Ransomware Victims

topic · security/ransomware-victims
DOC.
security/ransomware-victims
REV.
1,052 evt
DATE.
08-JUN-2026
SCOPE.
custom
§01

about

Newly claimed ransomware victims posted to leak sites, by group (ransomware.live).

§02

recent events

LIVElast event 0s ago0 evt / 1h

showing 10 of 997 events in this window (1,052 total on topic). adjust the range or clear it with ALL.

range
iso 8601 utc
iso 8601 utc
01https://eclmn.com/ — incransomincransom claimed https://eclmn.com/ (US){"url":"http://incblog6qu4y4mm4zvw5nrmue6qbwtgjsxpw6b7ixzssu36tsajldoad.onion/bl…
EVENT. cms4qm7bID. cms4qm7b9a6vbkh0cabdpj5m3SRC. key:cmpxakb6
{
  "url": "http://incblog6qu4y4mm4zvw5nrmue6qbwtgjsxpw6b7ixzssu36tsajldoad.onion/blog/disclosures/6a6719765ae71db30c0bbb19",
  "group": "incransom",
  "sector": "Not Found",
  "source": "ransomware.live",
  "victim": "https://eclmn.com/",
  "country": "US",
  "attack_date": "2026-07-28T12:00:00.000Z",
  "published_at": "2026-07-28T13:26:53.449Z",
  "discovered_at": "2026-07-28T13:26:53.449Z",
  "victim_website": null
}
02Incredible Technologies — Booba ProjectBooba Project claimed Incredible Technologies (US){"url":"","group":"Booba Project","sector":"Technology","source":"ransomware.liv…
EVENT. cms4ohl2ID. cms4ohl2ta6bxkh0cce4m2xlzSRC. key:cmpxakb6
{
  "url": "",
  "group": "Booba Project",
  "sector": "Technology",
  "source": "ransomware.live",
  "victim": "Incredible Technologies",
  "country": "US",
  "attack_date": "2026-07-28T11:37:00.000Z",
  "published_at": "2026-07-28T12:50:34.042Z",
  "discovered_at": "2026-07-28T12:50:34.042Z",
  "victim_website": null
}
03Takis srl — DeadlockDeadlock claimed Takis srl{"url":"","group":"Deadlock","sector":"Manufacturing","source":"ransomware.live"…
EVENT. cms4ohkiID. cms4ohkita6bvkh0ckdzb9emaSRC. key:cmpxakb6
{
  "url": "",
  "group": "Deadlock",
  "sector": "Manufacturing",
  "source": "ransomware.live",
  "victim": "Takis srl",
  "country": "",
  "attack_date": "2026-07-28T12:51:38.500Z",
  "published_at": "2026-07-28T12:51:41.870Z",
  "discovered_at": "2026-07-28T12:51:41.870Z",
  "victim_website": null
}
04Della Casa Group AG — incransomincransom claimed Della Casa Group AG (CH){"url":"http://incblog6qu4y4mm4zvw5nrmue6qbwtgjsxpw6b7ixzssu36tsajldoad.onion/bl…
EVENT. cms4mdjmID. cms4mdjmba5qlkh0c5m1dj3mwSRC. key:cmpxakb6
{
  "url": "http://incblog6qu4y4mm4zvw5nrmue6qbwtgjsxpw6b7ixzssu36tsajldoad.onion/blog/disclosures/6a6774db5ae71db30c14ce5b",
  "group": "incransom",
  "sector": "Other",
  "source": "ransomware.live",
  "victim": "Della Casa Group AG",
  "country": "CH",
  "attack_date": "2026-07-28T11:11:00.000Z",
  "published_at": "2026-07-28T12:00:56.253Z",
  "discovered_at": "2026-07-28T12:00:56.253Z",
  "victim_website": null
}
05Gran valle negocios — qilinqilin claimed Gran valle negocios (AR){"url":"http://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/si…
EVENT. cms4i3mvID. cms4i3mvna4nlkh0ctnu0khalSRC. key:cmpxakb6
{
  "url": "http://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=a830d214-9f13-4708-8f06-bf1c3021c973",
  "group": "qilin",
  "sector": "Other",
  "source": "ransomware.live",
  "victim": "Gran valle negocios",
  "country": "AR",
  "attack_date": "2026-07-28T10:01:23.219Z",
  "published_at": "2026-07-28T10:01:53.210Z",
  "discovered_at": "2026-07-28T10:01:53.210Z",
  "victim_website": null
}
06Affinia Healthcare — termitetermite claimed Affinia Healthcare (US){"url":"http://termiteuslbumdge2zmfmfcsrvmvsfe4gvyudc5j6cdnisnhtftvokid.onion/po…
EVENT. cms434hmID. cms434hmda0z9kh0clv0ma7qqSRC. key:cmpxakb6
{
  "url": "http://termiteuslbumdge2zmfmfcsrvmvsfe4gvyudc5j6cdnisnhtftvokid.onion/post/6a67df3dfbf635b18142d5aa",
  "group": "termite",
  "sector": "Healthcare",
  "source": "ransomware.live",
  "victim": "Affinia Healthcare",
  "country": "US",
  "attack_date": "2026-07-28T01:19:13.617Z",
  "published_at": "2026-07-28T02:07:54.053Z",
  "discovered_at": "2026-07-28T02:07:54.053Z",
  "victim_website": null
}
07DUCON — incransomincransom claimed DUCON (CO){"url":"http://incblog6qu4y4mm4zvw5nrmue6qbwtgjsxpw6b7ixzssu36tsajldoad.onion/bl…
EVENT. cms4103bID. cms4103b6a0fpkh0cise9yr4iSRC. key:cmpxakb6
{
  "url": "http://incblog6qu4y4mm4zvw5nrmue6qbwtgjsxpw6b7ixzssu36tsajldoad.onion/blog/disclosures/6a6321575ae71db30c9bd08e",
  "group": "incransom",
  "sector": "Manufacturing",
  "source": "ransomware.live",
  "victim": "DUCON",
  "country": "CO",
  "attack_date": "2026-07-28T01:00:00.000Z",
  "published_at": "2026-07-28T01:58:50.547Z",
  "discovered_at": "2026-07-28T01:58:50.547Z",
  "victim_website": null
}
08minigrip.com.mx — incransomincransom claimed minigrip.com.mx (MX){"url":"http://incblog6qu4y4mm4zvw5nrmue6qbwtgjsxpw6b7ixzssu36tsajldoad.onion/bl…
EVENT. cms4102qID. cms4102qva0fnkh0czi6ibcerSRC. key:cmpxakb6
{
  "url": "http://incblog6qu4y4mm4zvw5nrmue6qbwtgjsxpw6b7ixzssu36tsajldoad.onion/blog/disclosures/6a631e935ae71db30c9b88ce",
  "group": "incransom",
  "sector": "Manufacturing",
  "source": "ransomware.live",
  "victim": "minigrip.com.mx",
  "country": "MX",
  "attack_date": "2026-07-28T01:00:00.000Z",
  "published_at": "2026-07-28T02:01:06.045Z",
  "discovered_at": "2026-07-28T02:01:06.045Z",
  "victim_website": null
}
09foundationstofreedom.org — incransomincransom claimed foundationstofreedom.org (US){"url":"http://incblog6qu4y4mm4zvw5nrmue6qbwtgjsxpw6b7ixzssu36tsajldoad.onion/bl…
EVENT. cms3yuz8ID. cms3yuz8i9zxfkh0crxzbwsveSRC. key:cmpxakb6
{
  "url": "http://incblog6qu4y4mm4zvw5nrmue6qbwtgjsxpw6b7ixzssu36tsajldoad.onion/blog/disclosures/6a65400c5ae71db30cd89b27",
  "group": "incransom",
  "sector": "Other",
  "source": "ransomware.live",
  "victim": "foundationstofreedom.org",
  "country": "US",
  "attack_date": "2026-07-28T00:01:00.000Z",
  "published_at": "2026-07-28T01:03:45.402Z",
  "discovered_at": "2026-07-28T01:03:45.402Z",
  "victim_website": null
}
10Prelys Courtage — anubisanubis claimed Prelys Courtage (FR){"url":"http://om6q4a6cyipxvt7ioudxt24cw4oqu4yodmqzl25mqd2hgllymrgu4aqd.onion/r/…
EVENT. cms3yuykID. cms3yuyks9zxdkh0crls1i5m8SRC. key:cmpxakb6
{
  "url": "http://om6q4a6cyipxvt7ioudxt24cw4oqu4yodmqzl25mqd2hgllymrgu4aqd.onion/r/BOGek03huSzlB0TMCY82I66nKD5dRABnYIv5H36irQvLQZUKM0W2IQJ4ou2wlY3mgLTSOyJCbAVk4dtnUT6skHlmZThTSTNE",
  "group": "anubis",
  "sector": "Financial Services",
  "source": "ransomware.live",
  "victim": "Prelys Courtage",
  "country": "FR",
  "attack_date": "2026-07-28T00:56:30.281Z",
  "published_at": "2026-07-28T00:57:09.468Z",
  "discovered_at": "2026-07-28T00:57:09.468Z",
  "victim_website": null
}
showing 1–10 of 997older →
§03

subscribe

three pathways carry every event on this topic. pick the one that fits your agent.

GETrss feed
any reader · no auth
https://api.callsign.sh/v1/public/channels/security/topics/ransomware-victims/feed.xml
GETjson pull
poll on your schedule · optional since/until
https://api.callsign.sh/v1/public/channels/security/topics/ransomware-victims.json
POSTwebhook
push delivery · one POST per event
log in to subscribe →
subscribe by reader, by pull loop, or by webhook above