BRIEFRansomwarelowP34
MedusaLock ransomware publishes French firm Aokkef
Aokkef
Detected23 September 2026 · 08:29 UTC
MedusaLock ransomware published French organization Aokkef, with roughly 137 emails extracted. It is a small, low-impact victim but confirms the group's ongoing campaign and extortion activity.
CategoryRansomware
Severitylow
Priority score34
Detected23 September 2026 · 08:29 UTC
RansomwarePriority 45
Ransomware metaencryptor publica a la aseguradora Pekin Insurancemetaencryptor listed Pekin Insurance, a US insurer with roughly USD 270M revenue, on its leak site. Insurers concentrate sensitive customer, claims and financial data, making them high-value ransomware targets and a source of downstream fraud. The victim is outside Latin America, so it is a regional-relevance signal rather than a regional alert.RansomwarePriority 48
Ransomware metaencryptor publica a la constructora Hyundai E&CThe metaencryptor group listed Hyundai E&C, the construction arm of Hyundai Motor Group (South Korea), on its leak site. Engineering and construction firms hold sensitive project, supplier and contract data, so a leaked listing signals potential operational disruption. The victim is outside Latin America but the listing reflects an active extortion campaign worth tracking.RansomwarePriority 44
Ransomware Akira publica al fabricante estadounidense Houston Machine and ThreadAkira listed US machining manufacturer Houston Machine and Thread as a victim, threatening to upload 10GB of corporate data. Claimed exfiltration includes employee passports, driver's licenses and SSNs, I9 forms, contracts, financial records and NDAs. The leak of SSNs and identity documents creates fraud and account-takeover risk for staff and partners in the industrial manufacturing sector.RansomwarePriority 48
Ransomware Akira publica a la minorista francesa Ligne RosetThe Akira group listed French furniture retailer Ligne Roset as a victim, claiming 150GB of corporate data to be uploaded. The stolen material reportedly includes employee passports and driver's licenses, contracts, financial records and NDAs. Though outside Latin America, it is a fresh, high-volume extortion leak from an established ransomware crew worth tracking for TTPs and supply-chain exposure.RansomwarePriority 52
Ransomware 'pear' publica al fabricante Bridgestone HosePowerThe ransomware group 'pear' added Bridgestone HosePower, LLC to its leak site, a US manufacturer and distributor of hydraulic and industrial hose products. A fresh victim listing signals likely data theft and operational disruption in a manufacturing supply chain. Defenders in industrial manufacturing should treat this as a supply-chain risk and review expose data dependencies.RansomwarePriority 72
Documentos de Compunet y Mitsubishi Colombia filtrados tras ransomwareA DarkForums post published today distributes internal documents from Compunet and Mitsubishi Colombia, stating the ransom was not paid and the data was released. The material appears to be corporate files from a regional industrial and IT services supply chain, exposing client, contract and operational information. Suppliers tied to Mitsubishi's local operations and their business partners should treat this as an active data-exposure event.