BRIEFRansomwarehighP48
pixelleaks ransomware publishes India's Godrej & Boyce
Godrej & Boyce
Detected15 November 2026 · 22:14 UTC
The pixelleaks ransomware group listed Godrej & Boyce Mfg Co Ltd (godrej.com), a diversified Indian manufacturer, on its leak site with a publication deadline of 2026-11-19. The disclosure claims data from its Vikhroli campus systems covering personnel, financial, client, legal, intellectual property and operational material, indicating prior exfiltration. This is an active extortion case for a large manufacturing group.
CategoryRansomware
Severityhigh
Priority score48
Detected15 November 2026 · 22:14 UTC
RansomwarePriority 45
Ransomware pixelleaks publica a la india Connectwell IndustriesThe pixelleaks ransomware group listed Connectwell Industries (connectwell.com), an Indian electrical terminal-block manufacturer, on its leak site with a publication deadline of 2026-11-19. The disclosure covers business records including intellectual property and operational material, indicating data already exfiltrated. Partners in industrial supply chains should treat it as an active extortion case.RansomwarePriority 40
Qilin publica a la empresa estadounidense Apex en su sitio de extorsiónQilin added a US victim named Apex to its leak site, but the sector and full legal entity are not identified in the listing. Without a confirmed industry or domain, attribution to a specific organization remains ambiguous. It is worth tracking only in case further data or a clearer identity is released.RansomwarePriority 50
Qilin publica a la firma Atlas Evaluation & Inspection ServicesQilin ransomware listed Atlas Evaluation & Inspection Services, a US professional-services and inspection firm, on its extortion site. Such firms hold client project data and audit records, so a leak can cascade to the clients they serve. Organizations that contracted Atlas for inspections or certifications should assess what data was shared.RansomwarePriority 52
Qilin publica a la constructora Heartland Construction GroupThe Qilin ransomware group added Heartland Construction Group, a US manufacturing-sector company, to its public leak site. Publication means stolen corporate data may be released if no negotiation succeeds, exposing internal documents and customer information. Construction and industrial firms should treat this as a supply-chain breach indicator.RansomwarePriority 44
Ransomware Incransom publica a la indonesia Sarimelati KencanaThe Incransom group listed PT Sarimelati Kencana Tbk, the Indonesian Pizza Hut franchisee, as a new victim on its ransomware leak site. The victim is a food and beverage manufacturer with nationwide restaurant operations, so disruption can affect supply and POS systems, but it is outside Argentina and Latin America. It is reported as context for the group's activity rather than an immediate regional alert.RansomwarePriority 42
Ransomware Qilin publica a la ingeniería estadounidense Kessler SoilsThe Qilin group listed Kessler Soils Engineering Products, a US manufacturing and geotechnical engineering supplier, on its leak site. Details of the intrusion and data volume are not public, but Qilin typically publishes stolen project and client data if no payment occurs. It matters for construction and engineering supply chains that may share technical documentation with this vendor.