BRIEFRansomwarehighP55
Qilin ransomware lists University of Texas at Arlington
University of Texas at Arlington
Detected12 November 2026 · 07:14 UTC
The Qilin ransomware group listed the University of Texas at Arlington as a victim, indicating a claimed breach of its systems. Education institutions hold student, staff and research data attractive for extortion. Exposed or encrypted records could disrupt operations and expose personal information.
CategoryRansomware
Severityhigh
Priority score55
Detected12 November 2026 · 07:14 UTC
RansomwarePriority 52
Ransomware Qilin publica a la Universidad de YorkThe Qilin ransomware group added York University in Canada to its leak site, signaling a claimed intrusion and threatened data release. Universities concentrate student, employee and research data that fuels extortion and identity fraud. The listing warrants rapid verification and containment before any data is published.RansomwarePriority 58
Ransomware MedusaLocker publica a la farmacéutica Thermo GroupThe MedusaLocker group listed THERMO GROUP, C.A., a wholesaler of pharmaceutical products and medical supplies, on its ransomware leak site, claiming a breach with stolen data. Internal financial records, sales-commission reports and tax-withholding documents appear to be in scope, making it a supply-chain concern for clinics and pharmacies that buy from it. The country is not stated, but the company naming and tax references point to Latin America.RansomwarePriority 40
Ransomware Qilin publica al club de béisbol Wisconsin Timber RattlersThe Qilin ransomware group listed the Wisconsin Timber Rattlers, a US professional baseball club in the hospitality sector, on its leak site. Though a lower-value target, the listing indicates a claimed breach with possible data theft. Sports and hospitality organizations should monitor and verify.RansomwarePriority 68
Ransomware settra publica a la italiana Energreen (energía)The settra ransomware group published Italian manufacturer Energreen S.p.A., an energy and utilities sector company, on its leak site. Publication signals a claimed breach with likely data theft and operational disruption for an industrial firm. Energy-sector organizations and partners should review third-party exposure.RansomwarePriority 45
Ransomware Qilin publica a la transportista Leonard's ExpressThe Qilin ransomware group listed Leonard's Express, an Australian transportation and logistics company, on its leak site, threatening to expose stolen data. Logistics providers are critical to supply chains, so leaks can reveal operational, customer and shipment information. Although the victim is outside Latin America, it reflects Qilin's ongoing activity relevant to transport and logistics defenders regionally.RansomwarePriority 44
Ransomware Akira publica a la empresa de HVAC Quality AirAkira listed Quality Air, an HVAC services company, threatening to publish corporate data such as employee passports, driver's licenses, W-9 forms and customer contracts. Identity and financial documents raise fraud and account-takeover risk. Service-sector firms and customers should monitor for the data release and phishing.