BRIEFRansomwarelowP45
Anubis ransomware publishes accounting firm Better Accounting
Better Accounting Solutions
Detected15 September 2026 · 00:12 UTC
The Anubis ransomware group listed Better Accounting Solutions, a professional-services accounting firm, on its leak site, referencing Wall Street accountants' data. Data stolen from an accounting firm can include financial records and client information valuable for fraud and follow-on attacks. It is a fresh victim listing, though a small target outside the region.
CategoryRansomware
Severitylow
Priority score45
Detected15 September 2026 · 00:12 UTC
Ransomware● 45
Ransomware Eclipse publica al distrito escolar Dublin City SchoolsThe Eclipse ransomware group has listed Dublin City Schools, a Georgia (US) school district, on its leak site as a fresh victim. Education victims typically face operational downtime plus exposure of student and staff data, but this instance is outside Latin America, so it mainly serves to track the group's targeting.Ransomware● 45
Ransomware Eclipse publica al mayorista francés Rosello et FilsThe Eclipse ransomware group published Rosello & Fils, a French fruit and vegetable wholesaler in the agriculture and food sector, on its leak site. As a freshly-listed victim outside LATAM it is mainly context for regional defenders but confirms the group's ongoing activity. No compromise details pointing to the region are indicated.Ransomware● 35
LockBit5 publica a la firma finlandesa HTT OyLockBit5 has listed Finnish accounting firm HTT Oy as a ransomware victim on its leak site. Accounting firms hold sensitive financial records of many client companies, making them attractive extortion targets. A breach here can cascade into data-exposure and fraud risks across the firm's entire client base.Ransomware● 40
LockBit5 publica a la empresa taiwanesa tpi.twLockBit5 has listed the Taiwanese technology company tpi.tw as a ransomware victim on its leak site. The intrusion targets a tech firm, and stolen data may be published if no ransom is paid. Even a smaller victim can expose supply-chain partners and customers to follow-on phishing and fraud.Ransomware● 55
LockBit5 publica al municipio italiano Robecco sul NaviglioLockBit5 ransomware has published Comune di Robecco sul Naviglio, a municipality in the Metropolitan City of Milan, under the Government & Defense sector. Local-government systems typically hold citizen records, tax and registry data, and municipal service platforms. A confirmed public-sector victim raises the risk of sensitive data exposure and service disruption for residents.Ransomware● 80
Ransomware Qilin publica a la argentina Vitar GroupThe Qilin ransomware group has listed Vitar Group, an Argentine organization, on its leak site. The sector is listed as 'Other', but a fresh regional victim signals an active intrusion with data-theft and extortion risk. Defenders in Argentina should watch for related TTPs and possible publication of stolen data.