BRIEFRansomwarehighP45
auditteam ransomware publishes Russian heat-energy firm TEK SPB
TEK SPB (tek-spb.ru)
Detected20 September 2026 · 15:37 UTC
The auditteam ransomware group listed TEK SPB (tek-spb.ru), a St. Petersburg heat-engineering company, as a victim. The firm designs and maintains district heating points and metering units, i.e. critical urban infrastructure, so a breach could disrupt heating services or expose industrial data. Energy/utility defenders should treat this as a reminder of OT risk arising from IT compromise.
CategoryRansomware
Severityhigh
Priority score45
Detected20 September 2026 · 15:37 UTC
Ransomware● 40
Ransomware auditteam publica a una empresa italianaThe auditteam ransomware group published a new Italian victim whose name is partially masked. The sector is not stated, but a fresh ransomware listing indicates a confirmed network compromise and data theft. Organizations in the affected sector across Italy/Europe should watch for extortion follow-up and reuse of stolen data.Ransomware● 36
Ransomware Qilin publica a la empresa alemana KMLSQilin ransomware has listed KMLS, a German company, on its leak site, indicating a confirmed breach with likely data exfiltration. The group typically targets mid-market firms using double-extortion tactics. German industrial and supply-chain partners should assess their third-party exposure.Ransomware● 42
Ransomware Qilin publica al minorista tailandés ShopDunkQilin ransomware has published ShopDunk, a Thai retail and e-commerce brand, as a victim on its extortion site. Publication implies a confirmed intrusion with a data-theft component, exposing customer and payment-adjacent records. Retail and e-commerce defenders should watch for credential-stuffing and fraud spikes.Ransomware● 52
Ransomware Qilin publica al Touring Club SuisseThe Qilin ransomware group has listed Touring Club Suisse, a major Swiss motoring and travel-services organization, on its leak site. A published victim of this scale signals a confirmed compromise and likely exfiltration of member and operational data. Swiss and neighboring financial/insurance partners should treat it as a real third-party risk.Ransomware● 44
Ransomware 'emperador' publica a la notaría italiana Studio Notarile CostantinoThe ransomware group 'emperador' has posted the Italian notary firm Studio Notarile Associato Salvatore Costantino e Anna Favarato to its leak site. The listing claims several thousand documents, including customer files and employee data. A freshly published victim signals an active extortion campaign and warrants monitoring.Ransomware● 46
Ransomware Nightspire publica a la sanitaria Great Bay Bio de Hong KongNightspire ransomware listed Great Bay Bio, a Hong Kong healthcare firm, among its victims; data availability is still unclear. Healthcare breaches endanger sensitive patient data and can disrupt clinical operations. It signals an active ransomware campaign, though outside the AR-LATAM region.