BRIEFRansomwarehighP45
SilentRansom ransomware lists law firm Porter Hedges LLP
Porter Hedges LLP
Detected21 October 2026 · 19:37 UTC
SilentRansom group listed US law firm Porter Hedges LLP as a ransomware victim via ransomware.live. Law firms hold sensitive client and deal data, including energy-sector matters, making them attractive extortion targets. The listing signals an active leak-site publication; monitor for the eventual data release.
CategoryRansomware
Severityhigh
Priority score45
Detected21 October 2026 · 19:37 UTC
Ransomware● 52
El ransomware Helix publica a la cafetera Westrock CoffeeRansomware group Helix has listed Westrock Coffee, a US coffee supplier with roughly $1.2bn annual revenue, on its leak site. Links and passwords unlock in 24 hours, so the window to verify stolen data and assess supply-chain exposure is short. It sits outside Latin America but the victim's size makes it useful for sector and partner alerts.Ransomware● 40
Ransomware Akira publica a la minorista Cascade Flooring AmericaAkira listed US flooring retailer Cascade Flooring America with a threatened 50GB leak of corporate data and employee personal information. It is a fresh named victim but small, US-based and outside the AR-LATAM focus, so it ranks low for immediate alerting.Ransomware● 52
Ransomware Akira publica al fabricante de PCB Flextron Circuit AssemblyAkira listed Singapore-based PCB manufacturer Flextron Circuit Assembly and threatens to release 34GB of corporate data, including employee passports, driver's licenses, financials and NDAs. The exposure of identity documents and supplier contracts makes this relevant to electronics supply-chain defenders, though the victim is outside Latin America.Ransomware● 30
Ransomware 'hyflock' publica al club nocturno vietnamita Dang Vuong CacThe 'hyflock' group listed dangvuongcac.com, a high-end KTV/entertainment venue in Ho Chi Minh City, claiming to hold hotel-room and chat records. Relevance to Latin American critical infrastructure is low, but the data type (PII and chat logs) and the actor's ongoing activity are worth noting for broader tracking.Ransomware● 40
Hyflock publica al minorista gabonés GabonmecaThe 'hyflock' ransomware group claims gabonmeca.com, a large office-supplies and IT-equipment retailer and distributor in Gabon, as a victim. The company runs e-commerce and B2B ordering, so a leak would expose corporate customer contacts, order data and possibly payment details across the region. It shows hyflock's continued targeting of African retail and distribution firms, a useful indicator for sector-wide hunting.Ransomware● 46
Ransomware 'pear' publica a la aseguradora Adobe Insurance BrokersThe 'pear' group has listed Adobe Insurance Brokers LLC, an independent insurance agency in Morgan Hill, California, on its leak site. Insurance brokers hold sensitive client PII such as policy details, addresses and tax identifiers, so a full data leak exposes policyholders to identity theft and downstream fraud. Watch for reuse of agency-portal credentials and phishing of the agency's clients.