Dragons EyeRansomware tracker

US state report · UT

Ransomware claims in Utah

Claims that ransomware groups posted against organizations we could place in Utah, over the last 12 complete months.

Data: ransomware.live · Statistics generated Oct 25, 2026, 07:18 UTC, refreshed hourly

Allegation by a ransomware group, not a confirmed attackRansomware groups post these claims themselves; we track them, we do not verify them.

Claims, last 12 months
39
So far in October 2026
1Month in progress, not in the trend
Address on own website
36Confirmed location
State named in claim
3Inferred location
Latest claim
Oct 13, 2026

Claims per month in Utah

Located Utah claims in the last 12 complete months (UTC).

  1. October 2025: 6
  2. November 2025: 3
  3. December 2025: 6
  4. January 2026: 4
  5. February 2026: 3
  6. March 2026: 2
  7. April 2026: 1
  8. May 2026: 4
  9. June 2026: 2
  10. July 2026: 2
  11. August 2026: 4
  12. September 2026: 2

Top sectors

  1. Healthcare services5
  2. Business Services3
  3. Architecture2
  4. Healthcare2
  5. Manufacturing2
  6. Retail (distribution)2
  7. Services2
  8. Technology2

Top cities

Only addresses confirmed on organizations' own websites.

  1. Salt Lake City7
  2. Draper5
  3. American Fork2
  4. Midvale2
  5. Murray2
  6. Woods Cross2
  7. Farmington1
  8. Logan1

Latest claims in Utah

Allegation by a ransomware group, not a confirmed attackEach row is a claim posted on a ransomware leak site. Inclusion does not mean the organization was breached.

The 25 most recent claims placed in Utah, newest first. Dates are when a tracked source first observed the claim (UTC).
ObservedOrganizationGroupSectorLocationEvidence
Oct 13, 2026The Buckner Company, Inc.auroraInsurance servicesUT Named in claim2+ sources
Sep 29, 2026Tekko Enterprises, IncinterlockCritical IndustriesTooele, UT Own website2+ sources
Sep 6, 2026eAssist Dental SolutionsdirewolfBusiness ServicesAmerican Fork, UT Own website2+ sources
Aug 20, 2026acimaIah647Financial ServicesDraper, UT Own website2+ sources
Aug 20, 2026acimaIah647FintechDraper, UT Own website2+ sources
Aug 11, 2026firstdigital.comSettraTechnologyDraper, UT Own website2+ sources
Aug 10, 2026i4 SolutionsakiraInformation Technologies ConsultingWoods Cross, UT Own websiteSingle source
Jul 4, 2026Gold Standard AutomotiveWallstreetAutomotiveDraper, UT Own website2+ sources
Jul 1, 2026CUI Agencythe gentlemenMarketingMidvale, UT Own website2+ sources
Jun 15, 2026CUI Agencythe gentlemenProfessional ServicesMidvale, UT Own website2+ sources
Jun 12, 2026Sierra West JewelersnightspireRetail (distribution)UT Own website2+ sources
May 28, 2026American Battery FactoryworldleaksTechnologyAmerican Fork, UT Own website2+ sources
May 18, 2026Modern Displaythe gentlemenRetail (distribution)Murray, UT Own website2+ sources
May 3, 2026Instructure Holdings, Inc. (Canva LMS, instructure.com)shinyhuntersEducationSalt Lake City, UT Own website2+ sources
May 2, 2026Standard-ExaminerqilinGovernment & DefenseOgden, UT Own website2+ sources
Apr 15, 2026Curtis Design GroupdragonforceArchitectureSpanish Fork, UT Own website2+ sources
Mar 19, 2026Onyx GraphicscoinbasecartelHigh-techSalt Lake City, UT Own website2+ sources
Feb 26, 2026Ripple NeuroinsomniaHealthcare researchMillcreek, UT Own website2+ sources
Feb 23, 2026Rocky Mountain CareqilinHealthcareWoods Cross, UT Own websiteAuthority-confirmed
Feb 10, 2026Grandview Family MedicinemedusaHealthcare servicesProvo, UT Own websiteAuthority-confirmed
Jan 30, 2026Rocky Mountain Associated PhysicianspearHealthcare servicesSalt Lake City, UT Own website2+ sources
Jan 27, 2026OEC Medical Systems, IncnightspireHealthcare servicesOrem, UT Own website2+ sources
Jan 19, 2026Avalon HillssinobiHealthcare servicesLogan, UT Own website2+ sources
Jan 18, 2026QFloorsgenesisTechnologiesSouth Jordan, UT Own website2+ sources
Dec 24, 2025Tri-State Metal Roofing SupplydragonforceManufacturingUT Own websiteSingle source

Other states

Located claims in the last 12 complete months.

How claims are placed in states

  • Own website (confirmed). A US street address with a ZIP code that belongs to the state, found on the organization's own home, contact or about page. Pages are fetched politely and robots.txt is respected.
  • Named in claim (inferred). The claim text itself names the state, for example "based in Austin, Texas". City names from claim text are never shown, because ransomware groups write that text.
  • Never guessed. We do not place claims from a company name, a phone area code, a paid registry or a map lookup. A claim we cannot place stays in the national count and on no state page.
  • Window. Trends cover the last 12 complete calendar months (UTC). The current month is shown separately because it is still in progress.

Claims come from public ransomware leak sites as collected by our sources. Read the methodology for how claims are collected, corroborated and corrected.