BRIEFRansomwarehighP42
Qilin ransomware lists US victim Arnold Center
Arnold Center
Detected28 September 2026 · 21:07 UTC
The Qilin ransomware group has published a new victim, Arnold Center, a US organisation, on its leak site. Although outside LatAm, a fresh ransomware listing signals an active intrusion with data-theft and double-extortion risk. Defenders should watch for the leaked data and cross-reference any regional or sector links.
CategoryRansomware
Severityhigh
Priority score42
Detected28 September 2026 · 21:07 UTC
Ransomware● 50
Ransomware 'blacklocks' publica a la firma de arquitectura ARCA UnlimitedRansomware group blacklocks has listed ARCA Unlimited Architects (South Africa, professional services) as a victim on its leak site. Fresh victim postings give defenders a short window to hunt for the listed TTPs and to warn linked third parties. The professional-services sector is a common pivot into larger client networks.Ransomware● 58
Ransomware Termite publica a la transportista de combustible CrossettThe Termite ransomware group has listed Crossett Home, a US fuel/petroleum transporter, as a victim. Hitting a fuel logistics operator raises supply-chain and critical-infrastructure concerns across energy and transport. Security teams in these sectors should track related TTPs and any leaked operational data.Ransomware● 45
Ransomware metaencryptor publica a Platinum Healthcare Staffingmetaencryptor has listed Platinum Healthcare Staffing, a U.S. nursing and allied-health staffing agency, as a ransomware victim. Staffing firms hold worker PII and protected health information plus client hospital data. Exposure raises the risk of identity theft and targeted phishing against staff and partner facilities.Ransomware● 48
Ransomware metaencryptor publica a la auditora PKF Hadiwinatametaencryptor has listed PKF Hadiwinata, a top-10 Indonesian accounting and audit firm, as a ransomware victim. Such firms hold sensitive client financial and tax data, so a breach can ripple to many downstream companies. Monitor for client-data exposure and follow-on fraud against those customers.Ransomware● 72
Ransomware metaencryptor publica a la energética GE VernovaThe metaencryptor group has listed GE Vernova, a global energy equipment maker tied to roughly a quarter of world electricity generation, as a ransomware victim. A successful intrusion against energy-sector suppliers can cascade to utilities and grid operators. The listing signals potential data theft and operational disruption across critical energy infrastructure.Ransomware● 63
Ransomware Emperador publica a Electrolux y OnTracThe 'Emperador' group has listed Electrolux and logistics firm OnTrac as victims, threatening to release employee data within a week. Electrolux is a major global appliance manufacturer, so a real breach would expose corporate systems, HR records and supply-chain data. Multinationals and their logistics partners should treat this as an active extortion campaign.