BRIEFRansomwarehighP44
Akira ransomware publishes US manufacturer Houston Machine and Thread
Houston Machine and Thread
Detected6 November 2026 · 16:43 UTC
Akira listed US machining manufacturer Houston Machine and Thread as a victim, threatening to upload 10GB of corporate data. Claimed exfiltration includes employee passports, driver's licenses and SSNs, I9 forms, contracts, financial records and NDAs. The leak of SSNs and identity documents creates fraud and account-takeover risk for staff and partners in the industrial manufacturing sector.
CategoryRansomware
Severityhigh
Priority score44
Detected6 November 2026 · 16:43 UTC
RansomwarePriority 48
Ransomware Akira publica a la minorista francesa Ligne RosetThe Akira group listed French furniture retailer Ligne Roset as a victim, claiming 150GB of corporate data to be uploaded. The stolen material reportedly includes employee passports and driver's licenses, contracts, financial records and NDAs. Though outside Latin America, it is a fresh, high-volume extortion leak from an established ransomware crew worth tracking for TTPs and supply-chain exposure.RansomwarePriority 52
Ransomware 'pear' publica al fabricante Bridgestone HosePowerThe ransomware group 'pear' added Bridgestone HosePower, LLC to its leak site, a US manufacturer and distributor of hydraulic and industrial hose products. A fresh victim listing signals likely data theft and operational disruption in a manufacturing supply chain. Defenders in industrial manufacturing should treat this as a supply-chain risk and review expose data dependencies.RansomwarePriority 72
Documentos de Compunet y Mitsubishi Colombia filtrados tras ransomwareA DarkForums post published today distributes internal documents from Compunet and Mitsubishi Colombia, stating the ransom was not paid and the data was released. The material appears to be corporate files from a regional industrial and IT services supply chain, exposing client, contract and operational information. Suppliers tied to Mitsubishi's local operations and their business partners should treat this as an active data-exposure event.RansomwarePriority 68
Ransomware LockBit5 publica a la operadora CentratamaThe LockBit5 ransomware group published Centratama Group on its leak site; Ransomware.live tags the victim as Brazil-based, and the firm is a telecommunications-infrastructure provider. Telecom infrastructure victims can face service disruption and data theft affecting downstream operators. Freshly published ransomware listings warrant monitoring for data publication and sector-wide exposure.RansomwarePriority 64
Ransomware 'Global Secret Group' publica a Kontron North AmericaThe group 'Global Secret Group' listed Kontron North America, a US computer-hardware and software manufacturer, on its leak site claiming 2.37 TB of data across roughly 912,000 files. Manufacturing and industrial suppliers are frequent precursors to downstream attacks on customers and operational technology. Although outside Latin America, the size of the alleged exfiltration and the victim's supply-chain position make it worth tracking for regional subsidiaries and partners.RansomwarePriority 47
Ransomware Doommageddon publica al fabricante turco Aslan TekstilThe Doommageddon ransomware group published Turkish textile and apparel manufacturer Aslan Tekstil on its leak site with 3.27 GB and 6,457 files, with a deadline of 2026-11-04. Fresh extortion listings expose corporate data to partners and enable downstream phishing and fraud. Although outside Latin America, it signals active targeting of industrial and manufacturing firms relevant to regional supply chains.