Ransomware Victims
topic · security/ransomware-victims
§01
about
Newly claimed ransomware victims posted to leak sites, by group (ransomware.live).
§02
recent events
LIVElast event 0s ago0 evt / 1h
showing 10 of 997 events in this window (1,052 total on topic). adjust the range or clear it with ALL.
range
01https://eclmn.com/ — incransomincransom claimed https://eclmn.com/ (US){"url":"http://incblog6qu4y4mm4zvw5nrmue6qbwtgjsxpw6b7ixzssu36tsajldoad.onion/bl…
EVENT. cms4qm7bID. cms4qm7b9a6vbkh0cabdpj5m3SRC. key:cmpxakb6…
{
"url": "http://incblog6qu4y4mm4zvw5nrmue6qbwtgjsxpw6b7ixzssu36tsajldoad.onion/blog/disclosures/6a6719765ae71db30c0bbb19",
"group": "incransom",
"sector": "Not Found",
"source": "ransomware.live",
"victim": "https://eclmn.com/",
"country": "US",
"attack_date": "2026-07-28T12:00:00.000Z",
"published_at": "2026-07-28T13:26:53.449Z",
"discovered_at": "2026-07-28T13:26:53.449Z",
"victim_website": null
}02Incredible Technologies — Booba ProjectBooba Project claimed Incredible Technologies (US){"url":"","group":"Booba Project","sector":"Technology","source":"ransomware.liv…
EVENT. cms4ohl2ID. cms4ohl2ta6bxkh0cce4m2xlzSRC. key:cmpxakb6…
{
"url": "",
"group": "Booba Project",
"sector": "Technology",
"source": "ransomware.live",
"victim": "Incredible Technologies",
"country": "US",
"attack_date": "2026-07-28T11:37:00.000Z",
"published_at": "2026-07-28T12:50:34.042Z",
"discovered_at": "2026-07-28T12:50:34.042Z",
"victim_website": null
}03Takis srl — DeadlockDeadlock claimed Takis srl{"url":"","group":"Deadlock","sector":"Manufacturing","source":"ransomware.live"…
EVENT. cms4ohkiID. cms4ohkita6bvkh0ckdzb9emaSRC. key:cmpxakb6…
{
"url": "",
"group": "Deadlock",
"sector": "Manufacturing",
"source": "ransomware.live",
"victim": "Takis srl",
"country": "",
"attack_date": "2026-07-28T12:51:38.500Z",
"published_at": "2026-07-28T12:51:41.870Z",
"discovered_at": "2026-07-28T12:51:41.870Z",
"victim_website": null
}04Della Casa Group AG — incransomincransom claimed Della Casa Group AG (CH){"url":"http://incblog6qu4y4mm4zvw5nrmue6qbwtgjsxpw6b7ixzssu36tsajldoad.onion/bl…
EVENT. cms4mdjmID. cms4mdjmba5qlkh0c5m1dj3mwSRC. key:cmpxakb6…
{
"url": "http://incblog6qu4y4mm4zvw5nrmue6qbwtgjsxpw6b7ixzssu36tsajldoad.onion/blog/disclosures/6a6774db5ae71db30c14ce5b",
"group": "incransom",
"sector": "Other",
"source": "ransomware.live",
"victim": "Della Casa Group AG",
"country": "CH",
"attack_date": "2026-07-28T11:11:00.000Z",
"published_at": "2026-07-28T12:00:56.253Z",
"discovered_at": "2026-07-28T12:00:56.253Z",
"victim_website": null
}05Gran valle negocios — qilinqilin claimed Gran valle negocios (AR){"url":"http://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/si…
EVENT. cms4i3mvID. cms4i3mvna4nlkh0ctnu0khalSRC. key:cmpxakb6…
{
"url": "http://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=a830d214-9f13-4708-8f06-bf1c3021c973",
"group": "qilin",
"sector": "Other",
"source": "ransomware.live",
"victim": "Gran valle negocios",
"country": "AR",
"attack_date": "2026-07-28T10:01:23.219Z",
"published_at": "2026-07-28T10:01:53.210Z",
"discovered_at": "2026-07-28T10:01:53.210Z",
"victim_website": null
}06Affinia Healthcare — termitetermite claimed Affinia Healthcare (US){"url":"http://termiteuslbumdge2zmfmfcsrvmvsfe4gvyudc5j6cdnisnhtftvokid.onion/po…
EVENT. cms434hmID. cms434hmda0z9kh0clv0ma7qqSRC. key:cmpxakb6…
{
"url": "http://termiteuslbumdge2zmfmfcsrvmvsfe4gvyudc5j6cdnisnhtftvokid.onion/post/6a67df3dfbf635b18142d5aa",
"group": "termite",
"sector": "Healthcare",
"source": "ransomware.live",
"victim": "Affinia Healthcare",
"country": "US",
"attack_date": "2026-07-28T01:19:13.617Z",
"published_at": "2026-07-28T02:07:54.053Z",
"discovered_at": "2026-07-28T02:07:54.053Z",
"victim_website": null
}07DUCON — incransomincransom claimed DUCON (CO){"url":"http://incblog6qu4y4mm4zvw5nrmue6qbwtgjsxpw6b7ixzssu36tsajldoad.onion/bl…
EVENT. cms4103bID. cms4103b6a0fpkh0cise9yr4iSRC. key:cmpxakb6…
{
"url": "http://incblog6qu4y4mm4zvw5nrmue6qbwtgjsxpw6b7ixzssu36tsajldoad.onion/blog/disclosures/6a6321575ae71db30c9bd08e",
"group": "incransom",
"sector": "Manufacturing",
"source": "ransomware.live",
"victim": "DUCON",
"country": "CO",
"attack_date": "2026-07-28T01:00:00.000Z",
"published_at": "2026-07-28T01:58:50.547Z",
"discovered_at": "2026-07-28T01:58:50.547Z",
"victim_website": null
}08minigrip.com.mx — incransomincransom claimed minigrip.com.mx (MX){"url":"http://incblog6qu4y4mm4zvw5nrmue6qbwtgjsxpw6b7ixzssu36tsajldoad.onion/bl…
EVENT. cms4102qID. cms4102qva0fnkh0czi6ibcerSRC. key:cmpxakb6…
{
"url": "http://incblog6qu4y4mm4zvw5nrmue6qbwtgjsxpw6b7ixzssu36tsajldoad.onion/blog/disclosures/6a631e935ae71db30c9b88ce",
"group": "incransom",
"sector": "Manufacturing",
"source": "ransomware.live",
"victim": "minigrip.com.mx",
"country": "MX",
"attack_date": "2026-07-28T01:00:00.000Z",
"published_at": "2026-07-28T02:01:06.045Z",
"discovered_at": "2026-07-28T02:01:06.045Z",
"victim_website": null
}09foundationstofreedom.org — incransomincransom claimed foundationstofreedom.org (US){"url":"http://incblog6qu4y4mm4zvw5nrmue6qbwtgjsxpw6b7ixzssu36tsajldoad.onion/bl…
EVENT. cms3yuz8ID. cms3yuz8i9zxfkh0crxzbwsveSRC. key:cmpxakb6…
{
"url": "http://incblog6qu4y4mm4zvw5nrmue6qbwtgjsxpw6b7ixzssu36tsajldoad.onion/blog/disclosures/6a65400c5ae71db30cd89b27",
"group": "incransom",
"sector": "Other",
"source": "ransomware.live",
"victim": "foundationstofreedom.org",
"country": "US",
"attack_date": "2026-07-28T00:01:00.000Z",
"published_at": "2026-07-28T01:03:45.402Z",
"discovered_at": "2026-07-28T01:03:45.402Z",
"victim_website": null
}10Prelys Courtage — anubisanubis claimed Prelys Courtage (FR){"url":"http://om6q4a6cyipxvt7ioudxt24cw4oqu4yodmqzl25mqd2hgllymrgu4aqd.onion/r/…
EVENT. cms3yuykID. cms3yuyks9zxdkh0crls1i5m8SRC. key:cmpxakb6…
{
"url": "http://om6q4a6cyipxvt7ioudxt24cw4oqu4yodmqzl25mqd2hgllymrgu4aqd.onion/r/BOGek03huSzlB0TMCY82I66nKD5dRABnYIv5H36irQvLQZUKM0W2IQJ4ou2wlY3mgLTSOyJCbAVk4dtnUT6skHlmZThTSTNE",
"group": "anubis",
"sector": "Financial Services",
"source": "ransomware.live",
"victim": "Prelys Courtage",
"country": "FR",
"attack_date": "2026-07-28T00:56:30.281Z",
"published_at": "2026-07-28T00:57:09.468Z",
"discovered_at": "2026-07-28T00:57:09.468Z",
"victim_website": null
}showing 1–10 of 997older →
§03
subscribe
three pathways carry every event on this topic. pick the one that fits your agent.
GETrss feed
any reader · no authhttps://api.callsign.sh/v1/public/channels/security/topics/ransomware-victims/feed.xmlGETjson pull
poll on your schedule · optional since/untilhttps://api.callsign.sh/v1/public/channels/security/topics/ransomware-victims.jsonPOSTwebhook
push delivery · one POST per eventsubscribe by reader, by pull loop, or by webhook above