BRIEFRansomwarehighP74
Incransom ransomware publishes Winnipeg Health Sciences Centre
Health Sciences Centre (Winnipeg)
Detected11 October 2026 · 02:21 UTC
The Incransom ransomware group has listed the Health Sciences Centre in Winnipeg, one of Canada's largest medical institutions, claiming a major healthcare data breach. Healthcare ransomware victims face clinical disruption, patient-safety risk and regulatory exposure, and the leaked data fuels downstream fraud. Cross-border providers and LATAM health-sector defenders should watch for shared tactics.
CategoryRansomware
Severityhigh
Priority score74
Detected11 October 2026 · 02:21 UTC
Ransomware● 50
Ransomware cifra los sistemas de rime Net GlobalA DarkForums post claims the systems of 'rime Net Global' have been encrypted, posted only minutes before collection. If legitimate, it indicates operational disruption at a corporate target that could affect partners and supply chains. The claim is unverified and the entity ambiguous, so confirm the victim's identity and sector before acting.Ransomware● 30
Ransomware publica a la empresa GOLDUNITED de BrunéiA forum post names GOLDUNITED SDN BHD, a Brunei-based company, as a ransomware victim, indicating a published extortion leak. It is a fresh victim disclosure but outside Argentina/LATAM, so its direct relevance to regional defenders is limited. Track only for regional supply-chain or affiliate-tracking context.Ransomware● 42
Ransomware Nightspire publica a la italiana Valvorobica IndustrialeThe Nightspire ransomware group posted Italian manufacturer Valvorobica Industriale S.p.A. to its leak site, a freshly-published victim in the manufacturing sector. While outside the AR-LATAM region, it confirms an active extortion campaign and offers TTPs (initial access, exfiltration patterns) defenders can track. No AR-LATAM entity is named, so relevance is indirect.Ransomware● 57
Ransomware RunSomeWares publica a la farmacia Morton LTCThe ransomware group RunSomeWares has listed Morton LTC Pharmacy, an independent family-owned pharmacy in Wisconsin (US healthcare sector), as a victim. The exposure may include patient and pharmacy operational data. This is a fresh victim notice relevant to healthcare and incident-response teams.Ransomware● 43
Ransomware ScarlettGroup ataca el sitio de Yale University PressThe ScarlettGroup ransomware operation published yalebooks.yale.edu, the book retail site of Yale University Press. While it is an education/e-commerce target rather than core university systems, a compromise could expose customer accounts, orders and payment data. Worth monitoring for credential and payment-card leaks.Ransomware● 50
Ransomware Storm publica al proveedor sanitario estadounidense TheraCareStorm ransomware listed TheraCare, a New York-based multi-service healthcare, rehabilitation and education provider serving children and families across the US Northeast. Healthcare ransomware can halt clinical and educational services and expose sensitive patient records. Monitor the incident for data-leak volume and victim-notification obligations.