Loading....

Explore the Halcyon Attacks Lookout
The Halcyon Attacks Lookout (or ‘HAL’ for short) is a recent ransomware attacks watchtower, built to provide tracking of attacks, groups and their victims. Given threat actors' overarching, lucrative success from ransomware attacks, they’ve become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.
Explore the Ransomware Attacks Database
Dive into each Attack to read the full incident details. View Attacks by Group, Industry, and Country, using filters.
Showing 0 of 100




AISHU Technology Corp Allegedly Breached by RansomHouse
AISHU Technology Corp Allegedly Breached by RansomHouse
Date
January 26, 2025
Ransomware group
Ransomhouse
Location
Singapore
Industry
Software
Victim
AISHU Technology Corp




Metro Wire & Cable Allegedly Targeted by SpaceBears Ransomware
Metro Wire & Cable Allegedly Targeted by SpaceBears Ransomware
Date
January 26, 2025
Ransomware group
SpaceBears
Location
USA
Industry
Manufacturing
Victim
Metro Wire & Cable




KillSec Claims Ransomware Attack on Let's Secure Insurance
KillSec Claims Ransomware Attack on Let's Secure Insurance
Date
January 26, 2025
Ransomware group
Killsec
Location
India
Industry
Insurance
Victim
Let’s Secure Insurance




SafePay Alleges Ransomware Attack on Bigotti Fashion Brand
SafePay Alleges Ransomware Attack on Bigotti Fashion Brand
Date
January 25, 2025
Ransomware group
SafePay
Location
Romania
Industry
Retail
Victim
Bigotti




DragonForce Ransomware Group Claims Attack on Jan Nygaard AS
DragonForce Ransomware Group Claims Attack on Jan Nygaard AS
Date
January 25, 2025
Ransomware group
Dragonforce
Location
Denmark
Industry
Retail
Victim
Jan Nygaard




Nutripack Deutschland GmbH Allegedly Targeted by SafePay Ransomware
Nutripack Deutschland GmbH Allegedly Targeted by SafePay Ransomware
Date
January 25, 2025
Ransomware group
SafePay
Location
Germany
Industry
Manufacturing
Victim
Nutri Pack Deutschland GmbH




Abyss Group Allegedly Claims Ransomware Attack on EnviroSep
Abyss Group Allegedly Claims Ransomware Attack on EnviroSep
Date
January 25, 2025
Ransomware group
Abyss
Location
USA
Industry
Manufacturing
Victim
EnviroSep




SafePay Allegedly Targets McPathology in Ransomware Attack
SafePay Allegedly Targets McPathology in Ransomware Attack
Date
January 25, 2025
Ransomware group
SafePay
Location
USA
Industry
Healthcare Services
Victim
McPathology, Marlboro-Chesterfield Pathology, PC (MCP),




KillSec Claims Ransomware Attack on Fintech Firm Keepz
KillSec Claims Ransomware Attack on Fintech Firm Keepz
Date
January 25, 2025
Ransomware group
Killsec
Location
Georgia
Industry
Finance
Victim
Keepz




Paradise Schools Allegedly Targeted by SafePay Ransomware
Paradise Schools Allegedly Targeted by SafePay Ransomware
Date
January 25, 2025
Ransomware group
SafePay
Location
USA
Industry
Education
Victim
Paradise Schools




KillSec Claims Ransomware Attack on DataSociete
KillSec Claims Ransomware Attack on DataSociete
Date
January 25, 2025
Ransomware group
Killsec
Location
Cyprus
Industry
Business Services
Victim
DataSociete




Welcome Wagon Allegedly Targeted by SafePay Ransomware Attack
Welcome Wagon Allegedly Targeted by SafePay Ransomware Attack
Date
January 25, 2025
Ransomware group
SafePay
Location
USA
Industry
Business Services
Victim
Welcome Wagon




Wannemacher Enterprises Claims Ransomware Attack by Qilin Group
Wannemacher Enterprises Claims Ransomware Attack by Qilin Group
Date
January 24, 2025
Ransomware group
Qilin
Location
USA
Industry
Transportation
Victim
Wannemacher Enterprises Inc




Medusa Ransomware Group Alleges Attack on Safco International
Medusa Ransomware Group Alleges Attack on Safco International
Date
January 24, 2025
Ransomware group
Medusa
Location
United Arab Emirates
Industry
Retail
Victim
Safco International Gen Trading




GDLockerSec Alleges Unfounded Ransomware Attack on AWS
GDLockerSec Alleges Unfounded Ransomware Attack on AWS
Date
January 24, 2025
Ransomware group
GDLockerSec
Location
USA
Industry
Software
Victim
Amazon Web Services, Inc. (AWS)




SpaceBears Allegedly Targets Arrow Motor Auctions in Cyberattack
SpaceBears Allegedly Targets Arrow Motor Auctions in Cyberattack
Date
January 24, 2025
Ransomware group
SpaceBears
Location
United Kingdom
Industry
Retail
Victim
Arrow Motor Auctions




RansomHub Alleges Cyberattack on Papeles y Conversiones de México
RansomHub Alleges Cyberattack on Papeles y Conversiones de México
Date
January 24, 2025
Ransomware group
Ransomhub
Location
Mexico
Industry
Manufacturing
Victim
Papeles y Conversiones de México S.A. de C.V.




Fog Group Allegedly Claims Ransomware Attack on ELTEK Group
Fog Group Allegedly Claims Ransomware Attack on ELTEK Group
Date
January 24, 2025
Ransomware group
Fog
Location
Italy
Industry
Manufacturing
Victim
ELTEK Group




8Base Group Alleges Ransomware Attack on French Law Firm
8Base Group Alleges Ransomware Attack on French Law Firm
Date
January 24, 2025
Ransomware group
8base
Location
France
Industry
Law Firms & Legal Services
Victim
Cabinet JEAN LOUVEL SAOUDI




Medusa Ransomware Claims Cyberattack on Argentina's Hospital El Cruce
Medusa Ransomware Claims Cyberattack on Argentina's Hospital El Cruce
Date
January 24, 2025
Ransomware group
Medusa
Location
Argentina
Industry
Healthcare Services
Victim
Hospital El Cruce




Medusa Ransomware Group Alleges Attack on Chappell Schools
Medusa Ransomware Group Alleges Attack on Chappell Schools
Date
January 24, 2025
Ransomware group
Medusa
Location
USA
Industry
Education
Victim
Chappell Schools




Rhysida Ransomware Allegedly Targets ORU Mabee Center
Rhysida Ransomware Allegedly Targets ORU Mabee Center
Date
January 24, 2025
Ransomware group
Rhysida
Location
USA
Industry
Education
Victim
ORU Mabee Center




Primo Ticketing Allegedly Targeted by KillSec Ransomware
Primo Ticketing Allegedly Targeted by KillSec Ransomware
Date
January 24, 2025
Ransomware group
Killsec
Location
USA
Industry
Business Services
Victim
Primo Ticketing




WorldNet Telecommunications Alleges Akira Ransomware Attack
WorldNet Telecommunications Alleges Akira Ransomware Attack
Date
January 23, 2025
Ransomware group
Akira
Location
Puerto Rico
Industry
Telecommunications
Victim
WorldNet Telecommunications LLC




Enghouse Systems Alleges Data Breach by Akira Ransomware Group
Enghouse Systems Alleges Data Breach by Akira Ransomware Group
Date
January 23, 2025
Ransomware group
Akira
Location
Canada
Industry
Software
Victim
Enghouse Systems Ltd




FOG Ransomware Group Alleges Attack on Kooijman Vianen
FOG Ransomware Group Alleges Attack on Kooijman Vianen
Date
January 23, 2025
Ransomware group
Fog
Location
Netherlands
Industry
Retail
Victim
Kooijman Vianen




Stark Aerospace Allegedly Hit by Major Ransomware Attack
Stark Aerospace Allegedly Hit by Major Ransomware Attack
Date
January 23, 2025
Ransomware group
Inc Ransom
Location
USA
Industry
Manufacturing
Victim
Stark Aerospace




RansomHub Allegedly Targets Samsill Corporation in Data Breach
RansomHub Allegedly Targets Samsill Corporation in Data Breach
Date
January 23, 2025
Ransomware group
Ransomhub
Location
USA
Industry
Manufacturing
Victim
Samsill Corporation




Qilin Group Allegedly Targets Black Hills Eye Institute in Ransomware Attack
Qilin Group Allegedly Targets Black Hills Eye Institute in Ransomware Attack
Date
January 23, 2025
Ransomware group
Qilin
Location
USA
Industry
Healthcare Services
Victim
Black Hills Regional Eye Institute




Pineland Community Service Board Allegedly Hit by Ransomware
Pineland Community Service Board Allegedly Hit by Ransomware
Date
January 23, 2025
Ransomware group
SpaceBears
Location
USA
Industry
Healthcare Services
Victim
Pineland Community Service Board




RansomHub Alleges Major Data Breach at Mission Bank
RansomHub Alleges Major Data Breach at Mission Bank
Date
January 23, 2025
Ransomware group
Ransomhub
Location
USA
Industry
Finance
Victim
Mission Bank




8Base Ransomware Group Alleges Major Breach of French Firm FIO
8Base Ransomware Group Alleges Major Breach of French Firm FIO
Date
January 23, 2025
Ransomware group
8base
Location
France
Industry
Finance
Victim
FIO
Ready to Get Resilient Against Ransomware?
An endpoint resiliency platform is a critical part of a strong security strategy to protect your business and continuity. Setup a meeting to learn more with a Halcyon expert today.