Amuneth CTI Victim Watch
Daily ransomware claim overview
This overview contains ransomware victim claims from the last 24 hours, as stored in the Amuneth CTI victim watch. Use it as an early signal for sector trends, supplier risk and actor activity.
Important disclaimer: these records come from public and/or darknet-related ransomware feeds. They are claimed victims, not automatically confirmed incidents, proven data theft or validated compromise. Treat every claim as a signal that needs further context.
22 claims in the period from 13-09-2026 00:00 UTC to 14-09-2026 00:00 UTC.
| Victim claim |
Group |
Country / sector |
Date |
| Cerámicas Kantu | Panzer | Unknown / Manufacturing | 13-09-2026 |
| Cerámicas Kantu | Panzer | Unknown / Manufacturing | 13-09-2026 |
| Gilco Scaffolding | qilin | GB / Manufacturing | 13-09-2026 |
| Gilco Scaffolding | qilin | GB / Manufacturing | 13-09-2026 |
| Navitrans | emperador | Unknown / Transportation | 13-09-2026 |
| Navitrans | emperador | Unknown / Transportation | 13-09-2026 |
| www.kashkha.com | krybit | Unknown / Not Found | 13-09-2026 |
| www.kashkha.com | krybit | Unknown / Not Found | 13-09-2026 |
| CARIDRO VAL DE LOIRE | qilin | FR / Agriculture and Food Production | 13-09-2026 |
| CARIDRO VAL DE LOIRE | qilin | FR / Agriculture and Food Production | 13-09-2026 |
| Paid Victim F9CF4B639CAC1B18 | AuditTeam | RU / Not Found | 13-09-2026 |
| Paid Victim F9CF4B639CAC1B18 | AuditTeam | RU / Not Found | 13-09-2026 |
| Paid Victim FDC699DE3A112669 | AuditTeam | DE / Not Found | 13-09-2026 |
| Paid Victim FDC699DE3A112669 | AuditTeam | DE / Not Found | 13-09-2026 |
| vi***in | AuditTeam | IN / Transportation | 13-09-2026 |
| vi***in | AuditTeam | IN / Transportation | 13-09-2026 |
| i2i-systems | Barracuda | TR / Technology | 13-09-2026 |
| i2i-systems | Barracuda | TR / Technology | 13-09-2026 |
| Kimberly-Clark | shinyhunters | US / Manufacturing | 13-09-2026 |
| Kimberly-Clark | shinyhunters | US / Manufacturing | 13-09-2026 |
| INCOR Group | Doommageddon | IN / Other | 13-09-2026 |
| INCOR Group | Doommageddon | IN / Other | 13-09-2026 |
Click a ransomware group to open the actor profile on the Amuneth site. Where available, you will find context about methods, historic victims, known indicators and defensive value.