BRIEFRansomwarelowP20
Vexy ransomware publishes Indian jeweller Enchanted Fine Jewellery
Enchanted Fine Jewellery
Detected15 October 2026 · 11:56 UTC
The Vexy ransomware group listed Enchanted Fine Jewellery, a small Indian jewelry retailer, as a victim. Exposure of a small retailer's data points to theft of customer and order information with limited systemic impact. It is outside Latin America and low-impact, so it is marginal for regional defenders.
CategoryRansomware
Severitylow
Priority score20
Detected15 October 2026 · 11:56 UTC
Ransomware● 72
Ransomware Qilin publica a la brasileña Brame TelecomThe Qilin ransomware group listed Brazilian telecom provider Brame Telecom on its leak site, a fresh victim in Latin America's critical communications sector. Telecom operators underpin regional connectivity and hold sensitive subscriber and network data. Brazilian telco defenders should treat this as active and review Qilin's common initial-access vectors (VPN and RDP).Ransomware● 26
Ransomware iah6477 publica a la inmobiliaria Camden LivingRansomware group iah6477 published Camden Living, a US multifamily real-estate operator, as a victim. The incident could expose resident, tenant and payment data and disrupt property-management services. The target is in the US/UK, so priority for LATAM defenders is low, though the actor is worth monitoring.Ransomware● 30
Ransomware iah6477 publica al minorista estadounidense BuckleThe ransomware group iah6477 has listed Buckle, a large US apparel and footwear retailer, as a victim. Publication of a major retailer suggests possible theft of customer and corporate data plus disruption of retail operations. It is outside Latin America, so relevance is limited, but the actor's campaign should be tracked.Ransomware● 42
Ransomware LockBit5 publica a la hotelera griega Kord HotelsLockBit5 published Kord Hotels, a Greek hospitality group in Santorini, as a ransomware victim. Hospitality firms hold guest PII and payment data, exposing customers to fraud. Greek hotel operators should check for ransomware persistence and validate offline backups.Ransomware● 42
Ransomware LockBit5 publica a la tailandesa SKY CCLockBit5 listed SKY CC, a Thai customer-experience and contact-center company, on its leak site. Contact centers process large volumes of customer PII, so a breach risks mass data exposure. Thai service providers should isolate affected systems and rotate credentials.Ransomware● 44
Ransomware LockBit5 publica a la asesoría Poole GroupLockBit5 listed Poole Group, an Australian accounting and business advisory firm, on its leak site. Accounting firms hold sensitive client financial and tax data, making them prime extortion and downstream fraud targets. Australian SME advisors should warn clients and verify backup integrity and MFA coverage.