Dragons EyeRansomware tracker

US state report · IA

Ransomware claims in Iowa

Claims that ransomware groups posted against organizations we could place in Iowa, over the last 12 complete months.

Data: ransomware.live · Statistics generated Oct 25, 2026, 03:21 UTC, refreshed hourly

Allegation by a ransomware group, not a confirmed attackRansomware groups post these claims themselves; we track them, we do not verify them.

Claims, last 12 months
18
So far in October 2026
2Month in progress, not in the trend
Address on own website
18Confirmed location
State named in claim
0Inferred location
Latest claim
Oct 1, 2026

Claims per month in Iowa

Located Iowa claims in the last 12 complete months (UTC).

  1. October 2025: 2
  2. November 2025: 0
  3. December 2025: 4
  4. January 2026: 0
  5. February 2026: 3
  6. March 2026: 0
  7. April 2026: 2
  8. May 2026: 2
  9. June 2026: 1
  10. July 2026: 2
  11. August 2026: 1
  12. September 2026: 1

Top sectors

3 claims had no sector label and are not shown.

  1. Manufacturing3
  2. Healthcare2
  3. Automotive1
  4. Business Services1
  5. Church1
  6. Construction1
  7. Education1
  8. Finance1

Top cities

Only addresses confirmed on organizations' own websites.

  1. Cedar Rapids4
  2. Des Moines2
  3. Adel1
  4. Ames1
  5. Ankeny1
  6. Atlantic1
  7. Bettendorf1
  8. Dubuque1

Latest claims in Iowa

Allegation by a ransomware group, not a confirmed attackEach row is a claim posted on a ransomware leak site. Inclusion does not mean the organization was breached.

The 25 most recent claims placed in Iowa, newest first. Dates are when a tracked source first observed the claim (UTC).
ObservedOrganizationGroupSectorLocationEvidence
Oct 1, 2026Post Metal RecyclingINC RansomHeavy industriesRock Valley, IA Own website2+ sources
Oct 1, 2026Den Hartog IndustriesINC RansomManufacturingHospers, IA Own website2+ sources
Sep 18, 2026www.kendallhunt.comINC RansomEducationDubuque, IA Own website2+ sources
Aug 4, 2026Conceptual Designs, Inc.OrovaNot reportedBettendorf, IA Own website2+ sources
Jul 24, 2026Northwest Iowa Community CollegeqilinNot reportedSheldon, IA Own websiteSingle source
Jul 13, 2026TitanTV, Inc.qilinNot reportedCedar Rapids, IA Own website2+ sources
Jun 18, 2026www.wolfconstruction.netlynxConstructionWest Des Moines, IA Own website2+ sources
May 25, 2026businessrecord.comdragonforceBusiness ServicesDes Moines, IA Own website2+ sources
May 25, 2026clarindahealth.comlockbit3HealthcareIA Own websiteSingle source
Apr 29, 2026Iowa Spring Manufacturing & SalesINC RansomManufacturingAdel, IA Own website2+ sources
Apr 29, 2026Karl ChevroletransomhouseAutomotiveAnkeny, IA Own website2+ sources
Feb 27, 2026Nations Financial Group IncSilentRansomGroupFinanceCedar Rapids, IA Own website2+ sources
Feb 26, 2026Physicians Clinic of IowaanubisHealthcare servicesCedar Rapids, IA Own website2+ sources
Feb 19, 2026Saltech SystemssinobiTechnologiesAmes, IA Own website2+ sources
Dec 31, 2025Infinite Computing SystemsplayInformation Technologies ConsultingCedar Rapids, IA Own websiteSingle source
Dec 19, 2025pdcm.comlockbit5Financial ServicesWaterloo, IA Own websiteSingle source
Dec 19, 2025clarindahealth.comlockbit5HealthcareIA Own websiteSingle source
Dec 1, 2025Industrial SteamransomhouseManufacturingAtlantic, IA Own websiteSingle source
Oct 15, 2025Legacy ManufacturingplayManufacturingMarion, IA Own websiteSingle source
Oct 8, 2025St Catherine of SienasinobiChurchDes Moines, IA Own websiteSingle source
Sep 10, 2025waverlychildcare.orgsafepayPublic HealthWaverly, IA Own websiteSingle source
Sep 1, 2025Vanderpool ConstructionplayConstructionIndianola, IA Own websiteSingle source
Aug 30, 2025OB GYN AssociatesINC RansomHealthcare servicesCedar Rapids, IA Own websiteAuthority-confirmed
Aug 23, 2025Graphite Construction GroupqilinConstructionDes Moines, IA Own websiteSingle source
Aug 9, 2025CFI Tire ServiceplayAutomotiveDes Moines, IA Own websiteSingle source

Other states

Located claims in the last 12 complete months.

How claims are placed in states

  • Own website (confirmed). A US street address with a ZIP code that belongs to the state, found on the organization's own home, contact or about page. Pages are fetched politely and robots.txt is respected.
  • Named in claim (inferred). The claim text itself names the state, for example "based in Austin, Texas". City names from claim text are never shown, because ransomware groups write that text.
  • Never guessed. We do not place claims from a company name, a phone area code, a paid registry or a map lookup. A claim we cannot place stays in the national count and on no state page.
  • Window. Trends cover the last 12 complete calendar months (UTC). The current month is shown separately because it is still in progress.

Claims come from public ransomware leak sites as collected by our sources. Read the methodology for how claims are collected, corroborated and corrected.