BRIEFRansomwarehighP42
Dark Project ransomware lists community manager CCMC
The CCMC
Detected13 November 2026 · 16:13 UTC
The ransomware group 'Dark Project' has published The CCMC, a US/Canada community (HOA) management firm, on its leak site via ransomware.live. Victim organizations of this type hold resident financial and personal data that attackers commonly exfiltrate before encryption. The publication is fresh but outside Latin America, so it is lower priority for regional defenders.
CategoryRansomware
Severityhigh
Priority score42
Detected13 November 2026 · 16:13 UTC
RansomwarePriority 44
El ransomware Akira publica al contratista estadounidense Paragon MechanicalAkira listed Paragon Mechanical, a US HVAC and mechanical contractor, and warns it will leak 37GB of data including employee passports and medical information. Such personal data creates fraud and privacy exposure for staff. It is a fresh intrusion relevant to contractors handling sensitive HR records.RansomwarePriority 52
El ransomware Akira publica a Replogle Globes con 404 GB de datosAkira listed Replogle Globes, a US globe manufacturer, and claims it will leak 404GB of data including passports, driver's licenses, HR files, customer data, contracts and financials. The bulk and sensitivity of the alleged trove pose serious identity-theft and fraud risk for employees and customers. A fresh victim with substantial PII warrants monitoring.RansomwarePriority 56
El ransomware Akira publica al contratista gubernamental estadounidense GalorathAkira listed Galorath, a US firm providing project-estimation software and services to government and commercial clients, and threatens to leak 12GB of corporate data plus employee personal information. Because it serves public-sector programs, leaked data could expose government project details. This is an active, fresh intrusion worth tracking.RansomwarePriority 45
El ransomware Bravox publica al fabricante estadounidense World Wide FittingsThe Bravox ransomware group listed World Wide Fittings, a US manufacturer of steel and hydraulic tube fittings, on its leak site. A fresh victim signals an active intrusion with potential theft of manufacturing and customer data. Industrial buyers and suppliers should watch for follow-on supply-chain phishing.RansomwarePriority 43
Ransomware doommageddon publica al bufete jurídico turco Koray TopaçThe doommageddon ransomware group lists Koray Topaç Hukuk Bürosu, a Turkish law firm, as a victim currently under negotiation with a deadline of 2026-11-20. Law firms hold sensitive client, litigation and corporate data, making them attractive extortion targets and a source of downstream leaks affecting their clients. Firms and their corporate clients should watch for publication and prepare for potential data exposure.RansomwarePriority 46
Ransomware emperador publica a la fabricante de semiconductores CarsemThe emperador ransomware group has added Carsem, a major Malaysian semiconductor packaging and test provider, to its leak site and threatens to publish stolen data samples within three days. Semiconductor suppliers sit in high-value supply chains, so a data-extortion event here can expose partner and customer information. Organizations in the electronics supply chain should assess third-party exposure and monitor the leak page.