BRIEFRansomwarehighP72
Metaencryptor ransomware lists healthcare IT provider ProMantra
ProMantra, Inc.
Detected12 November 2026 · 13:14 UTC
ProMantra, Inc. is a US healthcare IT and BPO firm in Somerset, New Jersey that handles medical billing, coding and claims for hospitals and physician groups. The metaencryptor ransomware group listed it as a victim on ransomware.live, indicating a likely compromise of sensitive healthcare and billing systems. Healthcare defenders should treat this as third-party risk and watch for leaked patient and claims data.
CategoryRansomware
Severityhigh
Priority score72
Detected12 November 2026 · 13:14 UTC
RansomwarePriority 36
Ransomware krybit publica a la fabricante turca CeytechThe krybit ransomware group published Ceytech Makina, a Turkish industrial machinery manufacturer, on its leak site. Ransomware against an industrial manufacturer can disrupt supply chains and IT/OT operations. Monitoring is warranted, though the victim is outside the Argentina/LATAM focus.RansomwarePriority 45
Ransomware thegentlemen publica a la mexicana PrinselThe 'thegentlemen' group listed Prinsel, a Mexican children's footwear and clothing manufacturer in Toluca with 66 years of history and roughly 200-500 employees. As a LATAM consumer-goods manufacturer operating retail and distribution networks, it holds supplier and customer data. This is a fresh regional ransomware victim worth tracking for leaked commercial records.RansomwarePriority 46
Ransomware thegentlemen publica a la brasileña Solarium RevestimentosThe 'thegentlemen' group listed Solarium Revestimentos, a São Paulo-based manufacturer and distributor of ceramic tiles and decorative panels with 20+ years in the market and roughly 50-150 employees. As a LATAM industrial manufacturer, it sits in a supply chain serving construction and retail clients. A fresh regional ransomware victim worth monitoring for leaked commercial data.RansomwarePriority 50
Ransomware thegentlemen publica al grupo mexicano San CristóbalThe 'thegentlemen' group listed Grupo San Cristóbal, a Mexican multi-service group in Mexico City offering property management, accounting, construction and legal services with 250+ employees and 2,800 managed properties. The victim handles sensitive client financial and property data. This is a fresh LATAM private-sector ransomware victim with potential client-data exposure.RansomwarePriority 72
Ransomware thegentlemen publica a la logística argentina MegatransThe 'thegentlemen' ransomware group listed Megatrans S.A., an Argentine road freight and logistics operator based in Lanús, Buenos Aires, with 200+ employees, 150+ trucks and a GPS-tracked fleet across terminals in Rosario, Córdoba, Neuquén and Mendoza. This is a fresh Latin American transportation/ logistics victim, a sector relevant to supply-chain and critical infrastructure. Leaked operational and client data could expose routes and commercial relationships.RansomwarePriority 45
Ransomware Barracuda publica a la tecnológica estadounidense ProLiantThe 'barracuda' ransomware group published US technology company ProLiant on its leak site, claiming 1.23 TB stolen from a main file server with contracts, partner and financial data and employee information, offered at USD 50,000. The listing is a fresh extortion attempt but involves an out-of-region victim, so its main value is as a supply-chain and partner-risk indicator. Firms working with ProLiant should assume their contractual data may be exposed.