US state report · AL
Ransomware claims in Alabama
Claims that ransomware groups posted against organizations we could place in Alabama, over the last 12 complete months.
Data: ransomware.live · Statistics generated Oct 25, 2026, 04:41 UTC, refreshed hourly
Allegation by a ransomware group, not a confirmed attackRansomware groups post these claims themselves; we track them, we do not verify them.
- Claims, last 12 months
- 34
- So far in October 2026
- 1Month in progress, not in the trend
- Address on own website
- 33Confirmed location
- State named in claim
- 1Inferred location
- Latest claim
- Oct 9, 2026
Claims per month in Alabama
Located Alabama claims in the last 12 complete months (UTC).
- October 2025: 1
- November 2025: 3
- December 2025: 3
- January 2026: 4
- February 2026: 4
- March 2026: 4
- April 2026: 0
- May 2026: 2
- June 2026: 2
- July 2026: 2
- August 2026: 5
- September 2026: 4
Top sectors
Top cities
Only addresses confirmed on organizations' own websites.
Latest claims in Alabama
Allegation by a ransomware group, not a confirmed attackEach row is a claim posted on a ransomware leak site. Inclusion does not mean the organization was breached.
| Observed | Organization | Group | Sector | Location | Evidence |
|---|---|---|---|---|---|
| Oct 9, 2026 | DW McMillan Memorial Hospital | the gentlemen | Healthcare services | Brewton, AL Own website | 2+ sources |
| Sep 28, 2026 | AHEAD | INC Ransom | Information Technologies Consulting | Birmingham, AL Own website | 2+ sources |
| Sep 21, 2026 | DW McMillan Memorial Hospital | the gentlemen | Healthcare | Brewton, AL Own website | 2+ sources |
| Sep 14, 2026 | Massey, Stotser & Nichols | insomnia | Attorney | Birmingham, AL Own website | 2+ sources |
| Sep 5, 2026 | Mission Pet Health | direwolf | Healthcare services | Birmingham, AL Own website | 2+ sources |
| Aug 31, 2026 | www.renorefractories.com | INC Ransom | Heavy industries | Morris, AL Own website | 2+ sources |
| Aug 27, 2026 | Providence Investments | qilin | Financial Services | Birmingham, AL Own website | 2+ sources |
| Aug 20, 2026 | Deas Millwork | akira | Manufacturing | Semmes, AL Own website | 2+ sources |
| Aug 7, 2026 | Continental.Aero | clop | Avionics | AL Own website | 2+ sources |
| Aug 5, 2026 | Long-Lewis Automotive Group | Dark Project | Automotive | Hoover, AL Own website | 2+ sources |
| Jul 31, 2026 | Laempe Reich | insomnia | Manufacturing | Trussville, AL Own website | 2+ sources |
| Jul 25, 2026 | Thermalex Inc | kairos | Manufacturing | Montgomery, AL Own website | 2+ sources |
| Jun 9, 2026 | Auburn Electrical Construction Company | embargo | Construction | Auburn, AL Own website | Single source |
| Jun 1, 2026 | Bradley law firm | INC Ransom | Attorney | Birmingham, AL Own website | Single source |
| May 27, 2026 | Shocco Springs | qilin | Hospitality | Talladega, AL Own website | 2+ sources |
| May 21, 2026 | Internal Medicine and Pediatrics of Cullman | payload | Healthcare services | Cullman, AL Own website | 2+ sources |
| Mar 23, 2026 | Marion Military Institute | worldleaks | Academic Institutions | Marion, AL Own website | 2+ sources |
| Mar 18, 2026 | Rainbow Technology | akira | Energy & Utilities | Pelham, AL Own website | 2+ sources |
| Mar 11, 2026 | Special Shapes Refractory | qilin | Heavy industries | Bessemer, AL Own website | 2+ sources |
| Mar 1, 2026 | Special Shapes Refractory | the gentlemen | Manufacturing | Bessemer, AL Own website | 2+ sources |
| Feb 25, 2026 | Birmingham Museum of Art | termite | Culture | Birmingham, AL Own website | 2+ sources |
| Feb 12, 2026 | auxhomeservices.com | INC Ransom | Services | Bessemer, AL Own website | 2+ sources |
| Feb 3, 2026 | Law Offices of Thomas J Skinner, IV | anubis | Attorney | AL Own website | 2+ sources |
| Feb 3, 2026 | Balloons Everywhere | medusa | Retail (distribution) | Fairhope, AL Own website | 2+ sources |
| Jan 24, 2026 | trulinemfg.com | safepay | Avionics | Decatur, AL Own website | 2+ sources |
Other states
Located claims in the last 12 complete months.
- Alaska10
- Arizona37
- Arkansas18
- California318
- Colorado43
- Connecticut36
- Delaware6
- District of Columbia13
- Florida169
- Georgia80
- Hawaii8
- Idaho7
- Illinois126
- Indiana55
- Iowa18
- Kansas28
- Kentucky32
- Louisiana39
- Maine14
- Maryland48
- Massachusetts102
- Michigan82
- Minnesota55
- Mississippi18
- Missouri49
- Montana8
- Nebraska12
- Nevada17
- New Hampshire10
- New Jersey88
- New Mexico14
- New York189
- North Carolina60
- North Dakota5
- Ohio81
- Oklahoma29
- Oregon23
- Pennsylvania103
- Rhode Island12
- South Carolina19
- South Dakota9
- Tennessee57
- Texas226
- Utah39
- Vermont4
- Virginia59
- Washington48
- West Virginia9
- Wisconsin49
- Wyoming11
How claims are placed in states
- Own website (confirmed). A US street address with a ZIP code that belongs to the state, found on the organization's own home, contact or about page. Pages are fetched politely and robots.txt is respected.
- Named in claim (inferred). The claim text itself names the state, for example "based in Austin, Texas". City names from claim text are never shown, because ransomware groups write that text.
- Never guessed. We do not place claims from a company name, a phone area code, a paid registry or a map lookup. A claim we cannot place stays in the national count and on no state page.
- Window. Trends cover the last 12 complete calendar months (UTC). The current month is shown separately because it is still in progress.
Claims come from public ransomware leak sites as collected by our sources. Read the methodology for how claims are collected, corroborated and corrected.