Last month, a group of hackers claimed it had stolen several gigabytes of sensitive data from specialty pharmacy PANTHERx Rare on the day banks kicked off a $2.5bn buyout financing deal, as 9fin reported.
It’s not an isolated incident in the world of leveraged finance issuers. At least 50 US companies in the 9fin coverage universe were claimed as victims by ransomware hacker groups between January 2020 and September 2026, according to ananalysis of data compiled by Ransomware.live.
The trend is accelerating, with reported attacks spiking this year. Six companies were attacked in February alone — the most active month in the sample — and five companies were attacked in September, the data shows.
Source: 9fin analysis of Ransomware.live data. 2026 attacks are YTD to 22 Oct.
Ransomware.live and similar services passively monitor hacker group websites on the dark web, or parts of the internet that are not hosted on traditional domain providers and require special configurations to access. They collect information on claimed hacks, including screenshots of stolen files the hackers provide as evidence of their successful attack.
The full report of LevFin issuers found in ransomware attack lists is here.
The purported attacks also aren’t limited to...
