Dragons EyeRansomware tracker

US state report · ND

Ransomware claims in North Dakota

Claims that ransomware groups posted against organizations we could place in North Dakota, over the last 12 complete months.

Data: ransomware.live · Statistics generated Oct 25, 2026, 07:18 UTC, refreshed hourly

Allegation by a ransomware group, not a confirmed attackRansomware groups post these claims themselves; we track them, we do not verify them.

Claims, last 12 months
5
So far in October 2026
0Month in progress, not in the trend
Address on own website
5Confirmed location
State named in claim
0Inferred location
Latest claim
May 15, 2026

Claims per month in North Dakota

Located North Dakota claims in the last 12 complete months (UTC).

  1. October 2025: 1
  2. November 2025: 0
  3. December 2025: 3
  4. January 2026: 0
  5. February 2026: 0
  6. March 2026: 0
  7. April 2026: 0
  8. May 2026: 1
  9. June 2026: 0
  10. July 2026: 0
  11. August 2026: 0
  12. September 2026: 0

Top sectors

  1. Education2
  2. Agriculture and agribusiness1
  3. Business Services1
  4. Heavy industries1

Top cities

Only addresses confirmed on organizations' own websites.

  1. Fargo2
  2. Grand Forks1
  3. Minot1
  4. New Town1

Latest claims in North Dakota

Allegation by a ransomware group, not a confirmed attackEach row is a claim posted on a ransomware leak site. Inclusion does not mean the organization was breached.

The 15 most recent claims placed in North Dakota, newest first. Dates are when a tracked source first observed the claim (UTC).
ObservedOrganizationGroupSectorLocationEvidence
May 15, 2026United Quality Cooperative / www.uqcoop.comINC RansomAgriculture and agribusinessNew Town, ND Own website2+ sources
Dec 9, 2025CPSsinobiHeavy industriesGrand Forks, ND Own websiteSingle source
Dec 9, 2025Rodenburg Law FirmakiraBusiness ServicesFargo, ND Own websiteAuthority-confirmed
Dec 5, 2025Fargo Park DistrictinterlockEducationFargo, ND Own websiteSingle source
Oct 8, 2025Dakota Boys and Girls RanchsinobiEducationMinot, ND Own websiteSingle source
Aug 11, 2025TRS IndustriesakiraManufacturingFargo, ND Own websiteSingle source
Aug 6, 2025Heart of America Medical Centr (HAMC)embargoHealthcare servicesND Own websiteSingle source
Nov 29, 2024McFarlane, Inc.akiraConstructionGrand Forks, ND Own websiteSingle source
Apr 13, 2024Williams County Abstract CompanymedusaFinancialWilliston, ND Own websiteSingle source
Mar 30, 2024Williams County Abstract CompanymedusaServicesWilliston, ND Own websiteSingle source
Jan 31, 2024Basin Trucking and Oilfield Services LLC8baseGasWilliston, ND Own websiteSingle source
Sep 26, 2023Central TrenchinglosttrustTelecommunicationsMinot, ND Own websiteSingle source
Sep 6, 2023I Keating Furniture WorldINC RansomServicesND Named in claimSingle source
Jul 17, 2023Southwest Healthcare ServicesdonutleaksHealthcare servicesBowman, ND Own websiteSingle source
Apr 25, 2023Dacotah PaperblackbyteDistributionFargo, ND Own websiteSingle source

Other states

Located claims in the last 12 complete months.

How claims are placed in states

  • Own website (confirmed). A US street address with a ZIP code that belongs to the state, found on the organization's own home, contact or about page. Pages are fetched politely and robots.txt is respected.
  • Named in claim (inferred). The claim text itself names the state, for example "based in Austin, Texas". City names from claim text are never shown, because ransomware groups write that text.
  • Never guessed. We do not place claims from a company name, a phone area code, a paid registry or a map lookup. A claim we cannot place stays in the national count and on no state page.
  • Window. Trends cover the last 12 complete calendar months (UTC). The current month is shown separately because it is still in progress.

Claims come from public ransomware leak sites as collected by our sources. Read the methodology for how claims are collected, corroborated and corrected.