Ransomware activity attributed to threat actor rhysida compromised Reed & Giordano PA in the United States, impacting 94,604 files (~51.3 GB) and exposing sensitive client trust account (IOLTA) wire-transfer instructions with complete account details. The incident also affected PII including W-9/W-2 forms with SSNs, Massachusetts driver’s licenses, birth certificates, and personal UBS documents, along with internal financial case money-flow records and signed conflict-of-interest documentation. #UnitedStates
Friendship Christian School in the US reported a ransomware incident attributed to the qilin threat actor, resulting in disruption and data/access impact. The attack affected organizations in the United States #UnitedStates
Qilin ransomware is claimed to have targeted CNESTEN in Morocco, resulting in disruption and potential data compromise. The claim originates from the threat actor qilin and impacts Morocco #morocco
SCHMITZ & NITTENWILM, a traditional family-owned bakery chain in Köln (Cologne), Germany with 38 branches, was targeted by the ransomware actor Majinahanashi. The incident constitutes a ransomware claim impacting #Germany
Majinahanashi ransomware operators compromised CARIBE / SUBRA (CARIBE.LOCAL), encrypting Servers and Hyper-V to disrupt operations. They also exfiltrated 20,000+ sensitive HR files from storage servers, impacting #
Company #5 in California, USA, was targeted by threat actor N0n with a smart building & surveillance integration-related ransomware attack. The incident is described as pending exposure, with data publication scheduled for 2026-10-14 18:00 UTC. #CaliforniaUSA
Last week’s cybersecurity coverage highlighted active exploitation of critical flaws in products from Microsoft, Citrix, SonicWall, Atlassian, Dell, Fortinet, and NVIDIA, alongside major incidents involving Matchboil, BPFDoor, FortiBleed, and Flax Typhoon. The roundup also covered phishing campaigns targeting YouTubers and shoppers, data breaches at Denmark’s Central Population Register and ASOS, and new AI-related security concerns from Google, Anthropic, OpenAI, and Apple. #MATCHBOIL #BPFDoor #FortiBleed #FlaxTyphoon #CitrixNetScaler #ExchangeServer #SMA1000 #DataCenter #DellSystemUpdate #NVIDIA #ASOS #CPR #ShinyHunters #YouTube
Dragonforce ransomware claims it exfiltrated an archive release of 750 GB of data from TQC S.A. (PE), compressed into convenient archives, threatening to disrupt the company’s operations. TQC Tecnologu00eda Quu00edmica Comercio S. A. delivers agricultural, veterinary, and environmental health solutions in support of sustainable agriculture across Peru. #Peru
Charles E. Tabor AAL LLC (US) reported ransomware activity by the threat actor rhysida affecting 96,456 files (~114.5 GB) and producing settlement-related artifacts across multiple 2026 checks. The incident involved comprehensive exposure of consolidated client PII, including medical scans and HIPAA authorizations, minors’ IDs and driver’s licenses, tax forms with SSNs, and Louisiana death certificates, with settlement check images suitable for check fraud. #UnitedStates
Company #4 in Florida, USA is claimed to have been targeted by the N0n ransomware threat actor, with data exposure potentially scheduled for 2026-10-14 12:00 UTC. The impacted country(s): #UnitedStates
WONDR DIAMONDS & D GEM MOUNT (India-based) reported a ransomware incident attributed to Majinahanashi, with threat activity including tally/backups disruption affecting CRM and other backups. The organization is a lab-grown diamond and fine jewelry retailer operating in the United States and India, and the ransomware claim indicates impacts across #India and #UnitedStates.
CDA was targeted by the Majinahanashi ransomware, which encrypted servers and extracted over 100,000 DICOM files from its medical imaging archive. The stolen data included patient names, IDs, birth dates, study descriptions, and referring physicians. #Unknown
Confipetrol in Colombia was targeted by the Qilin ransomware threat actor, resulting in file encryption and disruption of operations. The attack is attributed to Qilin with the impact centered on Colombia. #Colombia
Majinahanashi ransomware claim targeted GRUPO STARFOODS, a Portuguese restaurant group founded in 1993 and headquartered in Cruz Quebrada, Lisbon, which operates multiple brands including Companhia, Loja das Sopas, Bifanas de Vendas Novas, Selfish, Bas,ílico, and T…. The attack impacted #Portugal
SON-VIDEO, France’s largest online retailer of hi-fi and home-cinema equipment, based in Champigny-sur-Marne, Île-de-France, was targeted by the ransomware threat actor Majinahanashi. SON-Video.com was impacted in #France