Chort

A ransomware.live entry attributes a listing for sheboyganwi.gov to Chort. Domain and short-name queries return the same lead; canonical City of Sheboygan query returned none. The tracker records discovery Nov.22,2024, not an exact attacker posting or intrusion date. Its description alleges database/files and a decision pending; this is not independent proof of volume or contents. Original city Nov.22 statement acknowledges an unnamed unauthorized-party post and screenshot listing file archives while reporting no public data at that stage. The Record later named Chort and reported personal-data theft; the city has not independently identified the operator in reviewed statements. Preserve allegation separately from high-confidence encryption/ransom findings, and preserve the already researched shared actor profile. No verified ransom payment or 200GB quantity adopted.

Chort listed Hartwick’s exact hartwick.edu domain, describing databases and files and a wait-for-decision status. Comparitech reported and pictured the listing Nov.15,2024, before ransomware.live’s Nov.17 discovery. That discovery timestamp is not original publication or intrusion. CYJAX’s Nov.19 primary research also described the listing without confirming negotiations. The college’s later notice confirms a data-security incident, but the reviewed evidence does not establish Chort responsibility, ransomware deployment, actual theft or the claimed contents. Preserve this as an unconfirmed allegation; no verified ransom demand, payment or data volume.