CISA KEV
No CISA KEV items in the last 14 days.
RANSOMWARE VICTIMS (DLS Monitoring)
- [RANSOMWARE]: Victim: Alcon Inc. | Group: shinyhunters | Website: alcon.com | Country: CH | Details: Over 25 million Salesforce records containing some PII was compromised. This is a final warning to reach out by 4 August 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline., Victim: Questel SAS | Group: shinyhunters | Website: questel.com | Country: FR | Details: Over 21 million Salesforce records containing some PII and 147GB+ of internal corporate data was compromised. This is a final warning to reach out by 4 August 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headl, Victim: www.prohealth.sg | Group: krybit | Website: www.prohealth.sg | Country: SG | Details: ProHealth Medical Group Pte Ltd is a Singaporean private primary healthcare group founded in the 1990s, headquartered at..., Victim: ecfa.org | Group: incransom | Website: ecfa.org | Country: US | Details: The Evangelical Council for Financial Accountability (ECFA) is an American accreditation agency founded in 1979 that certifies Christian churches and nonprofits based on financial integrity, board governance, and transparent fundraising. It represents over 2,700 member organizations with billions in, Victim: INTERTRUST AUSTRALIA PTY LTD | Group: qilin | Website: www.seedoutsourcing.com | Country: AU | Details: N/A, Victim: Asset Flooring Group Australia | Group: qilin | Website: www.assetflooring.com.au | Country: AU | Details: N/A, Victim: Mairie de Drancy | Group: qilin | Website: www.drancy.fr | Country: FR | Details: N/A, Victim: www.dcpartner.co.za | Group: krybit | Website: www.dcpartner.co.za | Country: ZA | Details: DC Partner (Pty) Ltd is a South African market-leading Payment Distribution Agency (PDA), one of only four NCR-accredite...
NEWS
- [9] [RANSOMWARE] shinyhunters leaked Alcon Inc. — Victim: Alcon Inc. | Group: shinyhunters | Website: alcon.com | Country: CH | Details: Over 25 million Salesforce records containing some PII was compromised. This is a final warning to reach out by 4 August 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. source
- [9] [RANSOMWARE] shinyhunters leaked Questel SAS — Victim: Questel SAS | Group: shinyhunters | Website: questel.com | Country: FR | Details: Over 21 million Salesforce records containing some PII and 147GB+ of internal corporate data was compromised. This is a final warning to reach out by 4 August 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headl source
- [6] Week in review: Claude breached three companies during tests, AD CS domain-takeover PoC released —
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Nono: Open-source sandbox for AI agents AI coding agents run with the same permissions as their users, meaning they can access sensitive files, credentials, and production systems. A prompt injection, hallucinated command, or simple mistake can quickly turn that access into a security incident. To reduce the risk, Luke Hinds and Stephen Parkinson co-founded nolabs and released Nono, an open-sourc source
- [5] [RANSOMWARE] krybit leaked www.prohealth.sg — Victim: www.prohealth.sg | Group: krybit | Website: www.prohealth.sg | Country: SG | Details: ProHealth Medical Group Pte Ltd is a Singaporean private primary healthcare group founded in the 1990s, headquartered at... source
- [5] [RANSOMWARE] incransom leaked ecfa.org — Victim: ecfa.org | Group: incransom | Website: ecfa.org | Country: US | Details: The Evangelical Council for Financial Accountability (ECFA) is an American accreditation agency founded in 1979 that certifies Christian churches and nonprofits based on financial integrity, board governance, and transparent fundraising. It represents over 2,700 member organizations with billions in source
- [5] [RANSOMWARE] qilin leaked INTERTRUST AUSTRALIA PTY LTD — Victim: INTERTRUST AUSTRALIA PTY LTD | Group: qilin | Website: www.seedoutsourcing.com | Country: AU | Details: N/A source
- [5] [RANSOMWARE] qilin leaked Asset Flooring Group Australia — Victim: Asset Flooring Group Australia | Group: qilin | Website: www.assetflooring.com.au | Country: AU | Details: N/A source
- [5] [RANSOMWARE] qilin leaked Mairie de Drancy — Victim: Mairie de Drancy | Group: qilin | Website: www.drancy.fr | Country: FR | Details: N/A source
- [5] [RANSOMWARE] krybit leaked www.dcpartner.co.za — Victim: www.dcpartner.co.za | Group: krybit | Website: www.dcpartner.co.za | Country: ZA | Details: DC Partner (Pty) Ltd is a South African market-leading Payment Distribution Agency (PDA), one of only four NCR-accredite... source
- [5] [RANSOMWARE] krybit leaked nigeria.asa-international.com — Victim: nigeria.asa-international.com | Group: krybit | Website: nigeria.asa-international.com | Country: NG | Details: ASHA Microfinance Bank Limited (ASA Nigeria) is a Nigerian for-profit deposit-taking microfinance institution, a fully l... source
- [5] [RANSOMWARE] krybit leaked www.ville-rinxent.fr — Victim: www.ville-rinxent.fr | Group: krybit | Website: www.ville-rinxent.fr | Country: FR | Details: Mairie de Rinxent (Municipality of Rinxent) is the official website of the town hall (mairie) of Rinxent, a small French... source
- [5] [RANSOMWARE] krybit leaked countrymotors.com.mx — Victim: countrymotors.com.mx | Group: krybit | Website: countrymotors.com.mx | Country: MX | Details: Country Motos S.A. de C.V. (also known as Country Motors or Country Honda) is a Mexican motorcycle dealership and multi-... source
- [5] [RANSOMWARE] SilentRansomGroup leaked Moses & Singer — Victim: Moses & Singer | Group: SilentRansomGroup | Country: US | Details: Moses & Singer LLP is a full-service law firm specializing in corporate transactions, intellectual pro… source
- [5] [RANSOMWARE] krybit leaked www.buzztrading104.co.za — Victim: www.buzztrading104.co.za | Group: krybit | Website: www.buzztrading104.co.za | Country: ZA | Details: Buzz Trading 104 (Pty) Ltd (also trading as Master Products) is a South African privately owned manufacturer and wholesa... source
- [5] [RANSOMWARE] qilin leaked Wire Products — Victim: Wire Products | Group: qilin | Website: www.wireproducts.us | Country: US | Details: N/A source
- [5] [RANSOMWARE] CRPxO leaked Encore Enterprises, Inc. — Victim: Encore Enterprises, Inc. | Group: CRPxO | Website: encore.bz | Country: US | Details: Sector: Commercial Real Estate | Data leaked: 700.0 GB source
- [5] [RANSOMWARE] shinyhunters leaked Lumenis Ltd. — Victim: Lumenis Ltd. | Group: shinyhunters | Website: lumenis.com | Country: IL | Details: Over 1.1 million records containing some Pil of customers/employees and 176GB+ of internal corporate data was compromised. This is a final warning to reach out by 4 August 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be source
SUMMARY
Total new items: 20. Critical count: 0. Ransomware groups active: 1. Top CVEs to patch: N/A.
Sources: BleepingComputer, TheHackerNews, SecurityWeek, HelpNetSecurity, KrebsOnSecurity, CISA KEV, ransomware.live