Dragons EyeRansomware tracker

US state report · WA

Ransomware claims in Washington

Claims that ransomware groups posted against organizations we could place in Washington, over the last 12 complete months.

Data: ransomware.live · Statistics generated Oct 25, 2026, 03:21 UTC, refreshed hourly

Allegation by a ransomware group, not a confirmed attackRansomware groups post these claims themselves; we track them, we do not verify them.

Claims, last 12 months
48
So far in October 2026
3Month in progress, not in the trend
Address on own website
41Confirmed location
State named in claim
7Inferred location
Latest claim
Oct 14, 2026

Claims per month in Washington

Located Washington claims in the last 12 complete months (UTC).

  1. October 2025: 6
  2. November 2025: 3
  3. December 2025: 4
  4. January 2026: 4
  5. February 2026: 2
  6. March 2026: 1
  7. April 2026: 3
  8. May 2026: 7
  9. June 2026: 3
  10. July 2026: 3
  11. August 2026: 7
  12. September 2026: 5

Top sectors

  1. Healthcare8
  2. Manufacturing6
  3. Construction3
  4. Financial Services3
  5. Agriculture and agribusiness2
  6. Healthcare services2
  7. Logistics2
  8. Professional Services2

Top cities

Only addresses confirmed on organizations' own websites.

  1. Seattle7
  2. Renton4
  3. Woodinville3
  4. Aberdeen2
  5. Everett2
  6. Tacoma2
  7. Union Gap2
  8. Bonney Lake1

Latest claims in Washington

Allegation by a ransomware group, not a confirmed attackEach row is a claim posted on a ransomware leak site. Inclusion does not mean the organization was breached.

The 25 most recent claims placed in Washington, newest first. Dates are when a tracked source first observed the claim (UTC).
ObservedOrganizationGroupSectorLocationEvidence
Oct 14, 2026Interior Technologiesn0nTechnologyLynnwood, WA Own website2+ sources
Oct 7, 2026harborpacific.comINC RansomConstructionRedmond, WA Own website2+ sources
Oct 1, 2026WesmarakiraManufacturingArlington, WA Own website2+ sources
Sep 29, 2026Custom Rx Shoppethe gentlemenHealthcareFerndale, WA Own website2+ sources
Sep 23, 2026COLUMBIABANK.COM(UMPQUABANK.COM)clopBanking institutionsWA Named in claim2+ sources
Sep 8, 2026recoverycafe.orgsafepayHealthcareSeattle, WA Own website2+ sources
Sep 2, 2026Proliance SurgeonspayoutskingHealthcareSeattle, WA Own website2+ sources
Sep 1, 2026BYK ConstructionakiraManufacturingMount Vernon, WA Own website2+ sources
Aug 29, 2026Northwest Trophythe gentlemenRetail & E-CommerceWoodinville, WA Own website2+ sources
Aug 27, 2026Zion Constructionthe gentlemenConstructionWA Named in claim2+ sources
Aug 22, 2026Mogren, Glessner & Ahrens, P.S.pearBusiness ServicesRenton, WA Own website2+ sources
Aug 21, 2026Eyecare Center of Snohomishthe gentlemenHealthcareSnohomish, WA Own website2+ sources
Aug 20, 2026Cascade CoffeeakiraFood and drinks businessesEverett, WA Own website2+ sources
Aug 9, 2026Zion Constructionthe gentlemenManufacturingWA Named in claim2+ sources
Aug 1, 2026Cambridge ManagementplayProfessional ServicesTacoma, WA Own website2+ sources
Jul 23, 2026US BioTek Laboratorieskillsec3HealthcareShoreline, WA Own websiteSingle source
Jul 18, 2026AK PreparednessqilinProfessional ServicesSeattle, WA Own website2+ sources
Jul 4, 2026Edgewood Police DepartmentWallstreetLocal administrationsEdgewood, WA Own websiteSingle source
Jun 22, 2026Rowley propertiesthe gentlemenReal EstateIssaquah, WA Own website2+ sources
Jun 16, 2026Allan Brothers FruitauroraAgriculture and agribusinessWA Named in claim2+ sources
Jun 12, 2026mgrlaw.comthreeamAttorneyRenton, WA Own website2+ sources
May 31, 2026Lake Washington School DistrictCMDOrganizationEducationWA Own website2+ sources
May 27, 2026Northwest WoodworksakiraManufacturingWoodinville, WA Own website2+ sources
May 25, 2026PILLER AIMMCOINC RansomManufacturingWashougal, WA Own website2+ sources
May 25, 2026brumfieldconstructioninc.comlockbit3ConstructionAberdeen, WA Own websiteSingle source

Other states

Located claims in the last 12 complete months.

How claims are placed in states

  • Own website (confirmed). A US street address with a ZIP code that belongs to the state, found on the organization's own home, contact or about page. Pages are fetched politely and robots.txt is respected.
  • Named in claim (inferred). The claim text itself names the state, for example "based in Austin, Texas". City names from claim text are never shown, because ransomware groups write that text.
  • Never guessed. We do not place claims from a company name, a phone area code, a paid registry or a map lookup. A claim we cannot place stays in the national count and on no state page.
  • Window. Trends cover the last 12 complete calendar months (UTC). The current month is shown separately because it is still in progress.

Claims come from public ransomware leak sites as collected by our sources. Read the methodology for how claims are collected, corroborated and corrected.