ThreatVectr

Ransomware — Page 2

Illustration: A large server room bathed in cold blue light
Ransomware

INC Ransom Claims Attack on AT&T-Linked Domain, Alleges 2 TB Stolen

The criminal group posted the claim on October 15, 2026. AT&T has not confirmed any incident, and the listing could not be independently verified.

3 min read
Illustration: An empty school corridor at dusk, fluorescent lights flickering overhead
Ransomware

Qilin Ransomware Gang Claims Attack on Joliet Public Schools District 86

The criminal group has listed the Illinois school district on its dark-web extortion site. The district has not confirmed any incident, and the claim could not be independently verified.

3 min read
Illustration: brightly lit European supermarket floor at night
Ransomware

Ahold Delhaize Hit by Second Cyberattack in Eight Months as INC Ransom Keeps Targeting Retailers

The grocery group behind Stop & Shop, Albert Heijn and Delhaize has taken systems offline after a fresh security incident, months after INC Ransom stole data on 2.2 million people in a 2024 attack.

3 min read
Illustration: a dimly lit server room with rows of blinking rack servers casting cool blue and amber light across the floor
Ransomware

Qilin ransomware group claims attack on US law firm Iliff, Meredith, Wildberger & Brennan

The criminal group listed the Pennsylvania professional-services firm on its dark-web site on 13 October 2026. No public confirmation exists.

3 min read
Illustration: deep blue ocean water with faint bioluminescent particles visible beneath the surface
Ransomware

SafePay Ransomware Claims Attack on Marine Biotech Firm HIQ Bio

The SafePay ransomware group has listed a US healthcare and marine biotechnology company on its dark-web site. The company has not confirmed any incident, and the claim cannot be independently verified.

3 min read
Illustration: a modern hospital or medical clinic reception desk at night
Ransomware

Ransomware Group N0n Claims Attack on New York Telehealth Firm, Sets 48-Hour Data Deadline

A dark-web listing appeared on 11 October 2026, giving the unnamed company roughly two days before the group threatened to publish stolen data. No public confirmation exists.

3 min read
Illustration: a dimly lit law office at night, neat stacks of legal folders on a wooden desk
Ransomware

Rhysida Claims Attack on Law Firm Reed & Giordano PA, Alleging Client Financial Data Stolen

The ransomware group posted an unverified listing on its dark-web site on 11 October 2026, claiming to hold sensitive client records from the Boston-area firm. Reed & Giordano PA has not confirmed any incident.

4 min read
Illustration: A dimly lit server room with rows of blinking rack-mounted servers
Ransomware

Brain Cipher ransomware group claims attack on Hunt Companies

The criminal gang has listed the Texas-based real estate and investment firm on its dark-web site, though Hunt Companies has not confirmed any incident.

3 min read
Illustration: A dimly lit open-plan law office at night
Ransomware

Rhysida Claims Attack on US Law Firm, Alleges Theft of Client Financial and Medical Records

The ransomware group has listed a Washington-state personal-injury firm on its dark-web site, claiming to hold client tax forms, medical files, and court-filing credentials. The firm has not confirmed any incident.

3 min read
Illustration: A darkened server room with rows of blinking rack-mounted servers casting faint blue and amber light
Ransomware

Qilin Ransomware Gang Claims Attack on Glenhardie Country Club

The criminal group has listed the Pennsylvania hospitality venue on its dark-web extortion site. The club has not confirmed any incident, and the claim remains unverified.

2 min read
Illustration: A polished corporate office at night
Ransomware

MonsterCloud Owner Charged After Secretly Paying Ransoms While Billing Clients $19 Million for 'Decryption'

Zohar Pinhasi told ransomware victims his company could unlock their data without paying criminals. Federal prosecutors say he was paying the criminals all along, then marking up the bill by as much as 1,700 percent.

4 min read
Illustration: a high-security airport arrivals corridor at night
Ransomware

Qilin Ransomware Suspect Arrested in Japan, Extradited to Germany

A 28-year-old Russian national faces charges in Germany over a $160,000 extortion of a logistics company. The arrest comes as Qilin keeps up a punishing pace, and as a critical flaw in widely used VPN software gives the group a fresh way in.

3 min read
Illustration: A sleek modern law office corridor at night, dark and empty, glass-walled meeting rooms visible on either side
Ransomware

Ransomware Gang Claims Attack on Global Law Firm Baker McKenzie

A criminal group called Silentransomgroup has listed Baker McKenzie on its dark-web extortion site. The firm has not confirmed any incident, and the claim cannot be independently verified.

3 min read
Illustration: A dimly lit server room with rows of blinking rack-mounted equipment
Ransomware

Ransomware Group NightSpire Claims Attack on KC Pharmaceuticals

A dark-web listing names the US pharmaceutical company as a victim. The claim is unverified, and the company has made no public statement.

3 min read
Illustration: an empty federal courtroom bench with a brass nameplate blurred
Ransomware

Florida Ransomware 'Expert' Charged With Secretly Paying the Hackers He Promised to Beat

Zohar Pinhasi, owner of MonsterCloud, is accused of billing victims millions while quietly funding the criminals who locked their files.

3 min read
© 2026 Threat Vectr