Ransomware Statistics

Ransomware Groups

642

Last 24 Hours Incidents

38

Incidents Last Week

235

Incidents Last Month

1139

Recent Cyberattacks

Date Victim Group Description Link
2026-11-04 19:20:30.326157 spearcenter.com brain cipher 89,500 files with a total size of over 40GB. Contents: 1) Medical records: daily notes, treatment plans (POC), discharge summaries, MRI reports, prescriptions, insurance cards, sig... Link
2026-11-04 19:20:29.466132 myronl.com brain cipher 410 GB of data, including: 1) drawings, Gerber files, SolidWorks files, and schematics; 2) employee PII; 3) customer and partner data; 4) regulatory affairs and registrations; 5) e... Link
2026-11-04 19:20:28.636068 megastarfinancial.com brain cipher 32,000 documents. Contents: Borrowers' PII—tax returns and IRS Form 4506 transcripts, W-2 forms (224+), pay stubs, bank statements, credit reports, Form 1003/URLA applications, S... Link
2026-11-04 19:20:27.801095 prairieridge.net brain cipher 28k documents, including: Direct personal data of clients/patients, sensitive employee data, corporate/financial information, and general documents. If you think you are here by mi... Link
2026-11-04 19:20:26.959479 ciscocems.com brain cipher 243,500 files with a total size of over 170GB. Contents: inside information; trade secrets; personal data. If you think you are here by mistake, please contact us at brain.dataleak... Link
2026-11-04 19:20:26.092227 parkell.com brain cipher 65GB data. Contents: project structures, employee names, regulatory dossiers, IP projects (OrCAD, drawings), personal data. If you think you are here by mistake, please contact us ... Link
2026-11-04 19:20:25.267987 tritonclaims.com brain cipher 19,500 documents, including - customer complaints, letters, programs, audits. If you think you are here by mistake, please contact us at brain.dataleak@cyberfear.com Link
2026-11-04 19:20:24.401296 cadorath.com brain cipher 100,000 files with a total size of over 95GB. If you think you are here by mistake, please contact us at brain.dataleak@cyberfear.com Link
2026-11-04 18:21:56.395817 prospecthillcamberwell.com.au safepay The organization provides residential accommodation and lifestyle services for older Australians seeking independent living in a secure and socially connected … Link
2026-11-04 18:21:55.539415 jhz-bernardshof.de safepay Established in 1928, the organization provides residential, semi-residential and outpatient support services for children, adolescents and young adults who require … Link
2026-11-04 18:21:54.722462 ehrenwall.de safepay Founded in 1880, the institution has a long history of providing specialized psychiatric and psychological healthcare services. It focuses primarily … Link
2026-11-04 18:21:53.882752 ruscopackaging.com safepay Founded in 1972, the company specializes in supplying packaging materials, industrial equipment, replacement parts and technical services to manufacturing, warehousing, … Link
2026-11-04 18:21:53.075046 valemany.com safepay The company operates as both a wholesale and retail travel agency, providing travel planning, reservation and tour organization services to … Link
2026-11-04 18:21:52.216732 titres-services.net safepay The company provides household assistance and cleaning services under Belgium's government-regulated service voucher (titres-services) system. Its activities primarily focus on … Link
2026-11-04 18:21:51.371122 sportschule-steinbach.de safepay Established in 1957, the institution is operated by Badischer Sportbund Freiburg e.V., the regional sports federation responsible for supporting organized … Link
2026-11-04 18:21:50.516282 fuss-sprunggelenk.de safepay The organization focuses on the diagnosis, treatment and surgical management of disorders affecting the foot, ankle joints and lower extremities. … Link
2026-11-04 18:07:08.912158 MAPFRE Brasil 2026 destello incident verified access Insurance · BR data set 9 GB · 735 files staged 10% case status published deadline 2026-11-03 16:40 UTC Link
2026-11-04 17:23:42.783967 El Cajon, CA rhysida El Cajon, CA LOT DESCRIPTION (brief) - U.S. municipal dump: police + 911 + production SQLWhat is for sale. Municipal government of a U.S. city (California): police department, 911 dispatch center (joint authority), fire/EMS, all city services, ~1,100+ employees. ~7.8M files / ~7.8 TB. Content current through late September 2026 - SQL backups, payroll runs and 911 logs up to the final days. Live dump, not an archive. Full snapshot: entire file server, restricted police shares, the 911 center, production databases, workstation backups and terminal-server profiles.Contents. Employee home profiles �195 (~800 GB) � department shares - HR/city attorney/finance/council (~1.3 TB) � public works + utility billing for ~250K accounts (~1.3 TB) � citywide share with W-2s for all employees (~2.4 TB) � restricted police archive (~1.7 TB) � 911 center: ~6.3M call recordings over ~3 years + caller phone/address/GPS metadata (~380 GB) � SQL backups (~440 GB: dispatch CAD 17+ GB, evidence vault, crime lab, RMS, access control, MFA server).Credentials and access (sells first). Bank ACH private key + passphrase, state treasury pool PINs, corporate cards with PAN+CVV+PIN � root/enable on the network core (incl. traffic lights) � government accounts (FBI, DEA, state DOJ, CJIS, LiveScan) + 111 officer passcodes to the narcotics system � DMV certificate + password � MFA server dump (TOTP secrets, hardware-token seeds, VPN) � password templates/defaults, vendor ERP backdoor � cameras on public IPs � 13� .pfx signing certs, OAuth secrets, door/access control, map of 401 cameras, gate codes.Personal data. W-2s for all ~1,100 employees (SSN+salary+address) � applicant SSN sets � thousands of EMS patient records with SSN � 337 DMV records � credit dossiers with IRS transcripts � home addresses of the mayor and council � 911 caller GPS metadata (above) � production CAD: ~89K incidents, ~3.9K arrests, 941 warrants, 8.3K SSNs.Police kompromat. Internal Affairs master tracker (1,016 rows / ~10 years, named: use of force �239, pursuits �172, claims �223) + 25-year legacy archive (force �998, complaints �2,612) � DA 'untruthful officers' list � registry of 691 destroyed discipline files + litigation hold list � officer DUI/DV (arrests; victim of an untaken DV call later killed) � fresh 2025�26 cases (negligent discharge + lies � 58-min discipline audio included; fabricated pursuit; theft during arrest) � undercover unit rosters, named + informants (names/DLs/phones) � cold cases (suspects/witnesses) � SWAT callout sheets with personal cell phones � 81 real warrant templates with witnesses � CI/surveillance playbooks � 911 data fed to federal immigration agencies + active court fight with the state AG over surveillance data sharing � county election-office correspondence, PRA packages, protest recordings with caller numbers.Finance/mail. ~77 GB of email archives (HR investigations ~37 GB) � 13 years of payroll � grants � 4 layoff waves � asset forfeiture case files � GIS/document-system credentials.Buyers. Extortion crews (headline-ready topics already in the news cycle) � fraud (W-2/SSN/medical) � IABs (live access to a city 911/CAD is a rare lot) � plaintiffs' attorneys (new suits, case reviews) � media (ready stories) � intelligence services (undercover rosters, informants, LE-systems access) � criminals (sources and witnesses).Deal formats. Full lot exclusive � credentials package (<1 GB, samples before deal) � PII packs by class � police package for media/negotiation � first-publication rights. Freshness: A=2026 (live data), B=2024�25 (active cases), C=25+ year legacy (pattern proof).Limitations. Some containers are encrypted (passwords not recovered), video archives unreviewed; the data contains live police sources - handle with care. More Link
2026-11-04 17:23:34.429773 centratamagroup.com lockbit5 PT Centratama Telekomunikasi Indonesia, Tbk (CTI) is a leading telecommunications infrastructure pro... Link
2026-11-04 17:23:09.799223 Elmcrest Children's Center, Inc interlock https://elmcrest.org/ Elmcrest Children's Center, a nonprofit organization in Syracuse, New York, providing residential, mental health, and special education services to children and families, has compromised and is exposing sensitive data, including names, birthdates, Social Security numbers, health insurance information, and medical records. This could result in consequences, including class action lawsuits and regulatory penalties under HIPAA and the New York State SHIELD Act (and potentially FERPA for school records), as well as reputational damage and the risk of identity theft. Link
2026-11-04 17:23:06.581650 Kontron North America global secret group Country: United States, US | Website: kontron.com | Revenue: $1.3 Billion | Industry: Computer Hardware Manufacturing, Software Development & Design | Employees: 250-500 | Properties: 2.37 TB (911,939 Files, 156,022 Folders) Link
2026-11-04 16:22:17.808341 Erowa akira EROWA Systems specializes in manufacturing automation and clamping technology, offering modularclamping systems, zero-point clamping, and integrated automation solutions. Their products cater to various industries including medical technology, aerospace, automotive, semiconductor, mold and tool making, mechanical engineering, and energy technology.We will upload 538gb of corporate data soon. Employee and personal information (passports, addresses, phones and other docs), contracts and agreements, client information, projects, NDAs andso on. Link
2026-11-04 15:23:31.994378 Krishnan akira Krishnan Company is a certified public accounting firm with over 25 years of experience, dedicated to helping businesses and individuals achieve their financial and business goals. The firm offers a wide range of personalized services, including tax preparation, planning, and strategy, ensuring a comprehensive approach to client needs.We will upload 27gb of corporate data soon. Detailed employee and client personal information (passports, drivers licenses, SSNs, medical reports, VISAs, registration docs and so on), internal confidential files, contracts and agreements, client information, projects, NDAs and so on. Link
2026-11-04 12:23:24.348838 Company #132 n0n insurance brokerage · United States Link
2026-11-04 12:23:23.536645 Company #131 n0n online lighting retail · Germany Link
2026-11-04 12:23:22.635279 Company #130 n0n specialty pharma data analytics · United States Link
2026-11-04 12:23:21.770313 Company #129 n0n office supply retail · United States Link
2026-11-04 12:23:20.897110 Company #128 n0n consumer identity data and analytics · United States Link
2026-11-04 10:23:11.898782 Juge, Napolitano, Ruli, Putfark & Pittman rhysida Juge, Napolitano, Ruli, Putfark & Pittman Juge, Napolitano, Ruli, Putfark & Pittman / 'WC Defense' - insurer & corporate defense law firm.The Juge Firm (Metairie / Covington, LA, founded 1983) is one of the oldest workers' compensation defense law firms, protecting employers, insurers and TPAs against injured workers' claims.Clients (148 client-guideline files): Sedgwick, Gallagher Bassett, Broadspire/Crawford,ESIS/ACE, AIG, Allstate, Chubb, Zurich, Amazon, Walmart, Home Depot, CVS Health, FedEx, Lyft, Costco, Hilton, Northrop Grumman, State Farm,Travelers, Coca-Cola, Fluor, GEO Group, Archdiocese of New Orleans, the cities of New Orleans / Baton Rouge / Shreveport, and others.2,383,324 files, ~3.2 TB.- 4,477 full workers' comp defense case files: 175,993 PDFs, 73,239 DOCX, 61,622 DOC, 55,798 MSG emails, 28,244 TIF scans;- claimant medical imaging: 6,461 DICOM files (MRI/CT/X-ray);- 28,410 medical EOBs and disputed LDOL-WC-1008 claims (full PII + diagnoses of injured workers);- 1,884 new-file intake sheets with complete claimant PII (SSN, address, DOB, injury);- 3,265 counterparty W-9 forms (EINs, signatures, current 2024�2025);- 850 claimant surveillance videos ('Surveillance', 214 GB) - covert footage of injured workers;- inbound attorney-correspondence faxes, live ECF/PACER court logins, and 148 confidential insurer client guidelines. More Link
2026-11-04 10:23:07.998628 gWorks pear A technology company specializing in software solutions designed to help small towns and rural areas make effective use of software and technology Link
2026-11-04 10:23:07.094694 Palm Vascular Centers pear A company specializing in collaboration with interventional radiologists and vascular surgeons Link
2026-11-04 08:21:41.162317 ASLAN TEKSTİL ve KONFEKSİYON San.ve Tic. A.Ş. doommageddon LEAKED | 3.27 GB | 6457 files Link
2026-11-04 01:21:40.091721 Autoscribe Corporation payoutsking Link
2026-11-04 01:21:00.514004 IHG Hotels & Resorts (Estate) byod [PSA] Nice LDAP Binding Password being '123'. Rotating things won't really save you cause it's not hard to hop back on your network. Anyways, we now have; Customer Data, AWS Keys, Full Access to CyberArk, Complete Employee PII, Booking information included but not limited to, guest name, billing address, company, rate code, room charges, taxes, spend, property & stay dates. We also have the loyalty data store. Additionally we have reservation and payment ledgers for the folio reservation (guest name, address, phone, email, arrival and departure, rate, property) with Access to the AD + All Financial Records. This affects the big names such as Six Senses, Holiday Inn, Holiday Inn Express, Staybridge Suites, Garner, Candlewood, Crowne Plaza, Mayfair Hotel, etc etc you can pick up what we are putting down at this point. Anyways, you know where to find us (contact tab). We will take you down when communication has been established between our team and yours. | Updated on 2026-11-03 Link
2026-11-03 22:21:57.322025 iLending & J.C. Flowers & Co. payoutsking Link
2026-11-03 22:21:17.840490 darrequipment.com chaos Darr Equipment Co. is a family-owned, service first, industrial equipment supplier specializing in providing customized solutions to meet our clients' specific goals. Darr provides new and used forklift, material handling, earthmoving, and construction equipment to construction and industrial market… Link
2026-11-03 21:24:00.041609 Project Trojan Horse whitearmor DM us to sell your IA on $/%, working with all kinds of accesses depending on said target. Rules : - No companies under $500kk - No companies in the CIS conglomerate - Okta, Azure, IAM Root, CRM tools , Jenkins & VPN access (Forti, Anyconnect, Citrix, Sonicwall) We are also recruiting employees/insiders at various companies! If you work at a company in the following sectors, please inquire us : - Education (Technology/Software, EdTech platforms, K-12 Management) - Software (Entreprise-grade, CRM, SaaS, HR Software, CyberSec, Productivity) - Insurance (Globally) - Hotels (Worldwide hotel groups, operators, luxury) - Telecommunications (Major global telecommunication companies) - Finance (Banking, Private equity, fintech) - Retail (Global retailers, supermarkets, fashion, electronics, furniture, luxury) - Motor (Car manufacturers, Luxury automotive brands, etc.) - Transportation (Aviation, Shipping, Railways/Public transportation, Mobility) - Logistics (Supply chain, global companies) Please only inquiry us if you work/have access to companies that are med/largely sized from these industries/sectors. You will be paid if you like depending on what you have; Contact us in order to discuss about rates (%) based deals or $ ones. Escrow is always accepted. t.me/whitearmorsupp / @whitearmorsupp on Telegram. "Every collectivist revolution rides in on a Trojan horse of EMERGENCY." - Herbert Hoover (1952). “Memoirs: The great depression, 1929-1941” Link
2026-11-03 21:23:22.959553 Buchanan Ingersoll & Rooney PC falcon 182 GB compressed · 260 GB uncompressed Link

Top Gangs

Yearly Attacks