BRIEFRansomwarehighP55
Falcon ransomware publishes DistributionNOW (US energy distributor)
DistributionNOW
Detected30 August 2026 · 15:15 UTC
Falcon ransomware claims 344 GB exfiltrated from energy distributor DistributionNOW, including financial records, SCADA gateway backups, and PLC logic. Loss of OT-related data indicates potential impact on industrial operations. This case is relevant to Latin American energy and critical infrastructure sectors as a warning of similar attack patterns.
CategoryRansomware
Severityhigh
Priority score55
Detected30 August 2026 · 15:15 UTC
Ransomware● 42
Ransomware LockBit5 publica a la hotelera griega Kord HotelsLockBit5 published Kord Hotels, a Greek hospitality group in Santorini, as a ransomware victim. Hospitality firms hold guest PII and payment data, exposing customers to fraud. Greek hotel operators should check for ransomware persistence and validate offline backups.Ransomware● 42
Ransomware LockBit5 publica a la tailandesa SKY CCLockBit5 listed SKY CC, a Thai customer-experience and contact-center company, on its leak site. Contact centers process large volumes of customer PII, so a breach risks mass data exposure. Thai service providers should isolate affected systems and rotate credentials.Ransomware● 44
Ransomware LockBit5 publica a la asesoría Poole GroupLockBit5 listed Poole Group, an Australian accounting and business advisory firm, on its leak site. Accounting firms hold sensitive client financial and tax data, making them prime extortion and downstream fraud targets. Australian SME advisors should warn clients and verify backup integrity and MFA coverage.Ransomware● 58
LockBit5 ataca a una administración pública francesaLockBit5 published a French public administration (Saint-Pierre-des-Corps) as a victim on its leak site. Government bodies holding citizen data are high-value targets, and leaked files can enable identity theft and follow-on intrusion. Public-sector defenders in France should verify exposure and hunt for lateral movement.Ransomware● 42
Ciberataque a TFG London afecta tiendas Hobbs y WhistlesA cyberattack on UK retailer TFG London has disrupted operations of its Hobbs and Whistles chains, reported in underground news feeds. It is a fresh victim but outside Latin America, with no confirmed ransomware publication or data leak details yet. Low priority for regional defenders; mainly useful for retail-sector attack trend tracking.Ransomware● 40
Filtración de 7,1 GB de la constructora canadiense GorconShadowByt3$ claims to have hacked Gorcon Construction Inc (Maple.ca) and stolen 7.1 GB of data. A named-victim leak of corporate files matters for the affected organization and its supply chain. It is outside our region and the date is unconfirmed.