Category: Ransom Monitor

Western Construction in the United States reported a ransomware incident attributed to the play threat actor, resulting in disruption to its systems and operations. The impacted country is #UnitedStates

In a ransomware and data theft incident affecting Primed Halberstadt Medizintechnik (DE), the aurora threat actor exfiltrated multiple entire server volumes, including Daten (883 GB), EE (807 GB), WINDVSW1 (344 GB), and dmsscan (12 GB), covering employee home directories, production/process data, machine configurations, Apollo ERP and VBANK banking records, DATEV accounting, bank transfers, DMS exports, and scanned documents. The attackers also staged a database backup (spiel.zip.001–010, 100.6 GB) dated 2026-06-03 before compromise. #Germany

paipharma.com in Brazil reports a BrainCipher ransomware incident involving unauthorized access and encryption of files, resulting in service disruption and potential data exposure. The attack impacted operations across #Brazil

Chaos has issued a ransomware/extortion claim against universalplant.com, targeting Universal Plant Services (UPS) in the United States. The threat actor says it possesses 315 GB of corporate, financial, and operational data, including sensitive accounting and payroll information, and demands action under its “FINAL NOTICE” statement. #UnitedStates

The ransomware claim targets https://sza.it/ in Italy, attributed to the incransom threat actor, and involves client, contract, personal data, NDA and related material. The claim indicates data exposure and extortion affecting organizations in #Italy

Orion4value.com (DE) was targeted by the settra ransomware threat actor, with impacted documents including Financial reports and related materials being encrypted. Victims in #Germany

Petradiamonds.com in the United Kingdom was targeted by the threat actor settra, with The Diamond Archive claiming access to sensitive company documents, including a complete employee directory. The impacted country(s) were #UnitedKingdom

Ilex-paysages.com, a French landscape and urban planning organization (FR), was targeted by the settra threat actor with ransomware, as attackers attempted to encrypt and extort data linked to its internal landscape archive and stored secrets. The incident impacted #France

owensborograin.com, in the US, was reportedly targeted by the settra ransomware threat actor, which demanded “fi….” as leverage while attempting to extort the victim. The incident impacted the US #UnitedStates

Advanced Business Systems, a Quad Cities provider of office products and IT services, reported a ransomware attack by the akira threat actor, in which the attackers claimed they would exfiltrate 31GB of corporate data. The stolen information includes employee personal data (including 88 SSNs and passports), NDAs, projects, contracts and agreements, and customer information. #countryname

Port Angeles Composite LLC (PAC), a U.S.-based aerospace structural composite supplier in Washington State, was targeted by the ransomware threat actor cmdorganization. The attack impacted Port Angeles Composite in the United States, compromising its ability to deliver advanced composite assemblies to customers in the aerospace sector. #UnitedStates

The unsafe ransomware operation targeted straightperformance.de in Germany, disrupting operations and impacting data availability and integrity. With an estimated $2 million revenue exposure, the incident caused significant business interruption and losses in #Germany

Musashino University in Japan reported a ransomware attack attributed to threat actor qilin, with data and systems reportedly disrupted. The incident highlights the ongoing risk of ransomware targeting educational institutions in #Japan

Kunert Fashion in Germany was targeted by the qilin ransomware threat actor, resulting in encrypted files and disruption of business operations. The claim indicates that the attackers demanded ransom for restoring access to affected systems, impacting Germany #Germany

C****h in the US reported a ransomware incident attributed to the threat actor payoutsking, resulting in unauthorized access and disruption of operations. The affected organization experienced data and system impacts consistent with ransomware activity in #UnitedStates