BRIEFRansomwarelowP42
Qilin ransomware publishes US manufacturer Cole Manufacturing
Cole Manufacturing
Detected15 November 2026 · 18:13 UTC
Qilin added Cole Manufacturing, a US manufacturing firm, to its extortion leak site. The listing provides no scope or data details yet, but such entries typically accompany stolen internal documents and operational data. It is relevant for tracking Qilin's continued targeting of US manufacturing and for partners assessing supply-chain risk.
CategoryRansomware
Severitylow
Priority score42
Detected15 November 2026 · 18:13 UTC
RansomwarePriority 42
Ransomware Qilin publica a la ingeniería estadounidense Kessler SoilsThe Qilin group listed Kessler Soils Engineering Products, a US manufacturing and geotechnical engineering supplier, on its leak site. Details of the intrusion and data volume are not public, but Qilin typically publishes stolen project and client data if no payment occurs. It matters for construction and engineering supply chains that may share technical documentation with this vendor.RansomwarePriority 45
Ransomware Qilin publica a la textil estadounidense Oregon LinenThe Qilin extortion group listed Oregon Linen, a US manufacturing/textile company, on its leak site. No data volume or access details are disclosed, but a fresh Qilin listing usually precedes publication of stolen corporate files and customer data. It matters mainly as an indicator of Qilin's active US manufacturing campaign and for suppliers monitoring downstream exposure.RansomwarePriority 68
Ransomware LockBit5 publica al hospital Penang Adventist (Malasia)The LockBit5 ransomware group has listed Penang Adventist Hospital (PAH), a Malaysian healthcare provider founded in 1924, as a new victim on its leak site. Healthcare is a high-impact sector where downtime can disrupt patient care, and the listing signals claimed data theft or encryption. Although outside Latin America, a fresh regional-critical healthcare ransomware victim warrants monitoring for data publication and related extortion.RansomwarePriority 46
PixelLeaks publica a la energética estadounidense SPI CorpPixelLeaks has listed SPI Corp, a US petroleum staffing and back-office accounting provider within the SPI Energy group, with a leak deadline of 17 November 2026. The group claims to hold personnel, financial, client and operational records. Back-office providers for energy companies are attractive targets because their access and data touch multiple operators in the supply chain.RansomwarePriority 58
Ransomware PixelLeaks publica a la operadora indonesia Fiber NetworksThe PixelLeaks group has listed PT. Fiber Networks Indonesia, an ISP that also runs an endpoint surveillance platform, with a publication deadline of 18 November 2026. The claimed material includes personnel, financial, client and operational records. Compromise of a telecom provider is significant because subscriber and infrastructure data can support further attacks on downstream customers.RansomwarePriority 74
Pixelleaks publica datos de pacientes de la clínica peruana Suiza LabThe Pixelleaks extortion group has listed Clinica Suiza Lab, a Peruvian clinic and laboratory group, with a data set that reportedly includes the full patient register with identity documents, clinical histories, lab results and diagnostic imaging, including minors, plus staff and payroll records. This is a sensitive healthcare breach in Peru with direct extortion and fraud potential. Publication is imminent unless a negotiation occurs, so patient-facing response should start now.