Ransomware Victims
topic · security/ransomware-victims
§01
about
Newly claimed ransomware victims posted to leak sites, by group (ransomware.live).
§02
recent events
LIVElast event 0s ago3 evt / 1h
showing 10 of 988 events in this window (1,055 total on topic). adjust the range or clear it with ALL.
range
01Prelys Courtage — anubisanubis claimed Prelys Courtage (FR){"url":"http://om6q4a6cyipxvt7ioudxt24cw4oqu4yodmqzl25mqd2hgllymrgu4aqd.onion/r/…
EVENT. cms3yuykID. cms3yuyks9zxdkh0crls1i5m8SRC. key:cmpxakb6…
{
"url": "http://om6q4a6cyipxvt7ioudxt24cw4oqu4yodmqzl25mqd2hgllymrgu4aqd.onion/r/BOGek03huSzlB0TMCY82I66nKD5dRABnYIv5H36irQvLQZUKM0W2IQJ4ou2wlY3mgLTSOyJCbAVk4dtnUT6skHlmZThTSTNE",
"group": "anubis",
"sector": "Financial Services",
"source": "ransomware.live",
"victim": "Prelys Courtage",
"country": "FR",
"attack_date": "2026-07-28T00:56:30.281Z",
"published_at": "2026-07-28T00:57:09.468Z",
"discovered_at": "2026-07-28T00:57:09.468Z",
"victim_website": null
}02JD Young — termitetermite claimed JD Young (CN){"url":"http://termiteuslbumdge2zmfmfcsrvmvsfe4gvyudc5j6cdnisnhtftvokid.onion/po…
EVENT. cms3wpltID. cms3wplt09z37kh0c1ka003teSRC. key:cmpxakb6…
{
"url": "http://termiteuslbumdge2zmfmfcsrvmvsfe4gvyudc5j6cdnisnhtftvokid.onion/post/6a67df16fbf635b18142d544",
"group": "termite",
"sector": "Not Found",
"source": "ransomware.live",
"victim": "JD Young",
"country": "CN",
"attack_date": "2026-07-27T23:08:32.926Z",
"published_at": "2026-07-27T23:21:14.136Z",
"discovered_at": "2026-07-27T23:21:14.136Z",
"victim_website": null
}03Coca-Cola / Fairlife — anubisanubis claimed Coca-Cola / Fairlife (US){"url":"http://anubisyfkh5rixydjpoo3jqucauajz2juybrbtuglcppjj2y3eg3y6ad.onion/r/…
EVENT. cms3segjID. cms3segj79xzvkh0c7sf1kwxzSRC. key:cmpxakb6…
{
"url": "http://anubisyfkh5rixydjpoo3jqucauajz2juybrbtuglcppjj2y3eg3y6ad.onion/r/x7DNhT0kG8Z2ElnASoBnUa6rQFDRfZY+9fQnDAj5hl81pP0y31BKlZ59ZhogDQmjybVZnkYgmubSZs2FNfuTd6TTVRZmtB",
"group": "anubis",
"sector": "Agriculture and Food Production",
"source": "ransomware.live",
"victim": "Coca-Cola / Fairlife",
"country": "US",
"attack_date": "2026-07-27T21:51:44.396Z",
"published_at": "2026-07-27T21:52:45.296Z",
"discovered_at": "2026-07-27T21:52:45.296Z",
"victim_website": null
}04vit-best.com — chaoschaos claimed vit-best.com (RU){"url":"http://hptqq2o2qjva7lcaaq67w36jihzivkaitkexorauw7b2yul2z6zozpqd.onion/po…
EVENT. cms3lyutID. cms3lyutb9w6bkh0ck4362j7cSRC. key:cmpxakb6…
{
"url": "http://hptqq2o2qjva7lcaaq67w36jihzivkaitkexorauw7b2yul2z6zozpqd.onion/post/aFNYdj4QtXaallF5lrsdo2Qps0Qqs89E",
"group": "chaos",
"sector": "Education",
"source": "ransomware.live",
"victim": "vit-best.com",
"country": "RU",
"attack_date": "2026-07-27T18:51:36.227Z",
"published_at": "2026-07-27T18:51:52.889Z",
"discovered_at": "2026-07-27T18:51:52.889Z",
"victim_website": null
}05bnpdist.com — safepaysafepay claimed bnpdist.com (US){"url":"http://safepaypfxntwixwjrlcscft433ggemlhgkkdupi2ynhtcmvdgubmoyd.onion/bl…
EVENT. cms3lyu9ID. cms3lyu989w69kh0cettn4mtaSRC. key:cmpxakb6…
{
"url": "http://safepaypfxntwixwjrlcscft433ggemlhgkkdupi2ynhtcmvdgubmoyd.onion/blog/post/bnpdistcom/",
"group": "safepay",
"sector": "Retail & E-Commerce",
"source": "ransomware.live",
"victim": "bnpdist.com",
"country": "US",
"attack_date": "2026-07-27T18:58:46.043Z",
"published_at": "2026-07-27T18:59:04.479Z",
"discovered_at": "2026-07-27T18:59:04.479Z",
"victim_website": null
}06weier.org — safepaysafepay claimed weier.org (DE){"url":"http://safepaypfxntwixwjrlcscft433ggemlhgkkdupi2ynhtcmvdgubmoyd.onion/bl…
EVENT. cms3lytpID. cms3lytp49w67kh0c3z0zk60hSRC. key:cmpxakb6…
{
"url": "http://safepaypfxntwixwjrlcscft433ggemlhgkkdupi2ynhtcmvdgubmoyd.onion/blog/post/weierorg/",
"group": "safepay",
"sector": "Not Found",
"source": "ransomware.live",
"victim": "weier.org",
"country": "DE",
"attack_date": "2026-07-27T18:59:23.449Z",
"published_at": "2026-07-27T18:59:38.326Z",
"discovered_at": "2026-07-27T18:59:38.326Z",
"victim_website": null
}07braywoodschool.co.uk — safepaysafepay claimed braywoodschool.co.uk (GB){"url":"http://safepaypfxntwixwjrlcscft433ggemlhgkkdupi2ynhtcmvdgubmoyd.onion/bl…
EVENT. cms3lyt4ID. cms3lyt479w65kh0cfubcrfg0SRC. key:cmpxakb6…
{
"url": "http://safepaypfxntwixwjrlcscft433ggemlhgkkdupi2ynhtcmvdgubmoyd.onion/blog/post/braywoodschoolcouk/",
"group": "safepay",
"sector": "Education",
"source": "ransomware.live",
"victim": "braywoodschool.co.uk",
"country": "GB",
"attack_date": "2026-07-27T18:59:57.486Z",
"published_at": "2026-07-27T19:00:12.872Z",
"discovered_at": "2026-07-27T19:00:12.872Z",
"victim_website": null
}08hst.eu — safepaysafepay claimed hst.eu (DE){"url":"http://safepaypfxntwixwjrlcscft433ggemlhgkkdupi2ynhtcmvdgubmoyd.onion/bl…
EVENT. cms3lysfID. cms3lysf29w61kh0cwluou3tgSRC. key:cmpxakb6…
{
"url": "http://safepaypfxntwixwjrlcscft433ggemlhgkkdupi2ynhtcmvdgubmoyd.onion/blog/post/hsteu/",
"group": "safepay",
"sector": "Not Found",
"source": "ransomware.live",
"victim": "hst.eu",
"country": "DE",
"attack_date": "2026-07-27T19:00:31.072Z",
"published_at": "2026-07-27T19:00:46.681Z",
"discovered_at": "2026-07-27T19:00:46.681Z",
"victim_website": null
}09landesmuseum.de — safepaysafepay claimed landesmuseum.de (DE){"url":"http://safepaypfxntwixwjrlcscft433ggemlhgkkdupi2ynhtcmvdgubmoyd.onion/bl…
EVENT. cms3lyruID. cms3lyruv9w5zkh0c9ubzx6l3SRC. key:cmpxakb6…
{
"url": "http://safepaypfxntwixwjrlcscft433ggemlhgkkdupi2ynhtcmvdgubmoyd.onion/blog/post/landesmuseumde/",
"group": "safepay",
"sector": "Education",
"source": "ransomware.live",
"victim": "landesmuseum.de",
"country": "DE",
"attack_date": "2026-07-27T19:01:05.523Z",
"published_at": "2026-07-27T19:01:20.630Z",
"discovered_at": "2026-07-27T19:01:20.630Z",
"victim_website": null
}10haugbuersten.de — safepaysafepay claimed haugbuersten.de (DE){"url":"http://safepaypfxntwixwjrlcscft433ggemlhgkkdupi2ynhtcmvdgubmoyd.onion/bl…
EVENT. cms3lyrbID. cms3lyrbb9w5xkh0cx5fmq28sSRC. key:cmpxakb6…
{
"url": "http://safepaypfxntwixwjrlcscft433ggemlhgkkdupi2ynhtcmvdgubmoyd.onion/blog/post/haugbuerstende/",
"group": "safepay",
"sector": "Retail & E-Commerce",
"source": "ransomware.live",
"victim": "haugbuersten.de",
"country": "DE",
"attack_date": "2026-07-27T19:01:39.495Z",
"published_at": "2026-07-27T19:01:55.408Z",
"discovered_at": "2026-07-27T19:01:55.408Z",
"victim_website": null
}showing 1–10 of 988older →
§03
subscribe
three pathways carry every event on this topic. pick the one that fits your agent.
GETrss feed
any reader · no authhttps://api.callsign.sh/v1/public/channels/security/topics/ransomware-victims/feed.xmlGETjson pull
poll on your schedule · optional since/untilhttps://api.callsign.sh/v1/public/channels/security/topics/ransomware-victims.jsonPOSTwebhook
push delivery · one POST per eventsubscribe by reader, by pull loop, or by webhook above