Category: Ransom Monitor

The ransomware claim targets the host www.bnc.com.ve and alleges file encryption in exchange for a ransom. The claim attributes the attack to threat actor qilin and identifies Venezuela as the impacted country #Venezuela

The threat actor Akira has claimed to have compromised Research & Planning Consultants, L.P., a firm that specializes in providing expert analysis and consulting services in personal injury and commercial litigation. They threaten to upload 33gb of corporate data soon, including projects, financials, client and employee information. #UnitedStates

Noble Inc. in the United States reports a ransomware claim attributed to the threat actor insomnia, tied to Noble Casing, Inc., which provides casing running and conductor drilling services in the Rocky Mountain region. Founded in 2009, Noble Casing, Inc. emphasizes safety, training and equipment upkeep, with subsidiaries Noble Drilling and Noble Trucking supporting production and rig moves. #UnitedStates

CMD Outsourcing Solutions, a provider of multi-channel customer service solutions for higher education institutions, reports a ransomware claim attributed to the akira threat actor who threatens to upload corporate data soon. The attackers claim access to scanned employee documents (passports, DLs, SSNs, medical files and so on), financial files, NDAs, and other sensitive information, and the message ends with the impacted country tag in the format: #Unknown

Smith Dollar, a Santa Rosa law firm serving Northern California, reported a ransomware claim alleging that the threat actor Lynx compromised its systems and exposed client data. The incident highlights the risk to legal services and client confidentiality for firms operating in the United States. #UnitedStates

Dragonforce claims Bit-Wizards, a Florida-headquartered technology company that develops an application, builds a brand, or moves to the cloud, was hit by ransomware. The claim identifies Bit-Wizards as the victim and notes the incident is attributed to the threat actor dragonforce, affecting a United States-based company #UnitedStates

AnchorsGordon, a Northwest Florida law firm with decades of experience across business and corporate law, reports a ransomware claim attributed to the threat actor dragonforce. The incident purportedly disrupted operations and could involve data exposure, potentially impacting the firm’s ability to serve clients in the United States. #UnitedStates

Akira claims they will soon upload 42GB of Gauthier Connectique’s corporate data, including scanned employee documents (passports, drivers licenses), drawings and specifications, confidential internal files, financials, and NDAs. Gauthier Connectique, a French company that designs specialized connectors for civil and military aircraft, is the claimed victim of this ransomware. #France

Morphosis is the victim in a ransomware claim attributed to the Play threat actor from the United States. The United States is the impacted country #UnitedStates

Nightspire claims to have compromised Cabinet d,’Étude en Sécurité Pyrotechnique in France with ransomware deployment. Data is not available now, #France

Spacebears claim to have compromised Brooklands of Mornington, a resort on the Mornington Peninsula in Australia, exfiltrating personal information of employees and guests, financial documents, and other files. They threaten to publicly release or monetize the data unless a ransom is paid #Australia

Safepay claims to have compromised academyhealth.org in a ransomware operation targeting a US-based nonprofit organization headquartered in Washington, D.C. AcademyHealth, the organization behind academyhealth.org, is a U.S.-based nonprofit professional organization dedicated to advancing the fields of health services research. #UnitedStates

Crystal Point is the victim in this ransomware claim, and the threat actor is identified as ‘play’. The United States is cited as the actor’s origin, and the impacted country(s) are #UnitedStates

The claim states Sa**** A** Products was targeted by ransomware, attributed to the threat actor nightspire. Data on the impacted country is not available at this time, so the affected country cannot be confirmed, #Unknown

Threat actor akira has claimed a ransomware attack against Aqua-Serv Engineers, Inc., one of the largest independent regional industrial water treatment companies in the United States. The actor threatens to upload 17GB of corporate data, including employee personal documents, drawings and specifications, client information, and detailed financials. #UnitedStates