Dragons EyeRansomware tracker

US state report · CA

Ransomware claims in California

Claims that ransomware groups posted against organizations we could place in California, over the last 12 complete months.

Data: ransomware.live · Statistics generated Oct 25, 2026, 06:11 UTC, refreshed hourly

Allegation by a ransomware group, not a confirmed attackRansomware groups post these claims themselves; we track them, we do not verify them.

Claims, last 12 months
318
So far in October 2026
25Month in progress, not in the trend
Address on own website
285Confirmed location
State named in claim
33Inferred location
Latest claim
Oct 16, 2026

Claims per month in California

Located California claims in the last 12 complete months (UTC).

  1. October 2025: 29
  2. November 2025: 24
  3. December 2025: 27
  4. January 2026: 25
  5. February 2026: 24
  6. March 2026: 34
  7. April 2026: 25
  8. May 2026: 24
  9. June 2026: 19
  10. July 2026: 40
  11. August 2026: 26
  12. September 2026: 21

Top sectors

12 claims had no sector label and are not shown.

  1. Manufacturing35
  2. Attorney20
  3. Healthcare19
  4. Technology18
  5. Healthcare services14
  6. Legal consulting13
  7. Technologies13
  8. Construction12

Top cities

Only addresses confirmed on organizations' own websites.

  1. Los Angeles14
  2. San Francisco11
  3. San Diego10
  4. San Jose10
  5. Carlsbad8
  6. Irvine7
  7. Lake Forest6
  8. Long Beach6

Latest claims in California

Allegation by a ransomware group, not a confirmed attackEach row is a claim posted on a ransomware leak site. Inclusion does not mean the organization was breached.

The 25 most recent claims placed in California, newest first. Dates are when a tracked source first observed the claim (UTC).
ObservedOrganizationGroupSectorLocationEvidence
Oct 16, 2026Entry Systems Garage Doors Gatesthe gentlemenNot reportedLaguna Hills, CA Own website2+ sources
Oct 16, 2026Newport Beach Dentistrythe gentlemenHealthcareNewport Beach, CA Own website2+ sources
Oct 16, 2026Santa Barbara Endodonticsthe gentlemenHealthcareSanta Barbara, CA Own website2+ sources
Oct 15, 2026Harness Inc.THE SEVEN DEADLY SINSTechnologySan Francisco, CA Own website2+ sources
Oct 15, 2026Cradlewise Inc.THE SEVEN DEADLY SINSTechnologyFremont, CA Own website2+ sources
Oct 12, 2026Culinary SpecialtiesplayAgriculture and Food ProductionSan Marcos, CA Own website2+ sources
Oct 10, 2026Confluentthe gentlemenTechnologyMountain View, CA Own website2+ sources
Oct 10, 2026DexComRedactHealthSan Diego, CA Own website2+ sources
Oct 9, 2026Design ElectricakiraConstructionPleasanton, CA Own website2+ sources
Oct 9, 2026KC Pharmaceuticals, IncnightspirePharmacy and drugs manufacturingPomona, CA Own website2+ sources
Oct 8, 2026sanjoseattorneys.comEclipseAttorneyCA Own website2+ sources
Oct 7, 2026Riviera Healthcare CenterinterlockHealthcare servicesPico Rivera, CA Own website2+ sources
Oct 7, 2026City of CloverdaleINC RansomLocal administrationsCloverdale, CA Own website2+ sources
Oct 6, 2026Rag Electricthe gentlemenConstructionEncino, CA Own website2+ sources
Oct 6, 2026Polishing Prozthe gentlemenConstructionEl Cajon, CA Own website2+ sources
Oct 6, 2026Santee School District Foundationthe gentlemenEducationSantee, CA Own website2+ sources
Oct 6, 2026SweetRushPanzerTrainingSan Francisco, CA Own website2+ sources
Oct 6, 2026fleetworksinc.com3amTransportationCA Own websiteSingle source
Oct 6, 2026fleetworksinc.comthreeamAutomotiveCA Own website2+ sources
Oct 4, 2026Silicon Valley GlassplayManufacturingMorgan Hill, CA Own website2+ sources
Oct 4, 2026EmserqilinNot reportedLos Angeles, CA Own websiteSingle source
Oct 2, 2026DexCom, Inc.shinyhuntersHealthcareSan Diego, CA Own websiteSingle source
Oct 2, 2026translarity.comSettraHigh-techFremont, CA Own website2+ sources
Oct 2, 2026Far West ContractorsdeadlockConstructionCA Named in claim2+ sources
Oct 1, 2026Krycler, Ervin, Taubman & KaminskyakiraAttorneyCA Own website2+ sources

Other states

Located claims in the last 12 complete months.

How claims are placed in states

  • Own website (confirmed). A US street address with a ZIP code that belongs to the state, found on the organization's own home, contact or about page. Pages are fetched politely and robots.txt is respected.
  • Named in claim (inferred). The claim text itself names the state, for example "based in Austin, Texas". City names from claim text are never shown, because ransomware groups write that text.
  • Never guessed. We do not place claims from a company name, a phone area code, a paid registry or a map lookup. A claim we cannot place stays in the national count and on no state page.
  • Window. Trends cover the last 12 complete calendar months (UTC). The current month is shown separately because it is still in progress.

Claims come from public ransomware leak sites as collected by our sources. Read the methodology for how claims are collected, corroborated and corrected.