Ransom-DB

Threat actors never sleeps. Neither do we. 👁️ The standard for Ransomware Intelligence just got higher. Ransom-DB monitors threat groups and thousands of incidents in real-time. 🌍 🗺️ Live Ransomware Threat Map 📡 Full API Access 📝 Ransomware Blog 📊 Statistics And much more ... ✅ Core access is still FREE. 🚀 Launch deal: 50% OFF Annual Subscriptions (RDB2026). 🚨 Start tracking: ransom-db.com

🚨 Ransom group "SLSH" publishes "DentaQuest, LLC." - United States 🇺🇸 📍 Location: Boston, Massachusetts, USA 🏢 Industry: Dental Benefits Administration 🔗 Website: dentaquest.com DentaQuest, part of Sun Life U.S., administers dental and vision benefits for 35 million Americans, serving employers, individuals, health plans, and government programs. A major player in managed dental care, it reported over $1.7B in revenue in 2018.

ouch

🚨 Ransom group "Lapsus" publishes "GITHUB INTERNAL" - United States 🇺🇸 📍 Location: San Francisco, California, USA 🏢 Industry: Software Development Platform 🔗 Website: github.com GitHub, a Microsoft subsidiary since 2018, is a leading platform for software development and version control, enabling millions of developers to collaborate, share code, and manage projects across programming languages.

🚨 Ransom group "Bravox" publishes "AcademyHealth 🇺🇸" - United States 🇺🇸 📍 Location: Washington, DC, USA 🏢 Industry: Nonprofit / Health Policy & Research 🔗 Website: academyhealth.org AcademyHealth is a nonpartisan nonprofit advancing health services research and health policy. It supports researchers and policymakers, advocates for tools and funding, and helps translate research findings into policy and practice nationwide.

🚨 Ransom group "Kairos" publishes "Commune De Camiers" - France 🇫🇷 📍 Location: Camiers, Pas-de-Calais, France 🏢 Industry: Local Government 🔗 Website: camiers.fr The commune of Camiers administers this seaside town in Pas-de-Calais, Hauts-de-France, serving about 2,612 residents across 16.13 km². It oversees local services, community programs, and infrastructure for the coastal municipality.

🔥 Daily Ransomware Digest - Total 25 Victims Top Groups: The Gentelman - 4 victims Akira - 2 victims Chaos - 2 victims CMD - 2 victims Everest - 2 victims Lamashtu - 1 victim World Leaks - 1 victim Titan - 1 victim Termite - 1 victim SLSH - 1 victim Top Attacked Countries: 🇺🇸 United States (14) 🇮🇹 Italy (1) 🇲🇽 Mexico (1) Top Attacked Industries: ⚖️ Legal Services 🛍️ Retail 🏥 Healthcare The Gentelman led the day with 4 victims, while Akira, Chaos, CMD, and Everest followed with 2 attacks each. Threat activity clustered heavily in the United States, which absorbed 14 hits, with Legal Services emerging as the primary sector targeted. Notably, LeakedData listed Fox Rothschild LLP, a major U.S. law firm, and SLSH claimed BCD Travel, a global travel management company.

🚨 Ransom group "CMD" publishes "Capital Family Physicians" - United States 🇺🇸 📍 Location: Raleigh, North Carolina, USA 🏢 Industry: Healthcare Provider 🔗 Website: capitalfamilymd.com Capital Family Physicians is a Raleigh-based medical practice providing comprehensive primary care for all ages, emphasizing pediatrics and same-day visits. It offers a patient portal for records and billing and has served the community for 15+ years.

Last 30 days snapshot 👇 Qilin leads the pack with 114 victims, followed by The Gentelman with 82 and DragonForce with 53. On the country side, the United States remains far ahead with 352 victims, with the United Kingdom and Canada next.

🚨 Ransom group "Nova (RALord)" publishes "Badan Pangan Nasional" - Indonesia 🇮🇩 📍 Location: Ragunan, South Jakarta, DKI Jakarta, Indonesia 🏢 Industry: National Government Agency 🔗 Website: badanpangan.go.id Badan Pangan Nasional is Indonesia’s National Food Agency, established in 2021 to coordinate policy on food availability and supply, price stabilization, nutrition security, consumption diversification, and food safety across the country.

another day, another slsh claim

🚨 Ransom group "SLSH" publishes "BCD Travel" - United States 🇺🇸 📍 Location: United States 🏢 Industry: Corporate Travel Management 🔗 Website: bcdtravel.com BCD Travel is a global leader in corporate travel management, serving clients in 170+ countries with a workforce of over 15,000. The company provides tools and services that optimize corporate travel programs, enhance traveler experiences, and support business outcomes.

🚨 Ransom group "CMD" publishes "Heart of America Eye Care" - United States 🇺🇸 📍 Location: Overland Park, Kansas, USA 🏢 Industry: Healthcare (Ophthalmology) 🔗 Website: heartofamericaeyecare.com Heart of America Eye Care is a full-service ophthalmology practice providing comprehensive vision care, including eye exams, cataract treatment, and laser vision correction. It serves adults and children across the Kansas City metro from clinics in KS and MO.

🔥 Daily Ransomware Digest - Total 45 Victims Top Groups: DragonForce - 12 victims Everest - 7 victims Qilin - 5 victims Akira - 4 victims The Gentelman - 4 victims Krybit - 2 victims Medusa Locker - 2 victims Nova (RALord) - 2 victims 3AM - 1 victim Chaos - 1 victim Top Attacked Countries: 🇺🇸 United States (16) 🇮🇹 Italy (4) 🇬🇧 United Kingdom (4) Top Attacked Industries: 🏗️ Construction 🏭 Manufacturing 🏥 Medical Practices DragonForce led the day with 12 victims, while Everest followed with seven and Qilin struck five times. Global activity clustered in the United States, with Italy and the United Kingdom as the top European targets. The construction and manufacturing sectors experienced the highest volume of incidents. Notably, Akira listed GS Yuasa Lithium Power, a developer of lithium-ion power systems, and World Leaks posted American Battery Factory.

🚨 Ransom group "Everest" publishes "AKM" - United States 🇺🇸 📍 Location: Houston, Texas, USA 🏢 Industry: Oil & Gas Software & Analytics 🔗 Website: akmenterprisesinc.com AKM Enterprises Inc., based in Houston, provides real-time data analytics and SaaS platforms like ProACT to optimize well planning, daily operations, and reporting for the oil and gas sector. It supports E&P operators across 19 major U.S. shale plays.

🚨 Ransom group "Everest" publishes "Sidra Kuwait Hospital" - Kuwait 🇰🇼 📍 Location: Kuwait City, Kuwait 🏢 Industry: Healthcare 🔗 Website: sidrakwhospital.com Sidra Kuwait Hospital is a secondary-care multispecialty hospital in Kuwait City, delivering surgery, radiology, pediatrics, and more. It is JCI-accredited and recognized as a Center of Excellence in Metabolic & Bariatric Surgery.

🚨 Ransom group "Everest" publishes "Advanced Psychiatry Associates" - United States 🇺🇸 📍 Location: California, USA 🏢 Industry: Healthcare (Mental Health) 🔗 Website: advancedpsychiatryassociates.com Advanced Psychiatry Associates is a full-service psychiatric provider in California, offering evaluations, medication management, psychotherapy, Spravato (esketamine), and Transcranial Magnetic Stimulation to patients across Northern and Southern California.

🚨 Ransom group "Everest" publishes "L&P Aesthetics" - United States 🇺🇸 📍 Location: Palo Alto & Los Gatos, California, USA 🏢 Industry: Healthcare - Plastic Surgery 🔗 Website: fortheface.com L&P Aesthetics is a facial plastic surgery practice founded by Drs. David Lieberman and Sachin Parikh, providing cosmetic rejuvenation, reconstructive surgery, and hair restoration. It serves Bay Area patients from clinics in Palo Alto and Los Gatos.

🚨 Ransom group "CMD" publishes "Hospice Savannah" - United States 🇺🇸 📍 Location: Savannah, Georgia, USA 🏢 Industry: Healthcare (Hospice & Palliative Care) 🔗 Website: hospicesavannah.org Hospice Savannah, a nonprofit founded in 1979, delivers hospice and palliative care across Bryan, Chatham, Effingham, Long, and Liberty counties in coastal Georgia. Joint Commission accredited, it provides in-home and inpatient care, bereavement, pediatric, and caregiver support.

🚨 Ransom group "3AM" publishes "amc.org.au" - Australia 🇦🇺 📍 Location: Australia 🏢 Industry: Healthcare Accreditation 🔗 Website: amc.org.au The Australian Medical Council is an independent national standards body that accredits and assesses medical education and training across Australia and New Zealand, helping ensure high-quality medical practice to protect the health of the Australian community.

Charter's confirmed breach moved to publish phase today. SLSH claims 42M+ PII records and is dropping the file. If you're a Spectrum subscriber, work the assumption your data is already out: rotate creds, watch for Spectrum-themed phishing, freeze credit if it matters.