COMAPA Victoria Data Breach
QilinQilin ransomware has claimed COMAPA Victoria, a Mexican municipal water authority, on its leak site. SOCRadar CTI analysis includes stealer-log and critical infrastructure risk context.
View details →Qilin ransomware has claimed COMAPA Victoria, a Mexican municipal water authority, on its leak site. SOCRadar CTI analysis includes stealer-log and critical infrastructure risk context.
View details →SOCRadar threat intelligence analysis: Placer AI, a United States Technology organization, was listed on thegentlemen's dark web portal on October 12, 2026. Includes stealer-log context and group targeting…
View details →SOCRadar CTI analysis of the qilin ransomware attack on CNESTEN (Morocco). Stealer-log intelligence reveals credential exposure across organizational systems.
View details →SOCRadar CTI analysis of the qilin ransomware attack on Secretaría de Modernización (Argentina). Stealer-log intelligence reveals credential exposure across government authentication systems.
View details →SOCRadar CTI analysis of the thegentlemen ransomware attack on Royal Thai Air Force (Thailand). Stealer-log intelligence reveals 23 military IAM credentials spanning nearly 2 years.
View details →The Wallstreet ransomware group listed an entity identified as "World Cup 2034" on its leak site on October 2, 2026. SOCRadar CTI analyzes the claim and notes no…
View details →Mandurah SES (State Emergency Service), an Australian emergency response unit, was listed by The Gentlemen ransomware on October 3, 2026. SOCRadar CTI examines the implications of ransomware targeting…
View details →Sumperk, a public-sector entity in the Czech Republic, was listed as a victim of Safepay ransomware group on September 28, 2026.
View details →Manno, a public-sector organization in Switzerland, was listed as a victim of Safepay ransomware group on September 28, 2026.
View details →North Slope Borough School District, a government and defense organization in the United States, was listed as a victim of the INC Ransom ransomware group on September 28,…
View details →COSEF – Consorzio di Sviluppo Economico del Friuli, an organization in Italy, was listed as a victim of Booba Project ransomware on September 23, 2026.
View details →Charlottesville Police Department, a government and defense organization in the United States, was listed as a victim of Doommageddon ransomware on September 21, 2026.
View details →HyVision System. Inc, a technology company in South Korea, was listed as a victim of MetaEncryptor ransomware on September 21, 2026.
View details →ST Engineering, a Government & Defense company in Singapore, was listed as a victim of metaencryptor ransomware on September 7, 2026.
View details →Judicial Branch of the Province of Jujuy, a Government & Defense entity based in Argentina, was listed as a victim of emperador ransomware on September 5, 2026.
View details →Dinas Komunikasi dan Informatika, a government organization in Indonesia, was listed as a victim of Panzer ransomware on September 3, 2026.
View details →REXT Holdings Co., Ltd., a company in Japan, was listed as a victim of the RansomHouse extortion group on September 1, 2026.
View details →CareerSource Palm Beach County, a Professional Services organization in the US, was listed as a victim of TheGentlemen ransomware on September 1, 2026.
View details →NSW Health (health.nsw.gov.au), a government healthcare organization in Australia, was listed as a victim of MedusaLocker ransomware on August 27, 2026.
View details →Lockheed Architectural Solutions, Inc., a government and defense sector company in the United States, was listed as a victim of Global Secret Group ransomware group on August 25,…
View details →City of Mitchell, a Government & Defense entity in United States, was listed as a victim of Storm ransomware on August 24, 2026.
View details →Questronix, a technology company based in the Philippines, was listed as a victim of Qilin ransomware on August 20, 2026.
View details →Ayuntamiento de Velilla de San Antonio, a government entity in Spain, was listed as a victim of Kairos ransomware on August 20, 2026.
View details →The Indonesian Police Database, a government and defense entity in Indonesia, was listed as a victim of DYSPHOR1A ransomware on August 20, 2026.
View details →