BRIEFRansomwarehighP50
Play ransomware lists Australian ARRB Group as victim
ARRB Group
Detected13 November 2026 · 21:14 UTC
The Play ransomware group has listed ARRB Group, an Australian road and transport research organisation tied to the government and defense sector, on its leak site. Play typically exfiltrates data before encrypting, so sensitive project and partner data may be at risk. Public-sector suppliers should watch for downstream exposure.
CategoryRansomware
Severityhigh
Priority score50
Detected13 November 2026 · 21:14 UTC
RansomwarePriority 62
Ransomware WallStreet publica a la farmacéutica estadounidense WalgreensThe WallStreet ransomware group has listed Walgreen Co., the large US pharmacy and retail chain, on its leak site. Though outside Latin America, a breach of a major pharmacy operator can expose patient health data and disrupt prescription services. Defenders in healthcare and retail should treat this as a credible data-exposure and supply-chain signal.RansomwarePriority 42
Ransomware Dark Project publica a la gestora de comunidades CCMCThe ransomware group 'Dark Project' has published The CCMC, a US/Canada community (HOA) management firm, on its leak site via ransomware.live. Victim organizations of this type hold resident financial and personal data that attackers commonly exfiltrate before encryption. The publication is fresh but outside Latin America, so it is lower priority for regional defenders.RansomwarePriority 44
El ransomware Akira publica al contratista estadounidense Paragon MechanicalAkira listed Paragon Mechanical, a US HVAC and mechanical contractor, and warns it will leak 37GB of data including employee passports and medical information. Such personal data creates fraud and privacy exposure for staff. It is a fresh intrusion relevant to contractors handling sensitive HR records.RansomwarePriority 52
El ransomware Akira publica a Replogle Globes con 404 GB de datosAkira listed Replogle Globes, a US globe manufacturer, and claims it will leak 404GB of data including passports, driver's licenses, HR files, customer data, contracts and financials. The bulk and sensitivity of the alleged trove pose serious identity-theft and fraud risk for employees and customers. A fresh victim with substantial PII warrants monitoring.RansomwarePriority 56
El ransomware Akira publica al contratista gubernamental estadounidense GalorathAkira listed Galorath, a US firm providing project-estimation software and services to government and commercial clients, and threatens to leak 12GB of corporate data plus employee personal information. Because it serves public-sector programs, leaked data could expose government project details. This is an active, fresh intrusion worth tracking.RansomwarePriority 45
El ransomware Bravox publica al fabricante estadounidense World Wide FittingsThe Bravox ransomware group listed World Wide Fittings, a US manufacturer of steel and hydraulic tube fittings, on its leak site. A fresh victim signals an active intrusion with potential theft of manufacturing and customer data. Industrial buyers and suppliers should watch for follow-on supply-chain phishing.