BRIEFRansomwarelowP45
Gunra ransomware publishes automotive company Worldtube
worldtube
Detected4 August 2026 · 14:29 UTC
The Gunra ransomware group has published data belonging to Worldtube, a South Korean manufacturer of new automotive parts with an estimated revenue of US$20 million. Although the victim is outside Latin America and relatively small, it represents a confirmed fresh ransomware victim leaked on ransomware.live. Monitoring such incidents helps track the activity of emerging ransomware groups and potential supply chain impacts.
CategoryRansomware
Severitylow
Priority score45
Detected4 August 2026 · 14:29 UTC
Ransomware● 35
Ransomware iah6477 publica a la alimentaria Hilmar Cheese (EE.UU.)The iah6477 ransomware group has listed Hilmar Cheese, a US dairy producer, with roughly 719 GiB of claimed exfiltrated data. Food and agriculture victims raise supply-chain and operational-disruption risks. It is outside the AR-LATAM region, so it is a lower-priority item for local defenders but notable in scale.Ransomware● 42
Ransomware Qilin publica a la tecnológica española Segres SystecQilin has listed Segres Systec, a Spanish technology company, as a ransomware victim. Technology providers often hold privileged access into customer environments, so a breach here can cascade to downstream organizations. Spanish-speaking defenders should assess third-party exposure and monitor for leaked data.Ransomware● 50
Ransomware Qilin publica a Shield Wall Systems of Florida (defensa)The Qilin ransomware group has published Shield Wall Systems of Florida, a US firm classified in the Government & Defense sector, on its leak site. Defense-sector victims can expose sensitive contracts, system designs and client data, with supply-chain implications. Defenders should watch for leaked credentials and follow-on targeting of partners.Ransomware● 78
Ransomware LockBit publica a la manufacturera mexicana Grupo ABGGroup lockbit5 posted Mexican manufacturing firm Grupo ABG to its leak site, a fresh ransomware victim in Latin America. Manufacturing in Mexico feeds regional supply chains, so encryption or data theft there can cascade to partners and customers. A regional victim that warrants prompt victim-notification and monitoring.Ransomware● 48
Ransomware LockBit publica a la empresa de agua egipcia LCWWGroup lockbit5 listed LCWW, an Egyptian drinking-water and sanitation utility, as a ransomware victim. Water utilities are critical infrastructure, so disruption can affect public health and essential services. Outside AR-LATAM, but a critical-infrastructure ransomware event worth noting for sector trends.Ransomware● 54
Ransomware Qilin publica a la empresa surcoreana KD CorpThe Qilin ransomware group has listed KD Corp, a South Korean company, as a new victim on its leak site. The posting indicates an active intrusion and pressure to pay before stolen data is published. Fresh ransomware victims can also signal supply-chain exposure for partners and regional counterparts.