BRIEFRansomwarehighP42
IncRansom ransomware lists US firm Magnals
magnals.com
Detected6 October 2026 · 18:07 UTC
The IncRansom group has published US firm magnals.com as a ransomware victim, referencing confidential data belonging to multiple companies. The listing names external counsel and points to exfiltration of sensitive corporate records. It signals a fresh compromise with negotiation and leak leverage.
CategoryRansomware
Severityhigh
Priority score42
Detected6 October 2026 · 18:07 UTC
Ransomware● 47
Ransomware Panzer publica a la consultora SweetRushThe Panzer ransomware group has listed US professional-services firm SweetRush as a new victim on its leak site. A fresh ransomware publication indicates an active intrusion with data exfiltration and an imminent leak of corporate and client data. Defenders should watch for follow-on phishing and supply-chain exposure.Ransomware● 60
Ransomware Everest publica a la aerolínea Flydubai de DubáiEverest ransomware has published Flydubai, the Dubai government-owned low-cost airline, as a victim. Targeting a state-linked airline raises critical-infrastructure and aviation-safety concerns. It pressures regional transport and government stakeholders and merits close monitoring.Ransomware● 48
Ransomware Everest reclama al fabricante estadounidense KennametalThe Everest ransomware group lists Kennametal, a US-listed industrial tooling manufacturer, among its victims. A manufacturing breach can disrupt supply chains and OT-adjacent operations across mining, energy and aerospace customers. Listed-company incidents carry material financial and disclosure implications.Ransomware● 38
Ransomware Umbra publica al fabricante estadounidense Four Hands LLCThe Umbra group listed Four Hands LLC, a US wholesaler of home furnishings, as a ransomware victim. As a newly named victim in a live extortion campaign, the company and its retail partners face potential disruption and downstream supply-chain phishing. It is a US target with no regional or critical-infrastructure link, so it ranks low for AR-LATAM operators.Ransomware● 41
Ransomware Akira publica a la empresa estadounidense HygradeAkira added Hygrade, a US safety and industrial products manufacturer, to its leak site, claiming theft of employee names, addresses and phone numbers plus project specifications and NDAs. The data supports targeted social engineering and business-email-compromise against the firm and its supply chain. It is a fresh US victim only marginally relevant to AR-LATAM infrastructure defenders.Ransomware● 47
Ransomware Akira publica a la firma contable Michael K. Shelby (EE. UU.)Akira listed the Annapolis CPA firm Michael K. Shelby, threatening to leak 18 GB of corporate data that includes client and employee SSNs and payment information. Stolen tax and financial records are highly sensitive PII that feed identity fraud and follow-on phishing against clients. The victim is US-only, lowering priority for AR-LATAM defenders but illustrating active accounting-sector targeting.