The Health Sciences Centre (hsc.mb.ca) in Winnipeg, Canada, was targeted by the ransomware threat actor incransom, resulting in what they claim was the largest healthcare data breach in the sector, while they asserted they chose not to fully disrupt operations. They alleged access/exfiltration of patient, employee, financial/insurance, and confidential hospital materials, despite management stating no sensitive data was affected. #Canada

KT RESTAURANT, a Thai restaurant operator behind the Santa Fe steakhouse chain in Bangkok, was targeted by the Majinahanashi ransomware group in an alleged ransomware incident tied to its business operations. #Thailand

BONJOUR GROUP, India’s largest socks manufacturing company, reported a ransomware incident attributed to Threat Actor Majinahanashi. The attack impacted #India

PIO PIO (Grupo PIO PIO S.A.S.), a family-owned rotisserie chicken (asadero) restaurant chain in Colombia, with 10+ locations in the Popayán/Cali region, is claimed by threat actor Majinahanashi to be the victim of ransomware. The impacted country(s): #Colombia

ACI Proyectos SAS in Colombia reported a ransomware incident attributed to the qilin threat actor, resulting in disruption of access to its systems and data. The attack impacted business operations and data availability in #Colombia

Redact is claimed to have conducted ransomware activity against DexCom, a medical equipment company in the United States, impacting operations. This incident has been associated with the medical equipment sector and reported against a $4.97B USD organization, resulting in disruptions across #UnitedStates.

Helwan International Technological University (Helwan University, HITU) in Egypt reported a ransomware incident attributed to the UmBra threat actor, disrupting university services and access to critical systems. The university, known for its advanced programs and labs in cybersecurity, data science, artificial intelligence, and mechatronics, faced operational impacts tied to the attack. #Egypt

Glenhardie Country Club in the US reported a ransomware incident attributed to the qilin threat actor. The attack resulted in service disruption and data compromise, impacting the United States. #UnitedStates

The ransomware claim alleges threat actor **rhysida** targeted **Gress Clark Young & Schoepper**, impacting approximately **167,804 files** totaling about **~166.4GB** of sensitive banking details, client SSNs and signatures (including W-9/W-9, W-4, and related identity documents), BIIA case-management materials, firm finance records, and extensive medical/PHI imaging and forms. The data also reportedly includes “coaching” correspondence related to medical opinion/witness handling, credentials for the SPC e-file system, and records concerning disciplinary action, with the impacted country(s): #N/A

KOIKE Sanso Kogoyo Co. Ltd. (Japan) reported a ransomware extortion claim by the threat actor exitium, alleging the group exfiltrated 5.8 TB of data and threatened to sell it if contact is not made by Tuesday (10.13.2026). The stolen files reportedly include agreements, confidential information, customer/client datasets, engineering drawings, and correspondence. #Japan