aurora ransomware actors compromised Thomas Y. Pickett & Co., Inc. in the US, exfiltrating backups, including the 102 GB TYPortal web portal database, along with complete HR files, financial records, 200+ client contracts, and an Azure DevOps repository containing proprietary code used to generate tax appraisal notices. They also obtained highly sensitive credentials and a PKCS#12 digital signing certificate enabling potential document forgery, leaving the victim impacted in #UnitedStates.

Softruck in BR was reportedly hit by ransomware attributed to the direwolf threat actor, impacting its access to critical business systems after malicious encryption. The affected operations and data recovery efforts indicate disruption across #Brazil

Cotesma in Chile was targeted by the ransomware threat actor qilin, resulting in an incident involving unauthorized encryption and disruption of operations. The impacted country(s): #Chile

Emser in Spain was targeted by the qilin ransomware threat actor, with malicious encryption used to disrupt access to files and demand a ransom. The incident impacted #Spain

Qilin ransomware, targeting Chadwick Switchboards in Australia, deployed its malicious code to disrupt operations and encrypt data, with extortion demands used to pressure recovery efforts. The impacted country(s): #Australia

play ransomware actors reportedly targeted Silicon Valley Glass in the United States, encrypting files and demanding payment for decryption. The claim indicates disruption to operations and potential data compromise, impacting the United States #UnitedStates

Bold Spring Nursery in the United States reported a ransomware incident attributed to the threat actor play, alleging that its systems were compromised and data access disrupted. The organization stated that files were encrypted and recovery actions were initiated amid the attack #UnitedStates

Unidentified Group in the US reported a ransomware attack attributed to threat actor qilin, involving unauthorized access and data encryption/extortion. The incident affected business operations and resulted in compromised information exposure. #UnitedStates

Storm ransomware reportedly targeted Nipigon District Memorial Hospital (CA), disrupting healthcare services for patients and residents in the Nipigon district, including diagnostic imaging, laboratory services, physiotherapy, assisted living, and community programs such as Meals on Wheels and telemedicine support. The incident impacted the hospital’s ability to deliver care while it works toward its CARE 2030 strategic planning initiative. #Canada

Threat actor emperador targeted OMUR HIRDAVAT LTD, a Turkish wholesale and retail business, by encrypting files and demanding ransom, impacting thousands of documents containing personnel and customer data. The incident affected Turkey. #Turkey