Ransomware
Qilin ransomware group claims attack on Castle Howard Estate
The criminal group has listed the Yorkshire heritage site on its dark-web leak site. Castle Howard has not confirmed any incident, and the claim could not be independently verified.
Anubis Ransomware Gang Claims Attack on US Funeral Services Firm Newcomer Cremations
The criminal group has listed Newcomer Cremations, Funerals & Receptions on its dark-web pressure site, claiming to hold customer and internal documents. The company has not confirmed any incident.
Qilin Claims Attack on Heber City, Utah
The ransomware group has listed the small Utah municipality on its dark-web site. The city has not confirmed any incident, and the claim could not be independently verified.
Silentransomgroup Claims Attack on Kirkland & Ellis, One of the World's Largest Law Firms
A ransomware group has listed the Chicago legal giant on its dark-web claims site. The firm has not confirmed any incident, and the claim remains unverified.
Qilin Ransomware Gang Claims Attack on Colorado Restaurant Equipment Supplier
The criminal group listed United Restaurant Supply on its dark-web site on 22 October 2026. The company has not publicly confirmed any incident, and the claim could not be independently verified.
Ransomware Group N0n Claims Attack on Heritage Senior Living
A dark-web listing posted on 21 October 2026 names the US healthcare provider. The claim is unverified, and Heritage Senior Living has not publicly confirmed any incident.
SafePay Ransomware Has Hit 600 Victims and the Bugs It Uses Have Been Patchable for Years
A joint US, UK and German advisory names five edge-device flaws the SafePay crew exploits. We first reported on the group on 13 October when it claimed a US biotech firm.
Ransomware Gangs Are Getting Leaner and Harder to Find
A new wave of criminal tools is reshaping how ransomware gangs operate, and a group called Payload shows what a focused, modern outfit looks like.
Ransomware Group N0n Claims Attack on SMIC US Company, Lists Payroll and Financial Records
The gang behind a fast-moving wave of claimed attacks has added the US arm of one of the world's largest chip makers to its dark-web list. The company has not confirmed any incident.
Ransomware group N0n claims attack on Amagi Media Labs
The criminal group posted what it describes as network configuration files from a US broadcast facility. Amagi has not confirmed any incident, and the claim remains unverified.
A Russian man, a fatal London hack and a possible world-first murder inquiry
German police have detained a 28-year-old Russian national they say is a core Qilin member. The arrest ties directly to the 2024 Synnovis ransomware attack, which disrupted thousands of NHS appointments and contributed to a patient's death.
Ransomware Group Helix Claims Attack on Smith Douglas Homes
The group posted what it says are records from the US homebuilder on its dark-web listing site. Smith Douglas Homes has not confirmed any incident.
DragonForce Claims Attack on Defense Contractor Oak Grove Technologies
The ransomware group lists a firm that says it serves US Special Operations Forces, claiming to hold payroll records, executive emails, and employee Social Security numbers. The company has not confirmed any incident.
Ransomware Group Helix Claims Attack on Bay Alarm
A criminal gang has listed the California security company on its dark-web extortion site, purportedly threatening to release internal records. Bay Alarm has not confirmed any incident.
Ransomware Group N0n Claims Attack on Missouri Dental Lab BladeTech Inc
A criminal group that has claimed 105 victims since September says it has stolen patient case files and production records from a CAD/CAM dental manufacturing firm. The company has not confirmed anything.