Community intelligence

Ransomware Live

Search current intelligence, inspect its source, then check whether it matches your workspace.

Government & DefenseESPro enriched

Brief from ransomware.live

Agencia Estatal de Meteorología - AEMET is a governmental agency of Spain that provides comprehensive meteorological services, including weather observation, predictions, and climate analytics. It serves various sectors such as agriculture, aviation, maritime activities, and emergency services. AEMET aims to support public safety and management through accurate weather forecasts, climate data, and educational resources. The agency also engages in research and international collaboration to enhance meteorological science and technology.

Source record: ransomware.live

global secret group

CO-OP URBAN BANK LTD
9/10/2026
Financial ServicesINindialei.inPro enriched

Brief from ransomware.live

Country: India | Website: https://indialei.in/detailed-information/353561/335800GR1DJMM8YD7J14/the-gudivada-co-op-urban-bank-limited/ | Revenue: $50 Million | Industry: Bank, Finance | Employees: 25-50 | Properties: 41.3 GB (125,988 Files, 14,641 Folders)

Source record: ransomware.live

vexy ransomware

i2k2 Networks
9/10/2026
TechnologyINi2k2.comInfostealer signal: 49Pro enriched

Brief from ransomware.live

i2k2 Networks Pvt. Ltd., established in 1999, is a leading Indian provider of cloud computing, web hosting, managed IT, data center, backup, disaster recovery, and DevOps solutions. With 25+ years of experience, 4,000+ customers, Tier III-compliant data centers, and 24/7 support, i2k2 delivers secure, scalable, and reliable IT solutions worldwide.

Source record: ransomware.live
HealthcarePHPro enriched

Brief from ransomware.live

General Santos Doctors Hospital 3.502.636 files, total volume ~2.44 TBPatient data (PHI) � name-tagged scans across department shares (surgical pathology, hemodialysis charts, admission records), cancer-center dossiers with PhilHealth IDs, lab quotations incl. cancer-marker tests with birth dates, PhilHealth claims monitoring, neonatal (NICU) dataStaff and professionals � accredited physicians register (cell numbers, PRC licenses, PhilHealth IDs), named payroll workbooks (incl. the affiliated diagnostic center), HR dossiers, staff passport scans, drug-test filesMoney, audit and governance � audited financial statements personally signed by chairman/treasurer/CFO with BIR stamps, balance sheet, all bank accounts across six-plus banks, internal-audit memos on (cashier discrepancies and cash shortages), SEC stockholders' minutes, payroll bank-upload batches, related-party entities on the same sharesLeadership personal data � personal cell numbers of the president, hospital administrator and board members More

Source record: ransomware.live
Retail & E-CommercePro enriched

Brief from ransomware.live

Professional Retail Services Owner�s documents: employee evaluations, salary rates, bonuses, job offers, family documentsCFO�s documents: client credit reports, bankruptcy records, tax documents, father�s medical records (guardianship court case)Corporate financials: owner�s personal tax return, credit application, signed checks with MICR (BNB Bank)Corporate credit cards, drug testsMedical records, employee health insuranceAnd much more More

Source record: ransomware.live
9/10/2026
HealthcareUSmankatoclinic.comPro enriched

Brief from ransomware.live

The Mankato Clinic was founded Mankato, Minnesota in 1916, by five area physicians who believed that a comprehensive, multi-specialty group practice offered the best means of providing quality health care to the residents of southern Minnesota. The mission of the Mankato Clinic is to improve the hea…

Source record: ransomware.live
9/10/2026
ManufacturingUSartiflexmfg.comPro enriched

Brief from ransomware.live

ArtiFlex Manufacturing LLC operates as a specialized contract manufacturer focused on delivering precision sheet metal solutions to diverse industrial sectors. The company has built its operational foundation on deep expertise in manufacturing engineering, combining technical knowledge with practica…

Source record: ransomware.live
9/10/2026
Energy & UtilitiesUSPro enriched

Brief from ransomware.live

Goldston Oil Corporation is a Houston-based oil and gas exploration and production company operating in Texas and Louisiana

Source record: ransomware.live

wallstreet

NcbChurch
9/10/2026
OtherUSPro enriched

Brief from ransomware.live

New Covenant Believers’ Church is a faith-based ministry focused on spiritual, emotional, and mental growth through God’s Word

Source record: ransomware.live
9/10/2026
Professional ServicesDEalphaomega-eng.comInfostealer signal: 1Pro enriched

Brief from ransomware.live

In 1993, Alpha Omega was established as a small engineering firm in Nazareth, Israel, by Imad Younis...

Source record: ransomware.live
9/10/2026
ManufacturingUSPro enriched

Brief from ransomware.live

JMS Building Construction is a full service Insurance Restoration construction company that handles every step of the Insurance Restoration process, from dealing with your insurance company to restoring your home's integrity WE HAS COLLECTED SUCH DATA AS: - Confidential documents - Clients Data - NDA - Financial data - Operations - Corporate data - Business Agreements - Development - Financial databases, all transactions, all clients And a lot of other VERY IMPORTANT information!

Source record: ransomware.live
9/10/2026
ManufacturingUShenrypratt.comPro enriched

Brief from ransomware.live

[AI generated] Henry Pratt Company is a US-based manufacturer specializing in industrial valves, including butterfly valves, gate valves, and check valves. Operating within the flow control and fluid handling industry, the company serves water, wastewater, and industrial markets. Headquartered in Aurora, Illinois, it is a subsidiary of McWane Inc. and supplies infrastructure and municipal water systems across North America.

Source record: ransomware.live
9/10/2026
ManufacturingUSharley-davidson.comPro enriched

Brief from ransomware.live

[AI generated] Harley-Davidson is an American iconic motorcycle manufacturer headquartered in Milwaukee, Wisconsin, USA. Founded in 1903, the company designs, manufactures, and sells heavyweight motorcycles, related parts, accessories, and branded merchandise. It operates globally across the powersports and automotive industry. Its website serves as a digital hub for product information, dealer locators, community engagement, and e-commerce for enthusiasts worldwide.

Source record: ransomware.live
9/10/2026
Professional ServicesCOeasyjobsas.comPro enriched

Brief from ransomware.live

Colombian Company. Audit and Tax Audit with more than 5 years of experience Calle 17 sur 44 - 159 Oficina 1501 EDIFICIO CLAROSCURO, Medellín Colombia. Llámanos o escríbenos: 310 447 2013 - 313 796 9917 The archives contain personal data of employees and customers of the company, tax documents, databases and other important documents 17000 documents [Size: 2.7 GB | Sector: Finance]

Source record: ransomware.live

shadowbyt3$

John Engel Team
9/10/2026
Professional ServicesUSjohnengelteam.realscout.comPro enriched

Brief from ransomware.live

Contact us and negotiate. Don't be like the other real estate companies we have breached. We have serious data which contains the following below. Also we have a image url too to show you that we are not bluffing negotiate and we will remove your name and show you all the proof you want. url: http://sdwbyttda4uzwdffbt4m7niuodiwhcgmkyxqg5nly2bjxqa6xtbe3fyd.onion/invoice.png Data Compromised: the leak contains 0.014 million contacts (exactly 14,476 unique customer records). The following was stolen 1. Complete Identity and Client Databases (14,476 Total Profiles) The extraction completely drains the brokerage team's customer network, divided into three distinct lifecycle tables: - 10,993 Nurtured Contacts: - 3,306 Archived Contacts: - 177 Awaiting Nurture Contacts: The fresh pipeline of new inquiries, open-house visitors, and active 30-day leads. 2. Deep Behavioral Tracking & Psychological Analytics For every single one of those 14,476 profiles, We stole exact behavioral history and intent metrics, including: - Predictive Intent Metrics: scout score and score change counters that signal exactly when a high-net-worth client is getting ready to purchase. - Direct Interaction Metrics: Explicit lists of Homes Viewed, Homes Interested (properties starred or liked), Home Value Alert Views, and Market Activity Alert Views. - Communication Analytics: Logs of Email receives, Email opens, email clicks, email rejects, and system Errors mapping out exactly how responsive a customer is to digital alerts. 3. Corporate Financial and Transaction Data - 40 Invoice PDFs: A localized batch of billing records detailing contractual pricing, vendor relationships, and enterprise account balances. - Corporate Payment Method: Active account billing profiles, explicitly exposing a corporate Visa card ending in 8265 with an expiration date of 01/29. 4. Direct Brand Impersonation Assets - Administrative Access Details: The team leader’s personal profile details, including name, primary corporate emails (john.engel@elliman.com, engelteaminfo@elliman.com), direct contact phone numbers (203 247 4700), and official state real estate license number (RES.0787476). - High-Definition Media Links: Pristine branding paths hosted on the platform's live AWS CloudFront CDN network (d1buiexcd5gara.cloudfront.net - Operational Templates: The exact welcoming and onboarding text strings used by the agents to register new users. The .csv is in the format below: Nurtured_Contacts Name,Email,scout score,score change,type,tags,created at,Auto Nurture Active,Alerts,Email receives,Email opens,email rejects,email clicks,Homes Viewed,Homes Interested,Home Value Alert Views,Market Activity Alert Views,Errors,Starred and that is for all of them. If you don't negotiate we will sell it on underground forums for one person only and we will send proofs to bleepingcomputer and haveibeenpwned. You have 72 hours to negotiate it will get leaked on 09/12/2026 at 10:10 PM New York Time EST/EDT. To negotiate are session is below for negotiations only session: 05dd14d0860cb5d6901de01af2a84c026d914197d0f8ed892085ea3be556563301 contact us via email has a second option: ShadowByt3S@proton.me

Source record: ransomware.live
9/10/2026
Manufacturingakstamping.comPro enriched

Brief from ransomware.live

AK Stamping is a leader in precision metal stamping technology, offering engineered design solu tions and a complete package of manufacturing capabilities, including prototyping, tooling, and precision stamping for various manufacturing scales. We will upload 30gb of corporate data soon. SQL and other internal files.

Source record: ransomware.live
9/10/2026
georgecameronnash.comPro enriched

Brief from ransomware.live

George Cameron Nash Interior Design operates showrooms in Dallas and Houston, Texas, specializi ng in high-end furniture and lighting. They represent a diverse range of brands, including Alex ander Lamont, Chelsea Textiles, and Rubelli, offering products such as outdoor furniture, fabri cs, textiles, and wall coverings. We will upload corporate data soon. Employee personal information, customer information, contra cts.

Source record: ransomware.live
9/10/2026
ManufacturingPro enriched

Brief from ransomware.live

Eagle Construction specializes in building quality new homes across Virginia, offering a variet y of communities, floor plans, and quick move-in options. Their services cater to a diverse cli entele, including families and individuals looking for single-family homes, townhomes, and 55 communities. We will upload 70gb of corporate data soon. Detailed employee personal information (passports, DLs, SSNs, w-9 forms), internal confidential files, projects, clients information and so on.

Source record: ransomware.live

global secret group

Mesan USA
9/9/2026
OtherUSmesanusa.comPro enriched

Brief from ransomware.live

Country: Miami, Florida 33166, US | Website: mesanusa.com | Revenue: $5.4 Million | Industry: Industrial Machinery & Equipment, Manufacturing | Employees: 10-20 | Properties: 184 GB (188,562 Files, 26,169 Folders)

Source record: ransomware.live

panzer

Aqualogus
9/9/2026
Agriculture and Food Productionaqualogus.comPro enriched

Brief from ransomware.live

Aqualogus is a private engineering consulting firm that helps communities and businesses solve water-related challenges. They work closely with clients to design smart solutions for hydraulic projects, water resources management, and environmental protection. With years of hands-on experience, their team of skilled engineers creates practical plans that make a real difference in how water systems work and how we care for our environment.

Source record: ransomware.live
9/9/2026
HealthcareBRamorsaude.com.brInfostealer signal: 7288Pro enriched

Brief from ransomware.live

AmorSaúde is a rapidly growing network of popular clinics in Brazil that offers medical, dental, and...

Source record: ransomware.live

thegentlemen

Air Canada
9/9/2026
TransportationCAaircanada.comInfostealer signal: 6737Pro enriched

Brief from ransomware.live

aircanada.com zoominfo.com/c/air-canada/3937344 Revenue $16.5 Billion Air Canada We have taken 51409 critical files! Canada's flag carrier and largest airline — founded in 1937 as Trans-Canada Air Lines, HQ'd in Montréal, ~37,000 employees, 45.3M passengers in 2025, and a founding Star Alliance member. Record revenue: $22.37B CAD in 2025 ($6.27B in Q2 2026 alone, +11%), but a fuel shock (+50.8% per litre) and $388M one-off charges pushed Q2 2026 to a $178M net loss — guidance cut, though load factor (87.5%) and Aeroplan (10M+ members), Cargo (+29%) and Sixth Freedom traffic stay strong. Its moat: the most aggressive fleet renewal in its history — A321XLRs with Canada's first lie-flat seats on a narrowbody, 787-10s and A350-1000s — unlocking "thin" long-haul routes no widebody could fly (Oslo, Shannon, Basel, Dubrovnik, Guangzhou) ahead of Super Bowl 2027 and the LA 2028 Olympics.

9/9/2026
HealthcareTWpharmaessentia.comInfostealer signal: 2Pro enriched

Brief from ransomware.live

pharmaessentia.com zoominfo.com/c/pharmaessentia-corp/145441146 PharmaEssentia Taiwanese global biopharma founded in 2003, known for besremi® (ropeginterferon alfa-2b) — the first drug developed in Taiwan ever approved by the FDA (2021) and the only polycythemia vera (PV) therapy approved in both the US and EU. Its innovation: a mono-pegylated long-acting interferon dosed every 2 weeks at home, with disease-modifying potential (reducing JAK2V617F mutant allele frequency) — a premium rare-disease asset vs. hydroxyurea and Jakafi. Financials: $197M+ revenue in 2024 (~89% gross margin), TPEX-listed (6446) with a ~5x stock rally since 2024; next bets: essential thrombocythemia (ET) Phase 3 and myelofibrosis. Bottom line: the Taiwanese biotech that proved a local startup can take a molecule from out-license to FDA approval and global commercialization — a rare-disease champion with an expanding moat.

9/9/2026
TechnologyBRlogar.com.brInfostealer signal: 17Pro enriched

Brief from ransomware.live

Logar Network Solutions is a Brazilian managed IT services provider (MSP) that delivers outsourced IT management, cybersecurity, cloud infrastructure, backup and disaster recovery, software licensing, hardware lifecycle management, and custom software development. The company primarily serves medium-sized businesses across multiple industries, offering 24/7 IT monitoring and support. It has served more than 500 companies and operates across six Brazilian states.

Source record: ransomware.live

dark project

Specchem LLC
9/9/2026
ManufacturingUSspecchem.comPro enriched

Brief from ransomware.live

About Specchem LLC Specchem LLC is a U.S.-based supplier of concrete repair materials, flooring products, and chemical admixtures. The company offers a range of cementitious and epoxy-based systems. Their distribution network covers domestic commercial and industrial contractors. A cyberattack on Specchem LLC resulted in a massive data breach. As a result of the incident, approximately 500 GB of data—containing roughly 700,000 files, including confidential personal and financial information—was stolen.

Source record: ransomware.live
OtherDEmediengruppethiel.dePro enriched

Brief from ransomware.live

Die Mediengruppe Thiel aus Ludwigsfelde ist Ihr verlässlicher Druck- und Werbepartner, wenn es um individuelle Lösungen für innen und außen geht. Ob eindrucksvolle Printprodukte, maßgeschneiderte Werbetechnik oder professionelle Geschäftsausstattung – bei uns erhalten Sie alles aus einer Hand. Dank unseres breiten Leistungsspektrums sparen Sie sich Wege, Schnittstellen und Zeit – und können sich ganz auf Ihr Kerngeschäft konzentrieren. Unser engagiertes Team aus Ideengebern, Technik-Profis und Gestaltern begleitet Sie dabei von der ersten Idee bis zur fertigen Umsetzung.

Source record: ransomware.live
9/9/2026
Professional ServicesUScullottalaw.comPro enriched

Brief from ransomware.live

Cullotta Bravo Law Group is a personal injury law firm based in Aurora, IL, with over 35 years of experience in various legal areas including personal injury, nursing home abuse, and workers compensation.

Source record: ransomware.live

Daily Threat Intelligence Briefing

Get the latest cyber threats, zero-days, and breach analysis delivered to your inbox every morning.