Dragons EyeRansomware tracker

US state report · ID

Ransomware claims in Idaho

Claims that ransomware groups posted against organizations we could place in Idaho, over the last 12 complete months.

Data: ransomware.live · Statistics generated Oct 25, 2026, 07:18 UTC, refreshed hourly

Allegation by a ransomware group, not a confirmed attackRansomware groups post these claims themselves; we track them, we do not verify them.

Claims, last 12 months
7
So far in October 2026
0Month in progress, not in the trend
Address on own website
5Confirmed location
State named in claim
2Inferred location
Latest claim
Sep 30, 2026

Claims per month in Idaho

Located Idaho claims in the last 12 complete months (UTC).

  1. October 2025: 0
  2. November 2025: 0
  3. December 2025: 0
  4. January 2026: 0
  5. February 2026: 1
  6. March 2026: 0
  7. April 2026: 1
  8. May 2026: 2
  9. June 2026: 1
  10. July 2026: 1
  11. August 2026: 0
  12. September 2026: 1

Top sectors

  1. Construction3
  2. Consulting1
  3. Healthcare services1
  4. Manufacturing1
  5. Technology1

Top cities

Only addresses confirmed on organizations' own websites.

  1. Alene1
  2. Boise1
  3. Meridian1
  4. Rupert1

Latest claims in Idaho

Allegation by a ransomware group, not a confirmed attackEach row is a claim posted on a ransomware leak site. Inclusion does not mean the organization was breached.

The 25 most recent claims placed in Idaho, newest first. Dates are when a tracked source first observed the claim (UTC).
ObservedOrganizationGroupSectorLocationEvidence
Sep 30, 2026Zelhamthe gentlemenConstructionID Named in claim2+ sources
Jul 28, 2026Buck Knivesthe gentlemenManufacturingID Named in claim2+ sources
Jun 30, 2026Western ConstructionplayConstructionBoise, ID Own website2+ sources
May 15, 2026Raise the BottomCMDOrganizationConsultingID Own websiteSingle source
May 2, 2026Minidoka Memorial HospitalblackwaterHealthcare servicesRupert, ID Own websiteAuthority-confirmed
Apr 13, 2026sentrydynamics.comlynxTechnologyAlene, ID Own website2+ sources
Feb 4, 2026CBH HomesplayConstructionMeridian, ID Own website2+ sources
Aug 17, 2025Rehabilitative Health SvcbeastHealthcare servicesID Named in claimSingle source
Aug 17, 2025atcmanufacturingwarlockManufacturingPost Falls, ID Own websiteSingle source
Jul 21, 2025Racine OlsonworldleaksLegal consultingPocatello, ID Own websiteSingle source
May 13, 2025Precision Tax ReliefakiraLegal consultingID Own websiteAuthority-confirmed
Feb 24, 2025amalgamatedsugar.comcactusAgriculture and agribusinessBoise, ID Own websiteSingle source
Feb 14, 2025Nelson & Townsend, CPA'sakiraFinancial ServicesIdaho Falls, ID Own websiteSingle source
Sep 30, 2024weisermemorialhospital.orgembargoHealthcare servicesWeiser, ID Own websiteSingle source
Aug 26, 2024PrecomplayBusiness ServicesMeridian, ID Own websiteSingle source
Aug 23, 2024idahopacific.comabyssAgriculture and Food ProductionRigby, ID Own websiteSingle source
Apr 19, 2024scottevest.comdispossessorBusiness ServicesID Named in claimSingle source
Apr 4, 2024mcalvain.comcactusConstructionBoise, ID Own websiteSingle source
Apr 3, 2024West Idaho OrthopedicsINC RansomHealthcare servicesMeridian, ID Own websiteSingle source
Mar 25, 2024kh.orgthreeamPublic HealthAlene, ID Own websiteSingle source
Feb 12, 2024Freedom MunitionsmeowServicesLewiston, ID Own websiteSingle source
Oct 16, 2023Boise Rescue Mission MinistriesalphvHealthcareID Own websiteSingle source
Sep 28, 2023Webb LandscapeplayServicesBellevue, ID Own websiteSingle source
Aug 4, 2023scottevest.comlockbit3ManufacturingID Named in claimSingle source
Jul 26, 2023lclattorneyscomalphvLegal ServicesID Own websiteSingle source

Other states

Located claims in the last 12 complete months.

How claims are placed in states

  • Own website (confirmed). A US street address with a ZIP code that belongs to the state, found on the organization's own home, contact or about page. Pages are fetched politely and robots.txt is respected.
  • Named in claim (inferred). The claim text itself names the state, for example "based in Austin, Texas". City names from claim text are never shown, because ransomware groups write that text.
  • Never guessed. We do not place claims from a company name, a phone area code, a paid registry or a map lookup. A claim we cannot place stays in the national count and on no state page.
  • Window. Trends cover the last 12 complete calendar months (UTC). The current month is shown separately because it is still in progress.

Claims come from public ransomware leak sites as collected by our sources. Read the methodology for how claims are collected, corroborated and corrected.