BRIEFRansomwarehighP48
Akira ransomware lists German firm SCHWAB-SYSTEM
SCHWAB-SYSTEM
Detected23 October 2026 · 14:15 UTC
Akira has added SCHWAB-SYSTEM, a German financial-services company, claiming 19 GB of stolen data including employee passports, client information and contracts. Financial-sector victims often see downstream fraud and business-email-compromise attempts against their counterparties. Relevance to AR/LATAM is indirect unless the firm has regional partners or clients.
CategoryRansomware
Severityhigh
Priority score48
Detected23 October 2026 · 14:15 UTC
Ransomware● 44
Ransomware Akira publica a Bankruptcy Software SpecialistsThe Akira ransomware group has listed Bankruptcy Software Specialists, a US firm providing trust-fund management software to bankruptcy trustees, and claims it will upload 19GB of corporate data. Such software vendors sit close to sensitive financial and legal records of debtors and trustees. A compromise here risks downstream exposure of client law firms and financial data, not just the vendor itself.Ransomware● 40
Orova publica a la tecnológica taiwanesa Trevi TechnologyOrova has listed Trevi Technology, a Taiwanese software and platform services firm founded in 2017, as a ransomware victim. Technology providers are high-value because stolen code and client data can pivot into supply-chain attacks. The listing lacks data-volume details and the victim is outside the region, so treat it as monitoring-only.Ransomware● 40
Orova publica a la joyería malasia Wah Chan ConsolidatedThe Orova group has published Wah Chan Consolidated, a Malaysian jewelry retailer with more than 50 boutiques, as a ransomware victim. Retail and luxury-goods victims typically involve customer PII and payment data, but the listing gives no detail on volume or data type. Impact for AR/LATAM defenders is minimal; note it only as sector context.Ransomware● 54
Akira publica al fabricante Bravilor Bonamat tras robar 100 GBThe Akira group has listed Bravilor Bonamat, a Dutch maker of professional coffee machines, and threatens to publish 100 GB of corporate data including employee passports, driver's licenses and customer records. The victim is outside Latin America, so direct regional impact is limited, but the pattern of stolen identity documents fuels extortion and downstream fraud. Monitor only for supply-chain or commercial links to AR/LATAM entities.Ransomware● 36
Ransomware AuditTeam publica a la británica ADL Lift ServicesAuditTeam listed ADL Lift Services, a roughly 40-employee Scottish commercial lift specialist, on its leak site. Small UK manufacturers remain frequent targets, and a breach can disrupt its UK-wide 24-hour emergency call-out operations. Low regional relevance, but it confirms ongoing AuditTeam activity.Ransomware● 38
Ransomware AuditTeam publica a la italiana Zena OfficeAuditTeam listed Zena Office, a small Italian IT and office-technology provider serving local businesses and public-procurement clients. A compromise of an IT provider can cascade to its downstream customers, including public-sector buyers, creating supply-chain exposure. The firm is small but the third-party risk is worth noting.