BRIEFRansomwarehighP72
Brazilian bearing maker FRM listed as ransomware victim by zawoo
FRM - Fábrica de Rolamentos e Mancais Ltda
Detected30 August 2026 · 10:16 UTC
The Brazilian bearing manufacturer FRM was listed as a victim of the zawoo ransomware group, indicating a recent compromise and possible data theft. This is a fresh ransomware victim in Latin America, and industrial organizations in the region should check for exposure to this campaign.
CategoryRansomware
Severityhigh
Priority score72
Detected30 August 2026 · 10:16 UTC
Ransomware● 42
Ransomware LockBit5 publica a la hotelera griega Kord HotelsLockBit5 published Kord Hotels, a Greek hospitality group in Santorini, as a ransomware victim. Hospitality firms hold guest PII and payment data, exposing customers to fraud. Greek hotel operators should check for ransomware persistence and validate offline backups.Ransomware● 42
Ransomware LockBit5 publica a la tailandesa SKY CCLockBit5 listed SKY CC, a Thai customer-experience and contact-center company, on its leak site. Contact centers process large volumes of customer PII, so a breach risks mass data exposure. Thai service providers should isolate affected systems and rotate credentials.Ransomware● 44
Ransomware LockBit5 publica a la asesoría Poole GroupLockBit5 listed Poole Group, an Australian accounting and business advisory firm, on its leak site. Accounting firms hold sensitive client financial and tax data, making them prime extortion and downstream fraud targets. Australian SME advisors should warn clients and verify backup integrity and MFA coverage.Ransomware● 58
LockBit5 ataca a una administración pública francesaLockBit5 published a French public administration (Saint-Pierre-des-Corps) as a victim on its leak site. Government bodies holding citizen data are high-value targets, and leaked files can enable identity theft and follow-on intrusion. Public-sector defenders in France should verify exposure and hunt for lateral movement.Ransomware● 42
Ciberataque a TFG London afecta tiendas Hobbs y WhistlesA cyberattack on UK retailer TFG London has disrupted operations of its Hobbs and Whistles chains, reported in underground news feeds. It is a fresh victim but outside Latin America, with no confirmed ransomware publication or data leak details yet. Low priority for regional defenders; mainly useful for retail-sector attack trend tracking.Ransomware● 40
Filtración de 7,1 GB de la constructora canadiense GorconShadowByt3$ claims to have hacked Gorcon Construction Inc (Maple.ca) and stolen 7.1 GB of data. A named-victim leak of corporate files matters for the affected organization and its supply chain. It is outside our region and the date is unconfirmed.