Dragons EyeRansomware tracker

US state report · KY

Ransomware claims in Kentucky

Claims that ransomware groups posted against organizations we could place in Kentucky, over the last 12 complete months.

Data: ransomware.live · Statistics generated Oct 25, 2026, 03:21 UTC, refreshed hourly

Allegation by a ransomware group, not a confirmed attackRansomware groups post these claims themselves; we track them, we do not verify them.

Claims, last 12 months
32
So far in October 2026
2Month in progress, not in the trend
Address on own website
30Confirmed location
State named in claim
2Inferred location
Latest claim
Oct 14, 2026

Claims per month in Kentucky

Located Kentucky claims in the last 12 complete months (UTC).

  1. October 2025: 7
  2. November 2025: 3
  3. December 2025: 0
  4. January 2026: 4
  5. February 2026: 0
  6. March 2026: 3
  7. April 2026: 0
  8. May 2026: 0
  9. June 2026: 2
  10. July 2026: 2
  11. August 2026: 8
  12. September 2026: 3

Top sectors

  1. Manufacturing9
  2. Technology3
  3. Healthcare services2
  4. Agriculture and Food Production1
  5. Air transport1
  6. Attorney1
  7. Banking institutions1
  8. Construction1

Top cities

Only addresses confirmed on organizations' own websites.

  1. Louisville9
  2. Bowling Green3
  3. Hopkinsville2
  4. Independence2
  5. Sturgis2
  6. Florence1
  7. Georgetown1
  8. Goshen1

Latest claims in Kentucky

Allegation by a ransomware group, not a confirmed attackEach row is a claim posted on a ransomware leak site. Inclusion does not mean the organization was breached.

The 25 most recent claims placed in Kentucky, newest first. Dates are when a tracked source first observed the claim (UTC).
ObservedOrganizationGroupSectorLocationEvidence
Oct 14, 2026E-Z Pack TrucksWallstreetAutomotiveCynthiana, KY Own website2+ sources
Oct 5, 2026Communicare Inc.(US)daixinHealthcareElizabethtown, KY Own websiteSingle source
Sep 4, 2026pscindustries.comlockbit5ManufacturingLouisville, KY Own website2+ sources
Sep 3, 2026Star Aviation, IncStormAir transportGoshen, KY Own website2+ sources
Sep 2, 2026Grayson Rural Electric CooperativeqilinEnergy & UtilitiesGrayson, KY Own website2+ sources
Aug 31, 2026KRC Machine Tool SolutionsplayManufacturingIndependence, KY Own website2+ sources
Aug 23, 2026Ruggles Sign CompanyStormManufacturingVersailles, KY Own website2+ sources
Aug 23, 2026Schardein MechanicalStormConstructionLouisville, KY Own website2+ sources
Aug 23, 2026The Cecilian BankStormBanking institutionsKY Named in claim2+ sources
Aug 14, 2026Rood & Riddle Equine HospitalStormHealthcare servicesKY Named in claim2+ sources
Aug 10, 2026T.RAD North AmericaWallstreetTechnologyHopkinsville, KY Own website2+ sources
Aug 10, 2026T.RAD North AmericaWallstreetManufacturingHopkinsville, KY Own website2+ sources
Aug 8, 2026Louisville Bar AssociationINC RansomNon-Governmental Organizations (NGOs)Louisville, KY Own website2+ sources
Jul 26, 2026Building Envelope SystemsgenesisManufacturingBowling Green, KY Own website2+ sources
Jul 26, 2026Middendorf Animal Hospital & Laser CentreGlobal Secret GroupHealthcare Services,Veterinary ServicesFlorence, KY Own website2+ sources
Jun 30, 2026owensborograin.comSettraAgriculture and Food ProductionOwensboro, KY Own website2+ sources
Jun 19, 2026themintgaming.comBrainCipherGamblingKY Own website2+ sources
Mar 31, 2026Catalyst Learning CompanygenesisTrainingLouisville, KY Own website2+ sources
Mar 11, 2026Kentucky InjuryINC RansomAttorneyLouisville, KY Own website2+ sources
Mar 4, 2026saturnmachine.netINC RansomManufacturingSturgis, KY Own website2+ sources
Jan 29, 2026[Weapons License] Warren County Sheriff’s OfficeransomhouseGovernment and administrationsBowling Green, KY Own website2+ sources
Jan 23, 2026Warren County Sheriff’s OfficeransomhouseGovernment & DefenseBowling Green, KY Own website2+ sources
Jan 18, 2026Mid-park InkgenesisManufacturingKY Own website2+ sources
Jan 14, 2026Lunsford CapitalqilinFinancial organizationsLouisville, KY Own website2+ sources
Nov 22, 2025MmlkqilinLogisticsKY Own websiteSingle source

Other states

Located claims in the last 12 complete months.

How claims are placed in states

  • Own website (confirmed). A US street address with a ZIP code that belongs to the state, found on the organization's own home, contact or about page. Pages are fetched politely and robots.txt is respected.
  • Named in claim (inferred). The claim text itself names the state, for example "based in Austin, Texas". City names from claim text are never shown, because ransomware groups write that text.
  • Never guessed. We do not place claims from a company name, a phone area code, a paid registry or a map lookup. A claim we cannot place stays in the national count and on no state page.
  • Window. Trends cover the last 12 complete calendar months (UTC). The current month is shown separately because it is still in progress.

Claims come from public ransomware leak sites as collected by our sources. Read the methodology for how claims are collected, corroborated and corrected.