BRIEFRansomwarehighP58
PixelLeaks ransomware lists Indonesian ISP Fiber Networks
PT. Fiber Networks Indonesia (fiber.net.id)
Detected15 November 2026 · 10:14 UTC
The PixelLeaks group has listed PT. Fiber Networks Indonesia, an ISP that also runs an endpoint surveillance platform, with a publication deadline of 18 November 2026. The claimed material includes personnel, financial, client and operational records. Compromise of a telecom provider is significant because subscriber and infrastructure data can support further attacks on downstream customers.
CategoryRansomware
Severityhigh
Priority score58
Detected15 November 2026 · 10:14 UTC
RansomwarePriority 46
PixelLeaks publica a la energética estadounidense SPI CorpPixelLeaks has listed SPI Corp, a US petroleum staffing and back-office accounting provider within the SPI Energy group, with a leak deadline of 17 November 2026. The group claims to hold personnel, financial, client and operational records. Back-office providers for energy companies are attractive targets because their access and data touch multiple operators in the supply chain.RansomwarePriority 74
Pixelleaks publica datos de pacientes de la clínica peruana Suiza LabThe Pixelleaks extortion group has listed Clinica Suiza Lab, a Peruvian clinic and laboratory group, with a data set that reportedly includes the full patient register with identity documents, clinical histories, lab results and diagnostic imaging, including minors, plus staff and payroll records. This is a sensitive healthcare breach in Peru with direct extortion and fraud potential. Publication is imminent unless a negotiation occurs, so patient-facing response should start now.RansomwarePriority 42
Ransomware Qilin publica al fabricante Kayaku Safety Systems MalaysiaThe Qilin ransomware group added Kayaku Safety Systems Malaysia, an automotive safety-components manufacturer, to its leak site with no data description published yet. Listing alone signals a claimed intrusion into an industrial supplier that sits in regional automotive supply chains. No samples or record counts are visible, so impact is unconfirmed but worth tracking for supply-chain risk.RansomwarePriority 66
Ransomware n0n publica datos de clientes de MM Insurance AgencyThe n0n group published records from a Canadian financial advisory firm, including signed registered-plan documents, investment summaries, insurance policies and identity documents such as driver licences, a marriage certificate and a death certificate. Client banking details and tax slips containing social insurance numbers are also exposed, along with a graph of 2,219 distinct client contacts. This is severe identity-theft material affecting named individuals and warrants notification and monitoring.RansomwarePriority 68
Ransomware n0n publica datos de la empresa estadounidense PollstarThe n0n ransomware group listed Pollstar, a US concert-trade data company, publishing 135,621 named contacts with phones, emails and addresses plus 26,527 quote and invoice documents. The stolen archive covers booking managers, venues, promoters and talent buyers, plus sales and box-office records. It matters because a B2B contact trove of this size enables highly targeted phishing and invoice fraud against live-events companies across the region.RansomwarePriority 57
Ransomware ScarlettGroup publica a la británica FittleworthThe ScarlettGroup ransomware crew has listed Fittleworth, a UK provider of home-delivered medical supplies and stoma/continence care, on its leak site. As a healthcare supplier handling sensitive patient logistics, disruption or data exposure can harm vulnerable patients. Defenders in healthcare supply chains should monitor for data publication and follow-on phishing.