April Asia Data Breach
N0nSOCRadar threat intelligence analysis: April Asia, a Indonesia Transportation organization, was listed on N0n's dark web portal on October 12, 2026. Includes stealer-log context and group targeting patterns.
View details →SOCRadar threat intelligence analysis: April Asia, a Indonesia Transportation organization, was listed on N0n's dark web portal on October 12, 2026. Includes stealer-log context and group targeting patterns.
View details →SOCRadar threat intelligence analysis: Saehan Marine, a South Korea Transportation organization, was listed on N0n's dark web portal on October 12, 2026. Includes stealer-log context and group targeting…
View details →SOCRadar CTI analysis of the dragonforce ransomware attack on TQC S.A. (Peru). Stealer-log intelligence reveals credential exposure across organizational systems. Published 2026-10-11.
View details →SOCRadar CTI analysis of the thegentlemen ransomware attack on Royal Thai Air Force (Thailand). Stealer-log intelligence reveals 23 military IAM credentials spanning nearly 2 years.
View details →SOCRadar CTI analysis of the dragonforce ransomware attack on TEXMA International (Taiwan). Stealer-log reveals Fortinet support portal credentials—a known ransomware initial access vector. Published 2026-10-10.
View details →Paessolucoes, a Brazilian IT solutions company, was listed by the Panzer ransomware group on October 2, 2026. SOCRadar CTI examines the Panzer group's profile and IT services sector…
View details →Peruvian printing and color services company METROCOLOR S.A. has been listed as a victim by the emperador ransomware group. SOCRadar CTI analysis found no current stealer log exposure…
View details →Panamanian logistics company PANCARIBBEAN LOGISTICS GROUP has been listed by the emperador ransomware group. SOCRadar CTI analysis found no stealer log exposure for the regional freight operator.
View details →Electrolux, a manufacturing company in Sweden, was listed as a victim of Emperador ransomware group on September 28, 2026.
View details →SiteProRentals, a hospitality company in the United States, was listed as a victim of Emperador ransomware group on September 28, 2026.
View details →SMCare, a healthcare company in the United Kingdom, was listed as a victim of Panzer ransomware group on September 28, 2026.
View details →Camorim Serviços Marítimos, a maritime services company in Brazil, was listed as a victim of LockBit 5 ransomware group on September 29, 2026.
View details →CPACB, a professional services company in Canada, was listed as a victim of m3rx ransomware group on September 29, 2026.
View details →Interconnect Computer Cabling Services, Inc., a professional services company in the United States, was listed as a victim of the m3rx ransomware group on September 29, 2026.
View details →Noon Sugar Mills Limited, a company in the United Arab Emirates, was listed as a victim of m3rx ransomware group on September 29, 2026.
View details →Soma Soluções em T.I., a professional services company in Brazil, was listed as a victim of m3rx ransomware group on September 29, 2026.
View details →Otero Geeza Law, P.A., a professional services company in the United States, was listed as a victim of the m3rx ransomware group on September 29, 2026.
View details →Groupe Proxitel, a technology company in Timor-Leste, was listed as a victim of Vexy Ransomware group on September 29, 2026.
View details →AGROFRUTO SAC, an Agriculture and Food Production company in Peru, was listed as a victim of arcusmedia ransomware on September 23, 2026.
View details →RECEITA FEDERAL DO BRASIL, a Government & Defense organization in Brazil, was listed as a victim of Emperador ransomware on September 23, 2026.
View details →Grupolider, a company based in Angola, was listed as a victim of TheGentlemen ransomware on September 21, 2026.
View details →Studio Notarile Associato Salvatore Costantino E Anna Favarato (Italy) has been listed by emperador on its dark web portal as of 2026-09-20.
View details →Fanatics (United States) has been listed by N0n on its dark web portal as of 2026-09-20. SOCRadar CTI covers group targeting patterns and stealer-log exposure.
View details →Westbridge Institute of Technology, Inc., an education institution, was listed as a victim of Emperador ransomware on September 17, 2026.
View details →