Category: Ransom Monitor

Jubilee Jobs in NG reported a ransomware incident attributed to the qilin threat actor, with encryption and disruption affecting access to their data and systems. The ransomware activity is reported to have impacted #Nigeria

T****r in the US was targeted by the payoutsking ransomware threat actor, resulting in unauthorized access and data encryption demands. The incident impacted operations and led to disruption for affected systems in #UnitedStates

nova ransomware targeted SistNet in IT, with Sistnet’s security and communications services being held at risk through theft of data and release of samples, alongside a demand for decryption. The group provided a pathway for decryption (including a decrypt sample) if SistNet contacted its support department, with the incident impacting IT. #Italy

The ransomware claim targets ausproof.com.au in Australia by threat actor m3rx, involving exfiltration of 460 GB across 373,495 files. AusProof is a long-established (since 1974) provider of low and high voltage electrical cable couplers for mining and tunneling clients, with the incident impacting the country of #Australia.

Advantage Sintered Metals in the US is affected by ransomware attributed to threat actor securotrop, with claims currently marked as AWAITING. The reported data exposure size is 503 GB, impacting #UnitedStates

The ransomware claim alleges that the threat actor safepay targeted the US victim gvsurgicalarts.com, disrupting operations at the practice founded in 2004 by Dr. Brian R. Chisdak as it grew into one of Montana’s leading surgical centers. The impacted country(s): #UnitedStates

Upland.k12.ca.us in the US reported a ransomware incident, disrupting a district that delivers comprehensive K–12 education across 14 schools (elementary, junior high, and high school). The attack was attributed to the SafePay threat actor, with impacts affecting #UnitedStates.

Jiva Health in India was targeted by the unsafe ransomware threat actor, resulting in significant disruption to operations. The incident is claimed to involve approximately 9 million in revenue, impacting India. #India

nova ransomware reportedly claimed it compromised Centrul de Tehnologii Informaționale în Finanțe (CTIF), offering leaked data samples and a “tree” of stolen files to the victim when contacting their support channel. The actor allegedly targeted CTIF’s automated information systems supporting public finance, accounting, taxation, customs, and public procurement services. #

The ransomware attack on GOP in GB was attributed to the qilin threat actor, resulting in file encryption and disruption of operations. The incident affected data and access across GB #UnitedKingdom

ID Engineering & Automated Systems (ID) in Indonesia reported a ransomware incident associated with the threat actor dragonforce, impacting its operations as a machine builder and integrator providing turn-key equipment and robotic work cells. The company’s manufacturing-focused emphasis on quality, reliability, and safety was disrupted, with consequences tied to Indonesia. #Indonesia

Stryker in the US was targeted by the Qilin ransomware threat actor, resulting in unauthorized access and disruption through ransomware encryption. The incident’s impact was felt in #UnitedStates

Triple X is claimed to have targeted Bank of Baroda (bankofbaroda.bank.in) in India, allegedly exposing up to 1TB of customer information including banking records, netbanking access details, loan data, and account/application documents (photos and national IDs) used to facilitate fraud and scams. #India

akira claims it infiltrated Emerge2 Digital and will disclose or encrypt approximately 30GB of corporate data, including employee passport documents, detailed client information, financials, and contracts. The impacted country(s): #unknown

Metropolitan Construction Systems, a leading commercial roofing company based in New York City in the US, reported a ransomware incident allegedly linked to the pear threat actor. The attack reportedly disrupted operations by encrypting data and demanding ransom for restoration. #UnitedStates