Live Blog: Cyber Reflections on the Iran-Israel-U.S. War Read the Analysis

Mexico Region

71 breaches

All data breaches →

COMAPA Victoria Data Breach

Government

Qilin

Qilin ransomware has claimed COMAPA Victoria, a Mexican municipal water authority, on its leak site. SOCRadar CTI analysis includes stealer-log and critical infrastructure risk context.

View details →

Bender Tribunenbau Data Breach

Construction

Lamashtu

German construction and manufacturing company Bender Tribunenbau has been listed on the lamashtu ransomware group's dark web leak site. SOCRadar CTI analysis found no current stealer log exposure…

View details →

Fluge Audiovisuales Data Breach

Business Services

Lamashtu

Spanish audiovisual services company Fluge Audiovisuales has been listed by the lamashtu ransomware group. SOCRadar CTI reveals severe credential exposure with 25 compromised records spanning January 2025 to…

View details →

Jampac Alimentos Data Breach

Food Distribution

Akira

Jampac Alimentos, a Latin American food company, was listed by Akira ransomware on October 3, 2026. SOCRadar CTI examines Akira's Latin American targeting pattern and food sector cybersecurity…

View details →

TRANS LOGROÑO SOCIEDAD ANONIMA Data Breach

Transportation and Logistics

Lamashtu

Spanish transportation company TRANS LOGROÑO SOCIEDAD ANONIMA has been added to the lamashtu ransomware group's victim list. SOCRadar CTI analysis found no stealer log exposure, underscoring persistent threats…

View details →

Grupo Industrial Tauro Data Breach

Manufacturing

Lamashtu

Mexican manufacturing company Grupo Industrial Tauro has been listed as a ransomware victim by the lamashtu group. SOCRadar CTI analysis reveals severe stealer log exposure across 10 compromised…

View details →

Cromados Data Breach

Manufacturing

SafePay

Cromados, a manufacturing company in Spain, was listed as a victim of Safepay ransomware group on September 28, 2026.

View details →

Auromex Data Breach

Manufacturing

SafePay

Auromex, a manufacturing company in Mexico, was listed as a victim of Safepay ransomware group on September 28, 2026.

View details →

Newman Tractor Data Breach

Manufacturing

ThreeAM

Newman Tractor, a manufacturing company in the United States, was listed as a victim of threeam ransomware on September 21, 2026.

View details →

Atlas Ocean Voyages Data Breach

Business Services

Booba Project

Atlas Ocean Voyages, a hospitality company in the United States, was listed as a victim of Booba Project ransomware on September 14, 2026.

View details →

Mestechkin Law Group P.C. Data Breach

Professional Services

Booba Project

Mestechkin Law Group P.C., a professional services company in the United States, was listed as a victim of Booba Project ransomware on September 14, 2026.

View details →

Licindia Data Breach

Services

MedusaLocker

Licindia, a company in India, was listed as a victim of MedusaLocker ransomware group on September 2, 2026.

View details →

Servicios Aereos Estrella Data Breach

Transportation

Thegentlemen ransomware group claimed Servicios Aereos Estrella (Mexico) on 2026-08-30. SOCRadar CTI analysis covers group TTPs, stealer-log credential exposure, and recommended actions.

View details →

Oilquip Inc Data Breach

Energy & Utilities

incransom

incransom ransomware group claimed Oilquip Inc (United States) on 2026-08-30. SOCRadar CTI analysis covers group TTPs, stealer-log credential exposure, and recommended actions.

View details →

Twin States News Data Breach

Media

ThreeAM

threeam ransomware group claimed Twin States News (Moldova) on 2026-08-30. SOCRadar CTI analysis covers group TTPs, stealer-log credential exposure, and recommended actions.

View details →

wittmann Data Breach

Manufacturing

incransom

incransom ransomware group claimed wittmann (Mexico) on 2026-08-30. SOCRadar CTI analysis covers group TTPs, stealer-log credential exposure, and recommended actions.

View details →

American Plan Administrators Data Breach

Professional Services

LockBit5

lockbit5 ransomware group claimed American Plan Administrators (Mexico) on 2026-08-30. SOCRadar CTI analysis covers group TTPs, stealer-log credential exposure, and recommended actions.

View details →

Nutrypollo Data Breach

Manufacturing

TheGentlemen

thegentlemen ransomware group claimed Nutrypollo (Mexico) on 2026-08-30. SOCRadar CTI analysis covers group TTPs, stealer-log credential exposure, and recommended actions.

View details →