Ransomware needs a way in. Stolen credentials are the cheapest one.

Usha International Ransomware Attack

usha.comRansomed

vectGroup

IndiaCountry

Mar 1, 2026Discovered

Ransom negotiation is currently in progress.

Overview

View group profile

Domain

usha.com

Industry

Manufacturing

Country

India

Discovered

7 months ago

Attack date

Feb 28, 2026

Confidence

100%

Severity

High

Status

Negotiating

Threat group

vect

Total victims

First seen

Jan 2026

Last seen

Apr 2026

Group status

active

Sophistication

Impact score

Threat level

4.1/10

Aggressiveness4.8/10

Lethality1.6/10

Criticality6.2/10

Status breakdown

Data Leaked31.6%6

Negotiating

this victim

57.9%11

Claimed10.5%2

Targeted sectors

Education Energy & Utilities Financial Services Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Victim's position within group

Industry

Manufacturing

Known target sector

Country

India

Frequently targeted country

Other victims

View all (19)

Same group · vect

Group activity

Monthly attacks · vect

total · avg 4.8/mo