Full List

Search

Search Results (ransomware)

• West Pharmaceutical Services May 4, 2026 • [ ransomware, data exfiltration, encryption ] West Pharmaceutical Services detected a ransomware intrusion on May 4, 2026. The company reported that attackers exfiltrated data and encrypted systems, prompting containment actions and disrupting manufacturing, shipping, and receiving operations across multiple global facilities. Public reporting did not identify the threat actor or specify the volume or type of exfiltrated data.
• 4VPS May 2, 2026 • [ ransomware, infrastructure compromise, billing systems ] 4VPS disclosed on May 2, 2026 that an attack affected its website and billing systems. DataBreaches.net reported that The Gentlemen ransomware group later acknowledged that part of its own backend infrastructure had been compromised because some of it was hosted with 4VPS. Public reporting did not identify the attacker, the exact intrusion method, the total data volume, or the duration of service disruption.
• Extant Aerospace August 23, 2025 • [ ransomware, data breach, PII ] Extant Aerospace detected ransomware activity on its network in August 2025, later confirming that personal data of over 3,000 U.S. individuals was exposed, including names, addresses, dates of birth and Social Security Numbers.
• Adams County, Mississippi April 17, 2026 • [ ransomware, government services, outdated systems ] Adams County, Mississippi suffered a ransomware attack on April 17, 2026, after an outdated computer in the sanitation department allowed hackers to spread through the county network. The attack locked employees out of key services including court records, car tag payments, and public records processing; about 70% of systems were back online by the time of reporting, but full recovery was still underway.
• Mitchell County October 16, 2025 • [ ransomware, unauthorized access, theft of personal information ] Mitchell County detected ransomware on its computer network on October 20, 2025, after unauthorized access between October 16 and October 20. The incident encrypted files, disrupted email and phone systems for several days, and involved the theft of personal information and protected health information from Department of Social Services records.
• Ahold Delhaize USA Services, LLC November 5, 2024 • [ ransomware, unauthorized access, employee data ] Ahold Delhaize USA detected unauthorized access to U.S. business systems on November 56, 2024. The incident disrupted some U.S. brand, pharmacy, e-commerce, and internal systems, and INC Ransom later claimed responsibility. Ahold Delhaize said files were taken from internal U.S. business systems and later disclosed that 2,242,521 individuals were affected, mostly current and former employees, dependents, and beneficiaries; DataBreach indexed 417,907 rows tied to the breach. The company said customer payment and pharmacy systems were not believed to have been affected.
• Kemper April 15, 2026 • [ ransomware, social engineering, extortion ] In April 2026, the American insurance holding company Kemper Corporation was named by the ShinyHunters ransomware group in a "pay or leak" extortion campaign. The attackers allegedly accessed Kemper's Salesforce environment via social engineering as part of a broader campaign targeting hundreds of organisations using the same method. The group later published tens of gigabytes of data they claimed included internal directory data, Salesforce records and Stripe payment logs. Among the 269k unique email addresses were names, phone numbers, physical addresses and partial payment card data including the last 4 digits, expiry dates and card brands. Kemper confirmed the incident and stated they had engaged third-party cybersecurity experts and notified law enforcement.
• Coral Bay Nickel Corporation April 2, 2026 • [ ransomware, server encryption, cyberattack ] Coral Bay Nickel suffered ransomware encryption of two servers, but production systems remained unaffected and operations continued.
• Saver April 9, 2026 • [ ransomware, personal data, operational disruption ] Saver was hit by ransomware on April 9, disrupting systems and phone lines while attackers accessed servers containing personal data.
• Matsuyama Municipal Housing Management Center February 3, 2026 • [ ransomware, data leak, resident information ] Resident information for Matsuyama municipal housing was leaked after a ransomware attack affected servers used by the housing-management contractor.
• TEIN October 30, 2025 • [ ransomware, encryption, ransom note ] TEIN found encrypted server files and a ransom note after a U.S. subsidiary reported it could not access an internal server.
• Pricon Microelectronics, Inc. April 17, 2026 • [ ransomware, data theft, LockBit 5.0 ] Pricon Microelectronics suffered a ransomware attack affecting some servers; LockBit 5.0 later claimed data theft.
• Medica Publishing Co., Ltd March 13, 2026 • [ ransomware, data leak, personal information ] A ransomware attack encrypted Medica Publishings systems on March 13, 2026, halting order processing, shipping, and customer inquiries, and the company later confirmed leakage of some personal and transaction-related information.
• Seiko USA April 18, 2026 • [ defacement, ransomware, data theft ] The Seiko USA websites Press Lounge section was defaced with a ransom message claiming attackers had accessed the companys Shopify backend and stolen its customer database; the claimed data theft was not confirmed.
• Fusion Superplex March 2, 2026 • [ ransomware, server infrastructure, internal operations ] Fusion Superplex said a ransomware attack temporarily affected server infrastructure, internal operations, its IMAX system, and online ticketing.
• Athénée Royal d'Izel April 9, 2026 • [ ransomware, encryption, service disruption ] The local server of Athne Royal d'Izel was encrypted during a ransomware attack on the morning of April 9, 2026, affecting the online school platform for meal payments and attendance; quick isolation prevented personal data theft and restoration from backups was underway.
• Mile Bluff Medical Center April 21, 2026 • [ ransomware, data encryption, system disruption ] Mile Bluff Medical Center experienced system disruptions after a security event that encrypted data, affecting phone and computer systems; clinical teams operated under downtime procedures while the organization investigated and engaged third-party partners.
• Town of Apex June 23, 2024 • [ ransomware, unauthorized access, data breach ] The Town of Apex experienced a ransomware event in which unauthorized actors accessed town systems from June 23 to July 2, 2024, uploaded town data to a cloud storage provider, and potentially affected personal information of about 22,000 residents; Apex later recovered the data through court action.
• Guesty April 15, 2026 • [ ransomware, extortion, data theft ] Vect claimed it stole 700GB of Guesty data and was negotiating with the company after a ransomware-related extortion listing.
• Alamo Heights Independent School District March 23, 2026 • [ ransomware, network attack ] Alamo Heights ISD suffered a ransomware-related network attack that left the district without Internet access for nearly a week.