Category: Ransom Monitor

Nightspire claims ransomware activity against US.MAD DOG CONSTRUCTION in the United States, data is not available now. No additional details have been released #UnitedStates

The SilentRansomGroup claims a ransomware incident against Plaza Home Mortgage in the United States, threatening data exposure unless a ransom is paid. Plaza Home Mortgage, founded in 2000, offers conventional fixed-rate, conventional ARM, FHA, and VA loans #UnitedStates

Rockwood Retirement Communities, a US-based nonprofit with more than 65 years of service, reports a ransomware claim attributed to the threat actor kairos. With two Life Plan communities in Spokane, Washington, the organization is assessing operational impact while continuing to prioritize resident care #countryUnitedStates

Termite claims ransomware activity against Insight Hospital and Medical Center Chicago in the United States. Mercy Hospital and Medical Center, founded in 1852 and a member of Trinity Health, is a teaching hospital headquartered in Chicago, Illinois #UnitedStates

A ransomware claim attributes the attack to the Everest threat actor targeting UD Trucks, a Japan-based company, and describes encrypted data, ransom notes, and potential data exfiltration. UD Trucks is described as a Japan-based firm that designs, manufactures, and distributes transport solutions, with a global footprint and a focus on Asia and Africa, underscoring how the incident could disrupt supply chains. #Japan

Threat actor vect is negotiating with keliweb, an IT sector victim in Italy, after claiming access to 200GB of data in a ransomware incident. The IT sector victim faces a 28d 7h deadline for negotiations #Italy

Vect claims a ransomware incident against Casas del Mediterraneo in Spain’s Real Estate sector, involving about 200GB of data.
Negotiations are ongoing, with a deadline of 29d 7h.
#Spain

A ransomware claim from threat actor vect targets the IT sector victim ‘jdaas’ in India, with negotiations ongoing. It threatens backups, source codes, financial records, and other sensitive data totaling 600GB, with a deadline of 20d 7h. #India

SK-Telecom reports that data has been reuploaded by the threat actor coinbasecartel from KR. [AI generated] SK Telecom is a leading South Korean wireless telecommunication services provider, covering mobile phone services, broadband Internet services, and digital media services #SouthKorea

Nations Financial Group Inc reports a ransomware incident attributed to SilentRansomGroup, with the threat actors claiming to have encrypted systems and exfiltrated data affecting its US operations. Above all else, Nations is committed to providing the highest level of support and assistance to its clients as it coordinates with law enforcement and cybersecurity partners to respond and recover. #UnitedStates

The SilentRansomGroup claims to have breached Two River Group Holdings LLC, a US-based firm, encrypting systems and exfiltrating data. Two River specializes in founding, building, and incubating companies in the life sciences sector, and the incident is described as a ransomware operation attributed to SilentRansomGroup. #UnitedStates

APRO Asian Protection Pte Ltd, based in Singapore, reports a ransomware claim attributed to the threat actor incransom, who claims to have compromised its systems and is demanding a ransom. The company has published contact channels for inquiries ([email protected], [email protected]) and phone numbers +65 65676388 and +60 46560933 #Singapore

The ransomware claim is attributed to the threat actor incransom targeting WE Fitness in Thailand. Contact for updates is [email protected] or 02-059-3939 #Thailand

A ransomware claim alleges that The Siskiyou Telephone, a rural independent service provider serving Western Siskiyou County, California, was breached by the threat actor termite. The claim indicates disruption to the company’s high-speed internet and telephone services and hints at potential data exfiltration or ransom demands. #UnitedStates

Termite ransomware claims have targeted Jones Haber & Rollings, a Cape Coral-based multi-service law firm, alleging data encryption and potential leakage of sensitive client information. Established in 1988 and with over 75 years of combined legal expertise, the firm serves clients across Florida and could face reputational and regulatory consequences from the incident. #UnitedStates