BRIEFRansomwarehighP68
Qilin ransomware publishes Mexican victim SEPIVER
SEPIVER
Detected23 October 2026 · 00:36 UTC
The Qilin ransomware group has listed SEPIVER, a victim located in Mexico, on its leak site. Fresh publication signals an active breach with data-extortion risk for a Latin American entity. Regional defenders should investigate and warn any connected suppliers or clients.
CategoryRansomware
Severityhigh
Priority score68
Detected23 October 2026 · 00:36 UTC
Ransomware● 44
LockBit5 publica a la minorista turca Istanbul Foodstuff TradingLockBit5 added Istanbul Foodstuff Trading Co LLC, a Turkish retail/computer-peripherals firm, to its leak site, indicating an active ransomware intrusion with likely data theft. The victim is outside the AR-LATAM region, so direct impact is limited, but it shows LockBit5's continued targeting of small and mid-size commerce. Worth noting for tracking the group's activity and TTPs.Ransomware● 42
Ransomware bravox publica al bufete estadounidense Barrow & GrimmThe bravox ransomware group listed Barrow & Grimm, a US litigation law firm, as a victim on its leak site. Law firms hold sensitive client and case data that is attractive for double extortion and downstream attacks. Monitor for related credential and data exposure affecting its clients.Ransomware● 44
Ransomware bravox publica a la francesa AMSAM (salud)The bravox ransomware group listed AMSAM, a French healthcare and social-services provider, as a victim on its leak site. Healthcare ransomware threatens patient data and service continuity, making it high-impact for the sector. It is outside Latin America but signals continued targeting of the health and social-care sector.Ransomware● 66
Ransomware Silent Ransom Group publica al bufete Kirkland & EllisThe Silent Ransom Group listed Kirkland & Ellis, one of the world's largest law firms, as a ransomware victim on its leak site. A compromise at this scale threatens highly sensitive M&A, litigation and client data spanning many organizations. It is a high-priority victim even though it sits outside Latin America.Ransomware● 42
Akira publica a la editorial Bethany PressAkira claims Bethany Press International, a Christian book publisher and distribution services firm, and says it will upload 40GB of corporate data. The claimed material includes employee financial and personal records, customer information, financials and contracts. It is a mid-size US victim, so it ranks below regional incidents but illustrates the ongoing exfiltration pattern.Ransomware● 48
Akira publica a la alemana MedienwerkstattAkira added medienwerkstatt ag, a Thurgau-based media and communications provider in the education sector, threatening to release 130GB of corporate data including employee personal information. The volume of exfiltrated HR and client material makes follow-on phishing and business email compromise likely. It is a European victim, so relevance for LATAM defenders is contextual rather than direct.