BRIEFRansomwarehighP48
LockBit ransomware publishes health insurer Taspen Life
Taspen Life
Detected25 September 2026 · 13:49 UTC
The LockBit5 group listed Taspen Life, a health and group insurance provider (listed under Kazakhstan), as a ransomware victim. Healthcare breaches disrupt patient and policyholder services and expose sensitive health and personal data. It lies outside Latin America but is a fresh victim relevant for sector and insurer monitoring.
CategoryRansomware
Severityhigh
Priority score48
Detected25 September 2026 · 13:49 UTC
RansomwarePriority 45
Ransomware Akira publica a Calmont Wire & CableThe Akira ransomware group listed Calmont Wire & Cable, a Canadian manufacturer of custom wire and cable for medical, robotics, aerospace and military applications, and threatens to leak 10GB of corporate data. A breach of such a supplier can expose sensitive engineering and defense-adjacent information. Though outside Latin America, it is a fresh ransomware disclosure worth tracking for supply-chain risk.RansomwarePriority 45
Ransomware metaencryptor publica a la aseguradora Pekin Insurancemetaencryptor listed Pekin Insurance, a US insurer with roughly USD 270M revenue, on its leak site. Insurers concentrate sensitive customer, claims and financial data, making them high-value ransomware targets and a source of downstream fraud. The victim is outside Latin America, so it is a regional-relevance signal rather than a regional alert.RansomwarePriority 48
Ransomware metaencryptor publica a la constructora Hyundai E&CThe metaencryptor group listed Hyundai E&C, the construction arm of Hyundai Motor Group (South Korea), on its leak site. Engineering and construction firms hold sensitive project, supplier and contract data, so a leaked listing signals potential operational disruption. The victim is outside Latin America but the listing reflects an active extortion campaign worth tracking.RansomwarePriority 44
Ransomware Akira publica al fabricante estadounidense Houston Machine and ThreadAkira listed US machining manufacturer Houston Machine and Thread as a victim, threatening to upload 10GB of corporate data. Claimed exfiltration includes employee passports, driver's licenses and SSNs, I9 forms, contracts, financial records and NDAs. The leak of SSNs and identity documents creates fraud and account-takeover risk for staff and partners in the industrial manufacturing sector.RansomwarePriority 48
Ransomware Akira publica a la minorista francesa Ligne RosetThe Akira group listed French furniture retailer Ligne Roset as a victim, claiming 150GB of corporate data to be uploaded. The stolen material reportedly includes employee passports and driver's licenses, contracts, financial records and NDAs. Though outside Latin America, it is a fresh, high-volume extortion leak from an established ransomware crew worth tracking for TTPs and supply-chain exposure.RansomwarePriority 52
Ransomware 'pear' publica al fabricante Bridgestone HosePowerThe ransomware group 'pear' added Bridgestone HosePower, LLC to its leak site, a US manufacturer and distributor of hydraulic and industrial hose products. A fresh victim listing signals likely data theft and operational disruption in a manufacturing supply chain. Defenders in industrial manufacturing should treat this as a supply-chain risk and review expose data dependencies.