Cybersecurity Intelligence Report — 24 August 2026

> CRITICAL SECTION

No new score-10 intelligence items were collected.

> CISA KEV (last 14 days)

> RANSOMWARE VICTIMS (today)

• krybit: resi.com

> NEWS

[7] [RANSOMWARE] coinbasecartel leaked Westwing Group SE (ransomware.live/coinbasecartel)
Victim: Westwing Group SE | Group: coinbasecartel | Country: DE | Details: [AI generated] Westwing Group SE is a German e-commerce company specializing in home and living products. Founded in 2011 and headquartered in Munich, Germany, it operates an online platform offering curated furniture, décor, and lifestyle products. The company serves customers across multiple Europ

[7] [RANSOMWARE] shinyhunters leaked CyrusOne, LLC. (ransomware.live/shinyhunters)
Victim: CyrusOne, LLC. | Group: shinyhunters | Country: US | Details: Update 23 Aug : We are removing the clients name off this post. They are refusing to pay a $13 million demand. They have 24 hours left to engage with us. We hold 12.9 million Salesforce records along with: Sharepoint: (369.6 GB Compressed / 645 GB Uncompressed) 288,729 Files, 60,513 Folders – More

[7] [RANSOMWARE] metaencryptor leaked Weber Water Resources (ransomware.live/metaencryptor)
Victim: Weber Water Resources | Group: metaencryptor | Website: www.weberwaterresources.com | Country: US | Details: Founded in 1910, Weber Water Resources has been providing the widest range of water resource solutions at the lowest available risk to clients for over a century. Through our superior problem solving ability, Weber Water Resources partners with public and private clients to achieve the most equitabl

[7] [RANSOMWARE] Storm leaked Phoenix Group of Companies (ransomware.live/Storm)
Victim: Phoenix Group of Companies | Group: Storm | Website: phoenixlitho.com | Country: US | Details: The Phoenix Group of Companies is a leading single-source provider of print solutions from concept to completion that produces high quality communications to help businesses rise above the competition and overcome everyday challenges. The company headquarters is located in 11631 Caroline Road, Phil

[5] [RANSOMWARE] genesis leaked Hospitality Health ER (Longview) (ransomware.live/genesis)
Victim: Hospitality Health ER (Longview) | Group: genesis | Website: . | Country: US | Details: A healthcare organization

[5] [RANSOMWARE] qilin leaked S.E.M.P. s.r.l. (ransomware.live/qilin)
Victim: S.E.M.P. s.r.l. | Group: qilin | Website: www.semp.it | Country: IT | Details: N/A

[5] [RANSOMWARE] lockbit5 leaked adt.com (ransomware.live/lockbit5)
Victim: adt.com | Group: lockbit5 | Website: adt.com | Country: US | Details: ADT is a security company that offers security systems, cameras, alarms ad home automation services….

[5] [RANSOMWARE] killsec leaked Global Go (ransomware.live/killsec)
Victim: Global Go | Group: killsec | Website: globalgo.com.pe | Country: PE | Details: [AI generated] N/A

[5] [RANSOMWARE] qilin leaked Euroflora srl (ransomware.live/qilin)
Victim: Euroflora srl | Group: qilin | Website: www.euroflorasrl.it | Country: IT | Details: N/A

[5] [RANSOMWARE] qilin leaked Tecnici Associati STP (ransomware.live/qilin)
Victim: Tecnici Associati STP | Group: qilin | Website: www.Tecnici Associati STP.it | Country: IT | Details: N/A

[5] [RANSOMWARE] qilin leaked Studio BOLDRIN PAOLO (ransomware.live/qilin)
Victim: Studio BOLDRIN PAOLO | Group: qilin | Website: www.paoloboldrin.it | Country: IT | Details: N/A

[5] [RANSOMWARE] qilin leaked Aurore Development S.p.A. (ransomware.live/qilin)
Victim: Aurore Development S.p.A. | Group: qilin | Website: www.auroredevelopment.it | Country: IT | Details: N/A

[5] [RANSOMWARE] L Group leaked compendiumusa.net (ransomware.live/L Group)
Victim: compendiumusa.net | Group: L Group | Website: compendiumusa.net | Country: US | Details: [AI generated] N/A

[5] [RANSOMWARE] qilin leaked Clear Align (ransomware.live/qilin)
Victim: Clear Align | Group: qilin | Website: www.clearalign.com | Country: US | Details: N/A

[5] [RANSOMWARE] qilin leaked Difor (ransomware.live/qilin)
Victim: Difor | Group: qilin | Website: www.difor.cl | Country: CL | Details: N/A

[5] [RANSOMWARE] qilin leaked Black Cat Engineering & Construction WLL (ransomware.live/qilin)
Victim: Black Cat Engineering & Construction WLL | Group: qilin | Website: www.blackcat.com.qa | Country: QA | Details: N/A

[5] [RANSOMWARE] emperador leaked FRUCASTRO SL (ransomware.live/emperador)
Victim: FRUCASTRO SL | Group: emperador | Country: ES | Details: Recent databases, important documents [Size: 540.1 MB | Sector: Manufacturing]

[5] [RANSOMWARE] kazu leaked PappyJoe: Healthcare Management System (ransomware.live/kazu)
Victim: PappyJoe: Healthcare Management System | Group: kazu | Website: pappyjoe.com | Country: US | Details: PappyJoe is an India-based healthcare technology company that provides a cloud-based practice management platform for clinics, hospitals, and healthcare professionals. The platform helps manage appointments, electronic medical records (EMR), billing, prescriptions, patient communication, and adminis

[5] [RANSOMWARE] kazu leaked Instituto Ferrero de Neurología y Sueño (ransomware.live/kazu)
Victim: Instituto Ferrero de Neurología y Sueño | Group: kazu | Website: ifn.com.ar | Country: AR | Details: Instituto Ferrero de Neurología y Sueño (IFN) is a specialized medical center in Argentina that focuses on the diagnosis and treatment of neurological and sleep disorders. It provides services such as neurology consultations, sleep studies, diagnostic testing, and personalized treatment plans. Using

[5] [RANSOMWARE] kazu leaked Brazil Mobilemed: Cloud PACS Platform (ransomware.live/kazu)
Victim: Brazil Mobilemed: Cloud PACS Platform | Group: kazu | Website: mobilemed.com.br | Country: BR | Details: Mobilemed is a Brazil-based health technology company that provides a cloud-based PACS (Picture Archiving and Communication System) for radiologists, hospitals, and diagnostic imaging centers. Its platform enables healthcare professionals to securely store, access, manage, and share medical images a

> SUMMARY

New items collected: 51. Critical items: 0. Active ransomware groups represented today: 1. CVEs to prioritise for review: none identified in the selected items.

Sources: BleepingComputer, TheHackerNews, SecurityWeek, HelpNetSecurity, KrebsOnSecurity, CISA KEV, ransomware.live

Open the companion interactive HTML intelligence report