Dragons EyeRansomware tracker

US state report · MA

Ransomware claims in Massachusetts

Claims that ransomware groups posted against organizations we could place in Massachusetts, over the last 12 complete months.

Data: ransomware.live · Statistics generated Oct 25, 2026, 03:21 UTC, refreshed hourly

Allegation by a ransomware group, not a confirmed attackRansomware groups post these claims themselves; we track them, we do not verify them.

Claims, last 12 months
102
So far in October 2026
7Month in progress, not in the trend
Address on own website
91Confirmed location
State named in claim
11Inferred location
Latest claim
Oct 16, 2026

Claims per month in Massachusetts

Located Massachusetts claims in the last 12 complete months (UTC).

  1. October 2025: 7
  2. November 2025: 7
  3. December 2025: 11
  4. January 2026: 11
  5. February 2026: 9
  6. March 2026: 9
  7. April 2026: 11
  8. May 2026: 8
  9. June 2026: 6
  10. July 2026: 6
  11. August 2026: 7
  12. September 2026: 10

Top sectors

  1. Manufacturing12
  2. Construction9
  3. Education6
  4. Professional Services5
  5. Healthcare4
  6. Healthcare services4
  7. Technology4
  8. Health3

Top cities

Only addresses confirmed on organizations' own websites.

  1. Boston11
  2. Cambridge4
  3. Sutton4
  4. Andover2
  5. Billerica2
  6. Chicopee2
  7. Lawrence2
  8. Marlborough2

Latest claims in Massachusetts

Allegation by a ransomware group, not a confirmed attackEach row is a claim posted on a ransomware leak site. Inclusion does not mean the organization was breached.

The 25 most recent claims placed in Massachusetts, newest first. Dates are when a tracked source first observed the claim (UTC).
ObservedOrganizationGroupSectorLocationEvidence
Oct 16, 2026North Bridge Venture Partnersthe gentlemenFinancial ServicesNeedham, MA Own website2+ sources
Oct 15, 2026Holistic Health Group, Inc. (d/b/a Suncrafted)spacebearsHealthcareMiddleborough, MA Own website2+ sources
Oct 12, 2026brookslawfirm.comINC RansomLegal consultingMedford, MA Own website2+ sources
Oct 11, 2026Reed & Giordano PArhysidaProfessional ServicesBoston, MA Own website2+ sources
Oct 9, 2026Saber1deadlockTechnologyLowell, MA Own website2+ sources
Oct 2, 2026Gerrity Stonethe gentlemenManufacturingWilmington, MA Own website2+ sources
Oct 1, 2026VPNEgenesisTransportHingham, MA Own website2+ sources
Sep 30, 2026Awarethe gentlemenTechnologyBurlington, MA Own website2+ sources
Sep 29, 2026iccsi.comM3rxProfessional ServicesWeymouth, MA Own website2+ sources
Sep 28, 2026Sutton Public Schoolsglobal cybernetic collectiveEducationSutton, MA Own website2+ sources
Sep 28, 2026TOWN OF SUTTON | MASSACHUSETTSglobal cybernetic collectiveGovernment & DefenseSutton, MA Own website2+ sources
Sep 25, 2026GE Vernova Inc.metaencryptorEnergyMA Named in claim2+ sources
Sep 15, 2026Pilot PrecisionakiraManufacturingSouth Deerfield, MA Own website2+ sources
Sep 12, 2026Sutton Public SchoolsglobalSchoolsSutton, MA Own website2+ sources
Sep 12, 2026TOWN OF SUTTON | MASSACHUSETTSglobalLocal administrationsSutton, MA Own website2+ sources
Sep 10, 2026Charles River InsuranceakiraFinanceMA Own websiteSingle source
Sep 7, 2026Hologic, Inc.metaencryptorHealthMarlborough, MA Own website2+ sources
Aug 30, 2026AndoverWallstreetCentral administration and governmentAndover, MA Own website2+ sources
Aug 28, 2026BEPetersonakiraHeavy industriesAvon, MA Own website2+ sources
Aug 25, 2026mswalker.comchaosDistributionNorwood, MA Own website2+ sources
Aug 21, 2026Gould Sherwood Consultingthe gentlemenProfessional ServicesLexington, MA Own website2+ sources
Aug 12, 2026Ge.ComclopTechnologyBoston, MA Own website2+ sources
Aug 6, 2026rosekennedygreenway.orgL GroupPublic SectorBoston, MA Own website2+ sources
Aug 5, 2026FactoryFivemetaencryptorManufacturingWareham, MA Own website2+ sources
Jul 31, 2026CFSthe gentlemenFinancial ServicesNorton, MA Own website2+ sources

Other states

Located claims in the last 12 complete months.

How claims are placed in states

  • Own website (confirmed). A US street address with a ZIP code that belongs to the state, found on the organization's own home, contact or about page. Pages are fetched politely and robots.txt is respected.
  • Named in claim (inferred). The claim text itself names the state, for example "based in Austin, Texas". City names from claim text are never shown, because ransomware groups write that text.
  • Never guessed. We do not place claims from a company name, a phone area code, a paid registry or a map lookup. A claim we cannot place stays in the national count and on no state page.
  • Window. Trends cover the last 12 complete calendar months (UTC). The current month is shown separately because it is still in progress.

Claims come from public ransomware leak sites as collected by our sources. Read the methodology for how claims are collected, corroborated and corrected.