Category: Ransom Monitor

Interlock claims it compromised Wagon Mound Public Schools in the United States, exposing 80 GB of data including staff and student information, phone numbers, residence addresses, passport numbers, and the school’s blueprints. The claim frames this as a ransomware data breach, highlighting serious security gaps in how the district handles sensitive materials. #UnitedStates

A ransomware claim alleges that the threat actor thegentlemen targeted eDevice in France, citing information from edevice.com and its ZoomInfo profile at zoominfo.com/c/edevice-sa/12403021. The claim describes eDevice as serving over 650,000 connected patients globally and as a provider of connected care platform solutions for healthcare, with partnerships involving Medtronic, Honeywell, and Philips. #France

The City of Hart, a local municipal organization in the United States, reports a ransomware claim attributed to the threat actor Genesis. Public details on the ransom demand or impact have not been disclosed. #countryUnitedStates

A ransomware claim targets NADAP, a non-profit organization based in the United States, alleging their systems were encrypted. The claim attributes the attack to Genesis, with alleged data exfiltration and a ransom demand #UnitedStates

Handala Hack claims to have fully infiltrated the Zionist regime’s meteorological servers and wiped out all governmental and military weather stations, rendering none operational. The message frames the breach as a successful operation with implications for aviation and military readiness, and it includes greetings to freedom-loving nations and resistance fighters. #Israel

The Handala Hack ransomware claim frames itself as a solidarity act “in the name of freedom and justice,” extending support to freedom-seekers and promising direct, secure communication for those who cherish liberty. It identifies the PS victim as Contact Handala and urges engagement through secure channels, ending with #Palestine

Griswold Controls alleges a ransomware incident attributed to the genesis threat actor, targeting its operations in the United States and encrypting systems related to flow control technology and valves used in HVAC and irrigation applications. The claim notes the attacker may exfiltrate data and demand a ransom, leveraging Griswold’s prominence in HVAC and irrigation controls. #UnitedStates

Worldleaks claims to have breached Sagent Pharmaceuticals, encrypting systems and exfiltrating data from the US-based company. The group demands a ransom and threatens to leak stolen information or disrupt operations if payment is not provided. #countryUnitedStates

Sileno Companies Inc., a US-based hospitality and real estate operator, reported a ransomware incident attributed to tengu, encrypting 22.9 TB in 14 hours on 3/5/2026 and exfiltrating more than 67.07 GB. The attack disrupted hotel operations, property management, and related hospitality services. #UnitedStates

Kuzco Lighting reports a ransomware incident attributed to the threat actor qilin. Public details are limited, with Canada identified as the impacted country #Canada

Artemedica reported a ransomware incident attributed to the threat actor qilin, impacting operations in the United States. Details about the ransom demand or data exfiltration were not disclosed #UnitedStates

Geotec Surveys was targeted by a ransomware claim attributed to threat actor qilin in the United Kingdom. The claim provides no further details (N/A) about the ransom demands or data impact. #UnitedKingdom

This ransomware claim from Handala Hack alleges an unprecedented and sophisticated operation targeting Jerusalem’s water infrastructure in retaliation for aggression against the Qeshm desalination plant. It states that 423 gigabytes of highly classified data were exfiltrated and the core infrastructure was crippled #Israel

According to the claim, the ransomware group qilin targeted the victim Dielco in the Netherlands. The claim notes that attack details, including payload and ransom, are listed as N/A #Netherlands

Brothers Produce in the United States reported a ransomware claim attributed to the threat actor qilin. The claim offers limited information, with no additional details on encryption scope or ransom demands. #UnitedStates