BRIEFRansomwarehighP57
IncRansom lists Canadian law firm Bereskin Parr and Smart & Biggar
Bereskin Parr / Smart & Biggar
Detected22 October 2026 · 02:36 UTC
The IncRansom leak site has published Bereskin Parr / Smart & Biggar, a Canadian intellectual-property law firm, claiming theft of client case data and related files. IP firms concentrate patent, trademark and litigation material for corporate clients, so a confirmed leak can expose trade secrets and third-party confidential information well beyond the firm itself. Defenders should treat this as a live extortion case and monitor for downstream publication of client data.
CategoryRansomware
Severityhigh
Priority score57
Detected22 October 2026 · 02:36 UTC
Ransomware● 45
Ransomware n0n publica a la proveedora sanitaria estadounidense Heritage Senior LivingGroup n0n has published Heritage Senior Living, a US healthcare support services provider, claiming to hold network security configurations, internal segmentation maps and remote access account structures, marked as unpaid and exposed. That mix of remote-access and segmentation detail is exactly what enables follow-on intrusion or lateral movement against healthcare networks. It is a live victim listing, but outside the Latin America region, so it ranks below regional incidents.Ransomware● 44
Ransomware lamashtu publica a la química WEPOS ChemieThe lamashtu group listed WEPOS Chemie, a German maker of specialized cleaning and care products. Ransomware against a chemicals manufacturer risks operational and data disruption. Part of a cluster of lamashtu listings targeting German and French industrial firms.Ransomware● 46
Ransomware lamashtu publica al fabricante MECA-PRECISThe lamashtu group listed MECA-PRECIS, a French precision-stamping and metal-components manufacturer serving automotive and appliance industries. Ransomware disruption to a manufacturing supplier can cascade to OEM production lines. Signals ongoing lamashtu activity against European manufacturers.Ransomware● 54
Ransomware lamashtu publica al integrador FuG-GruppeThe lamashtu ransomware group listed FuG-Gruppe, a German IT systems integrator (Systemhaus) and ERP provider for industrial and steel-trading firms. As a managed IT/ERP supplier, a compromise here creates supply-chain risk for many downstream industrial clients. Relevant for defenders tracking integrator exposure.Ransomware● 82
Ransomware BrainCipher ataca a la clínica argentina Clínica RomeroBrainCipher ransomware listed clinicaromero.com, a healthcare provider in Argentina, on its leak site. Healthcare is critical infrastructure, so exposed patient records, PII and disrupted services carry real risk. Argentine and regional defenders should treat this as a live incident and check for exposure.Ransomware● 54
Ransomware Interlock publica al Coastal Alabama Community CollegeInterlock published the US community college after claiming it ignored the intrusion, alleging student education records, protected health information, financial aid data, employee files, SSNs and card data were taken. Education-sector victims usually face long notification cycles and heavy PII exposure. Useful for monitoring stolen student and financial-aid datasets resurfacing for sale.