Amuneth CTI Victim Watch
Daily ransomware claim overview
This overview contains ransomware victim claims from the last 24 hours, as stored in the Amuneth CTI victim watch. Use it as an early signal for sector trends, supplier risk and actor activity.
Important disclaimer: these records come from public and/or darknet-related ransomware feeds. They are claimed victims, not automatically confirmed incidents, proven data theft or validated compromise. Treat every claim as a signal that needs further context.
29 claims in the period from 24-09-2026 00:00 UTC to 25-09-2026 00:00 UTC.
| Victim claim |
Group |
Country / sector |
Date |
| Armada Credit Bureau | Spirals | UG / Financial Services | 24-09-2026 |
| Westside GI | pear | US / Healthcare | 24-09-2026 |
| Martin Lawrence Galleries | pear | US / Retail & E-Commerce | 24-09-2026 |
| Indroj Medical Group Inc. | pear | US / Healthcare | 24-09-2026 |
| efada.sa | krybit | SA / Other | 24-09-2026 |
| NEAD Pro | rhysida | Unknown / Not Found | 24-09-2026 |
| bnlawmacau.com www.bn-ip.com | incransom | MO / Professional Services | 24-09-2026 |
| welgenone.com | incransom | US / Healthcare | 24-09-2026 |
| ukbjja.org | incransom | GB / Not Found | 24-09-2026 |
| Prater & Ridley Attorneys At Law | Wallstreet | US / Professional Services | 24-09-2026 |
| Catholic University of El Salvador | Wallstreet | SV / Education | 24-09-2026 |
| Dao Group | qilin | Unknown / Other | 24-09-2026 |
| All Tech Machine & Engineering | qilin | US / Manufacturing | 24-09-2026 |
| Inversiones Bolívar | qilin | CO / Financial Services | 24-09-2026 |
| Zig Inge Group | qilin | AU / Not Found | 24-09-2026 |
| Wallatec | akira | Unknown / Other | 24-09-2026 |
| Agora coopérative agricole | qilin | FR / Agriculture and Food Production | 24-09-2026 |
| GDM Pipelines | qilin | GB / Energy & Utilities | 24-09-2026 |
| Strack Companies | akira | US / Manufacturing | 24-09-2026 |
| Italy | ImNotAVillain | IT / Government & Defense | 24-09-2026 |
| airtanzania.co.tz / airtanzania.com | krybit | TZ / Transportation | 24-09-2026 |
| www.jonesthegrocer.com | krybit | AU / Retail & E-Commerce | 24-09-2026 |
| Grupo Caberj | incransom | BR / Manufacturing | 24-09-2026 |
| Arizona Vascular Medical Equipment, Inc | dragonforce | US / Healthcare | 24-09-2026 |
| BMGP Groupe | dragonforce | FR / Other | 24-09-2026 |
| Elite Industech Co., Ltd | dragonforce | TH / Manufacturing | 24-09-2026 |
| Final statement re PSA | shinyhunters | Unknown / Not Found | 24-09-2026 |
| Solucioning S.A. | Barracuda | AR / Other | 24-09-2026 |
| eTeam | EndZone | Unknown / Professional Services | 24-09-2026 |
Click a ransomware group to open the actor profile on the Amuneth site. Where available, you will find context about methods, historic victims, known indicators and defensive value.