Dragons EyeRansomware tracker

US state report · DC

Ransomware claims in District of Columbia

Claims that ransomware groups posted against organizations we could place in District of Columbia, over the last 12 complete months.

Data: ransomware.live · Statistics generated Oct 25, 2026, 01:09 UTC, refreshed hourly

Allegation by a ransomware group, not a confirmed attackRansomware groups post these claims themselves; we track them, we do not verify them.

Claims, last 12 months
13
So far in October 2026
1Month in progress, not in the trend
Address on own website
13Confirmed location
State named in claim
0Inferred location
Latest claim
Oct 15, 2026

Claims per month in District of Columbia

Located District of Columbia claims in the last 12 complete months (UTC).

  1. October 2025: 1
  2. November 2025: 0
  3. December 2025: 2
  4. January 2026: 1
  5. February 2026: 0
  6. March 2026: 0
  7. April 2026: 3
  8. May 2026: 2
  9. June 2026: 0
  10. July 2026: 2
  11. August 2026: 2
  12. September 2026: 0

Top sectors

  1. Architecture2
  2. Attorney1
  3. Central administration and government1
  4. Construction1
  5. Education1
  6. Financial Services1
  7. Healthcare1
  8. Healthcare research1

Top cities

Only addresses confirmed on organizations' own websites.

  1. Washington13

Latest claims in District of Columbia

Allegation by a ransomware group, not a confirmed attackEach row is a claim posted on a ransomware leak site. Inclusion does not mean the organization was breached.

The 25 most recent claims placed in District of Columbia, newest first. Dates are when a tracked source first observed the claim (UTC).
ObservedOrganizationGroupSectorLocationEvidence
Oct 15, 2026The Excalibur GroupqilinNot reportedWashington, DC Own website2+ sources
Aug 28, 2026WhitehouseqilinCentral administration and governmentWashington, DC Own websiteSingle source
Aug 14, 2026Community Connectionsthe gentlemenHealthcareWashington, DC Own websiteSingle source
Jul 25, 2026Jubilee JobsqilinEducationWashington, DC Own website2+ sources
Jul 16, 2026District of Columbia Housing AuthorityinterlockLocal administrationsWashington, DC Own website2+ sources
May 29, 2026AcademyHealthbravoxThink tanksWashington, DC Own website2+ sources
May 25, 2026Capital TradeqilinFinancial ServicesWashington, DC Own websiteSingle source
Apr 6, 2026academyhealth.orgsafepayHealthcare researchWashington, DC Own website2+ sources
Apr 4, 2026Community ConnectionsINC RansomHuman ServicesWashington, DC Own websiteAuthority-confirmed
Apr 3, 2026Asmar Schor & McKennadragonforceAttorneyWashington, DC Own website2+ sources
Jan 11, 2026FOX ArchitectssinobiArchitectureWashington, DC Own website2+ sources
Dec 12, 2025David M. Schwarz ArchitectsminteyeArchitectureWashington, DC Own websiteSingle source
Dec 7, 2025David M. Schwarz ArchitectsqilinConstructionWashington, DC Own websiteSingle source
Oct 29, 2025OpenEyes Technologies Inc.radarTechnologiesWashington, DC Own websiteSingle source
Sep 23, 2025KIPP DCworldleaksEducationWashington, DC Own websiteSingle source
Sep 4, 2025volanno.comlynxTechnologyWashington, DC Own websiteSingle source
Sep 2, 2025GCC of America, inc.anubisConstructionWashington, DC Own websiteSingle source
Aug 14, 2025www.captrade.comqilinFinancial ServicesWashington, DC Own websiteSingle source
Jul 7, 2025jubileejobs.orgINC RansomNon-Governmental Organizations (NGOs)Washington, DC Own websiteSingle source
Jun 11, 2025Capitol TaxesglobalGovernment and administrationsWashington, DC Own websiteSingle source
Jun 3, 2025WC SmithinterlockReal Estate / Real Estate ManagementWashington, DC Own websiteSingle source
Jun 2, 2025Capital TradeplayLegal ServicesWashington, DC Own websiteSingle source
Apr 27, 2025Appalachian Regional CommissionmedusaGovernment and administrationsDC Named in claimSingle source
Oct 6, 2024NASA/AOSensestormousPublic SectorWashington, DC Own websiteSingle source
Aug 17, 2024www.gmchc.orgransomhubHealthcare servicesWashington, DC Own websiteSingle source

Other states

Located claims in the last 12 complete months.

How claims are placed in states

  • Own website (confirmed). A US street address with a ZIP code that belongs to the state, found on the organization's own home, contact or about page. Pages are fetched politely and robots.txt is respected.
  • Named in claim (inferred). The claim text itself names the state, for example "based in Austin, Texas". City names from claim text are never shown, because ransomware groups write that text.
  • Never guessed. We do not place claims from a company name, a phone area code, a paid registry or a map lookup. A claim we cannot place stays in the national count and on no state page.
  • Window. Trends cover the last 12 complete calendar months (UTC). The current month is shown separately because it is still in progress.

Claims come from public ransomware leak sites as collected by our sources. Read the methodology for how claims are collected, corroborated and corrected.