MODERATE
Moderate global threat
- Ransomware surging15
Shinyhunters
DOMINANT6535CLAIMS · 7D—
BRIEF OF THE DAY· 04:48 PM UTC
RANSOM60.0LEAK9.4MKEV6
Quiet window: 15 ransom victims claimed vs 25.1/day baseline — below the average. Umbra leads with 4 claims in Technology / Education (Brazil, India) — SOCOCO, Manipal Academy of Higher Edu. followed by Eclipse with 3. On leaks, 9.4M accounts flowed into the feed over 7d (top: Angel One - 6,765,054 breached accounts). 6 CVEs entered the KEV catalog over 7d (CVE-2015-5477). Kalir surfaced 4 critical underground items in the last 24h (top: Gov / Military — Gobierno de Mendoza (Argentina)).
LIVE PULSE · NOWAUTO
RANSOM IDX
60.0▼ -20%
15 victims claimed today vs baseline 25.1/day — activity below the average.
Most active groups
Top countries (7d)
- USUnited States44
- BRBrazil7
- DEGermany7
Kalir Brief · 24h
CROSS-SOURCEGov / Military● 96
Filtración de datos del Gobierno de Mendoza con más de 1M de registrosA fresh leak claims over 1 million PII records from the Government of Mendoza in Argentina, posted only minutes ago. This is official provincial citizen data and is directly relevant to Argentine public sector defenders. It can fuel identity theft, targeted phishing and fraud against residents; verify scope and notify affected agencies immediately.Gov / Military● 95
Filtración de datos del Gobierno de Mendoza con más de 1 millón de registros PIIA threat actor published a database allegedly containing over 1 million PII records belonging to the Government of Mendoza, Argentina, with the post appearing only minutes before discovery. Provincial government data like this typically includes citizen identity documents, addresses and contact details, exposing residents to fraud and the province to further targeted attacks. Defenders should verify the claim, warn affected citizens and watch for follow-on access attempts against provincial systems.Leak● 93
Filtración de datos del Gobierno de Mendoza con más de 1M de registros PIIA threat actor posted a database allegedly containing over 1 million PII records belonging to the Government of Mendoza, Argentina, freshly advertised on a leak forum. If authentic, it exposes citizen and employee personal data of a provincial government body, enabling phishing, identity fraud and targeted intrusion against public administration. Argentine government entities should urgently validate the exposure and watch for credential abuse and follow-on attacks.Leak● 88
Base de datos con identidad completa de 596.652 ciudadanos mexicanos a la ventaA threat actor is offering a full identity database of 596,652 Mexican citizens, including CURP, INE voter ID, home address and personal data. Government-issued identity records at this scale enable mass identity theft, fraud, loan/credit abuse and impersonation of voters. Defenders in Mexico and LATAM should treat this as a high-priority exposure and validate its authenticity.Latest victims 24h
● REAL-TIME- 6hQILINHagiva YhIL
- 11hNIGHTSPIREPMG Project Management GroupAE
- 13hBARRACUDAMinistarstvo poljoprivrede, šumarstva i ribarstvaHR
- 17hSILENTRANSOMO'Hagan Meyer
- 18hNETRUNNERMid Atlantic Gynecologic Oncology and Pelvic Surgery AssociatesUS
- 19hUMBRASOCOCOBR
- 20hECLIPSEdipecarr.com.brBR
- 20hQILINMCM TelecomMX
External feed
CURATED- Dark Reading[Virtual Event] Cybersecurity Outlook 2027now
- Dark Reading[Virtual Event] What Every Enterprise Should Know About Securing Cloud Assets in the Age of AInow
- The RecordCo-creator of Empire Market dark web marketplace given 40-year sentencenow
Pulse's first editorial note is about to publish. Meanwhile, here's what the data says.
Enter the admin →Underground Market · groupsVICTIMS · 7D
SymGroup7dΔTrend
QILQilin21+58%SAFSafepay10-9%THEThegentlemen9-69%UMBUmbra9+100%SILSilentransomgroup8+700%BYOByod7+100%STOStorm6-57%ECLEclipse6+500%View Ransomware Wing →Global IncidenceBY REGION · 24H
15events · 24h
RANSOM
LEAK
VULN
3
NA
2
EU
3
APAC
2
LATAM
3
MEA
Top Origins (7d)VIEW WIRE →
US
United States44
BR
Brazil7
DE
Germany7
ES
Spain6
IN
India4
CH
Switzerland4
CA
Canada4
AE
U.A.E.3
Pulse ResearchORIGINAL · CTI
More editorial coming.
Kalir · Underground BriefCROSS-SOURCE
Gov / Military● 96
Filtración de datos del Gobierno de Mendoza con más de 1M de registrosA fresh leak claims over 1 million PII records from the Government of Mendoza in Argentina, posted only minutes ago. This is official provincial citizen data and is directly relevant to Argentine public sector defenders. It can fuel identity theft, targeted phishing and fraud against residents; verify scope and notify affected agencies immediately.Gov / Military● 96
Base de datos del RENAPER de Argentina a la ventaA full database dump attributed to RENAPER, Argentina's national persons registry that issues DNI and passports, was just posted for distribution on DarkForums. Such a dataset can hold identity data on millions of citizens, enabling mass identity fraud, impersonation and account takeover. If authentic, this is a critical national-security and privacy exposure for Argentina.Gov / Military● 95
Filtración de datos del Gobierno de Mendoza con más de 1 millón de registros PIIA threat actor published a database allegedly containing over 1 million PII records belonging to the Government of Mendoza, Argentina, with the post appearing only minutes before discovery. Provincial government data like this typically includes citizen identity documents, addresses and contact details, exposing residents to fraud and the province to further targeted attacks. Defenders should verify the claim, warn affected citizens and watch for follow-on access attempts against provincial systems.Gov / Military● 95
Filtración de 300K registros del gobierno de Mendoza (mendoza.gob.ar)A 300,000-record database belonging to the Argentine provincial government of Mendoza (mendoza.gob.ar) is being published/sold on DarkForums, posted just minutes before discovery. It likely exposes citizen PII (DNI, names, contacts), a serious breach of Argentine public-sector data. This is a fresh, high-impact incident for AR critical-infrastructure defenders and warrants immediate verification.Global WiresCURATED
Undergroundjust nowNEW
[Virtual Event] Cybersecurity Outlook 2027Undergroundjust nowNEW
[Virtual Event] What Every Enterprise Should Know About Securing Cloud Assets in the Age of AIUndergroundjust nowNEW
Co-creator of Empire Market dark web marketplace given 40-year sentenceUnderground45m agoNEW
Hundreds of thousands impacted by data breach at biosensor firm iRhythmUnderground45m agoNEW
Leader of vast money mule operation that laundered cybercriminal proceeds pleads guiltyUnderground1h agoNEW
FBI touts another ShinyHunters arrest in response to data breachUnderground2h agoNEW
Belarusian hacktivists admit to 2023 breach of Russian state healthcare networkUnderground2h agoNEW
$10 million bounty offered for Chinese Hafnium hacker accused of Microsoft Exchange Server mega-attackUnderground3h agoNEW
OpenAI says it disrupted Russian and Iranian influence ops that used ChatGPTUnderground4h agoNEW
Social Engineering AI Agents: The New BEC for 2026Underground5h agoNEW
In Other News: AI Used in Korean Bank Breaches, Poem-Guided Botnet, Empire Admin Gets 40 YearsUnderground5h agoNEW
Google Domains Impacted by Recent ccTLD HijacksUnderground Indices· daily reading
The WireLATEST 10 EVENTS
ransom
qilin reclama a Hagiva Yh · IL · Not Found
6h agoUnderground · Ransom
ransom
nightspire reclama a PMG Project Management Group · AE · Professional Services
11h agoUnderground · Ransom
ransom
barracuda reclama a Ministarstvo poljoprivrede, šumarstva i ribarstva · HR · Agriculture and Food Production
13h agoUnderground · Ransom
ransom
silentransomgroup reclama a O'Hagan Meyer · Professional Services
17h agoUnderground · Ransom
ransom
netrunner reclama a Mid Atlantic Gynecologic Oncology and Pelvic Surgery Associates · US · Healthcare
18h agoUnderground · Ransom
ransom
umbra reclama a SOCOCO · FR · Technology
19h agoUnderground · Ransom
ransom
eclipse reclama a dipecarr.com.br · BR · Manufacturing
20h agoUnderground · Ransom
ransom
qilin reclama a MCM Telecom · MX · Technology
20h agoUnderground · Ransom
ransom
silentransomgroup reclama a Baker McKenzie · US · Professional Services
20h agoUnderground · Ransom
ransom
umbra reclama a Manipal Academy of Higher Edu · IN · Education
20h agoUnderground · Ransom