Dragons EyeRansomware tracker

US state report · WY

Ransomware claims in Wyoming

Claims that ransomware groups posted against organizations we could place in Wyoming, over the last 12 complete months.

Data: ransomware.live · Statistics generated Oct 25, 2026, 07:18 UTC, refreshed hourly

Allegation by a ransomware group, not a confirmed attackRansomware groups post these claims themselves; we track them, we do not verify them.

Claims, last 12 months
11
So far in October 2026
0Month in progress, not in the trend
Address on own website
9Confirmed location
State named in claim
2Inferred location
Latest claim
Aug 10, 2026

Claims per month in Wyoming

Located Wyoming claims in the last 12 complete months (UTC).

  1. October 2025: 1
  2. November 2025: 1
  3. December 2025: 1
  4. January 2026: 1
  5. February 2026: 0
  6. March 2026: 2
  7. April 2026: 0
  8. May 2026: 1
  9. June 2026: 0
  10. July 2026: 3
  11. August 2026: 1
  12. September 2026: 0

Top sectors

  1. Attorney2
  2. Healthcare services2
  3. Construction1
  4. Financial Services1
  5. Healthcare1
  6. Manufacturing1
  7. Mining1
  8. Retail (distribution)1

Top cities

Only addresses confirmed on organizations' own websites.

  1. Casper4
  2. Cheyenne1
  3. Cody1
  4. Laramie1

Latest claims in Wyoming

Allegation by a ransomware group, not a confirmed attackEach row is a claim posted on a ransomware leak site. Inclusion does not mean the organization was breached.

The 19 most recent claims placed in Wyoming, newest first. Dates are when a tracked source first observed the claim (UTC).
ObservedOrganizationGroupSectorLocationEvidence
Aug 10, 2026Black Hills BentoniteWallstreetMiningWY Named in claim2+ sources
Jul 17, 2026Powder River Heating & Air ConditioningqilinRetail & E-CommerceWY Own website2+ sources
Jul 12, 2026Casper OrthopedicsanubisHealthcare servicesCasper, WY Own websiteSingle source
Jul 12, 2026Casper OrthopedicsanubisHealthcare servicesCasper, WY Own website2+ sources
May 25, 2026GW MechanicalplayConstructionWY Own website2+ sources
Mar 4, 2026Nicholas & TangemanakiraAttorneyLaramie, WY Own website2+ sources
Mar 2, 2026The Kuker GroupplayAttorneyCheyenne, WY Own website2+ sources
Jan 22, 2026Uinta BankdragonforceFinancial ServicesWY Named in claim2+ sources
Dec 9, 2025The Foot DoctorspacebearsHealthcareCasper, WY Own websiteSingle source
Nov 14, 2025The Foot Doctor'sspacebearsRetail (distribution)Casper, WY Own websiteSingle source
Oct 25, 2025Precision Machined ProductsakiraManufacturingCody, WY Own websiteSingle source
Sep 25, 2025WEST Inc.qilinServicesCheyenne, WY Own websiteSingle source
Sep 14, 2025Black Butte CoalINC RansomMiningWY Named in claimSingle source
Jul 15, 2025City of Green RiverqilinGovernment and administrationsGreen River, WY Own websiteSingle source
Mar 20, 2025Big Horn County School District #4medusaSchoolsSt. Basin, WY Own websiteSingle source
Feb 28, 2025sublettecountywy.govINC RansomPublic SectorPinedale, WY Own websiteSingle source
Oct 4, 2024GW MechanicalhuntersEngineering consultingWY Own websiteSingle source
Mar 25, 2024Teton OrthopaedicsdragonforceHealthcare servicesJackson, WY Own websiteSingle source
Feb 12, 2024Lower Valley Energy, IncalphvEnergyWY Own websiteSingle source

Other states

Located claims in the last 12 complete months.

How claims are placed in states

  • Own website (confirmed). A US street address with a ZIP code that belongs to the state, found on the organization's own home, contact or about page. Pages are fetched politely and robots.txt is respected.
  • Named in claim (inferred). The claim text itself names the state, for example "based in Austin, Texas". City names from claim text are never shown, because ransomware groups write that text.
  • Never guessed. We do not place claims from a company name, a phone area code, a paid registry or a map lookup. A claim we cannot place stays in the national count and on no state page.
  • Window. Trends cover the last 12 complete calendar months (UTC). The current month is shown separately because it is still in progress.

Claims come from public ransomware leak sites as collected by our sources. Read the methodology for how claims are collected, corroborated and corrected.