Dragons EyeRansomware tracker

US state report · WV

Ransomware claims in West Virginia

Claims that ransomware groups posted against organizations we could place in West Virginia, over the last 12 complete months.

Data: ransomware.live · Statistics generated Oct 25, 2026, 06:11 UTC, refreshed hourly

Allegation by a ransomware group, not a confirmed attackRansomware groups post these claims themselves; we track them, we do not verify them.

Claims, last 12 months
9
So far in October 2026
0Month in progress, not in the trend
Address on own website
9Confirmed location
State named in claim
0Inferred location
Latest claim
Sep 29, 2026

Claims per month in West Virginia

Located West Virginia claims in the last 12 complete months (UTC).

  1. October 2025: 0
  2. November 2025: 0
  3. December 2025: 0
  4. January 2026: 0
  5. February 2026: 1
  6. March 2026: 3
  7. April 2026: 0
  8. May 2026: 1
  9. June 2026: 0
  10. July 2026: 1
  11. August 2026: 1
  12. September 2026: 2

Top sectors

1 claims had no sector label and are not shown.

  1. Local administrations2
  2. Attorney1
  3. Finance1
  4. Health1
  5. Healthcare1
  6. Healthcare services1
  7. Legal consulting1

Top cities

Only addresses confirmed on organizations' own websites.

  1. Huntington2
  2. Charleston1
  3. Clarksburg1
  4. Lewisburg1

Latest claims in West Virginia

Allegation by a ransomware group, not a confirmed attackEach row is a claim posted on a ransomware leak site. Inclusion does not mean the organization was breached.

The 25 most recent claims placed in West Virginia, newest first. Dates are when a tracked source first observed the claim (UTC).
ObservedOrganizationGroupSectorLocationEvidence
Sep 29, 2026Poca Valley BankStormFinanceWV Own website2+ sources
Sep 23, 2026Lemon LawINC RansomLegal consultingLewisburg, WV Own website2+ sources
Aug 6, 2026OVP HealthStormHealthcareHuntington, WV Own website2+ sources
Jul 23, 2026cabincreekhealth.comINC RansomHealthWV Own website2+ sources
May 18, 2026harrisoncountywv.comsafepayLocal administrationsClarksburg, WV Own website2+ sources
Mar 13, 2026FMRS Health SystemsqilinHealthcare servicesWV Own websiteAuthority-confirmed
Mar 7, 2026City of HuntingtontermiteLocal administrationsHuntington, WV Own website2+ sources
Mar 3, 2026Katz Kantor Stonestreet & BucknerkairosAttorneyWV Own website2+ sources
Feb 11, 2026WVPCAbravoxNot reportedCharleston, WV Own website2+ sources
Jul 31, 2025wvpca.orgINC RansomHealthcare servicesCharleston, WV Own websiteSingle source
Jul 1, 2025dossenterprises.comsafepayConstructionJane Lew, WV Own websiteSingle source
Apr 23, 2025Two Kings Casino ResortanubisGamblingWheeling, WV Own websiteSingle source
Feb 22, 2025teamsters175.orgINC RansomTransportation/LogisticsSouth Charleston, WV Own websiteSingle source
Nov 18, 2024kciaviation.comblacksuitAvionicsBridgeport, WV Own websiteSingle source
Nov 18, 2024allconstructiongroupwv.comransomhubConstructionPetersburg, WV Own websiteSingle source
Nov 7, 2024New LawhuntersLegal ServicesBeckley, WV Own websiteSingle source
Apr 19, 2024bankwithunited.comdispossessorFinancialRipley, WV Own websiteSingle source
Apr 19, 2024phillipsglobal.usdispossessorBusiness ServicesBeckley, WV Own websiteSingle source
Apr 19, 2024greenbriersportingclub.comdispossessorHospitality and TourismWhite Sulphur Springs, WV Own websiteSingle source
Apr 9, 2024Brewer & Company of WVblacksuitBusiness ServicesCharleston, WV Own websiteSingle source
Jan 23, 2024fairmontfcu.comblackbastaNon-Governmental Organizations (NGOs)WV Named in claimSingle source
Dec 12, 2023greenbriersportingclub.comlockbit3HospitalityWhite Sulphur Springs, WV Own websiteSingle source
Dec 11, 2023phillipsglobal.uslockbit3ManufacturingBeckley, WV Own websiteSingle source
Nov 27, 2023New River Community & Technical CollegeblacksuitEducationBeaver, WV Own websiteSingle source
Sep 26, 2023Johnson Boiler WorkslosttrustServicesBenwood, WV Own websiteSingle source

Other states

Located claims in the last 12 complete months.

How claims are placed in states

  • Own website (confirmed). A US street address with a ZIP code that belongs to the state, found on the organization's own home, contact or about page. Pages are fetched politely and robots.txt is respected.
  • Named in claim (inferred). The claim text itself names the state, for example "based in Austin, Texas". City names from claim text are never shown, because ransomware groups write that text.
  • Never guessed. We do not place claims from a company name, a phone area code, a paid registry or a map lookup. A claim we cannot place stays in the national count and on no state page.
  • Window. Trends cover the last 12 complete calendar months (UTC). The current month is shown separately because it is still in progress.

Claims come from public ransomware leak sites as collected by our sources. Read the methodology for how claims are collected, corroborated and corrected.