Durga Bearings Data Breach
Orova ransomware has claimed Durga Bearings (India) on its leak site. SOCRadar CTI analysis includes corporate infrastructure credential exposure as initial access indicators.
View details →Orova ransomware has claimed Durga Bearings (India) on its leak site. SOCRadar CTI analysis includes corporate infrastructure credential exposure as initial access indicators.
View details →SOCRadar threat intelligence analysis: NCT Kandla, a India Transportation organization, was listed on N0n's dark web portal on October 12, 2026. Includes stealer-log context and group targeting patterns.
View details →SOCRadar CTI analysis of the UmBra ransomware attack on Helwan University (Egypt). Stealer-log intelligence reveals 25 fresh credentials on student portals within 24 hours of listing.
View details →Raajratna Metal Industries, an Indian steel and metals manufacturer, was listed by krybit ransomware on October 2, 2026. SOCRadar CTI examines the threat actor's targeting of Indian manufacturing…
View details →US company Cam Group LLC has been listed by the Doommageddon ransomware group. SOCRadar CTI analysis found no stealer log exposure for the organization.
View details →Turkish educational institution ENKA Schools has been listed by the Doommageddon ransomware group. SOCRadar CTI reveals severe stealer log exposure with 17 records spanning August to October 2026.
View details →Indian media company Asia Era One has been listed by the Eclipse ransomware group. SOCRadar CTI reveals severe stealer log exposure with 22 records spanning December 2024 to…
View details →Indian engineering company Simplex Engineering has been claimed as a victim by the Eclipse ransomware group. SOCRadar CTI analysis found no current stealer log exposure for the firm.
View details →ATCO Ltd, an energy and utilities company in Canada, was listed as a victim of MedusaLocker ransomware group on September 28, 2026.
View details →Groupe Proxitel, a technology company in Timor-Leste, was listed as a victim of Vexy Ransomware group on September 29, 2026.
View details →Abv, a company based in Bulgaria, was listed as a victim of MedusaLocker ransomware on September 23, 2026.
View details →Seznam, a Technology company in the Czech Republic, was listed as a victim of MedusaLocker ransomware on September 23, 2026.
View details →Charlottesville Police Department, a government and defense organization in the United States, was listed as a victim of Doommageddon ransomware on September 21, 2026.
View details →Vellore Institute of Technology, an education institution in India, was listed as a victim of AuditTeam ransomware on September 22, 2026.
View details →Westbridge Institute of Technology, Inc., an education institution, was listed as a victim of Emperador ransomware on September 17, 2026.
View details →STP Fashion Lab, a retail and e-commerce company in Italy, was listed as a victim of Vexy Ransomware on September 17, 2026.
View details →Kashkha, an organization based in the United Arab Emirates, was listed as a victim of Krybit ransomware group on September 13, 2026.
View details →INCOR Group, an organization in India, was listed as a victim of Doommageddon ransomware group on September 13, 2026.
View details →Harley-Davidson, a Manufacturing company in the United States, was listed as a victim of Clop ransomware on September 10, 2026.
View details →Henry Pratt Company, a Manufacturing company in the United States, was listed as a victim of Clop ransomware on September 10, 2026.
View details →BAYMER, a manufacturing organization, was listed as a victim of emperador ransomware on September 9, 2026.
View details →Universal Starch-Chem Allied Ltd, a manufacturing company in India, was listed as a victim of emperador ransomware on September 9, 2026.
View details →Bosnia and Herzegovina Mine Action Center, a government and defense organization in Bosnia and Herzegovina, was listed as a victim of emperador ransomware on September 9, 2026.
View details →LIBRERIA SANTA FE A P S SRL, a Retail & E-Commerce company in Argentina, was listed as a victim of Vexy Ransomware on September 7, 2026.
View details →