BRIEFRansomwarehighP75
Krybit ransomware attacks formasuniversales.com in Mexico
formasuniversales.com
Detected17 July 2026 · 01:39 UTC
The Krybit ransomware group has published data stolen from formasuniversales.com, a Mexican business services company. The leak includes sensitive information about the company and its clients. This poses a privacy and security risk for businesses that use their services.
CategoryRansomware
Severityhigh
Priority score75
Detected17 July 2026 · 01:39 UTC
Ransomware● 35
Ransomware n0n publica a una empresa de medios de EE. UU.Ransomware group n0n listed a US media/broadcast technology victim as pending exposure. The target is unnamed, limiting attribution, but broadcast playout is sensitive infrastructure. Useful for tracking n0n's victim-selection pattern.Ransomware● 35
Ransomware n0n publica a una empresa de pagos de EE. UU.Ransomware group n0n listed a US fintech/payments victim as pending exposure. The victim is anonymized but the sector is high-impact for financial disruption. Relevant mainly to track n0n's targeting and timing, not for a LATAM alert.Ransomware● 64
Ransomware n0n publica al fabricante de implantes espinales Evolution SpineRansomware group n0n published Evolution Spine / All Labs, a Texas spinal implant manufacturer in the healthcare sector. Leaked data reportedly includes FDA quality records, device history, a 317-table inventory database and finance files. Healthcare supply-chain victims matter for defenders monitoring medical-device and hospital partners.Ransomware● 42
IncRansom publica a la firma legal estadounidense Fair FeeIncRansom has published Fair Fee Legal Services, a US professional-services firm, as a ransomware victim. Although outside Latin America, such listings show an active extortion operation and may include data belonging to related clients. Regional defenders should track the group's TTPs for potential spillover.Ransomware● 50
IncRansom reclama filtracion de 2TB ligada a AT&T (Verveba)IncRansom claims a 2TB breach of Verveba, linked in the listing to www.att.com, a major US telecom. Telecom data can expose customer and network information, and the large volume suggests significant exfiltration. Regional operators should monitor the group given the critical-infrastructure sector.Ransomware● 73
Ransomware incransom publica a la cooperativa costarricense CoopecajaThe incransom ransomware group listed Coopecaja, a Costa Rican savings-and-credit cooperative (coopecaja.fi.cr), as a victim, exposing a LATAM financial-services entity. This is a fresh victim post in the banking/credit-union sector of the region, a high-value target for extortion and downstream fraud. Defenders in Costa Rican financial services should treat this as an active leak event and check for related credential or data exposure.