Newsletter

Most breach coverage is a rewrite of a forum post. Ours starts with the file. Every month we take the datasets being sold and given away on leak forums, pull them apart, and report what the evidence actually supports.

The Ransomnews Monthly is where that work lands in one place: what leaked, what held up under verification, and what turned out to be recycled or fabricated. One email a month. No vendor press releases, no reprinted advisories.

What you get

• Verified, not repeated. When a dataset is claimed, we check it. Recent issues covered a 7.3 million record set that proved genuine and days old, a 9.2 million record national registry that turned out to be twenty years old, and a “170 million record” listing whose own identifiers only stretched to about one million.
• The method, not just the verdict. How the checks were done, so you can run them yourself on the next dataset that lands in your inbox.
• Leak-site and victim-census data from our own Ransomtracker, including the numbers that did not make the articles.
• Nothing we would not want reported about us. We do not publish stolen data, download links, or individual records, in the newsletter or anywhere else.

Who it is for

Threat intelligence and incident response teams, journalists covering breaches, and anyone who has to answer the question “is this leak real, and is it new?” before a decision gets made on it. Written by the Ransomnews editorial team.

How we handle your email

Double opt-in, so nobody is added without confirming. We store your address, the time you signed up, and your IP address as a record of consent, which is what GDPR Article 7 requires us to be able to show. We do not sell or share the list. Every email carries a one-click unsubscribe, and unsubscribing is immediate and permanent unless you sign up again.

Questions, corrections, or press enquiries: [email protected].