Category: Ransom Monitor

International Delights in the US reported a ransomware incident attributed to the Qilin threat actor, resulting in unauthorized access and encryption of files. The attack caused service disruption and data compromise, impacting #UnitedStates

PanasonicAero (JP) reported a ransomware incident attributed to the coinbasecartel threat actor. The attack targeted Panasonic Avionics Corporation’s in-flight entertainment and connectivity operations in Japan. #Japan

In a ransomware incident targeting Fidelity Services Group, a Southern Africa security solutions provider, threat actor ransomhouse allegedly compromised company systems and encrypted data to extort payment. The company delivers security guarding, cash management, and fire protection services across corporate sectors, and the impact was reported in #UnitedKingdom.

Stephens Precision, Inc., a HUBZone manufacturing facility in Vermont, US, was targeted by the dragonforce ransomware group, disrupting operations supporting aerospace, defense, commercial, and research machining work. The incident impacted United States #UnitedStates

Shillen Mackall & Seldon Spicer & Fraas, a US personal injury law firm, reported a ransomware incident attributed to the dragonforce threat actor, impacting its operations. The firm has a long-standing practice serving clients primarily across Vermont, New Hampshire, and Florida, with the incident affecting the #UnitedStates

Hughes Atwood & Mullaly PLLC, a full-service law firm in the US, reported a ransomware incident attributed to the dragonforce threat actor. The attack impacted services and operations supporting legal services for clients in #UnitedStates.

Dragonforce ransomware allegedly targeted Isegen South Africa (Pty) Ltd, a South African chemical company founded in 1974, and may have published corporate correspondence, passport/personal identification data, contracts, certificates, and intellectual property data. The incident is reported to have impacted #SouthAfrica.

Akira ransomware operators claimed to have stolen and threatened to leak approximately 168GB of Pioneer Construction data, including scanned employee identity documents (passports and driver’s licenses), detailed financials, client internal information, contracts and agreements, confidential correspondence, and NDAs. Pioneer Construction is headquartered in Grand Rapids, Michigan and provides construction services across the United States, with the claimed impact limited to #UnitedStates.

Heritage Mechanical LLC in the US was targeted by the dragonforce ransomware threat actor. The attack impacted the United States #UnitedStates

COREBI (NowVertical), a global data and AI company headquartered in Canada, reportedly fell victim to ransomware attributed to threat actor arcusmedia, with the deadline noted for 2026-07-21 18:51:00.000000. #Canada

Be Travel (betravel.co.za), a South African travel company trading as Baithaupi Executive Travel, filed a ransomware claim with a deadline of 2026-07-21 18:51:00.000000, allegedly involving the arcusmedia threat actor. #SouthAfrica

Levin Furniture, in the US, was targeted by the qilin ransomware threat actor, which deployed malware to disrupt operations and encrypt files. The attack’s impacts were felt in #UnitedStates

Distribox (France) was targeted by ransomware tied to the arcusmedia threat actor, with the impact affecting business operations and access to encrypted data at www.distribox.fr. The claim is tied to the deadline of 2026-07-21 18:51:00.000000, impacting #France

ProDirectional Drilling in the United States is facing a ransomware claim by the threat actor securotrop, with the case currently listed as AWAITING. The reported data impact size is 4329 GB. #UnitedStates

The ransomware attack against gemese.pt in Portugal was claimed by threat actor arcusmedia, targeting Milenia–Informática e Serviços, headquartered in Bustos. The deadline for the claim is 2026-07-21 18:51:00.000000, with victims in #Portugal