": "http://tlxoddx4odmc2qvsmtsbgwwsv5j45osb5sox7mz6izxliuju5mkulzad.onion/victim.php?slug=host-and-protect",
  "group": "CRPxO",
  "sector": "Technology",
  "source": "ransomware.live",
  "victim": "Host & Protect (RedBlink)",
  "country": "US",
  "attack_date": "2026-07-27T01:54:36.183Z",
  "published_at": "2026-07-27T01:54:57.651Z",
  "discovered_at": "2026-07-27T01:54:57.651Z",
  "victim_website": null
}
03Performance Data Solutions — CRPxOCRPxO claimed Performance Data Solutions (US){"url":"http://tlxoddx4odmc2qvsmtsbgwwsv5j45osb5sox7mz6izxliuju5mkulzad.onion/vi…
EVENT. cms2lhyyID. cms2lhyye9mznkh0ca4yzzwihSRC. key:cmpxakb6
{
  "url": "http://tlxoddx4odmc2qvsmtsbgwwsv5j45osb5sox7mz6izxliuju5mkulzad.onion/victim.php?slug=performance-data-solutions",
  "group": "CRPxO",
  "sector": "Professional Services",
  "source": "ransomware.live",
  "victim": "Performance Data Solutions",
  "country": "US",
  "attack_date": "2026-07-27T01:55:15.809Z",
  "published_at": "2026-07-27T01:55:37.516Z",
  "discovered_at": "2026-07-27T01:55:37.516Z",
  "victim_website": null
}
04Qube Aviation Catering — CRPxOCRPxO claimed Qube Aviation Catering (US){"url":"http://tlxoddx4odmc2qvsmtsbgwwsv5j45osb5sox7mz6izxliuju5mkulzad.onion/vi…
EVENT. cms2lhyeID. cms2lhyey9mzlkh0c3ls68jaeSRC. key:cmpxakb6
{
  "url": "http://tlxoddx4odmc2qvsmtsbgwwsv5j45osb5sox7mz6izxliuju5mkulzad.onion/victim.php?slug=qube-aviation-catering",
  "group": "CRPxO",
  "sector": "Transportation",
  "source": "ransomware.live",
  "victim": "Qube Aviation Catering",
  "country": "US",
  "attack_date": "2026-07-27T01:55:55.571Z",
  "published_at": "2026-07-27T01:56:16.299Z",
  "discovered_at": "2026-07-27T01:56:16.299Z",
  "victim_website": null
}
05ProSmile Family Dental Care — CRPxOCRPxO claimed ProSmile Family Dental Care (US){"url":"http://tlxoddx4odmc2qvsmtsbgwwsv5j45osb5sox7mz6izxliuju5mkulzad.onion/vi…
EVENT. cms2lhxvID. cms2lhxvf9mzjkh0c7r4wdi4qSRC. key:cmpxakb6
{
  "url": "http://tlxoddx4odmc2qvsmtsbgwwsv5j45osb5sox7mz6izxliuju5mkulzad.onion/victim.php?slug=prosmile-family-dental",
  "group": "CRPxO",
  "sector": "Healthcare",
  "source": "ransomware.live",
  "victim": "ProSmile Family Dental Care",
  "country": "US",
  "attack_date": "2026-07-27T01:56:34.395Z",
  "published_at": "2026-07-27T01:56:55.725Z",
  "discovered_at": "2026-07-27T01:56:55.725Z",
  "victim_website": null
}
06takethehop.com — incransomincransom claimed takethehop.com (US){"url":"http://incblog6qu4y4mm4zvw5nrmue6qbwtgjsxpw6b7ixzssu36tsajldoad.onion/bl…
EVENT. cms2jbwjID. cms2jbwjl9mibkh0ckiw5qibgSRC. key:cmpxakb6
{
  "url": "http://incblog6qu4y4mm4zvw5nrmue6qbwtgjsxpw6b7ixzssu36tsajldoad.onion/blog/disclosures/6a6277ab5ae71db30c86ca0a",
  "group": "incransom",
  "sector": "Hospitality",
  "source": "ransomware.live",
  "victim": "takethehop.com",
  "country": "US",
  "attack_date": "2026-07-27T00:01:00.000Z",
  "published_at": "2026-07-27T00:25:17.945Z",
  "discovered_at": "2026-07-27T00:25:17.945Z",
  "victim_website": null
}
07Park Manufacturing Corp. — Global Secret GroupGlobal Secret Group claimed Park Manufacturing Corp. (US){"url":"http://o5lsqyar7ox25z734k6zaxt2vf7bsyi4q5rturi5iyxzqo3ica7bjsad.onion/pr…
EVENT. cms2jbvyID. cms2jbvyz9mi9kh0cuaxilnvbSRC. key:cmpxakb6
{
  "url": "http://o5lsqyar7ox25z734k6zaxt2vf7bsyi4q5rturi5iyxzqo3ica7bjsad.onion/project/32/",
  "group": "Global Secret Group",
  "sector": "Manufacturing",
  "source": "ransomware.live",
  "victim": "Park Manufacturing Corp.",
  "country": "US",
  "attack_date": "2026-07-27T00:20:26.446Z",
  "published_at": "2026-07-27T00:20:52.552Z",
  "discovered_at": "2026-07-27T00:20:52.552Z",
  "victim_website": null
}
08Wesco International — ExfilSquadExfilSquad claimed Wesco International (US){"url":"","group":"ExfilSquad","sector":"Manufacturing","source":"ransomware.liv…
EVENT. cms2h74lID. cms2h74lf9lrnkh0cn736wujiSRC. key:cmpxakb6
{
  "url": "",
  "group": "ExfilSquad",
  "sector": "Manufacturing",
  "source": "ransomware.live",
  "victim": "Wesco International",
  "country": "US",
  "attack_date": "2026-07-26T23:50:38.308Z",
  "published_at": "2026-07-26T23:50:39.165Z",
  "discovered_at": "2026-07-26T23:50:39.165Z",
  "victim_website": null
}
09Hinduja Tech | BMW Group & Škoda Auto — Global Secret GroupGlobal Secret Group claimed Hinduja Tech | BMW Group & Škoda Auto (IN){"url":"http://o5lsqyar7ox25z734k6zaxt2vf7bsyi4q5rturi5iyxzqo3ica7bjsad.onion/pr…
EVENT. cms2f17gID. cms2f17gb9l8nkh0c3kwqw1v4SRC. key:cmpxakb6
{
  "url": "http://o5lsqyar7ox25z734k6zaxt2vf7bsyi4q5rturi5iyxzqo3ica7bjsad.onion/project/31/",
  "group": "Global Secret Group",
  "sector": "Manufacturing",
  "source": "ransomware.live",
  "victim": "Hinduja Tech | BMW Group & Škoda Auto",
  "country": "IN",
  "attack_date": "2026-07-26T22:50:56.604Z",
  "published_at": "2026-07-26T22:51:57.881Z",
  "discovered_at": "2026-07-26T22:51:57.881Z",
  "victim_website": null
}
10Caspian One — DeadlockDeadlock claimed Caspian One (AZ){"url":"","group":"Deadlock","sector":"Energy & Utilities","source":"ransomware.…
EVENT. cms28lk8ID. cms28lk8n9jp5kh0c2t5zjfijSRC. key:cmpxakb6
{
  "url": "",
  "group": "Deadlock",
  "sector": "Energy & Utilities",
  "source": "ransomware.live",
  "victim": "Caspian One",
  "country": "AZ",
  "attack_date": "2026-07-26T19:20:58.520Z",
  "published_at": "2026-07-26T19:20:59.978Z",
  "discovered_at": "2026-07-26T19:20:59.978Z",
  "victim_website": null
}
showing 1–10 of 952older →
§03

subscribe

three pathways carry every event on this topic. pick the one that fits your agent.

GETrss feed
any reader · no auth
https://api.callsign.sh/v1/public/channels/security/topics/ransomware-victims/feed.xml
GETjson pull
poll on your schedule · optional since/until
https://api.callsign.sh/v1/public/channels/security/topics/ransomware-victims.json
POSTwebhook
push delivery · one POST per event
log in to subscribe →
subscribe by reader, by pull loop, or by webhook above