NightSpire

ransomware.live reported that NightSpire claimed Cedar Crest College and identified July 13, 2026, as the attack date. The actor listing did not describe allegedly stolen data and could not be independently verified because the leak site was offline.

An unconfirmed ransomware claim is associated with the incident. A NightSpire leak-site listing posted on 29 May 2026 displayed an obfuscated victim name (`K****** County, Mi**e**ta`) that appears consistent with Kittson County, Minnesota. The listing included a countdown timer before an apparent data-release deadline but did not initially publish any data. Kittson County has not publicly confirmed ransomware, data theft, a ransom demand or any connection to the NightSpire listing. Based on the available public evidence, there is low-to-medium confidence that the listing refers to Kittson County, but there is insufficient evidence to confirm the threat actor’s involvement or that the listing is related to the county’s reported cyber incident.

NightSpire listed Krum Public Library on its leak site and claimed it was selling 50 GB of financial documents, HR data and supervisor information. The claim was not independently verified and was not confirmed by the library.