Search Results for "ransomware"

Undisclosed United States organization April 7, 2026 • [ ransomware, cybercrime, data exfiltration ] Microsoft reported that Storm-1175, a financially motivated cybercrime actor linked to Medusa ransomware, heavily impacted organizations in Australia, the United Kingdom, and the United States by exploiting vulnerable web-facing systems, exfiltrating data, and deploying ransomware. This row represents the undisclosed United States victim component of the country-level coding approach.

Undisclosed United Kingdom organization April 7, 2026 • [ ransomware, data exfiltration, cybercrime ] Microsoft reported that Storm-1175, a financially motivated cybercrime actor linked to Medusa ransomware, heavily impacted organizations in Australia, the United Kingdom, and the United States by exploiting vulnerable web-facing systems, exfiltrating data, and deploying ransomware. This row represents the undisclosed United Kingdom victim component of the country-level coding approach.

Undisclosed Australian organization April 7, 2026 • [ ransomware, Medusa ransomware, data exfiltration ] Microsoft reported that Storm-1175, a financially motivated cybercrime actor linked to Medusa ransomware, heavily impacted organizations in Australia, the United Kingdom, and the United States by exploiting vulnerable web-facing systems, exfiltrating data, and deploying ransomware. This row represents the undisclosed Australian victim component of the country-level coding approach.

Świętokrzyskie Rehabilitation Center March 31, 2026 • [ ransomware, encryption, personal data ] witokrzyskie Rehabilitation Center reported a ransomware attack that encrypted personal-data files and may have exposed data.

Bonifraterskie Medical Center March 13, 2026 • [ ransomware, data leak, personal data ] Bonifraterskie Medical Center reported a ransomware attack that encrypted part of its server infrastructure and likely exposed personal data.

Autovista April 11, 2026 • [ ransomware, service disruption, containment ] Autovista reported a ransomware incident identified on April 11, 2026 that affected certain systems in Europe and Australia and caused service disruption for customers. The company implemented containment measures, worked with external forensic experts to validate systems before restoration, and later reported many products and services were partially or fully restored.

Spring Lake Park School District April 12, 2026 • [ ransomware, system shutdown, cyberattack ] Spring Lake Park Schools discovered on April 12, 2026 that an outside actor had accessed some district systems in a suspected ransomware incident; the district shut down systems defensively to prevent further access, causing class, childcare, community education, and after-school activity cancellations while recovery proceeded.

Rx Management April 8, 2026 • [ ransomware, data leak, healthcare ] INC Ransom listed Australian pharmacy management firm Rx Management on its leak site on April 8, 2026 and threatened to publish more than 180 GB of allegedly stolen data; the data types and full extent were not publicly verified.

ChipSoft April 7, 2026 • [ ransomware, healthcare, data breach ] Embargo ransomware hit ChipSoft on April 7, 2026, disrupting its website and digital healthcare services, causing hospitals to disconnect or take ChipSoft-connected systems offline, and stealing medical personal data from several Dutch healthcare institutions; ChipSoft later said the stolen data had been destroyed.

Undisclosed Mexican Bank #2 February 1, 2026 • [ ransomware, Qilin, electronic channels ] Banco de Mxico reported that an undisclosed bank suffered a February 2026 ransomware incident involving Qilin that affected electronic channels and electronic transfer services; no customer financial impact was reported and the institutions financial impact remained pending.

Undisclosed Mexican Bank #1 January 1, 2026 • [ ransomware, LockBit, electronic transfer services ] Banco de Mxico reported that an undisclosed bank suffered a January 2026 ransomware incident involving LockBit that affected electronic transfer services; no customer financial impact was reported and the institutions financial impact remained pending.

City of Minot Water Treatment Plant March 14, 2026 • [ ransomware, critical infrastructure, utilities ] Minot, North Dakota officials confirmed a ransomware event impacted a server at the citys water treatment plant on March 14, 2026. The city said the water treatment plant and broader water system remained operational and safe, with no interruption to water service reported.

Sandhills Medical May 8, 2025 • [ ransomware, unauthorized access, patient information ] Sandhills Medical disclosed that a ransomware attack led to unauthorized access to patient information.

Kent District Library April 24, 2026 • [ ransomware, cyberattack, service disruption ] Kent District Library closed all branches after a ransomware attack disrupted computer systems and network-dependent services.

City of Ardmore April 8, 2026 • [ ransomware, phishing, data leak ] On April 8, 2026, ransomware encrypted Ardmore police/internal servers after a phishing email; the incident was contained within hours, and information tied to criminal complaints and investigations, including names, addresses, and phone numbers, may have been exposed.

Gelatissimo April 27, 2026 • [ data leak, ransomware, financial data ] DragonForce listed Australian gelato franchiser Gelatissimo on its leak site around April 27, 2026 and claimed to have stolen more than 350 GB of data, with other reporting specifying 352.24 GB. The claimed data included sensitive employee data, financial details, operational information, and executive contact details, and the group threatened publication unless the company responded; reviewed reporting did not confirm encryption or operational disruption.

Yau Yat Chuen Garden City Club October 31, 2025 • [ ransomware, data breach, personal data ] A ransomware attack encrypted files stored on the server supporting Yau Yat Chuen Garden City Club's club management system, rendering the system inoperable and affecting personal data of current and former members and supplementary card holders.

Nordenta April 20, 2026 • [ ransomware, data leak ] The Danish dental supplier Nordenta was listed on the Kairos ransomware leak site around April 20, 2026, and Computerworld reported on April 22 that the company had been hit by ransomware. Kairos claimed to have stolen 1.68 TB of data and used the leak-site post to pressure company executives, but the specific data categories and operational impact were not confirmed in the reviewed sources.

Winona County April 6, 2026 • [ ransomware, data leak, government ] Winona County, Minnesota experienced a ransomware attack that began April 6, 2026 and was discovered April 7. Officials took affected systems offline, declared a local emergency, requested Minnesota National Guard assistance, and notified the FBI. Later reporting confirmed cybercriminals released information taken from the county network; emergency services and 911 remained operational, while vital statistics and DMV systems were among those impacted.

ZenBusiness March 27, 2026 • [ data breach, extortion, ransomware ] In March 2026, the hacker and extortion group "ShinyHunters" claimed to have obtained a substantial corpus of data from ZenBusiness, a business formation and compliance platform. The group claimed the data had been exfiltrated from platforms including Snowflake, Mixpanel and Salesforce, and threatened to publish it if a ransom was not paid. The following month, after claiming payment had not been made, ShinyHunters publicly released the data. The collection amounted to many terabytes across thousands of files that appeared to originate from multiple systems and business functions, including leads, support records and other CRM-related data. The data contained approximately 5M unique email addresses, often accompanied by name and phone number depending on the source file.

Search Results (ransomware)