BRIEFRansomwarehighP60
Falcon ransomware publishes Globus Medical (US medical device maker)
Globus Medical
Detected30 August 2026 · 15:15 UTC
Falcon ransomware claims to have exfiltrated 2.96 TB from medical device maker Globus Medical, including customer records, FDA submissions, and product complaint logs. The incident exposes sensitive healthcare and regulatory data, raising supply-chain concerns. Even though the victim is in the US, this type of attack highlights TTPs relevant for Latin American healthcare and critical infrastructure defenders.
CategoryRansomware
Severityhigh
Priority score60
Detected30 August 2026 · 15:15 UTC
Ransomware● 42
Ransomware LockBit5 publica a la hotelera griega Kord HotelsLockBit5 published Kord Hotels, a Greek hospitality group in Santorini, as a ransomware victim. Hospitality firms hold guest PII and payment data, exposing customers to fraud. Greek hotel operators should check for ransomware persistence and validate offline backups.Ransomware● 42
Ransomware LockBit5 publica a la tailandesa SKY CCLockBit5 listed SKY CC, a Thai customer-experience and contact-center company, on its leak site. Contact centers process large volumes of customer PII, so a breach risks mass data exposure. Thai service providers should isolate affected systems and rotate credentials.Ransomware● 44
Ransomware LockBit5 publica a la asesoría Poole GroupLockBit5 listed Poole Group, an Australian accounting and business advisory firm, on its leak site. Accounting firms hold sensitive client financial and tax data, making them prime extortion and downstream fraud targets. Australian SME advisors should warn clients and verify backup integrity and MFA coverage.Ransomware● 58
LockBit5 ataca a una administración pública francesaLockBit5 published a French public administration (Saint-Pierre-des-Corps) as a victim on its leak site. Government bodies holding citizen data are high-value targets, and leaked files can enable identity theft and follow-on intrusion. Public-sector defenders in France should verify exposure and hunt for lateral movement.Ransomware● 42
Ciberataque a TFG London afecta tiendas Hobbs y WhistlesA cyberattack on UK retailer TFG London has disrupted operations of its Hobbs and Whistles chains, reported in underground news feeds. It is a fresh victim but outside Latin America, with no confirmed ransomware publication or data leak details yet. Low priority for regional defenders; mainly useful for retail-sector attack trend tracking.Ransomware● 40
Filtración de 7,1 GB de la constructora canadiense GorconShadowByt3$ claims to have hacked Gorcon Construction Inc (Maple.ca) and stolen 7.1 GB of data. A named-victim leak of corporate files matters for the affected organization and its supply chain. It is outside our region and the date is unconfirmed.