BRIEFRansomwarehighP44
Akira ransomware lists HVAC services firm Quality Air
Quality Air
Detected11 November 2026 · 14:24 UTC
Akira listed Quality Air, an HVAC services company, threatening to publish corporate data such as employee passports, driver's licenses, W-9 forms and customer contracts. Identity and financial documents raise fraud and account-takeover risk. Service-sector firms and customers should monitor for the data release and phishing.
CategoryRansomware
Severityhigh
Priority score44
Detected11 November 2026 · 14:24 UTC
RansomwarePriority 46
Ransomware Akira publica a la manufacturera R3 CompositesAkira listed R3 Composites, a compression-molding manufacturer serving automotive and heavy-truck industries, threatening to release 8 GB that includes employee personal information. Such data supports identity fraud and downstream attacks on the manufacturer's partners. Automotive supply-chain firms should monitor the leak and review third-party exposure.RansomwarePriority 52
Ransomware Akira publica a la constructora Leware (Florida)The Akira ransomware group listed Leware Construction Company, a Florida bridge contractor, threatening to release 30 GB of corporate data including employee IDs, SSNs, contracts and client information. Exposure of personal and contractual data fuels identity theft and supply-chain targeting. US construction firms and the company's partners should treat the leak as likely and monitor for its release.RansomwarePriority 55
Ransomware Qilin publica a la Universidad Oral RobertsThe Qilin ransomware group listed Oral Roberts University (US education sector) as a victim on its leak site, indicating a claimed breach with likely data exfiltration. Universities hold sensitive student PII, research and financial data, making them attractive extortion targets. Education defenders should treat this as an active incident indicator and watch for leaked records.RansomwarePriority 40
Ransomware krybit publica a la consultora Actualize ConsultingThe krybit ransomware group added Actualize Consulting, an engineering and digital transformation services firm in the United States, to its leak site. Professional-services victims usually mean stolen client data and project documentation that can be reused against their own customers. It is outside Latin America but relevant as a fresh ransomware publication in the services supply chain.RansomwarePriority 45
Ransomware Akira publica a Calmont Wire & CableThe Akira ransomware group listed Calmont Wire & Cable, a Canadian manufacturer of custom wire and cable for medical, robotics, aerospace and military applications, and threatens to leak 10GB of corporate data. A breach of such a supplier can expose sensitive engineering and defense-adjacent information. Though outside Latin America, it is a fresh ransomware disclosure worth tracking for supply-chain risk.RansomwarePriority 45
Ransomware metaencryptor publica a la aseguradora Pekin Insurancemetaencryptor listed Pekin Insurance, a US insurer with roughly USD 270M revenue, on its leak site. Insurers concentrate sensitive customer, claims and financial data, making them high-value ransomware targets and a source of downstream fraud. The victim is outside Latin America, so it is a regional-relevance signal rather than a regional alert.