BRIEFRansomwarehighP68
lockbit5 ransomware lists Malaysia's Penang Adventist Hospital
Penang Adventist Hospital (PAH)
Detected15 November 2026 · 15:14 UTC
The lockbit5 ransomware group added Penang Adventist Hospital (PAH) in Malaysia, a healthcare provider, to its leak site and is threatening to publish stolen data. Hospitals hold sensitive patient records and run critical clinical systems, so such attacks can disrupt care directly. Malaysian healthcare organizations and PAH partners should assess exposure and review incident response.
CategoryRansomware
Severityhigh
Priority score68
Detected15 November 2026 · 15:14 UTC
RansomwarePriority 46
PixelLeaks publica a la energética estadounidense SPI CorpPixelLeaks has listed SPI Corp, a US petroleum staffing and back-office accounting provider within the SPI Energy group, with a leak deadline of 17 November 2026. The group claims to hold personnel, financial, client and operational records. Back-office providers for energy companies are attractive targets because their access and data touch multiple operators in the supply chain.RansomwarePriority 58
Ransomware PixelLeaks publica a la operadora indonesia Fiber NetworksThe PixelLeaks group has listed PT. Fiber Networks Indonesia, an ISP that also runs an endpoint surveillance platform, with a publication deadline of 18 November 2026. The claimed material includes personnel, financial, client and operational records. Compromise of a telecom provider is significant because subscriber and infrastructure data can support further attacks on downstream customers.RansomwarePriority 74
Pixelleaks publica datos de pacientes de la clínica peruana Suiza LabThe Pixelleaks extortion group has listed Clinica Suiza Lab, a Peruvian clinic and laboratory group, with a data set that reportedly includes the full patient register with identity documents, clinical histories, lab results and diagnostic imaging, including minors, plus staff and payroll records. This is a sensitive healthcare breach in Peru with direct extortion and fraud potential. Publication is imminent unless a negotiation occurs, so patient-facing response should start now.RansomwarePriority 42
Ransomware Qilin publica al fabricante Kayaku Safety Systems MalaysiaThe Qilin ransomware group added Kayaku Safety Systems Malaysia, an automotive safety-components manufacturer, to its leak site with no data description published yet. Listing alone signals a claimed intrusion into an industrial supplier that sits in regional automotive supply chains. No samples or record counts are visible, so impact is unconfirmed but worth tracking for supply-chain risk.RansomwarePriority 66
Ransomware n0n publica datos de clientes de MM Insurance AgencyThe n0n group published records from a Canadian financial advisory firm, including signed registered-plan documents, investment summaries, insurance policies and identity documents such as driver licences, a marriage certificate and a death certificate. Client banking details and tax slips containing social insurance numbers are also exposed, along with a graph of 2,219 distinct client contacts. This is severe identity-theft material affecting named individuals and warrants notification and monitoring.RansomwarePriority 68
Ransomware n0n publica datos de la empresa estadounidense PollstarThe n0n ransomware group listed Pollstar, a US concert-trade data company, publishing 135,621 named contacts with phones, emails and addresses plus 26,527 quote and invoice documents. The stolen archive covers booking managers, venues, promoters and talent buyers, plus sales and box-office records. It matters because a B2B contact trove of this size enables highly targeted phishing and invoice fraud against live-events companies across the region.