The ransomware claim by threat actor beast asserts a security incident involving the victim irmler.org in Germany. irmler.rechtsanwalte specializes exclusively in architectural law, public procurement law, and private and public construction law, is represented in Mecklenburg-Vorpommern and in Schleswig-Holstein at the locations in Schwerin and Lubeck, and is active nationwide in support of procurement procedures, in particular for the award of architect/planning services and architectural competitions. #Germany
Category: Ransom Monitor
The ransomware claim identifies Idera as the victim, attributed to threat actor coinbasecartel, with roughly 1.5 TB of data exfiltrated. Impacted country(s): #UnitedStates
The ransomware claim targets *W* **L LLC and is attributed to the threat actor nightspire. Data is not available at this time, and the impacted country is not specified #Unknown
EasTech reports a ransomware incident attributed to coinbasecartel, with encrypted data and potential extortion. Details such as ransom demands and affected systems are sparse, and no country is disclosed. #Unknown
An AI-generated claim alleges that Correios, Brazil’s state-owned postal service, was hit by ransomware attributed to the threat actor coinbasecartel. Correios provides mail delivery, logistics, and financial services across Brazil, making the alleged attack potentially impactful. #Brazil
A ransomware claim alleges that the threat actor coinbasecartel compromised KEB (Korea Exchange Bank) and affected operations in Germany, demanding ransom for data decryption. The claim describes encrypted systems, potential data exfiltration, and a coercive extortion note, with KEB identified as the targeted financial institution. #Germany
Scholle IPN, a US-based global packaging company, is named as the victim in a ransomware claim attributed to the threat actor coinbasecartel. The claim describes disruption to Scholle IPN’s operations and identifies the United States as the impacted country #UnitedStates
Marlborough Partners, a UK-based boutique investment banking and advisory firm, reports a ransomware claim attributed to the threat actor coinbasecartel. The claim notes encrypted systems and potential data exposure affecting the firm’s mid-market M&A and financial advisory operations across Europe.
#UnitedKingdom
According to a ransomware claim, the threat actor coinbasecartel exfiltrated 1.5 TB of data from Idera, a US-based software company. The claim states that the group threatened to release the stolen data unless a ransom was paid. #UnitedStates
The ransomware claim alleges that Deaconess Health System, a nonprofit regional health care organization based in Evansville, Indiana, was breached by the worldleaks threat group, with reported system encryption and data exfiltration. The incident is presented as a US-based healthcare disruption affecting facilities in Indiana, Illinois, and Kentucky #UnitedStates
Ransomware claims target Gerald Zisser GmbH, an Austrian private company specializing in building technical services, focusing on plumbing and heating, and the attack is attributed to the threat actor krybit. The incident is described as impacting Germany (DE), with the country tag provided as #Germany
Handala Hack Group claims another successful cyber operation against PSK WIND Technologies, infiltrating its defense networks in what it describes as a campaign against the Zionist regime’s military infrastructure. The group asserts that PSK WIND Technologies is the main designer and implementer of the Zionist regime’s integrated command and control systems, calling the breach a decisive blow. #Israel
We, the members of Handala Hack, proudly announce that through a targeted and intelligent operation, we have completely taken control of the centralized IT infrastructure of St. Joseph County in the state of Indiana. This operation was successfully executed after months of monitoring, reconnaissance, and meticulous planning, during which over 2 terabytes of data were exfiltrated. #unitedstates
Ransomware claim targets El Wastani Petroleum Company (WASCO) with an operation attributed to the threat actor payload. WASCO is an Egyptian oil and gas company focused on the exploration, production, and processing of natural gas and condensate, operating fields and infrastructure—including processing facilities and compression stations—mainly in the Nile Delta and North Sinai regions, serving as a regional operator for Egypt’s gas industry #Libya
The claim alleges that the ransomware actor incransom targeted pacificwestinjury.com in the United States. Pacific West Injury Law opened its doors with the singular mission of providing its clients with the best possible representation when handling personal injury cases. #UnitedStates