← security

Ransomware Victims

topic · security/ransomware-victims
DOC.
security/ransomware-victims
REV.
1,051 evt
DATE.
08-JUN-2026
SCOPE.
custom
§01

about

Newly claimed ransomware victims posted to leak sites, by group (ransomware.live).

§02

recent events

LIVElast event 0s ago0 evt / 1h

showing 10 of 1,015 events in this window (1,051 total on topic). adjust the range or clear it with ALL.

range
iso 8601 utc
iso 8601 utc
01Yue Ki Industrial — morpheusmorpheus claimed Yue Ki Industrial (TW){"url":"","group":"morpheus","sector":"Manufacturing","source":"ransomware.live"…
EVENT. cms76fq5ID. cms76fq57atvjkh0cbi87jkb4SRC. key:cmpxakb6…
{
  "url": "",
  "group": "morpheus",
  "sector": "Manufacturing",
  "source": "ransomware.live",
  "victim": "Yue Ki Industrial",
  "country": "TW",
  "attack_date": "2026-07-30T06:02:45.633Z",
  "published_at": "2026-07-30T06:28:05.951Z",
  "discovered_at": "2026-07-30T06:28:05.951Z",
  "victim_website": null
}
02harwal.net — incransomincransom claimed harwal.net (AE){"url":"http://incblog6qu4y4mm4zvw5nrmue6qbwtgjsxpw6b7ixzssu36tsajldoad.onion/bl…
EVENT. cms6ck36ID. cms6ck360am2tkh0ctnv8lw0hSRC. key:cmpxakb6…
{
  "url": "http://incblog6qu4y4mm4zvw5nrmue6qbwtgjsxpw6b7ixzssu36tsajldoad.onion/blog/disclosures/6a6a24085ae71db30c60bd45",
  "group": "incransom",
  "sector": "Not Found",
  "source": "ransomware.live",
  "victim": "harwal.net",
  "country": "AE",
  "attack_date": "2026-07-29T09:00:00.000Z",
  "published_at": "2026-07-29T16:26:22.220Z",
  "discovered_at": "2026-07-29T16:26:22.220Z",
  "victim_website": null
}
03Northwood Country Club — akiraakira claimed Northwood Country Club{"url":"","group":"akira","sector":"Hospitality","source":"ransomware.live","vic…
EVENT. cms66499ID. cms66499iake5kh0cvy9hcmbsSRC. key:cmpxakb6…
{
  "url": "",
  "group": "akira",
  "sector": "Hospitality",
  "source": "ransomware.live",
  "victim": "Northwood Country Club",
  "country": "",
  "attack_date": "2026-07-29T00:00:00.000Z",
  "published_at": "2026-07-29T13:50:57.407Z",
  "discovered_at": "2026-07-29T13:50:57.407Z",
  "victim_website": null
}
04****.com.pa — Section9Section9 claimed ****.com.pa (PA){"url":"http://v76bdil3v7hczufr7kwk75eq6oks27d3qwj6v5ajj6v6rubbvwhcq2qd.onion/po…
EVENT. cms6648pID. cms6648pbake3kh0cif7q9960SRC. key:cmpxakb6…
{
  "url": "http://v76bdil3v7hczufr7kwk75eq6oks27d3qwj6v5ajj6v6rubbvwhcq2qd.onion/post/898fa9b128c4eeb7",
  "group": "Section9",
  "sector": "Not Found",
  "source": "ransomware.live",
  "victim": "****.com.pa",
  "country": "PA",
  "attack_date": "2026-07-29T13:20:40.229Z",
  "published_at": "2026-07-29T13:20:57.472Z",
  "discovered_at": "2026-07-29T13:20:57.472Z",
  "victim_website": null
}
05StellarRAD Systems — spacebearsspacebears claimed StellarRAD Systems (US){"url":"http://5butbkrljkaorg5maepuca25oma7eiwo6a2rlhvkblb4v6mf3ki2ovid.onion/co…
EVENT. cms5zm6mID. cms5zm6mfainzkh0cbmogtfyzSRC. key:cmpxakb6…
{
  "url": "http://5butbkrljkaorg5maepuca25oma7eiwo6a2rlhvkblb4v6mf3ki2ovid.onion/companies/64/stellarrad-systems",
  "group": "spacebears",
  "sector": "Technology",
  "source": "ransomware.live",
  "victim": "StellarRAD Systems",
  "country": "US",
  "attack_date": "2026-07-29T11:03:03.994Z",
  "published_at": "2026-07-29T11:03:26.457Z",
  "discovered_at": "2026-07-29T11:03:26.457Z",
  "victim_website": null
}
06Bretford Manufacturing — auroraaurora claimed Bretford Manufacturing (US){"url":"http://u6lieui2dakbctcjea2bz4r4q32r7t36nwljovqbv7mxs6o2smgxixid.onion/bl…
EVENT. cms5r21sID. cms5r21sdagi1kh0cafq3vlxdSRC. key:cmpxakb6…
{
  "url": "http://u6lieui2dakbctcjea2bz4r4q32r7t36nwljovqbv7mxs6o2smgxixid.onion/blog/bretford-manufacturing-b4537780",
  "group": "aurora",
  "sector": "Manufacturing",
  "source": "ransomware.live",
  "victim": "Bretford Manufacturing",
  "country": "US",
  "attack_date": "2026-07-29T00:00:00.000Z",
  "published_at": "2026-07-29T06:51:40.642Z",
  "discovered_at": "2026-07-29T06:51:40.642Z",
  "victim_website": null
}
07Weilhotel — gunragunra claimed Weilhotel (MY){"url":"","group":"gunra","sector":"Hospitality","source":"ransomware.live","vic…
EVENT. cms5mr3bID. cms5mr3b2afgpkh0c9ykcua98SRC. key:cmpxakb6…
{
  "url": "",
  "group": "gunra",
  "sector": "Hospitality",
  "source": "ransomware.live",
  "victim": "Weilhotel",
  "country": "MY",
  "attack_date": "2026-07-29T04:24:35.957Z",
  "published_at": "2026-07-29T04:24:37.577Z",
  "discovered_at": "2026-07-29T04:24:37.577Z",
  "victim_website": null
}
08AHENK lab — DeadlockDeadlock claimed AHENK lab (TR){"url":"","group":"Deadlock","sector":"Technology","source":"ransomware.live","v…
EVENT. cms5bzguID. cms5bzgukacqxkh0cvf7hm64hSRC. key:cmpxakb6…
{
  "url": "",
  "group": "Deadlock",
  "sector": "Technology",
  "source": "ransomware.live",
  "victim": "AHENK lab",
  "country": "TR",
  "attack_date": "2026-07-28T23:50:20.215Z",
  "published_at": "2026-07-28T23:50:22.347Z",
  "discovered_at": "2026-07-28T23:50:22.347Z",
  "victim_website": null
}
09Hoc — qilinqilin claimed Hoc (GB){"url":"http://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/si…
EVENT. cms57o52ID. cms57o52eablbkh0cqhml3c39SRC. key:cmpxakb6…
{
  "url": "http://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=7c2d8a4e-d317-43bb-9d60-257266a55f49",
  "group": "qilin",
  "sector": "Not Found",
  "source": "ransomware.live",
  "victim": "Hoc",
  "country": "GB",
  "attack_date": "2026-07-28T21:58:22.142Z",
  "published_at": "2026-07-28T21:58:46.614Z",
  "discovered_at": "2026-07-28T21:58:46.614Z",
  "victim_website": null
}
10Buck Knives — thegentlementhegentlemen claimed Buck Knives (US){"url":"","group":"thegentlemen","sector":"Manufacturing","source":"ransomware.l…
EVENT. cms55jfeID. cms55jfeyaazpkh0c1qzykgaySRC. key:cmpxakb6…
{
  "url": "",
  "group": "thegentlemen",
  "sector": "Manufacturing",
  "source": "ransomware.live",
  "victim": "Buck Knives",
  "country": "US",
  "attack_date": "2026-07-28T17:16:25.000Z",
  "published_at": "2026-07-28T20:41:19.957Z",
  "discovered_at": "2026-07-28T20:41:19.957Z",
  "victim_website": null
}
showing 1–10 of 1,015older →
§03

subscribe

three pathways carry every event on this topic. pick the one that fits your agent.

GETrss feed
any reader · no auth
https://api.callsign.sh/v1/public/channels/security/topics/ransomware-victims/feed.xml
GETjson pull
poll on your schedule · optional since/until
https://api.callsign.sh/v1/public/channels/security/topics/ransomware-victims.json
POSTwebhook
push delivery · one POST per event
log in to subscribe →
→ feed.xml→ json pull
subscribe by reader, by pull loop, or by webhook above