BRIEFRansomwarehighP45
Qilin ransomware publishes US-based Via Credit Union
Via Credit Union
Detected16 October 2026 · 07:56 UTC
The Qilin ransomware group published Via Credit Union, a US financial-services cooperative, on its leak site. Although the victim is outside LatAm, it confirms ongoing Qilin activity and is relevant to financial-sector defenders tracking the group's TTPs. Recommend monitoring Qilin and checking supplier exposure in the finance sector.
CategoryRansomware
Severityhigh
Priority score45
Detected16 October 2026 · 07:56 UTC
Ransomware● 35
Ransomware n0n publica a una empresa de medios de EE. UU.Ransomware group n0n listed a US media/broadcast technology victim as pending exposure. The target is unnamed, limiting attribution, but broadcast playout is sensitive infrastructure. Useful for tracking n0n's victim-selection pattern.Ransomware● 35
Ransomware n0n publica a una empresa de pagos de EE. UU.Ransomware group n0n listed a US fintech/payments victim as pending exposure. The victim is anonymized but the sector is high-impact for financial disruption. Relevant mainly to track n0n's targeting and timing, not for a LATAM alert.Ransomware● 64
Ransomware n0n publica al fabricante de implantes espinales Evolution SpineRansomware group n0n published Evolution Spine / All Labs, a Texas spinal implant manufacturer in the healthcare sector. Leaked data reportedly includes FDA quality records, device history, a 317-table inventory database and finance files. Healthcare supply-chain victims matter for defenders monitoring medical-device and hospital partners.Ransomware● 42
IncRansom publica a la firma legal estadounidense Fair FeeIncRansom has published Fair Fee Legal Services, a US professional-services firm, as a ransomware victim. Although outside Latin America, such listings show an active extortion operation and may include data belonging to related clients. Regional defenders should track the group's TTPs for potential spillover.Ransomware● 50
IncRansom reclama filtracion de 2TB ligada a AT&T (Verveba)IncRansom claims a 2TB breach of Verveba, linked in the listing to www.att.com, a major US telecom. Telecom data can expose customer and network information, and the large volume suggests significant exfiltration. Regional operators should monitor the group given the critical-infrastructure sector.Ransomware● 73
Ransomware incransom publica a la cooperativa costarricense CoopecajaThe incransom ransomware group listed Coopecaja, a Costa Rican savings-and-credit cooperative (coopecaja.fi.cr), as a victim, exposing a LATAM financial-services entity. This is a fresh victim post in the banking/credit-union sector of the region, a high-value target for extortion and downstream fraud. Defenders in Costa Rican financial services should treat this as an active leak event and check for related credential or data exposure.