Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Search v2
before

Prefix a filter with + to require it, or - to exclude it — e.g. +country:us only shows US victims, -country:us hides them. Mix several with free-text words; everything is combined with AND (so hospital +country:us -group:lockbit3 means: text "hospital", country is US, group is not lockbit3). Repeating + on the same field is OR'd together (+country:us +country:ca → US or Canada); repeating - excludes all of them. Wrap multi-word values in quotes, e.g. +sector:"public sector". infostealer, press and multipleclaims take a bare +/- with no value: +infostealer / -infostealer filter on infostealer data, while +press searches press articles only and -press hides press coverage; +multipleclaims restricts to victims claimed by more than one group (cross-referenced) and -multipleclaims keeps only single-claim victims; +campaign:fortibleed / -campaign:fortibleed filter on domains found in the FortiBleed leaked-credential dataset; before:/after: take a date directly with no +/- prefix, as shown below.

+country:only this country — opens a picker
-country:exclude this country — opens a picker
+group:only this group — opens a picker
-group:exclude this group — opens a picker
+website:example.comonly this website
+sector:only this sector — opens a picker
-sector:exclude this sector — opens a picker
+infostealerhas infostealer data
-infostealerno infostealer data
+presssearch press articles only
-presshide press coverage
+multipleclaimsclaimed by more than one group (cross-ref only)
-multipleclaimsclaimed by a single group only
+campaign:fortibleeddomain found in the FortiBleed dataset
-campaign:fortibleeddomain not in the FortiBleed dataset
after:2025-01-01discovered/attacked on or after
before:2026-01-01discovered/attacked on or before
No victims found

No results matched this query. Try removing a filter or broadening a term.

Press Coverage 2
Sotheby's International
2026-08-24

Sotheby's International, une société immobilière de luxe, enquête sur un incident de cybersécurité impliquant un accès non autorisé à des données stockées sur une plateforme logicielle tierce. Les données potentiellement compromises incluent des noms, adresses, adresses e-mail et numéros de téléphone. La société a précisé que les échanges d'e-mails, la documentation ou tout autre matériel substantiel lié aux propriétés n'ont pas été accédés, et que la plateforme n'est pas utilisée pour les transactions financières des clients. L'entreprise a pris des mesures pour contenir l'incident et travaille avec des spécialistes en cybersécurité indépendants.

Read article
Sotheby's
2025-07-24

Sotheby's experienced a data breach where an unknown actor removed certain data from their environment. The breach was discovered on July 24, 2025, and affected two Maine residents. The stolen data included names, Social Security numbers, and financial account information.

Read article