Category: Ransom Monitor

Editora Irm,ãos Vitale in Brazil reported a ransomware incident, with the threat actor identified as “payload,” disrupting operations at the traditional Brazilian music publisher specializing in music editions and printed music. The organization offers musical works, archives, methods, songbooks, e-books, and licensing services, and the activity affected organizations in #Brazil

The ransomware claim targets ENB Versicherungen (myenb.ch) in Switzerland, attributed to the payload threat actor. As an independent insurance broker supporting private and corporate clients across multiple insurance lines, the incident has impacted operations in #Switzerland

Incransom ransomware allegedly targeted Newspaper Media Group, a local US news organization serving communities across regions including Central Jersey and South Jersey. The group’s published newspapers and magazines may have been disrupted, impacting their ability to provide comprehensive local coverage. #UnitedStates

Super Finishing in Brazil reported a ransomware incident attributed to the worldleaks threat actor. The attack impacted their systems and operations in #Brazil

L’Archevque & Rivest Ltée in Canada was targeted by the worldleaks threat actor in a ransomware attack, which involved encrypting or restricting access to the organization’s files and systems. The incident impacted #Canada

Pacific Lamp & Supply in the US reported a ransomware attack attributed to the Qilin threat actor, resulting in encrypted systems and operational disruption. The incident is described as a compromise linked to the Qilin group’s ransomware activity, impacting #UnitedStates

lockbit5 ransomware reportedly targeted 5deagosto.com.br, a national leader in the distribution of automotive parts in Brazil, disrupting its integrated solutions and services. The incident impacted Brazil #Brazil

Eternal Beauty Holdings Limited (eternal.hk), based in Hong Kong, reported a ransomware claim attributed to LockBit5. The attack is described as targeting the company’s operations as the largest perfume group across China, including Hong Kong and Macau. #HongKong

Pinnacle Re-Tec (US) reported a ransomware incident attributed to the cmdorganization threat actor, resulting in disruption to its operations and services. Pinnacle Re-Tec Ltd is a UK-based centrifugal pump and gearbox service provider, but the claim cites impact in the impacted country(s): #UnitedStates

Probat Bau AG, a construction company in Germany, was targeted by LockBit5 ransomware, with attackers reportedly encrypting or exfiltrating data from the probat.ag environment. The ransomware claim indicates disruption to business operations in Germany. #Germany

The ransomware claim involves the Commune d’Eyguires in France being targeted by the qilin threat actor. The attack encrypted or otherwise disrupted local systems and data, impacting France #France

Desert Micro, a Jacksonville, Florida software and internet services provider (DesertMicro.net) reported a ransomware incident attributed to the nova threat actor, claiming attackers accessed and exfiltrated large volumes of customer data including invoices, storage records, backup and document data, and credit card/payment billing information from the company and related services. The claim states nova would provide a sample “tree” of stolen data to the company’s support team upon contact, resulting in impact to the United States. #UnitedStates

PJ Daly Contracting in Ireland reported a ransomware attack by threat actor qilin, resulting in encrypted files and disruption to operations. The incident has been attributed to the malware’s impact on systems within the organization in #Ireland

The ransomware incident affected coemi.com.br, a Brazilian real estate company (Coemi Im,óveis) based in Brasília, Distrito Federal, Brazil, and was attributed to the krybit threat actor. The attack resulted in encrypted data and disrupted operations for the victim in #Brazil.

The ransomware group krybit targeted www.mupras.com in BR, compromising the MUPRAS RAM (Mutuelle de Prévoyance et d’Actions Sociales de Royal Air Maroc), a Moroccan mutual aid and social welfare organization. The incident disrupted services and encrypted data, impacting Brazil. #Brazil