Dragons EyeRansomware tracker

US state report · WI

Ransomware claims in Wisconsin

Claims that ransomware groups posted against organizations we could place in Wisconsin, over the last 12 complete months.

Data: ransomware.live · Statistics generated Oct 25, 2026, 07:18 UTC, refreshed hourly

Allegation by a ransomware group, not a confirmed attackRansomware groups post these claims themselves; we track them, we do not verify them.

Claims, last 12 months
49
So far in October 2026
3Month in progress, not in the trend
Address on own website
43Confirmed location
State named in claim
6Inferred location
Latest claim
Oct 9, 2026

Claims per month in Wisconsin

Located Wisconsin claims in the last 12 complete months (UTC).

  1. October 2025: 4
  2. November 2025: 3
  3. December 2025: 5
  4. January 2026: 8
  5. February 2026: 2
  6. March 2026: 3
  7. April 2026: 1
  8. May 2026: 8
  9. June 2026: 4
  10. July 2026: 6
  11. August 2026: 3
  12. September 2026: 2

Top sectors

1 claims had no sector label and are not shown.

  1. Manufacturing16
  2. Construction3
  3. Agriculture and agribusiness2
  4. Business Services2
  5. Fintech2
  6. Logistics2
  7. Architecture1
  8. Attorney1

Top cities

Only addresses confirmed on organizations' own websites.

  1. Milwaukee13
  2. La Crosse2
  3. Sussex2
  4. Waukesha2
  5. West Bend2
  6. Appleton1
  7. B La Crosse1
  8. Burlington1

Latest claims in Wisconsin

Allegation by a ransomware group, not a confirmed attackEach row is a claim posted on a ransomware leak site. Inclusion does not mean the organization was breached.

The 25 most recent claims placed in Wisconsin, newest first. Dates are when a tracked source first observed the claim (UTC).
ObservedOrganizationGroupSectorLocationEvidence
Oct 9, 2026Fondy Food PantrynightspireCharity associationsFond du Lac, WI Own website2+ sources
Oct 8, 2026Morton LTC PharmacyRunSomeWaresHealthcare servicesNeenah, WI Own website2+ sources
Oct 7, 2026Merrill Iron & SteelpayoutskingConstructionSchofield, WI Own website2+ sources
Sep 28, 2026Agra IndustriesStormManufacturingMerrill, WI Own website2+ sources
Sep 10, 2026HARLEY-DAVIDSON.COMclopManufacturingMilwaukee, WI Own website2+ sources
Aug 30, 2026esopartnerscpaZaWooBusiness ServicesAppleton, WI Own websiteSingle source
Aug 12, 2026Fiserv.ComclopFinancial ServicesMilwaukee, WI Own website2+ sources
Aug 5, 2026Mile Bluff Medical CenterDark ProjectHealthcare servicesWI Named in claim2+ sources
Jul 23, 2026Eagle Crest CommunitiesanubisHospitalityLa Crosse, WI Own website2+ sources
Jul 15, 2026Abbott owned Exact Sciences CorporationshinyhuntersHealthMadison, WI Own website2+ sources
Jul 12, 2026Community AdvocatesanubisNon-Governmental Organizations (NGOs)Milwaukee, WI Own website2+ sources
Jul 10, 2026bancrofteng.comlockbit5ManufacturingWaukesha, WI Own website2+ sources
Jul 8, 2026Tostrud & Temp, S.C.pearAttorneyB La Crosse, WI Own website2+ sources
Jul 1, 2026eaglecrestlife.orgsafepayHuman ServicesLa Crosse, WI Own website2+ sources
Jun 20, 2026bancrofteng.comlockbit5Professional ServicesWaukesha, WI Own websiteSingle source
Jun 15, 2026Cole Manufacturingthe gentlemenManufacturingWest Bend, WI Own website2+ sources
Jun 9, 2026hollandbulbfarms.comlockbit5Agriculture and agribusinessMilwaukee, WI Own website2+ sources
Jun 5, 2026Kriete Truck CenterssecurotropTransportation/LogisticsWI Own website2+ sources
May 30, 2026A RoettgersgenesisManufacturingMilwaukee, WI Own website2+ sources
May 25, 2026schmitzmix.comqilinManufacturingMilwaukee, WI Own websiteSingle source
May 25, 2026HERKER INDUSTRIESqilinManufacturingMenomonee Falls, WI Own websiteSingle source
May 15, 2026ZywavecoinbasecartelFintechMilwaukee, WI Own websiteSingle source
May 14, 2026Fab-MastersqilinManufacturingJanesville, WI Own website2+ sources
May 11, 2026Integrated Process Engineers & Constructors.genesisConstructionFort Atkinson, WI Own website2+ sources
May 8, 2026TDSthe gentlemenTelecommunicationsWI Named in claim2+ sources

Other states

Located claims in the last 12 complete months.

How claims are placed in states

  • Own website (confirmed). A US street address with a ZIP code that belongs to the state, found on the organization's own home, contact or about page. Pages are fetched politely and robots.txt is respected.
  • Named in claim (inferred). The claim text itself names the state, for example "based in Austin, Texas". City names from claim text are never shown, because ransomware groups write that text.
  • Never guessed. We do not place claims from a company name, a phone area code, a paid registry or a map lookup. A claim we cannot place stays in the national count and on no state page.
  • Window. Trends cover the last 12 complete calendar months (UTC). The current month is shown separately because it is still in progress.

Claims come from public ransomware leak sites as collected by our sources. Read the methodology for how claims are collected, corroborated and corrected.