PULSE
FEED
ransomnightspire reclama a REFSA S.A. · AR · Otherransomsilentransomgroup reclama a S... G...ransomqilin reclama a Isapre Consalud · CL · Healthcareransomorova reclama a Harry's International · SG · Retail & E-Commerceransomeverstake reclama a da*****t.com · Technologyransomeverstake reclama a ra*****g.comransomredact reclama a Holland & Knight · US · Professional Servicesransomqilin reclama a Astino Berhad · MY · Manufacturingransomakira reclama a Princeton Management · Financial Servicesransomakira reclama a Usnextransomakira reclama a Howells Motor Freight · US · Transportationransomsafepay reclama a deom.be · BEransomhyflock reclama a Ateşsan Ambalaj · TR · Manufacturingransompear reclama a Neiman & Company, Inc. · US · Financial Servicesransomnightspire reclama a REFSA S.A. · AR · Otherransomsilentransomgroup reclama a S... G...ransomqilin reclama a Isapre Consalud · CL · Healthcareransomorova reclama a Harry's International · SG · Retail & E-Commerceransomeverstake reclama a da*****t.com · Technologyransomeverstake reclama a ra*****g.comransomredact reclama a Holland & Knight · US · Professional Servicesransomqilin reclama a Astino Berhad · MY · Manufacturingransomakira reclama a Princeton Management · Financial Servicesransomakira reclama a Usnextransomakira reclama a Howells Motor Freight · US · Transportationransomsafepay reclama a deom.be · BEransomhyflock reclama a Ateşsan Ambalaj · TR · Manufacturingransompear reclama a Neiman & Company, Inc. · US · Financial Services
Kalir Brief · Item19 September 2026 · 00:12 UTC
BRIEFRansomwarehighP45

Anubis ransomware publishes technology firm Quest Group

Quest Group

Detected19 September 2026 · 00:12 UTC
Why it matters

The Anubis ransomware group listed Quest Group, a technology-sector victim, claiming to have stolen employee data and internal files. Technology firms often hold source code, credentials and customer records that can fuel follow-on intrusions. No country is specified, so the victim may sit outside Argentina/LATAM, which limits the direct regional impact.

MetadataRECORD
CategoryRansomware
Severityhigh
Priority score45
Detected19 September 2026 · 00:12 UTC
Related items6
Ransomware● 45
Ransomware 'pear' publica a la joyería Five Star Jewelers (EE. UU.)The ransomware group 'pear' has published Five Star Jewelers, a retail jewelry store in Miami, Florida, on its leak site. As a fresh victim publication, it signals an active intrusion with potentially stolen customer and business data. While a small retailer, it is a current extortion event worth tracking for sector trends.
4d
Ransomware● 64
Ransomware Qilin publica a la Hawaii Law Enforcement FCUQilin ransomware listed Hawaii Law Enforcement Federal Credit Union, a US financial victim serving law-enforcement members, on its leak site. The listing suggests stolen sensitive data and service disruption at a regulated institution. The sensitive membership base warrants immediate defensive review.
7d
Ransomware● 63
Ransomware Qilin publica a la cooperativa NuVista Federal Credit UnionThe Qilin ransomware group listed NuVista Federal Credit Union, a US financial-services victim, on its leak site. Publication signals likely data theft and operational disruption at a regulated financial institution. Members and the credit union should prepare for data-exposure and service-continuity impacts.
7d
Ransomware● 55
Ransomware afecta al proveedor cloud japonés IDCFReports indicate a ransomware incident at Japanese cloud provider IDCF exploited a flaw in an OSS portal, reportedly affecting several availability zones with no ransom paid. A hosting-provider outage cascades to downstream customers dependent on its infrastructure. Organizations using IDCF-hosted services should confirm service continuity and review account exposure.
7d
Ransomware● 72
Ransomware Qilin publica a la estadounidense Westin AutomotiveThe Qilin ransomware group has listed Westin Automotive, a US automotive parts manufacturer, on its leak site, indicating an active or recently completed intrusion with threatened data release. As a manufacturing supplier, the victim sits in the automotive supply chain where disruption can cascade to downstream customers. Defenders in manufacturing should review this as a current, time-sensitive extortion event until exfiltration and impact are clarified.
8d
Ransomware● 58
Ransomware 'auditteam' publica al proveedor británico Safe Data StorageThe Auditteam leak site names Safe Data Storage Ltd, a Kent-based SME that sells managed backup and disaster recovery on its own ISO 27001 private cloud for Microsoft 365, Veeam and Arcserve workloads. Compromise of a backup provider endangers the recovery copies of many downstream client organisations, so the real exposure footprint is larger than the single victim. No publication date is confirmed in this item, so freshness should be verified before escalation.
8d