BRIEFRansomwarehighP45
Rhysida ransomware publishes Italian firm NEAD Pro
NEAD Pro
Detected24 September 2026 · 18:47 UTC
Ransomware group Rhysida has published NEAD Pro, an Italian legal and accounting firm, as a victim. Leaked client and financial data from such firms enables fraud and follow-on extortion. It is a fresh victim posting worth tracking, though outside Latin America.
CategoryRansomware
Severityhigh
Priority score45
Detected24 September 2026 · 18:47 UTC
RansomwarePriority 40
Ransomware krybit publica a la consultora Actualize ConsultingThe krybit ransomware group added Actualize Consulting, an engineering and digital transformation services firm in the United States, to its leak site. Professional-services victims usually mean stolen client data and project documentation that can be reused against their own customers. It is outside Latin America but relevant as a fresh ransomware publication in the services supply chain.RansomwarePriority 45
Ransomware Akira publica a Calmont Wire & CableThe Akira ransomware group listed Calmont Wire & Cable, a Canadian manufacturer of custom wire and cable for medical, robotics, aerospace and military applications, and threatens to leak 10GB of corporate data. A breach of such a supplier can expose sensitive engineering and defense-adjacent information. Though outside Latin America, it is a fresh ransomware disclosure worth tracking for supply-chain risk.RansomwarePriority 45
Ransomware metaencryptor publica a la aseguradora Pekin Insurancemetaencryptor listed Pekin Insurance, a US insurer with roughly USD 270M revenue, on its leak site. Insurers concentrate sensitive customer, claims and financial data, making them high-value ransomware targets and a source of downstream fraud. The victim is outside Latin America, so it is a regional-relevance signal rather than a regional alert.RansomwarePriority 48
Ransomware metaencryptor publica a la constructora Hyundai E&CThe metaencryptor group listed Hyundai E&C, the construction arm of Hyundai Motor Group (South Korea), on its leak site. Engineering and construction firms hold sensitive project, supplier and contract data, so a leaked listing signals potential operational disruption. The victim is outside Latin America but the listing reflects an active extortion campaign worth tracking.RansomwarePriority 44
Ransomware Akira publica al fabricante estadounidense Houston Machine and ThreadAkira listed US machining manufacturer Houston Machine and Thread as a victim, threatening to upload 10GB of corporate data. Claimed exfiltration includes employee passports, driver's licenses and SSNs, I9 forms, contracts, financial records and NDAs. The leak of SSNs and identity documents creates fraud and account-takeover risk for staff and partners in the industrial manufacturing sector.RansomwarePriority 48
Ransomware Akira publica a la minorista francesa Ligne RosetThe Akira group listed French furniture retailer Ligne Roset as a victim, claiming 150GB of corporate data to be uploaded. The stolen material reportedly includes employee passports and driver's licenses, contracts, financial records and NDAs. Though outside Latin America, it is a fresh, high-volume extortion leak from an established ransomware crew worth tracking for TTPs and supply-chain exposure.