RANSOMWARE VICTIMGOVERNMENT

Rural Municipality of Gimli

payload📍 Canada (CA)📅 April 26, 2026
8
same group

Attack Intelligence

Rural Municipality of Gimli was compromised in a ransomware attack attributed to payload in April 2026. The organization, operating in the Government sector in Canada, was added to the group's data leak site as part of an extortion campaign.

payload operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

The Rural Municipality of Gimli is a local government district in the province of Manitoba, Canada. Situated on the western shore of Lake Winnipeg, it administers a region known for its Icelandic heritage, recreational tourism, and lakefront economy. Gimli serves as both a residential community and a cultural hub for the Interlake area.

Other Victims — payload (8)

Quick Facts

CountryCanada (CA)
SectorGovernment
Attack DateApr 26, 2026
Intel Sourceransomlook

Threat Group

payload
Motivation: financial
View group profile →

External Links

Data sourced from Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Victim listing does not imply confirmed breach — intelligence based on group claims.