BRIEFRansomwarehighP72
n0n ransomware publishes sports retailer Fanatics
Fanatics
Detected20 September 2026 · 03:37 UTC
Ransomware group n0n published US sports-commerce platform Fanatics, claiming 108 GB including 46,902 order files, customer PII, partner invoices and fraud-prevention data, with a 2026-09-23 deadline. A fresh, high-impact victim whose leaked records can drive follow-on fraud and third-party risk. Outside LatAm but timely as a newly published ransomware case.
CategoryRansomware
Severityhigh
Priority score72
Detected20 September 2026 · 03:37 UTC
Ransomware● 47
Ransomware Doommageddon publica al fabricante turco Aslan TekstilThe Doommageddon ransomware group published Turkish textile and apparel manufacturer Aslan Tekstil on its leak site with 3.27 GB and 6,457 files, with a deadline of 2026-11-04. Fresh extortion listings expose corporate data to partners and enable downstream phishing and fraud. Although outside Latin America, it signals active targeting of industrial and manufacturing firms relevant to regional supply chains.Ransomware● 52
Ransomware Settra publica al fabricante de agua industrial MarloThe Settra ransomware group has listed Marlo Incorporated, a Wisconsin-based manufacturer of industrial water-treatment systems (softeners, reverse-osmosis and deionization equipment) supplied to data centers, steel mills and chemical plants across the US. No data volume or ransom details are disclosed, but compromising an industrial water-treatment supplier carries supply-chain risk for critical-infrastructure operators. The victim entry was published via the ransomware.live aggregator.Ransomware● 43
Ransomware Qilin publica al bufete estadounidense Arthur ChapmanThe Qilin ransomware group has listed Arthur Chapman Kettering Smetak Pikala, a US law firm, as a victim on its leak site. Data-theft extortion against legal firms exposes privileged client information and can cascade to corporate clients and litigation parties. Relevant for legal-sector defenders and their clients assessing downstream exposure.Ransomware● 45
Ransomware 'pear' publica a la joyería Five Star Jewelers (EE. UU.)The ransomware group 'pear' has published Five Star Jewelers, a retail jewelry store in Miami, Florida, on its leak site. As a fresh victim publication, it signals an active intrusion with potentially stolen customer and business data. While a small retailer, it is a current extortion event worth tracking for sector trends.Ransomware● 64
Ransomware Qilin publica a la Hawaii Law Enforcement FCUQilin ransomware listed Hawaii Law Enforcement Federal Credit Union, a US financial victim serving law-enforcement members, on its leak site. The listing suggests stolen sensitive data and service disruption at a regulated institution. The sensitive membership base warrants immediate defensive review.Ransomware● 63
Ransomware Qilin publica a la cooperativa NuVista Federal Credit UnionThe Qilin ransomware group listed NuVista Federal Credit Union, a US financial-services victim, on its leak site. Publication signals likely data theft and operational disruption at a regulated financial institution. Members and the credit union should prepare for data-exposure and service-continuity impacts.