Amuneth CTI Victim Watch
Daily ransomware claim overview
This overview contains ransomware victim claims from the last 24 hours, as stored in the Amuneth CTI victim watch. Use it as an early signal for sector trends, supplier risk and actor activity.
Important disclaimer: these records come from public and/or darknet-related ransomware feeds. They are claimed victims, not automatically confirmed incidents, proven data theft or validated compromise. Treat every claim as a signal that needs further context.
10 claims in the period from 20-09-2026 00:00 UTC to 21-09-2026 00:00 UTC.
| Victim claim |
Group |
Country / sector |
Date |
| Euramex Management Group | Orova | US / Not Found | 20-09-2026 |
| Zorlu Holding | qilin | TR / Manufacturing | 20-09-2026 |
| ShopDunk | qilin | TH / Retail & E-Commerce | 20-09-2026 |
| KMLS | qilin | DE / Not Found | 20-09-2026 |
| Touring Club Suisse | qilin | CH / Transportation | 20-09-2026 |
| Studio Notarile Associato Salvatore Costantino E Anna Favarato | emperador | IT / Professional Services | 20-09-2026 |
| Great Bay Bio | nightspire | HK / Healthcare | 20-09-2026 |
| TOWILL | bravox | US / Technology | 20-09-2026 |
| Fanatics (global sports commerce platform) | N0n | US / Retail & E-Commerce | 20-09-2026 |
| Note to Cl0p-_- | shinyhunters | Unknown / Not Found | 20-09-2026 |
Click a ransomware group to open the actor profile on the Amuneth site. Where available, you will find context about methods, historic victims, known indicators and defensive value.