BRIEFRansomwarehighP44
Akira ransomware lists Bankruptcy Software Specialists
Bankruptcy Software Specialists
Detected23 October 2026 · 15:14 UTC
The Akira ransomware group has listed Bankruptcy Software Specialists, a US firm providing trust-fund management software to bankruptcy trustees, and claims it will upload 19GB of corporate data. Such software vendors sit close to sensitive financial and legal records of debtors and trustees. A compromise here risks downstream exposure of client law firms and financial data, not just the vendor itself.
CategoryRansomware
Severityhigh
Priority score44
Detected23 October 2026 · 15:14 UTC
Ransomware● 65
Qilin ransomware publica a Revi Group de MéxicoThe Qilin group added Revi Group, a Mexican organization, to its ransomware leak site. Publication signals a claimed breach with data theft and likely encryption of internal systems. Any Mexican victim in the region is relevant for defenders monitoring Qilin's LATAM activity and potential credential or data reuse.Ransomware● 72
Qilin publica a la transportista chilena Aerotop como víctimaQilin has named Aerotop, a Chilean transportation company, on its extortion leak site. For a logistics/transport operator, exposed data can include operational systems, client contracts and route or shipment records. Disruption to such a firm can ripple through Chilean transport and supply chains, warranting exposure checks.Ransomware● 80
Qilin publica a la argentina Aryza como víctima de ransomwareThe Qilin ransomware group has added Aryza, an Argentine technology company, to its leak site. Publication implies data was likely exfiltrated and encrypted, exposing customer or internal records. A local tech provider can be a supply-chain foothold into Argentine businesses, so defenders should check for exposure and credential reuse.Ransomware● 40
Orova publica a la tecnológica taiwanesa Trevi TechnologyOrova has listed Trevi Technology, a Taiwanese software and platform services firm founded in 2017, as a ransomware victim. Technology providers are high-value because stolen code and client data can pivot into supply-chain attacks. The listing lacks data-volume details and the victim is outside the region, so treat it as monitoring-only.Ransomware● 40
Orova publica a la joyería malasia Wah Chan ConsolidatedThe Orova group has published Wah Chan Consolidated, a Malaysian jewelry retailer with more than 50 boutiques, as a ransomware victim. Retail and luxury-goods victims typically involve customer PII and payment data, but the listing gives no detail on volume or data type. Impact for AR/LATAM defenders is minimal; note it only as sector context.Ransomware● 48
Akira publica a la financiera alemana SCHWAB-SYSTEMAkira has added SCHWAB-SYSTEM, a German financial-services company, claiming 19 GB of stolen data including employee passports, client information and contracts. Financial-sector victims often see downstream fraud and business-email-compromise attempts against their counterparties. Relevance to AR/LATAM is indirect unless the firm has regional partners or clients.