BRIEFRansomwarelowP44
LockBit5 lists Turkish retailer Istanbul Foodstuff Trading
Istanbul Foodstuff Trading Co LLC
Detected22 October 2026 · 22:36 UTC
LockBit5 added Istanbul Foodstuff Trading Co LLC, a Turkish retail/computer-peripherals firm, to its leak site, indicating an active ransomware intrusion with likely data theft. The victim is outside the AR-LATAM region, so direct impact is limited, but it shows LockBit5's continued targeting of small and mid-size commerce. Worth noting for tracking the group's activity and TTPs.
CategoryRansomware
Severitylow
Priority score44
Detected22 October 2026 · 22:36 UTC
Ransomware● 42
Ransomware bravox publica al bufete estadounidense Barrow & GrimmThe bravox ransomware group listed Barrow & Grimm, a US litigation law firm, as a victim on its leak site. Law firms hold sensitive client and case data that is attractive for double extortion and downstream attacks. Monitor for related credential and data exposure affecting its clients.Ransomware● 44
Ransomware bravox publica a la francesa AMSAM (salud)The bravox ransomware group listed AMSAM, a French healthcare and social-services provider, as a victim on its leak site. Healthcare ransomware threatens patient data and service continuity, making it high-impact for the sector. It is outside Latin America but signals continued targeting of the health and social-care sector.Ransomware● 66
Ransomware Silent Ransom Group publica al bufete Kirkland & EllisThe Silent Ransom Group listed Kirkland & Ellis, one of the world's largest law firms, as a ransomware victim on its leak site. A compromise at this scale threatens highly sensitive M&A, litigation and client data spanning many organizations. It is a high-priority victim even though it sits outside Latin America.Ransomware● 42
Akira publica a la editorial Bethany PressAkira claims Bethany Press International, a Christian book publisher and distribution services firm, and says it will upload 40GB of corporate data. The claimed material includes employee financial and personal records, customer information, financials and contracts. It is a mid-size US victim, so it ranks below regional incidents but illustrates the ongoing exfiltration pattern.Ransomware● 48
Akira publica a la alemana MedienwerkstattAkira added medienwerkstatt ag, a Thurgau-based media and communications provider in the education sector, threatening to release 130GB of corporate data including employee personal information. The volume of exfiltrated HR and client material makes follow-on phishing and business email compromise likely. It is a European victim, so relevance for LATAM defenders is contextual rather than direct.Ransomware● 55
Akira publica al laboratorio de patología AnnapathAkira claims Annapath, a surgical and cytopathology laboratory serving Maryland, Delaware, Pennsylvania, DC, Virginia and West Virginia, and threatens to publish 110GB of corporate data. Healthcare diagnostics providers hold sensitive patient and partner data, so the leak would expose clinical relationships and business records. Although outside Latin America, the playbook (VPN/credential abuse against mid-size providers) mirrors regional targets.