Jouvet SAS in France was targeted by the Qilin ransomware threat actor, resulting in data encryption and disruption of operations. The incident occurred in France #France

CitizensPay (CTZPay), a mobile digital wallet and payment platform in Myanmar (https://ctzpay.com), suffered a ransomware claim by DYSPHOR1A involving compromised agent user information totaling 30 GB, with a reported ransom demand of $7,000–$25,000. #Myanmar

Lider Aviacao (Brasil) reported a ransomware incident attributed to the threat actor thegentlemen, impacting its operations in the country. #Brasil

Spirit Cultural Exchange – US, a U.S.-based organization offering international cultural exchange and J-1 visa programs, was targeted by ransomware actors including kazu. The incident impacted the United States #UnitedStates

Mission Pet Health, a Healthcare Services organization in the US, reported a ransomware incident attributed to the direwolf threat actor, resulting in operational disruption and data compromise. The impacted country(s): #UnitedStates

Veradigm (US) was targeted by the ransomware threat actor thegentlemen, resulting in the exposure of 3.5+ million personal patient records containing highly sensitive PII including full name, address, social security number, email, and phone number, along with guarantors’ PII. Impacted country(s): #UnitedStates

Zdrowit, a Polish pharmacy chain (PL) headquartered in Bytom and operating across 40+ cities, was targeted in a ransomware incident attributed to thegentlemen, with the claim involving disruption to operations. The threat is described as impacting the organization’s pharmacy network and supporting IT/data functions in #Poland

Leo Schachter Diamonds (USA) said it was targeted by ransomware by thegentlemen, citing disruption risk to operations across its global diamond brand. With leoschachter.com at the center of its brand-led moat amid pressure from lab-grown competitors, the firm stated the incident impacted the United States. #UnitedStates

Mega Velocity (MX) is reported to have been targeted by Vexy Ransomware. The threat actor’s activity against the Mexico-based technology company is part of a ransomware claim, #Mexico