Ransomware Statistics

Ransomware Groups

644

Last 24 Hours Incidents

98

Incidents Last Week

320

Incidents Last Month

1220

Recent Cyberattacks

Date Victim Group Description Link
2026-11-09 20:24:43.820427 Albion Online Data Project vexy A community-driven data platform that collects and distributes real-time market prices, gold prices, market orders and historical data for the MMORPG Albion Online. It provides APIs, data feeds and downloadable client software for players, developers and third-party applications. Link
2026-11-09 20:24:42.948998 Living Word Schools vexy An educational institution/network providing school-related educational services. Its online platform includes student and school administration functionality, including an application portal and login facilities. Publicly available information suggests an education-focused organization. Link
2026-11-09 19:25:36.143854 B... W... leakeddata To be announced... Link
2026-11-09 19:25:32.101143 Ornico global secret group Country: Gauteng 2000, ZA | Website: www.ornico.co | Revenue: $20 Million | Industry: Information and Media | Employees: 100-200 | Properties: 216 GB (583,507 Files, 23,572 Folders) Link
2026-11-09 19:25:31.248593 Heartland Honda global secret group Country: Springdale, Arkansas, US | Website: heartlandhonda.com | Revenue: $85 Million | Industry: Automotive Dealership, New & Used Car Sales, Automotive Service & Repair | Employees: 150-250 | Properties: 144 GB (39,140 Files, 945 Folders) Link
2026-11-09 19:25:29.157452 La'ala Al Kuwait Real Estate Co KSCC eclipse La'ala Al-Kuwait Real Estate Company is a major pioneering real estate development and construction firm based in Kuwait, established in January 1991. Originally founded by the Al-Marzouq family, the company transformed from a traditional real estate business into an infrastructure and marine construction powerhouse. This shift occurred after the company struggled to find contractors capable of handling the highly complex earthworks, dredging, and marine engineering required for its signature megaproject: Sabah Al-Ahmad Sea City. Consequently, La'ala invested heavily in its own massive fleet of heavy excavation equipment and assembled an expert team of civil and marine engineers. Link
2026-11-09 19:25:24.239381 DomusVi black x <p>We possess all the data for our clients and their primary contacts, including medical record numbers, first and last names, phone numbers, email addresses, physical addresses, and bank account numbers.</p><p>&nbsp;</p><p>chat id:JxN9ot9zzjkEU8</p> Link
2026-11-09 18:27:43.137375 No Encryption, No Excuses: 334 GB of Patient Data Out leaknet #Leaknet #Healthsourceofohio #BreachAlert #PrivateData #SystemCompromised #InfoLeak #PrivacyRisk Link
2026-11-09 18:27:41.449380 Richmond Public Schools interlock https://www.rvaschools.net/ Richmond Public Schools (RPS) is a public school district in Virginia's capital city. The district has an enrollment of 22,000 to 24,000 students and includes 25 elementary schools, 7 middle schools, 5 comprehensive high schools, and 3 specialized schools. Due to a lax approach to security and an unwillingness to negotiate, we are releasing their confidential data, including disciplinary records, medical records, speech therapy and mental health records, special needs education records, and personally identifiable information (names, birth dates, addresses, Social Security numbers, etc.). This breach violates the Federal Education Rights and Privacy Act (FERPA), Virginia privacy laws, and HIPAA, undermines the public trust, and exposes RPS to reputational damage and lawsuits from students, parents, and staff. Link
2026-11-09 18:27:38.061451 Cameroon government troops leaked hyflock The core conclusion has already completed an analysis of the entire database's data volume sorted by table. It can be confirmed that this is a massive database containing over 6 million records, including nearly 1.35 million historical personnel records (HISTO_RECIP) and nearly 2.41 million core operation audits/history records (HISTO_OR). More seriously, the TMOUCHARD table contains nearly 1 million records—in French, 'Mouchard' means 'spy/listener/log monitor,' which indicates that the system's core activity audit logs have also fallen into the hands of the attacker. Below is a deep security breakdown of the non-empty tables sorted by data: 1. Precise Quantitative Analysis of Core Affected Assets By doing this, the attacker has effectively ranked the database's assets by value. The following types of data are in extremely high-risk status: 1) Core identities and historical records (totaling about 1.6 million+) • RECIPIENDAIRE (160,920 records) & DISTINCTION (161,481 records): Current roster of awarded/declared military and political personnel. • HISTO_RECIP (1,349,243 records): This is the largest core asset, containing detailed birth/death records, career histories, files, or background information for over 1.34 million historical personnel. • FGRADE_ARME (6,542 records): Military rank and branch correspondence, used to precisely identify high-value targets (such as generals and senior special forces officers). 2) System core audit logs have been 'reverse-forensicated' (nearly 1 million records) • TMOUCHARD (999,037 records): In French business systems, 'Mouchard' usually refers to backdoor logs, user activity tracking logs, or security audit tables. • Severe consequence: The attacker stole nearly a million audit logs, which means they didn't just take the data—they also learned the system administrators' routine checks, login times, and frequently accessed assets. They could use this knowledge to precisely hide their backdoors or even delete specific log entries without being easily noticed. 3) Full business process history (about 2.7 million+) • HISTO_OR (2,409,874 records): Possibly historical orders, commands, or core decision-making flows. • TRANSMIS_MEMOIRES (246,658 records) & HISTO_MEMOIRE (264,407 records): Over 500,000 memoranda, submitted documents, and transmission records. This involves a large amount of non-public official communications from the state, military, or government internal exchanges. ... Link
2026-11-09 17:24:05.011552 M.C.S. Steel Public Company Limited rhysida M.C.S. Steel Public Company Limited M.C.S. Steel Public Company Limited - largest structural-steel fabricatorin Thailand, SET-listed (ticker MCS).Total files: 2,314,625Total volume: 4.2 TB'Senior Advisor to Chairmen of the Board' paid 800,000 JPY/month viaTrust Engineering K.K. (Tokyo) to Keiyo Bank Chiba account 5376091,term Nov-2025..Oct-2027 - while Mr. Yokoyama Yukio also sits on MCSpayroll. Related-party flow outside SET disclosures.Chairman & CEO Dr. Naiyuan Chi carries a PAYROLL 'advisor' gross of12.92M THB/yr (2023-2026); lifetime net receipts ~79M THB (2015-2026).Advisor/consultant contracts to Haneishi, Iijima, Ogilvie, Yang -overlapping the company's Japanese payroll.Identity documents of staff incl. Chairman's daughter (Thai nationalIDs, passport, house registration), foreign managers' work permits.Myanmar workshop staff charged 500-800 THB per clinic visit (signedmemo, 2023) - labour-protection exposure.Prior Faust ransomware infection inside the network (victim idA2242861-3499) - security failures never remediated; SQL credentialsand Windows OEM keys stored in plaintext.Confidential pipeline of Japan's Big-5 contractors incl. site names. More Link
2026-11-09 17:23:21.097622 Texas HHSC byod [PSA] So much for firing your enployees for leaking ~94k records, the true flaw remained in your system leading to the whole program being compromised, it's actually laughable, 2 Million Texas Citizens, Medicaid, Banking Information, SNAP, TANF, Disaster Assistance, well, like stated it is not just that, yet, the whole program. Yikes. Anyways, you know where to find us (contact tab). We will take you down when communication has been established between our team and yours. | Updated on 2026-11-09 Link
2026-11-09 17:23:19.688014 Forus Deporte y Ocio S.L black x <p>We have the complete dataset for 867,800 customers of one of Spain’s largest fitness chains.</p><p>&nbsp;</p><p>ID:</p><p>NAME</p><p>ID Number</p><p>Birthday</p><p>Email</p><p>PhoneNumber</p><p>Bank Account</p><p>&nbsp;</p><p>chat id:8AMfga6Y5FmQlK</p> Link
2026-11-09 16:27:18.930451 h***de cloak Country: Germany | Size: 75GB | Private | Views: 0 Link
2026-11-09 16:21:57.402485 carrollins.com everstake Category: Insurance Agency | Size: 370.73 Gb | Status: Published Link
2026-11-09 16:21:52.439942 Vanderbilt EDU byod [PSA] If you could not tell already, your databases are locked, We have your entire estate and research data. Over 1 Million SSNs, Full Names, Email addresses, Phone Numbers, Student & Employee Records, Full takeover of your DC, whatever was on your network, we possess. Anyways, you know where to find us (contact tab). We will take you down when communication has been established between our team and yours. Link
2026-11-09 16:21:51.568841 HHSC Texas byod [PSA] So much for firing your enployees for leaking ~94k records, the true flaw remained in your system leading to the whole program being compromised, it's actually laughable, 2 Million Texas Citizens, Medicaid, Banking Information, SNAP, TANF, Disaster Assistance, well, like stated, the whole program. Yikes. Anyways, you know where to find us (contact tab). We will take you down when communication has been established between our team and yours. Link
2026-11-09 13:27:56.351300 Johnson Development Corp. aurora Johnson Development Corp., a Houston, Texas-based privately held master-planned residential community developer founded circa 1975 by Larry D. Johnson (deceased), operating through The Johnson Companies LP (TJC LP) as the family-owned holding company, with 25+ active communities across Texas (Cross Creek Ranch, Grand Central Park, Sienna, Trinity Falls, Woodforest, Imperial, Jordan Ranch, Viridian, Bryson, Lake Arrowhead, and others) and a Georgia subsidiary (Johnson Dev Co Georgia LLC). Tricon Capital Group invested approximately $18.5 million in the development-management division in 2014. Current headcount: approximately 109 employees across Texas and Georgia offices. The company is managed by Kirk W. Boswell (President/VP/Treasurer across 100+ entities) and Elizabeth F. York (Secretary/VP/Registered Agent across 200+ entities), with the Johnson family (Suzanne Johnson, Jennifer Johnson, Chad Johnson, Nick Johnson) as beneficial owners. The dataset comprises approximately 661 GB exfiltrated from the corporate file server across three major branches — Cash Management (808 MB), company (659 GB), and hrshare (1.5 GB) — capturing the company's entire digital footprint spanning 30 years of operations from 1996 through August 2026. <redacted> <redacted> The HR share contains 14 years of payroll records (2013–2026) for TJC LP, Johnson Development Services LLC, and Johnson Dev Co Georgia LLC, with semi-monthly officer/employee salaries of approximately $494,000 per period, FICA, Medicare, federal/state withholdings, 401k contributions, and insurance deductions. The 401k participant list names 109 current employees with contribution eligibility status, and companion census reports likely contain SSNs, dates of birth, compensation, and account balances spanning 12 annual filings. Workers compensation claims cover 2016–2026 including Georgia-specific claims. Employee HR folders contain I-9s, offer letters, insurance enrollment, photos, and performance records. The legal and corporate governance archives include a CTA Transparency Company List detailing beneficial ownership for 239 entities with EINs, ownership percentages, officer names, registered agents, and formation types, plus 21 individual FinCen ID submission receipts. Entity organizational charts (79 files, current through June 2026), the Last Will and Testament of Larry D. Johnson and associated estate/partition documents, confidential settlement and release agreements, severance agreements, employment contracts, and 74 GB of executive Outlook PST email archives across four users spanning 2018–2025. The financial reporting archive contains 498 audit and review reports from eight firms (Ernst & Young, Weaver, Deloitte & Touche, BKD, PwC, Whitley Penn, CliftonLarsonAllen, and Null-Lairson) spanning 1996–2025, including engagement letters, management representation letters, attorney confirmation letters, governance letters, internal control deficiency notifications, and bond consent materials. Twenty-two years of federal and state income tax returns (2004–2026), bank account analyses across 17+ banks from 2006–2026, and partner meeting materials for all 25+ active communities complete the financial picture. Link
2026-11-09 12:27:59.622664 Company #211 n0n biopharmaceutical (chronic hepatitis infections) · United States Link
2026-11-09 12:27:58.802418 Company #210 n0n biopharmaceutical oncology · United States Link
2026-11-09 12:27:58.018445 Company #209 n0n biopharmaceutical neuroscience · United States Link
2026-11-09 12:27:57.231476 Company #208 n0n pharmaceutical oncology and cardiology · France (US operations) Link
2026-11-09 12:27:56.461774 Company #207 n0n biopharmaceutical (hereditary angioedema) · Netherlands Link
2026-11-09 12:27:55.655382 Company #206 n0n biopharmaceutical neuroscience and oncology · Ireland (US operations) Link
2026-11-09 12:27:54.851768 Company #205 n0n precision oncology diagnostics · United States Link
2026-11-09 12:27:54.066149 Company #204 n0n cancer screening diagnostics · United States Link
2026-11-09 12:27:53.233512 Company #203 n0n biopharmaceutical oncology · United States Link
2026-11-09 12:27:52.442883 Company #202 n0n pharmaceutical · United States Link
2026-11-09 12:27:51.628941 Company #201 n0n pharmaceutical (respiratory, neonatology and rare diseases) · Italy Link
2026-11-09 12:27:50.807774 Company #200 n0n biopharmaceutical oncology · United States Link
2026-11-09 12:27:49.947256 Company #199 n0n pharmaceutical (cardio-metabolic, gastroenterology and oncol · United States Link
2026-11-09 12:27:49.123817 Company #198 n0n biopharmaceutical T cell immunotherapy · United States Link
2026-11-09 12:27:48.249514 159 Solutions, Inc. n0n specialty pharma data analytics · United States Link
2026-11-09 11:29:35.080047 Company #197 n0n outdoor apparel retail · United States Link
2026-11-09 11:29:34.219499 Company #196 n0n fintech and payments (Cash App) · United States Link
2026-11-09 11:29:33.365988 Company #195 n0n online health and wellness retail · United States Link
2026-11-09 11:29:32.593228 Company #194 n0n investment advisory · United States Link
2026-11-09 11:29:31.754180 Company #193 n0n programmatic advertising and identity resolution · United States Link
2026-11-09 11:29:30.917506 Company #192 n0n franchise and business law · United States Link
2026-11-09 11:29:30.152508 Company #191 n0n market research recruitment · United States Link
2026-11-09 11:29:29.309342 Company #190 n0n investment advisory · Canada Link
2026-11-09 11:29:28.481787 Company #189 n0n online department store retail · United Kingdom Link
2026-11-09 11:29:27.671445 Company #188 n0n manufacturing (custom springs) · United States Link
2026-11-09 11:29:26.845557 Company #187 n0n financial planning and insurance · Canada Link
2026-11-09 11:29:26.018636 Company #186 n0n wealth management · Canada Link
2026-11-09 11:29:25.187259 Company #185 n0n plumbing and HVAC distribution · United States Link
2026-11-09 11:29:24.346434 Company #184 n0n employee benefits consulting · United States Link
2026-11-09 11:29:23.514919 Company #183 n0n connected TV advertising agency · United States Link
2026-11-09 11:29:22.684076 Company #182 n0n financial planning and wealth management · Canada Link
2026-11-09 11:29:21.877083 Company #181 n0n nonprofit membership organization for people over fifty · United States Link
2026-11-09 11:29:21.091857 Company #180 n0n construction · United States Link
2026-11-09 11:29:20.208967 Company #179 n0n unclaimed asset recovery · Canada Link
2026-11-09 11:29:19.418945 Company #178 n0n marketing technology and data · United States Link
2026-11-09 11:29:18.630410 Company #177 n0n financial advisory · Canada Link
2026-11-09 11:29:17.843789 Company #176 n0n financial planning · Canada Link
2026-11-09 11:29:17.004128 Company #175 n0n debt recovery and collections · United States Link
2026-11-09 11:29:16.209432 Company #174 n0n golf equipment and apparel retail · United States Link
2026-11-09 11:29:15.405465 Company #173 n0n travel and accommodations platform · United States Link
2026-11-09 11:29:14.560447 Company #172 n0n security products distribution · United States Link
2026-11-09 11:29:13.763340 Company #171 n0n online fashion and lifestyle marketplace retail · South Africa Link
2026-11-09 11:29:12.980323 Company #170 n0n jewelry retail · Denmark Link
2026-11-09 11:29:12.187436 Company #169 n0n financial planning and wealth management · Canada Link
2026-11-09 11:29:11.397970 Company #168 n0n email deliverability and sender reputation platform · United States Link
2026-11-09 11:29:10.636485 Company #167 n0n office supply retail · United States Link
2026-11-09 11:29:09.810356 Company #166 n0n virtual addiction treatment and telehealth · United States Link
2026-11-09 11:29:09.021250 Company #165 n0n licensed pop culture retail · United States Link
2026-11-09 11:29:08.181680 Company #164 n0n health and beauty retail · Hong Kong Link
2026-11-09 11:29:07.410092 Company #163 n0n online education · Saudi Arabia Link
2026-11-09 11:29:06.585268 Company #162 n0n insurance and financial services · Canada Link
2026-11-09 11:29:05.793339 Company #161 n0n industrial property management · Canada Link
2026-11-09 11:29:04.943786 Company #160 n0n financial planning · Canada Link
2026-11-09 11:29:04.117613 Company #159 n0n medical supplies manufacture and distribution · United States Link
2026-11-09 11:29:03.280960 Company #158 n0n automotive retail software · United States Link
2026-11-09 11:29:02.465981 Company #157 n0n bed retail · United Kingdom Link
2026-11-09 11:29:01.676959 Company #156 n0n automotive and cycling retail · United Kingdom Link
2026-11-09 11:29:00.823295 Company #155 n0n eyewear and retail · France Link
2026-11-09 11:28:59.919775 Company #154 n0n online grocery delivery · Kuala Lumpur, Malaysia Link
2026-11-09 11:28:59.069671 Company #153 n0n audience measurement and media analytics · United States Link
2026-11-09 11:28:58.278117 Company #152 n0n mass retail and warehouse clubs · United States Link
2026-11-09 11:28:57.481064 Company #151 n0n consumer goods (household and personal care brands) · Ohio, United States Link
2026-11-09 11:28:56.704752 Company #150 n0n banking and financial services · United States Link
2026-11-09 11:28:55.881460 Company #149 n0n payment card network and services · United States Link
2026-11-09 11:28:55.103322 Company #148 n0n payment card network and services · United States Link
2026-11-09 11:28:53.797856 Greentech Renewables metaencryptor Greentech Renewables is a leading name in solar distribution. We are local nationwide, with over 100 locations in major solar markets. We are dedicated to supporting your business with unmatched service and a diverse selection of vetted products, including modules, inverters, racking, balance of systems, and energy storage equipment for residential and commercial projects. Link
2026-11-09 11:28:52.943326 JH Technology metaencryptor JH TECHNOLOGY is coping with rapidly changing world market through steady research and development. We are future-oriented company that gives satisfaction and joy to all of our valued customers with new technology and mind. Link
2026-11-09 10:29:31.995524 UNIC Technology (Thailand) Co., Ltd krybit UNIC Technology (Thailand) Co., Ltd. is the Thai manufacturing subsidiary of UNIC Technology Corp. (Taiwan), a Taiwanese... Link
2026-11-09 10:29:31.155411 www.tasteofasia.com.hk krybit Taste of Asia Group Limited is a Hong Kong restaurant group headquartered in San Po Kong, Kowloon. LinkedIn gives two fo... Link
2026-11-09 10:29:30.328707 citicpacific.com krybit CITIC Pacific Limited (中信泰富有限公司) is the former name of what is now CITIC Limited (中國中信股份有�... Link
2026-11-09 10:29:29.485779 niclibya.com krybit National Investment Holding Company is a Libyan joint-stock holding company established in 1986, headquartered in Tripo... Link
2026-11-09 10:29:28.666380 sumoteks.com krybit Sumoteks Tekstil Ürünleri Üretim ve Pazarlama Limited Şirketi is a Turkish manufacturer of knitwear. It was founded ... Link
2026-11-09 08:26:01.951259 AUDIT ENTITY: Pelican ICT audit team AUDIT ID: 17BACA24A3932895 / DISCOVERY DATE: 2026-10-31 Link
2026-11-09 08:26:00.662696 AUDIT ENTITY: jltrust.com audit team AUDIT ID: 1E2CF5D71F581238 / DISCOVERY DATE: 2026-10-31 Link
2026-11-09 08:25:59.851899 AUDIT ENTITY: hnopvm.org audit team AUDIT ID: 2AE3CE243E823521 / DISCOVERY DATE: 2026-10-31 Link
2026-11-09 08:25:58.941983 AUDIT ENTITY: roycegroup audit team AUDIT ID: 57FD7689754A6F21 / DISCOVERY DATE: 2026-10-31 Link
2026-11-09 03:21:15.273288 Grupa ABS panzer Grupa ABS is a company that operates in the Environmental Services industry. It employs 6-10 people and has $1M-$5M of revenue. The company is headquartered in Czestochowa, Silesian Voivodeship, Poland. Link
2026-11-09 03:21:13.005692 Expedia Group, Inc. n0n online travel and consumer loyalty · United States Link
2026-11-09 02:24:51.983516 Court Square Group black x <p>We hacked into Court Square Group internal network and stole 3T of customer data from the RegDocs365 and ARCC cloud network.<br>It includes sensitive info such as clinical trial data, research materials, and various reports belonging to Court Square Group customers.</p><p>&nbsp;</p><p>To demonstrate our credibility, we will provide a list of some of the data files currently in our possession within the next few days. You may then select files from this list, and we will send the ones you have chosen.</p> Link
2026-11-09 00:22:58.615227 Cuomo LLC anubis Inside a law firm data breach. Link

Top Gangs

Yearly Attacks