Skip to content

Search Ransomware Intelligence

Jump to a group, country, industry or search victims.

Listed on a ransomware leak site

Regional Transportation Authority

rtachicago.org

Regional Transportation Authority was listed on the Monti leak site on Jul 12, 2025. Information as of Oct 19, 2026.

Updated continuously · figures as of Oct 19, 2026
Claimed by
Monti
First listed
Jul 12, 2025
Claims recorded
1

Leak-Site Claim.

MontiConfirmed claim
Posted on the leak site
Date not shown
Collected by Brandefense
Jul 12, 2025
Data claimed
Not stated
Leak-site post text, written by the group
A government agency created by the State of Illinois to coordinate the Chicago region’s transit system [removed]

Get alerted the moment your company or a supplier is posted on a leak site.

Alert me
Other confirmed victims claimed by the same group
VictimClaimed byCountryIndustryData claimedPosted
Every one of you been a good customer this yearMontiUnknownUnknownNot stated
Amtech Software
amtechsoftware.com
MontiUSUnited StatesTechnologyNot stated
American Eagle Logistics
aeagleoilfield.com
MontiUSUnited StatesUnknownNot stated
CD
cd-custom.com
MontiJPJapanUnknownNot stated
AGI
agi.net
MontiUSUnited StatesUnknownNot stated
365labs
365labs.com
MontiUSUnited StatesConsulting, Government and Public SectorNot stated
Other confirmed victims in the same industry
VictimClaimed byCountryIndustryData claimedPosted
Personify Health
personifyhealth.com
HelixUSUnited StatesHospitality and TourismNot stated
camden-living
camdenliving.com
Iah6477USUnited StatesHospitality and Tourism1.2 TB
Museum Siam
museumsiam.org
The GentlemenTHThailandHospitality and TourismNot stated
kordhotels.gr
kordhotels.gr
LockBit 5.0GRGreeceHospitality and TourismNot stated
The Park Lane Hong Kong
parklane.com.hk
OrovaHKHong KongHospitality and TourismNot stated
Korea Ferry (ferry operations)
koreaferry.kr
N0nKRSouth KoreaHospitality and TourismNot stated

Get Real-Time Alerts, IOC Feeds And Takedowns.

The Brandefense platform watches every leak site for your company, vendors and executives, and acts on what it finds.

Figures as of Oct 19, 2026. Confirmed leak-site claims collected by Brandefense technologies and validated by Brandefense analysts.

Listed on a leak site means a ransomware group has claimed the company; it is not a confirmed breach. To request a correction or removal, contact Brandefense.