BRIEFRansomwarecriticalP87
n0n ransomware publishes data of Ecuadorian health insurer Asisken
Asisken Asistencia Médica S.A.
Detected24 October 2026 · 10:14 UTC
The n0n group published data on Asisken, an Ecuadorian health insurance administrator, including identity documents and birth dates of 139,006 clients, 383,159 beneficiary records and 402,988 claims with diagnosis codes, current through 20 October 2026. This is a large, freshly updated LATAM healthcare/insurance breach exposing highly sensitive PII and medical data, enabling identity theft, fraud and regulatory exposure. Defenders should treat it as a live exposure given the October 2026 timestamps.
CategoryRansomware
Severitycritical
Priority score87
Detected24 October 2026 · 10:14 UTC
Ransomware● 42
Ransomware Deadlock publica a la constructora Trinity Custom HomesThe Deadlock ransomware group has published Trinity Custom Homes, a US custom home builder operating across the Southeast, on its leak site. The listing implies stolen corporate data and possible encryption of design, contract and customer records, which can expose client PII and subcontractor details. It matters mainly as an indicator of Deadlock activity in construction and a source of leaked documents that may name third parties.Ransomware● 38
Ransomware Panzer publica a la ONG pakistaní Rahnuma-FPAPThe Panzer ransomware group listed Rahnuma-FPAP, one of Pakistan's largest reproductive-health NGOs, on its leak site. Healthcare NGOs hold sensitive patient data and typically run thin security budgets, making extortion pressure high. Relevant mainly as ransomware-trend context rather than a direct Latin American alert.Ransomware● 38
Ransomware Deadlock publica a la eléctrica Hensel ElektrikThe Deadlock ransomware group has listed Hensel Elektrik, the Turkish subsidiary of German electrical-equipment maker Gustav Hensel, and released a data-list file. It is a fresh named victim with exfiltration data, but outside the AR/LATAM region and of limited direct relevance. Monitor only as background on Deadlock's targeting of manufacturing.Ransomware● 42
Ransomware Rhysida pone a la venta datos del bufete Sanders Law Group (EE.UU.)Rhysida is advertising roughly 8 TB of stolen data from Sanders Law Group, a New York law firm, as a data-sale listing. The trove likely contains confidential client and litigation records that can drive fraud, extortion and follow-on attacks against the firm's clients. It is outside the AR-LATAM region, but a large named victim worth monitoring for downstream exposure.Ransomware● 58
Ransomware Qilin publica a la productora española Miljaus ProduccionesThe Qilin ransomware group added Miljaus Producciones S.L, a Spanish company, to its victim portal, signaling data theft and encryption with a leak threat. This points to a real breach of a Spanish firm in the services sector whose customer and project data may be exposed. Spanish-speaking victims matter for regional awareness and supply-chain risk tracking.Ransomware● 78
Ransomware n0n publica a una firma de redes eléctricas de EspañaRansomware group 'n0n' has listed a Spanish smart-grid engineering firm as a victim, marked 'pending exposure', meaning stolen data may be dumped imminently. Targeting the energy/smart-grid sector raises OT and critical-infrastructure risk for Spain and its electricity supply chain. Iberian and Latin American utilities should hunt for the group's TTPs and exposed credentials now.