Dragons EyeRansomware tracker

US state report · CO

Ransomware claims in Colorado

Claims that ransomware groups posted against organizations we could place in Colorado, over the last 12 complete months.

Data: ransomware.live · Statistics generated Oct 25, 2026, 07:18 UTC, refreshed hourly

Allegation by a ransomware group, not a confirmed attackRansomware groups post these claims themselves; we track them, we do not verify them.

Claims, last 12 months
43
So far in October 2026
2Month in progress, not in the trend
Address on own website
42Confirmed location
State named in claim
1Inferred location
Latest claim
Oct 9, 2026

Claims per month in Colorado

Located Colorado claims in the last 12 complete months (UTC).

  1. October 2025: 4
  2. November 2025: 4
  3. December 2025: 6
  4. January 2026: 3
  5. February 2026: 4
  6. March 2026: 0
  7. April 2026: 5
  8. May 2026: 6
  9. June 2026: 4
  10. July 2026: 2
  11. August 2026: 4
  12. September 2026: 1

Top sectors

  1. Manufacturing5
  2. Construction4
  3. Healthcare services4
  4. Healthcare3
  5. Professional Services3
  6. Technologies3
  7. Automotive2
  8. Technology2

Top cities

Only addresses confirmed on organizations' own websites.

  1. Denver9
  2. Boulder3
  3. Englewood3
  4. Loveland3
  5. Castle Rock2
  6. Centennial2
  7. Longmont2
  8. Westminster2

Latest claims in Colorado

Allegation by a ransomware group, not a confirmed attackEach row is a claim posted on a ransomware leak site. Inclusion does not mean the organization was breached.

The 25 most recent claims placed in Colorado, newest first. Dates are when a tracked source first observed the claim (UTC).
ObservedOrganizationGroupSectorLocationEvidence
Oct 9, 2026Sangre de Cristo Arts and Conference CenternightspireCulture and entertainmentPueblo, CO Own website2+ sources
Oct 2, 2026Sangre de Cristo Electric AssociationINC RansomElectricityBuena Vista, CO Own website2+ sources
Sep 22, 2026SealcontermiteDistributionCentennial, CO Own website2+ sources
Aug 31, 2026zayo.comSettraTelecommunicationsBoulder, CO Own website2+ sources
Aug 31, 2026diversifiedbodyandpaint.comSettraAutomotiveHenderson, CO Own website2+ sources
Aug 21, 2026Hogan Omidi P.C.dragonforceProfessional ServicesCO Own website2+ sources
Aug 11, 2026advancedtaxsolutions.comSettraProfessional ServicesDenver, CO Own website2+ sources
Jul 29, 2026The Garfield County Sheriff Officethe gentlemenGovernment & DefenseCO Own website2+ sources
Jul 2, 2026Colorado Rehabilitation and Occupational MedicineINC RansomHealthcareCO Own website2+ sources
Jun 30, 2026wilfley.comSettraProfessional ServicesCommerce City, CO Own website2+ sources
Jun 21, 2026Artistic SmilesnightspireHealthcare servicesLongmont, CO Own website2+ sources
Jun 12, 2026Zayo.com & Allstream.comshinyhuntersTelecommunicationsBoulder, CO Own website2+ sources
Jun 5, 2026Unique Litho, IncnightspireManufacturingEnglewood, CO Own website2+ sources
May 29, 2026Interstate RoofingakiraConstructionDenver, CO Own websiteSingle source
May 8, 2026DL Cohen ConstructionqilinManufacturingLittleton, CO Own website2+ sources
May 8, 2026Advanced Laundry SystemsqilinRetail & E-CommerceGolden, CO Own website2+ sources
May 7, 2026autorisk.orgINC RansomInsurance servicesDenver, CO Own website2+ sources
May 5, 2026Trimble Inc / Gerrard IncmedusalockerTechnologiesWestminster, CO Own website2+ sources
May 1, 2026Colorado Dental Wellness CenteranubisHealthcare servicesDenver, CO Own website2+ sources
Apr 25, 2026LA WoodworksqilinManufacturingWindsor, CO Own website2+ sources
Apr 13, 2026Basalt DentistryqilinHealthcareBasalt, CO Own website2+ sources
Apr 7, 2026Noble Inc.insomniaOilFort Collins, CO Own website2+ sources
Apr 3, 2026roodtrucking.comINC RansomRoad transportDenver, CO Own website2+ sources
Apr 2, 2026TouchSourcemedusaTechnologiesCO Named in claim2+ sources
Feb 18, 2026Application Solution ProvidersinsomniaInformation Technologies ConsultingLongmont, CO Own website2+ sources

Other states

Located claims in the last 12 complete months.

How claims are placed in states

  • Own website (confirmed). A US street address with a ZIP code that belongs to the state, found on the organization's own home, contact or about page. Pages are fetched politely and robots.txt is respected.
  • Named in claim (inferred). The claim text itself names the state, for example "based in Austin, Texas". City names from claim text are never shown, because ransomware groups write that text.
  • Never guessed. We do not place claims from a company name, a phone area code, a paid registry or a map lookup. A claim we cannot place stays in the national count and on no state page.
  • Window. Trends cover the last 12 complete calendar months (UTC). The current month is shown separately because it is still in progress.

Claims come from public ransomware leak sites as collected by our sources. Read the methodology for how claims are collected, corroborated and corrected.