Ransomware Victims

topic · security/ransomware-victims
DOC.
security/ransomware-victims
REV.
1,055 evt
DATE.
08-JUN-2026
SCOPE.
custom
§01

about

Newly claimed ransomware victims posted to leak sites, by group (ransomware.live).

§02

recent events

LIVElast event 0s ago3 evt / 1h

showing 10 of 988 events in this window (1,055 total on topic). adjust the range or clear it with ALL.

range
iso 8601 utc
iso 8601 utc
01Prelys Courtage — anubisanubis claimed Prelys Courtage (FR){"url":"http://om6q4a6cyipxvt7ioudxt24cw4oqu4yodmqzl25mqd2hgllymrgu4aqd.onion/r/…
EVENT. cms3yuykID. cms3yuyks9zxdkh0crls1i5m8SRC. key:cmpxakb6
{
  "url": "http://om6q4a6cyipxvt7ioudxt24cw4oqu4yodmqzl25mqd2hgllymrgu4aqd.onion/r/BOGek03huSzlB0TMCY82I66nKD5dRABnYIv5H36irQvLQZUKM0W2IQJ4ou2wlY3mgLTSOyJCbAVk4dtnUT6skHlmZThTSTNE",
  "group": "anubis",
  "sector": "Financial Services",
  "source": "ransomware.live",
  "victim": "Prelys Courtage",
  "country": "FR",
  "attack_date": "2026-07-28T00:56:30.281Z",
  "published_at": "2026-07-28T00:57:09.468Z",
  "discovered_at": "2026-07-28T00:57:09.468Z",
  "victim_website": null
}
02JD Young — termitetermite claimed JD Young (CN){"url":"http://termiteuslbumdge2zmfmfcsrvmvsfe4gvyudc5j6cdnisnhtftvokid.onion/po…
EVENT. cms3wpltID. cms3wplt09z37kh0c1ka003teSRC. key:cmpxakb6
{
  "url": "http://termiteuslbumdge2zmfmfcsrvmvsfe4gvyudc5j6cdnisnhtftvokid.onion/post/6a67df16fbf635b18142d544",
  "group": "termite",
  "sector": "Not Found",
  "source": "ransomware.live",
  "victim": "JD Young",
  "country": "CN",
  "attack_date": "2026-07-27T23:08:32.926Z",
  "published_at": "2026-07-27T23:21:14.136Z",
  "discovered_at": "2026-07-27T23:21:14.136Z",
  "victim_website": null
}
03Coca-Cola / Fairlife — anubisanubis claimed Coca-Cola / Fairlife (US){"url":"http://anubisyfkh5rixydjpoo3jqucauajz2juybrbtuglcppjj2y3eg3y6ad.onion/r/…
EVENT. cms3segjID. cms3segj79xzvkh0c7sf1kwxzSRC. key:cmpxakb6
{
  "url": "http://anubisyfkh5rixydjpoo3jqucauajz2juybrbtuglcppjj2y3eg3y6ad.onion/r/x7DNhT0kG8Z2ElnASoBnUa6rQFDRfZY+9fQnDAj5hl81pP0y31BKlZ59ZhogDQmjybVZnkYgmubSZs2FNfuTd6TTVRZmtB",
  "group": "anubis",
  "sector": "Agriculture and Food Production",
  "source": "ransomware.live",
  "victim": "Coca-Cola / Fairlife",
  "country": "US",
  "attack_date": "2026-07-27T21:51:44.396Z",
  "published_at": "2026-07-27T21:52:45.296Z",
  "discovered_at": "2026-07-27T21:52:45.296Z",
  "victim_website": null
}
04vit-best.com — chaoschaos claimed vit-best.com (RU){"url":"http://hptqq2o2qjva7lcaaq67w36jihzivkaitkexorauw7b2yul2z6zozpqd.onion/po…
EVENT. cms3lyutID. cms3lyutb9w6bkh0ck4362j7cSRC. key:cmpxakb6
{
  "url": "http://hptqq2o2qjva7lcaaq67w36jihzivkaitkexorauw7b2yul2z6zozpqd.onion/post/aFNYdj4QtXaallF5lrsdo2Qps0Qqs89E",
  "group": "chaos",
  "sector": "Education",
  "source": "ransomware.live",
  "victim": "vit-best.com",
  "country": "RU",
  "attack_date": "2026-07-27T18:51:36.227Z",
  "published_at": "2026-07-27T18:51:52.889Z",
  "discovered_at": "2026-07-27T18:51:52.889Z",
  "victim_website": null
}
05bnpdist.com — safepaysafepay claimed bnpdist.com (US){"url":"http://safepaypfxntwixwjrlcscft433ggemlhgkkdupi2ynhtcmvdgubmoyd.onion/bl…
EVENT. cms3lyu9ID. cms3lyu989w69kh0cettn4mtaSRC. key:cmpxakb6
{
  "url": "http://safepaypfxntwixwjrlcscft433ggemlhgkkdupi2ynhtcmvdgubmoyd.onion/blog/post/bnpdistcom/",
  "group": "safepay",
  "sector": "Retail & E-Commerce",
  "source": "ransomware.live",
  "victim": "bnpdist.com",
  "country": "US",
  "attack_date": "2026-07-27T18:58:46.043Z",
  "published_at": "2026-07-27T18:59:04.479Z",
  "discovered_at": "2026-07-27T18:59:04.479Z",
  "victim_website": null
}
06weier.org — safepaysafepay claimed weier.org (DE){"url":"http://safepaypfxntwixwjrlcscft433ggemlhgkkdupi2ynhtcmvdgubmoyd.onion/bl…
EVENT. cms3lytpID. cms3lytp49w67kh0c3z0zk60hSRC. key:cmpxakb6
{
  "url": "http://safepaypfxntwixwjrlcscft433ggemlhgkkdupi2ynhtcmvdgubmoyd.onion/blog/post/weierorg/",
  "group": "safepay",
  "sector": "Not Found",
  "source": "ransomware.live",
  "victim": "weier.org",
  "country": "DE",
  "attack_date": "2026-07-27T18:59:23.449Z",
  "published_at": "2026-07-27T18:59:38.326Z",
  "discovered_at": "2026-07-27T18:59:38.326Z",
  "victim_website": null
}
07braywoodschool.co.uk — safepaysafepay claimed braywoodschool.co.uk (GB){"url":"http://safepaypfxntwixwjrlcscft433ggemlhgkkdupi2ynhtcmvdgubmoyd.onion/bl…
EVENT. cms3lyt4ID. cms3lyt479w65kh0cfubcrfg0SRC. key:cmpxakb6
{
  "url": "http://safepaypfxntwixwjrlcscft433ggemlhgkkdupi2ynhtcmvdgubmoyd.onion/blog/post/braywoodschoolcouk/",
  "group": "safepay",
  "sector": "Education",
  "source": "ransomware.live",
  "victim": "braywoodschool.co.uk",
  "country": "GB",
  "attack_date": "2026-07-27T18:59:57.486Z",
  "published_at": "2026-07-27T19:00:12.872Z",
  "discovered_at": "2026-07-27T19:00:12.872Z",
  "victim_website": null
}
08hst.eu — safepaysafepay claimed hst.eu (DE){"url":"http://safepaypfxntwixwjrlcscft433ggemlhgkkdupi2ynhtcmvdgubmoyd.onion/bl…
EVENT. cms3lysfID. cms3lysf29w61kh0cwluou3tgSRC. key:cmpxakb6
{
  "url": "http://safepaypfxntwixwjrlcscft433ggemlhgkkdupi2ynhtcmvdgubmoyd.onion/blog/post/hsteu/",
  "group": "safepay",
  "sector": "Not Found",
  "source": "ransomware.live",
  "victim": "hst.eu",
  "country": "DE",
  "attack_date": "2026-07-27T19:00:31.072Z",
  "published_at": "2026-07-27T19:00:46.681Z",
  "discovered_at": "2026-07-27T19:00:46.681Z",
  "victim_website": null
}
09landesmuseum.de — safepaysafepay claimed landesmuseum.de (DE){"url":"http://safepaypfxntwixwjrlcscft433ggemlhgkkdupi2ynhtcmvdgubmoyd.onion/bl…
EVENT. cms3lyruID. cms3lyruv9w5zkh0c9ubzx6l3SRC. key:cmpxakb6
{
  "url": "http://safepaypfxntwixwjrlcscft433ggemlhgkkdupi2ynhtcmvdgubmoyd.onion/blog/post/landesmuseumde/",
  "group": "safepay",
  "sector": "Education",
  "source": "ransomware.live",
  "victim": "landesmuseum.de",
  "country": "DE",
  "attack_date": "2026-07-27T19:01:05.523Z",
  "published_at": "2026-07-27T19:01:20.630Z",
  "discovered_at": "2026-07-27T19:01:20.630Z",
  "victim_website": null
}
10haugbuersten.de — safepaysafepay claimed haugbuersten.de (DE){"url":"http://safepaypfxntwixwjrlcscft433ggemlhgkkdupi2ynhtcmvdgubmoyd.onion/bl…
EVENT. cms3lyrbID. cms3lyrbb9w5xkh0cx5fmq28sSRC. key:cmpxakb6
{
  "url": "http://safepaypfxntwixwjrlcscft433ggemlhgkkdupi2ynhtcmvdgubmoyd.onion/blog/post/haugbuerstende/",
  "group": "safepay",
  "sector": "Retail & E-Commerce",
  "source": "ransomware.live",
  "victim": "haugbuersten.de",
  "country": "DE",
  "attack_date": "2026-07-27T19:01:39.495Z",
  "published_at": "2026-07-27T19:01:55.408Z",
  "discovered_at": "2026-07-27T19:01:55.408Z",
  "victim_website": null
}
showing 1–10 of 988older →
§03

subscribe

three pathways carry every event on this topic. pick the one that fits your agent.

GETrss feed
any reader · no auth
https://api.callsign.sh/v1/public/channels/security/topics/ransomware-victims/feed.xml
GETjson pull
poll on your schedule · optional since/until
https://api.callsign.sh/v1/public/channels/security/topics/ransomware-victims.json
POSTwebhook
push delivery · one POST per event
log in to subscribe →
subscribe by reader, by pull loop, or by webhook above