Ransomware needs a way in. Stolen credentials are the cheapest one.

Cosaen Grup SA Ransomware Attack

Ransomware victimRansomed

—Country

Sep 9, 2026Discovered

Data has been published on the ransomware group's leak site.

Overview

Industry

Hospitality

Discovered

9 days ago

Confidence

85%

Severity

Critical

Status

Data Leaked

Total victims

First seen

Sep 2025

Last seen

Sep 2026

Threat level

2.9/10

Aggressiveness7/10

Lethality0.4/10

Criticality1.2/10

Status breakdown

Data Leaked

this victim

6.8%4

Claimed93.2%55

Targeted sectors

Victim's position within group

Industry

Hospitality

Known target sector

Other victims

Same group · black nevas

Group activity

Monthly attacks · black nevas

total · avg 6.4/mo