BRIEFRansomwarelowP35
Rhysida ransomware publishes Hungarian organization Szechenyi Programiroda
Szechenyi Programiroda Nonprofit Kf
Detected1 September 2026 · 18:03 UTC
The Rhysida ransomware group has listed the Hungarian nonprofit Szechenyi Programiroda on its leak site. Although the victim is outside Latin America, monitoring Rhysida activity helps anticipate tactics, infrastructure, and potential targeting of regional entities. Organizations should review their exposure to Rhysida indicators.
CategoryRansomware
Severitylow
Priority score35
Detected1 September 2026 · 18:03 UTC
Ransomware● 72
Ransomware n0n publica a la brasileña Prafesta Embalagensn0n ransomware published Prafesta, a Brazilian packaging maker, exposing Sapiens ERP and Vetorh payroll data after an unpaid attack. The leak includes thousands of invoices, worker CPF IDs, bank certificates and eSocial government filings. Exposed CPFs and certs are strong fraud vectors for defenders.Ransomware● 80
Ransomware Redact publica a la energética estadounidense ONEOKThe Redact ransomware group listed ONEOK, Inc., a major US oil & gas pipeline and energy operator with ~$39.4B revenue, on its leak site. A confirmed listing signals data theft and potential operational disruption across critical energy infrastructure. Energy-sector defenders should treat this as a live extortion threat and watch for downstream/supply-chain impact.Ransomware● 48
Ransomware n0n publica al laboratorio dental BladeTech IncThe n0n group listed BladeTech Inc, a Missouri dental laboratory (CAD/CAM), exposing full patient names, case designs, CNC toolpaths and a 4.4 GB production archive dated September-October 2026. PHI leakage triggers HIPAA obligations and downstream patient privacy risk. Recent production files indicate an active, current compromise.Ransomware● 52
Ransomware n0n publica a la constructora Xinos Construction (Nueva York)The n0n group published Xinos Construction Corp, a New York construction firm, claiming exposure of employee W-2 forms with SSNs, 2024 partnership tax returns, the QuickBooks Enterprise archive and a state sales-tax audit file. This is highly sensitive PII and financial data enabling tax fraud and identity theft. Small contractors rarely detect such intrusions quickly.Ransomware● 70
Ransomware Redact publica a Parker-Hannifin CorporationThe Redact group listed Parker-Hannifin, a US industrial-machinery manufacturer with ~$21.5B revenue and a significant aerospace/defense supply-chain footprint. A compromise of such a contractor carries downstream risk to defense programs. Manufacturing defenders and their partners should treat this as a live extortion event and watch for data exposure.Ransomware● 55
Ransomware n0n publica a la clínica EnVision Eye CareRansomware group n0n published US ophthalmology practice EnVision Eye Care, exposing 13,308 patient records with names and dates of birth plus the full 2018-2025 database backup and eye-scan archive. Healthcare data of this depth fuels medical identity theft and extortion. It reflects the ongoing healthcare ransomware wave, though the victim sits outside Latin America.