THREATSUnited States
Qilin and The Gentlemen Drive Manufacturing Victims Up
ReliaQuest reported a 70% rise in manufacturing victims on leak sites in Q3 2026, driven by Qilin and The Gentlemen.
Nov 5, 2026 · 2 min
Threats — News
Up-to-date cyber intelligence coverage. Filter by category or browse the full archive.
THREATSUnited States
California records Baanx US Corp. breach notice
California posted Baanx US Corp.’s breach notice and lists Sept. 23, 2026 as the known incident date.
Nov 4, 2026 · 2 min
THREATSUnited States
Banco Hipotecario hit with SIM swapping ruling
Puerto Madryn appeals court upheld a $20 million ruling against Banco Hipotecario after a SIM swap, fraudulent loan
Oct 28, 2026 · 3 min
THREATSUnited States
Columbia confirms ransomware attack, SLED investigates
Columbia, South Carolina, confirmed a ransomware attack and SLED opened a criminal probe. Qilin also reportedly listed the city.
Oct 27, 2026 · 3 min
THREATSUnited States
U.S. OT alerts target water, oil
FERC audits, exposed PLC campaigns and segmentation gaps have raised new warnings for U.S. water, oil and gas operators.
Oct 22, 2026 · 2 min
THREATSUnited States
CISA warns on SafePay and Qilin in critical infrastructure
CISA, the FBI and partners warned on SafePay, with about 600 critical infrastructure victims across the Americas, Europe
Oct 22, 2026 · 3 min
THREATSUnited States
Anne Arundel County Confirms August 28 Breach
Maryland’s Anne Arundel County confirmed an August 28 breach and said essential services were not disrupted. Rhysida later claimed 2.6 TB.
Oct 21, 2026 · 2 min
THREATSUnited States
CISA warns on Eclipse Milo OPC UA flaws
CISA issued ICS-26-288-01 on six Eclipse Milo CVEs and recommends updating to Milo 1.1.5.
Oct 21, 2026 · 2 min
THREATSUnited States
AngMar and Clover Health exposed 250,000 records
Incidents at AngMar Management Services and Clover Health may have affected 250,000 people between July and September 2026.
Oct 12, 2026 · 2 min
THREATSUnited States
Vicksburg Keeps Recovery After Ransomware
Vicksburg suspended water and gas shutoffs and late fees while it restores systems after a ransomware attack.
Oct 6, 2026 · 3 min
THREATSUnited States
US sanctions Tren de Aragua-linked network
The United States sanctioned 10 people and entities tied to a financial network linked to Tren de Aragua, accused of ATM hacks.
Oct 5, 2026 · 2 min
THREATSUnited States
Illinois hospital claimed by Wallstreet ransomware
Wallstreet claimed an attack on Gibson Area Hospital in Illinois. FalconFeeds said 600 GB may have been exfiltrated.
Oct 4, 2026 · 3 min
THREATSUnited States
FBI, CISA warn on U.S. water attacks
FBI, CISA and EPA flagged attacks on U.S. critical infrastructure, including water systems and tankers, plus exposed utility credentials.
Oct 3, 2026 · 3 min
THREATSUnited States
Stevens Point, Columbus face ransomware fallout
Stevens Point says it stopped a ransomware attempt before data was stolen. Columbus is still in court over a 2024 data breach.
Oct 2, 2026 · 2 min
THREATSUnited States
Modoc Medical Center reports file theft
The Alturas, California hospital said an unauthorized actor accessed its systems and downloaded files. The number of affected people was not disclosed.
Sep 30, 2026 · 1 min
THREATSUnited States
CISA, FBI issue ICS integrator guidance
The guide urges tighter remote access controls, stronger contracts, and manual operations for critical infrastructure using third-party ICS integrators.
Sep 29, 2026 · 3 min
THREATSUnited States
OnTrac confirms breach, Emperador case advances
OnTrac reported unauthorized access between March 20 and 22, 2026. Emperador still listed the company on its leak site.
Sep 28, 2026 · 3 min
THREATSUnited States
U.S. hospitals report data incidents
Grafton City Hospital notified 1,215 people after a phishing-linked breach. Cedar County Memorial is still investigating a possible data exposure.
Sep 22, 2026 · 3 min
THREATSUnited States
Qilin posts victims in Mexico, Chile
ZeroHour added new Qilin victims in Mexico, Chile, Argentina and Trinidad and Tobago. Panzer also listed Brazil’s K3G Solutions.
Sep 22, 2026 · 2 min
THREATSUnited States
Ransomware Targets VMware vCenter in Latin America
CISA said ransomware is exploiting a critical VMware vCenter flaw, while reports point to victims and active campaigns in Latin America.
Sep 20, 2026 · 2 min
THREATSUnited States
Sutton and Fort Smith Hit by Ransomware
Sutton and Fort Smith reported ransomware incidents tied to Global and Interlock. Both cities said the attacks were contained.
Sep 18, 2026 · 2 min
THREATSUnited States
Eudora blames municipal systems ransomware
A former IT administrator said a foreign ransomware attack hit Eudora and the Douglas County sheriff’s office. The attribution is unconfirmed.
Sep 16, 2026 · 2 min
THREATSUnited States
Nutex Health confirms publication of stolen data
Nutex Health told the SEC a third party posted data allegedly taken from its network and said it found no material business or reporting impact.
Sep 13, 2026 · 2 min
THREATSUnited States
INCRANSOM Adds U.S. Victims
Security Arsenal detected 11 new INCRANSOM victims in five days, with cases in the U.S.
Sep 10, 2026 · 4 min
THREATSUnited States
DaVita, Cornerstone and Alta Hit by Ransomware
DaVita, Cornerstone Behavioral Healthcare and Alta Orthopaedics reported breaches tied to ransomware. Nutex Health was also claimed.
Sep 8, 2026 · 3 min
THREATSUnited States
KRYBIT widens its campaign to Colombia
KRYBIT added 14 victims in 24 hours across 9 countries and more than 8 sectors, while CYFIRMA added Colombia and Chile as targets.
Sep 4, 2026 · 4 min
THREATSUnited States
Greenberg Traurig cited in leak reports
Greenberg Traurig appeared in multiple leak posts, but there is no official verification of a breach or of who was behind it.
Sep 4, 2026 · 2 min
THREATSUnited States
U.S. corrects QTFY cyberespionage notice
The Justice Department said several named agencies were targets, not confirmed victims, in a campaign attributed to QTFY.
Sep 3, 2026 · 3 min
THREATSUnited States
KRYBIT and LOCKBIT5 Add New Victims
KRYBIT, LOCKBIT5, and INC Ransom added new victims, with most activity centered on the United States and fresh listings in 48 and 24 hours.
Sep 2, 2026 · 3 min
THREATSUnited States
CHAOS, DragonForce and STORM add ransomware victims
Security Arsenal linked new victims to CHAOS, DragonForce, KRYBIT, STORM and GLOBAL SECRET GROUP, including cases in the U.S.
Aug 31, 2026 · 3 min
THREATSUnited States
Brazilian domains added to DragonForce, KRYBIT
Frato, neooftalmo.com.br and sysconth.com appear among new DragonForce and KRYBIT victims, with outside checks refining the claims.
Aug 29, 2026 · 3 min
THREATSUnited States
FBI says Medusa tops 500 healthcare victims
A joint FBI, CISA and HHS notice says Medusa has hit more than 500 victims since 2021, with healthcare a frequent target.
Aug 28, 2026 · 3 min
THREATSUnited States
ATF probes cyber incident in isolated system
ATF said an isolated system was affected and reported no signs of impact to eForms, its corporate network or other systems.
Aug 28, 2026 · 3 min
THREATSUnited States
CoinbaseCartel, Storm Target US Victims
CoinbaseCartel, Storm, Qilin, DragonForce and SilentRansomGroup posted new victims in the US and Canada across health, finance
Aug 27, 2026 · 4 min
THREATSUnited States
Ransomware groups add U.S. victims
INCRANSOM, THEGENTLEMEN, METAENCRYPTOR and EVEREST added victims in the U.S. across health, finance, technology
Aug 25, 2026 · 3 min
THREATSUnited States
CISA warns on active Siemens S7 PLCs
CISA expanded its alert on Siemens S7 PLCs and said more than 100 water systems were hit in July, with limited but real impacts.
Aug 24, 2026 · 4 min
THREATSUnited States
Medusa tops 500 victims in health sector
FBI, CISA and HHS updated their Medusa alert, saying the group has hit more than 500 victims and kept targeting US health care.
Aug 22, 2026 · 2 min
THREATSUnited States
US ransomware victims pile up in 48 hours
Security Arsenal tracked new U.S. victims from DIREWOLF, COINBASECARTEL and XPL0ITRS across health, tech and professional services.
Aug 19, 2026 · 2 min
THREATSUnited States
US Alerts on Gunra, Unlimited Breach Hits 3.8M
US agencies warned on Gunra, while Unlimited Technology Systems raised its breach tally to 3.8 million patients.
Aug 16, 2026 · 3 min
THREATSUnited States
Suisun City Declares Emergency After Cyberattack
California’s Suisun City shut down its computer network after an attack disrupted 911 routing, police, fire and other services.
Aug 14, 2026 · 2 min
THREATSUnited States
U.S. Health Sector Hit by Three Ransomware Cases
Change Healthcare, OSF Healthcare and Unlimited Technology Systems surfaced in recent ransomware and breach reports tied to U.S. health care.
Aug 13, 2026 · 2 min
THREATSUnited States
Argentina digital banking fraud rises
Fraud complaints and related amounts rose in Argentina’s banking sector in H1 2026, according to the central bank.
Aug 11, 2026 · 2 min
THREATSUnited States
US: Suisun City hit by malware attack
Suisun City declared an emergency after a malware attack disrupted 911 and other essential services. The FBI and EPA also warned of water incidents.
Aug 10, 2026 · 2 min
THREATSUnited States
OSF Healthcare settles with HHS OCR over ransomware
OSF Healthcare settled with HHS OCR over a 2021 Nephilim-linked breach. A separate report names a possible INCRANSOM health victim.
Aug 7, 2026 · 2 min
THREATSUnited States
Interlock Claims Gardiner Family Chiropractic
Interlock added Gardiner Family Chiropractic to its victim list, alleging patient data and internal financial information were exfiltrated.
Aug 5, 2026 · 2 min
THREATSUnited States
Minnesota water systems hit in coordinated cyberattack
More than 30 Minnesota water systems and nine in Michigan were targeted, as the FBI and EPA warned of activity in at least seven states.
Aug 4, 2026 · 3 min
THREATSUnited States
US Alerts on Water System Attacks
CISA and the FBI report a rise in OT attacks on water and wastewater systems, including lockouts and password changes in several states.
Aug 1, 2026 · 2 min
THREATSUnited States
LatAm Tightens OT Defenses Amid Industrial Risk
Shieldworkz, the IDB and Cryptonomist warn of growing pressure on OT/ICS in water, energy and manufacturing, with exposure in focus.
Aug 1, 2026 · 2 min
THREATSUnited States
US Cities Show Up on Ransomware Leak Sites
ransomware.live lists several U.S. local governments as alleged victims, while Minnesota says a coordinated attack hit more than 30 water systems.
Jul 31, 2026 · 3 min
THREATSUnited States
U.S. Health Sector Faces Ransomware Pressure
Attacks on key U.S. health players disrupted claims, prescriptions and services. Ahhh Care appears in a possible ransomware case.
Jul 30, 2026 · 2 min