BRIEFRansomwarehighP60
Rhysida ransomware publishes Swedish manufacturer Electro Heat
Electro Heat Sweden AB
Detected2 October 2026 · 19:03 UTC
Rhysida published Electro Heat Sweden AB, an industrial furnace maker, claiming 2.55 TB (1.72M files) including SolidWorks CAD designs, PDM vault backups, payroll and accounting databases for four legal entities. This hits an energy/utilities-sector company with highly sensitive IP. Though outside LATAM, the scale and sector make it a notable ransomware event.
CategoryRansomware
Severityhigh
Priority score60
Detected2 October 2026 · 19:03 UTC
Ransomware● 43
Qilin publica a la empresa británica Sports Events365Qilin ransomware listed Sports Events365, a UK hospitality-sector company, as a fresh victim. Hospitality is a frequent ransomware target and a public victim page enables downstream extortion and phishing. It is worth noting for Qilin's ongoing campaign activity, though it has no direct LATAM link.Ransomware● 71
Ransomware Panzer publica a la brasileña Paes SoluçõesThe Panzer ransomware group listed Paes Soluções, a Brazilian IT firm in Campo Mourão (Paraná) offering business software, hosting, cloud backup and VPS. A breach of such a provider risks many downstream business customers and managed services. As a fresh Brazilian victim it is directly relevant to LATAM incident response and monitoring.Ransomware● 52
Ransomware Settra publica a la tecnológica TranslarityThe ransomware group Settra listed Translarity, a US firm that tests semiconductors for Boeing and the US military, on its leak site. The publication implies theft of sensitive corporate data with defense supply-chain implications. It is outside LATAM but worth tracking for defense-sector awareness.Ransomware● 48
Ransomware Chaos publica a la clínica dental Park DentalThe chaos ransomware group published Park Dental, a UK dental clinic, threatening to release stolen data if management does not respond within 24 hours. Healthcare providers hold sensitive patient records that make them high-value extortion targets. This is a live, time-sensitive extortion case worth monitoring for data release.Ransomware● 48
Ransomware Incransom publica al centro de adicciones RimrockThe incransom ransomware group has listed Rimrock Foundation, a large US addiction-treatment provider, on its leak site. Healthcare victims face operational disruption and exposure of highly sensitive patient records. It signals active targeting of the healthcare sector, so defenders should watch for related extortion activity.Ransomware● 60
Ransomware n0n publica a la clínica Houston Thyroid & EndocrineRansomware group n0n published Houston Thyroid & Endocrine Specialists, listing 14,441 patient document scans with lab results, diagnoses, insurance and billing data, plus SSNs and dates of birth. The leak exposes protected health information of thousands and fuels downstream medical-identity fraud. A deadline of 2026-10-04 marks an active, time-sensitive extortion.