BRIEFRansomwarelowP28
Incransom ransomware publishes US orthodontist Maryann Kriger
Maryann Kriger / Bonita Orthodontics
Detected21 September 2026 · 01:37 UTC
Incransom listed Bonita Orthodontics (Dr. Maryann Kriger), a small US practice, on its leak site. The claimed breach could expose patient records and PII, but the victim is small-scale and outside the LATAM focus. Limited regional relevance, useful mainly as context on the group's ongoing activity.
CategoryRansomware
Severitylow
Priority score28
Detected21 September 2026 · 01:37 UTC
Ransomware● 72
Documentos de Compunet y Mitsubishi Colombia filtrados tras ransomwareA DarkForums post published today distributes internal documents from Compunet and Mitsubishi Colombia, stating the ransom was not paid and the data was released. The material appears to be corporate files from a regional industrial and IT services supply chain, exposing client, contract and operational information. Suppliers tied to Mitsubishi's local operations and their business partners should treat this as an active data-exposure event.Ransomware● 68
Ransomware LockBit5 publica a la operadora CentratamaThe LockBit5 ransomware group published Centratama Group on its leak site; Ransomware.live tags the victim as Brazil-based, and the firm is a telecommunications-infrastructure provider. Telecom infrastructure victims can face service disruption and data theft affecting downstream operators. Freshly published ransomware listings warrant monitoring for data publication and sector-wide exposure.Ransomware● 64
Ransomware 'Global Secret Group' publica a Kontron North AmericaThe group 'Global Secret Group' listed Kontron North America, a US computer-hardware and software manufacturer, on its leak site claiming 2.37 TB of data across roughly 912,000 files. Manufacturing and industrial suppliers are frequent precursors to downstream attacks on customers and operational technology. Although outside Latin America, the size of the alleged exfiltration and the victim's supply-chain position make it worth tracking for regional subsidiaries and partners.Ransomware● 47
Ransomware Doommageddon publica al fabricante turco Aslan TekstilThe Doommageddon ransomware group published Turkish textile and apparel manufacturer Aslan Tekstil on its leak site with 3.27 GB and 6,457 files, with a deadline of 2026-11-04. Fresh extortion listings expose corporate data to partners and enable downstream phishing and fraud. Although outside Latin America, it signals active targeting of industrial and manufacturing firms relevant to regional supply chains.Ransomware● 52
Ransomware Settra publica al fabricante de agua industrial MarloThe Settra ransomware group has listed Marlo Incorporated, a Wisconsin-based manufacturer of industrial water-treatment systems (softeners, reverse-osmosis and deionization equipment) supplied to data centers, steel mills and chemical plants across the US. No data volume or ransom details are disclosed, but compromising an industrial water-treatment supplier carries supply-chain risk for critical-infrastructure operators. The victim entry was published via the ransomware.live aggregator.Ransomware● 43
Ransomware Qilin publica al bufete estadounidense Arthur ChapmanThe Qilin ransomware group has listed Arthur Chapman Kettering Smetak Pikala, a US law firm, as a victim on its leak site. Data-theft extortion against legal firms exposes privileged client information and can cascade to corporate clients and litigation parties. Relevant for legal-sector defenders and their clients assessing downstream exposure.