BRIEFRansomwarehighP78
Gammax ransomware publishes AguAseo, Panamanian utility company
AguAseo
Detected30 July 2026 · 21:15 UTC
AguAseo is a Panamanian utility company responsible for solid waste collection and cleaning in Colón province, making it part of Latin American critical infrastructure. The ransomware attack by Gammax could disrupt essential services and expose sensitive operational data. This incident directly affects a Latin American utility, posing risks to public health and environmental management.
CategoryRansomware
Severityhigh
Priority score78
Detected30 July 2026 · 21:15 UTC
Ransomware● 35
Ransomware iah6477 publica a la alimentaria Hilmar Cheese (EE.UU.)The iah6477 ransomware group has listed Hilmar Cheese, a US dairy producer, with roughly 719 GiB of claimed exfiltrated data. Food and agriculture victims raise supply-chain and operational-disruption risks. It is outside the AR-LATAM region, so it is a lower-priority item for local defenders but notable in scale.Ransomware● 42
Ransomware Qilin publica a la tecnológica española Segres SystecQilin has listed Segres Systec, a Spanish technology company, as a ransomware victim. Technology providers often hold privileged access into customer environments, so a breach here can cascade to downstream organizations. Spanish-speaking defenders should assess third-party exposure and monitor for leaked data.Ransomware● 50
Ransomware Qilin publica a Shield Wall Systems of Florida (defensa)The Qilin ransomware group has published Shield Wall Systems of Florida, a US firm classified in the Government & Defense sector, on its leak site. Defense-sector victims can expose sensitive contracts, system designs and client data, with supply-chain implications. Defenders should watch for leaked credentials and follow-on targeting of partners.Ransomware● 78
Ransomware LockBit publica a la manufacturera mexicana Grupo ABGGroup lockbit5 posted Mexican manufacturing firm Grupo ABG to its leak site, a fresh ransomware victim in Latin America. Manufacturing in Mexico feeds regional supply chains, so encryption or data theft there can cascade to partners and customers. A regional victim that warrants prompt victim-notification and monitoring.Ransomware● 48
Ransomware LockBit publica a la empresa de agua egipcia LCWWGroup lockbit5 listed LCWW, an Egyptian drinking-water and sanitation utility, as a ransomware victim. Water utilities are critical infrastructure, so disruption can affect public health and essential services. Outside AR-LATAM, but a critical-infrastructure ransomware event worth noting for sector trends.Ransomware● 54
Ransomware Qilin publica a la empresa surcoreana KD CorpThe Qilin ransomware group has listed KD Corp, a South Korean company, as a new victim on its leak site. The posting indicates an active intrusion and pressure to pay before stolen data is published. Fresh ransomware victims can also signal supply-chain exposure for partners and regional counterparts.