Comparitech.com
@comparitech.bsky.social
Providing in-depth tech research and the latest on cybersecurity threats. Follow for all the information on #ransomware attacks as they happen.
🚨 Baltimore City Fire & Police Employees' Retirement System 🇺🇸 has been added to the data leak site of #ransomware gang Qilin.
The government office was closed on November 13 due to "technical issues" - cause unconfirmed.
bit.ly/4bsqDGS
The government office was closed on November 13 due to "technical issues" - cause unconfirmed.
bit.ly/4bsqDGS
November 27, 2025 at 6:03 PM
🚨 Baltimore City Fire & Police Employees' Retirement System 🇺🇸 has been added to the data leak site of #ransomware gang Qilin.
The government office was closed on November 13 due to "technical issues" - cause unconfirmed.
bit.ly/4bsqDGS
The government office was closed on November 13 due to "technical issues" - cause unconfirmed.
bit.ly/4bsqDGS
🚨 C2 Vehicles (Country Club Enterprises) has been added to the data leak site of #ransomware gang Akira. 14 GB stolen.
The golf cart and low-speed vehicle retailer recently notified 229 people of an Aug '25 data breach following a cyber attack.
bit.ly/4bsqDGS
The golf cart and low-speed vehicle retailer recently notified 229 people of an Aug '25 data breach following a cyber attack.
bit.ly/4bsqDGS
November 27, 2025 at 3:12 PM
🚨 C2 Vehicles (Country Club Enterprises) has been added to the data leak site of #ransomware gang Akira. 14 GB stolen.
The golf cart and low-speed vehicle retailer recently notified 229 people of an Aug '25 data breach following a cyber attack.
bit.ly/4bsqDGS
The golf cart and low-speed vehicle retailer recently notified 229 people of an Aug '25 data breach following a cyber attack.
bit.ly/4bsqDGS
‼️Scientific consulting service, JASCO Applied Sciences 🇨🇦 is notifying US residents of a data breach following a cyber attack in July.
#Ransomware gang Rhysida claimed the attack, issuing a 10 BTC ransom demand ($1.22M) to delete the stolen data.
bit.ly/3Kojm1U
By: @becmoody.bsky.social
#Ransomware gang Rhysida claimed the attack, issuing a 10 BTC ransom demand ($1.22M) to delete the stolen data.
bit.ly/3Kojm1U
By: @becmoody.bsky.social
November 27, 2025 at 2:45 PM
‼️Scientific consulting service, JASCO Applied Sciences 🇨🇦 is notifying US residents of a data breach following a cyber attack in July.
#Ransomware gang Rhysida claimed the attack, issuing a 10 BTC ransom demand ($1.22M) to delete the stolen data.
bit.ly/3Kojm1U
By: @becmoody.bsky.social
#Ransomware gang Rhysida claimed the attack, issuing a 10 BTC ransom demand ($1.22M) to delete the stolen data.
bit.ly/3Kojm1U
By: @becmoody.bsky.social
‼️NEW confirmed #ransomware data breaches:
- Bartek Ingredients, Aug '25, INC
- Tami J. Dunham, May '25, SafePay
- Dubroff, Easley & Lovell, Sep '25, PEAR
- Running Aces Casino, Hotel & Racetrack, Aug '25, Qilin
- TerranearPMC, Sep '25, Play
- Trailer Transit, Sep '25, Metaencryptor
bit.ly/3T0yGne
- Bartek Ingredients, Aug '25, INC
- Tami J. Dunham, May '25, SafePay
- Dubroff, Easley & Lovell, Sep '25, PEAR
- Running Aces Casino, Hotel & Racetrack, Aug '25, Qilin
- TerranearPMC, Sep '25, Play
- Trailer Transit, Sep '25, Metaencryptor
bit.ly/3T0yGne
Map of worldwide ransomware attacks (updated daily) - Comparitech
Each dot represents the location of a ransomware attack, with the color of the dot indicating the sector affected (healthcare, education, government, and business). This map updates daily and pinpoint...
bit.ly
November 27, 2025 at 2:19 PM
‼️NEW confirmed #ransomware data breaches:
- Bartek Ingredients, Aug '25, INC
- Tami J. Dunham, May '25, SafePay
- Dubroff, Easley & Lovell, Sep '25, PEAR
- Running Aces Casino, Hotel & Racetrack, Aug '25, Qilin
- TerranearPMC, Sep '25, Play
- Trailer Transit, Sep '25, Metaencryptor
bit.ly/3T0yGne
- Bartek Ingredients, Aug '25, INC
- Tami J. Dunham, May '25, SafePay
- Dubroff, Easley & Lovell, Sep '25, PEAR
- Running Aces Casino, Hotel & Racetrack, Aug '25, Qilin
- TerranearPMC, Sep '25, Play
- Trailer Transit, Sep '25, Metaencryptor
bit.ly/3T0yGne
‼️CoVantage Credit Union 🇺🇸 is notifying 160K people of a data breach following the #ransomware attack on Marquis Software Solutions in Aug '25.
Other breaches:
6.9K - Community 1st Credit Union
51K - Norway Savings Bank
No hackers have claimed.
bit.ly/4pc4mmE
Other breaches:
6.9K - Community 1st Credit Union
51K - Norway Savings Bank
No hackers have claimed.
bit.ly/4pc4mmE
Software vendor serving 700+ banks hacked, credit union says - Comparitech
Marquis Software Solutions suffered a data breach that compromised SSNs, says Community 1st Credit Union, which notified 6,876 people.
bit.ly
November 27, 2025 at 1:32 PM
‼️CoVantage Credit Union 🇺🇸 is notifying 160K people of a data breach following the #ransomware attack on Marquis Software Solutions in Aug '25.
Other breaches:
6.9K - Community 1st Credit Union
51K - Norway Savings Bank
No hackers have claimed.
bit.ly/4pc4mmE
Other breaches:
6.9K - Community 1st Credit Union
51K - Norway Savings Bank
No hackers have claimed.
bit.ly/4pc4mmE
🚨 The City of Santa Paula 🇺🇸 has been added to the data leak site of #ransomware gang Qilin.
On November 12, the City said that it was "currently experiencing a network outage affecting email and internal servers." Cause unconfirmed.
bit.ly/4bsqDGS
On November 12, the City said that it was "currently experiencing a network outage affecting email and internal servers." Cause unconfirmed.
bit.ly/4bsqDGS
November 27, 2025 at 11:30 AM
🚨 The City of Santa Paula 🇺🇸 has been added to the data leak site of #ransomware gang Qilin.
On November 12, the City said that it was "currently experiencing a network outage affecting email and internal servers." Cause unconfirmed.
bit.ly/4bsqDGS
On November 12, the City said that it was "currently experiencing a network outage affecting email and internal servers." Cause unconfirmed.
bit.ly/4bsqDGS
🚨 Electricidad Panamericana 🇦🇷 has been added to the data leak site of #ransomware gang Dire Wolf. 100 GB allegedly stolen.
The Argentinian electrical supply company is currently experiencing a "technical incident" which is affecting its systems.
bit.ly/3T0yGne
The Argentinian electrical supply company is currently experiencing a "technical incident" which is affecting its systems.
bit.ly/3T0yGne
November 27, 2025 at 10:14 AM
🚨 Electricidad Panamericana 🇦🇷 has been added to the data leak site of #ransomware gang Dire Wolf. 100 GB allegedly stolen.
The Argentinian electrical supply company is currently experiencing a "technical incident" which is affecting its systems.
bit.ly/3T0yGne
The Argentinian electrical supply company is currently experiencing a "technical incident" which is affecting its systems.
bit.ly/3T0yGne
‼️ Dartmouth College 🇺🇸 is notifying 35K+ people of a data breach following hackers' exploitation of a zero-day vulnerability in the Oracle E-Business Suite software.
Names, SSNs & financial info affected.
#Ransomware gang Clop claimed the attack.
bit.ly/4iqdke3
By: @pabischoff.bsky.social
Names, SSNs & financial info affected.
#Ransomware gang Clop claimed the attack.
bit.ly/4iqdke3
By: @pabischoff.bsky.social
November 26, 2025 at 4:25 PM
‼️ Dartmouth College 🇺🇸 is notifying 35K+ people of a data breach following hackers' exploitation of a zero-day vulnerability in the Oracle E-Business Suite software.
Names, SSNs & financial info affected.
#Ransomware gang Clop claimed the attack.
bit.ly/4iqdke3
By: @pabischoff.bsky.social
Names, SSNs & financial info affected.
#Ransomware gang Clop claimed the attack.
bit.ly/4iqdke3
By: @pabischoff.bsky.social
🚨 Edmon Publishing 🇨🇦 has been added to the data leak site of #ransomware gang DragonForce. 101.93 GB stolen.
The Canadian law book publisher noted issues with its website yesterday but the cause is unconfirmed. The website has since been restored.
bit.ly/3T0yGne
The Canadian law book publisher noted issues with its website yesterday but the cause is unconfirmed. The website has since been restored.
bit.ly/3T0yGne
November 26, 2025 at 1:11 PM
🚨 Edmon Publishing 🇨🇦 has been added to the data leak site of #ransomware gang DragonForce. 101.93 GB stolen.
The Canadian law book publisher noted issues with its website yesterday but the cause is unconfirmed. The website has since been restored.
bit.ly/3T0yGne
The Canadian law book publisher noted issues with its website yesterday but the cause is unconfirmed. The website has since been restored.
bit.ly/3T0yGne
🚨 Iberia 🇪🇸 has been added to the data leak site of #ransomware gang Everest. 596 GB of data allegedly stolen.
This week, the Spanish airline confirmed its customers had been impacted in a data breach following a cyber attack via a supplier.
bit.ly/3T0yGne
This week, the Spanish airline confirmed its customers had been impacted in a data breach following a cyber attack via a supplier.
bit.ly/3T0yGne
November 25, 2025 at 5:00 PM
🚨 Iberia 🇪🇸 has been added to the data leak site of #ransomware gang Everest. 596 GB of data allegedly stolen.
This week, the Spanish airline confirmed its customers had been impacted in a data breach following a cyber attack via a supplier.
bit.ly/3T0yGne
This week, the Spanish airline confirmed its customers had been impacted in a data breach following a cyber attack via a supplier.
bit.ly/3T0yGne
‼️ Pittsburgh law firm, Davies, McFarland, & Carroll 🇺🇸 is notifying 54K+ people of a data breach following a cyber attack in May '25. SSNs, medical data & health insurance info compromised.
#Ransomware gang Lynx claimed the attack on the legal company.
bit.ly/3XU44VK
By: @pabischoff.bsky.social
#Ransomware gang Lynx claimed the attack on the legal company.
bit.ly/3XU44VK
By: @pabischoff.bsky.social
November 25, 2025 at 4:29 PM
‼️ Pittsburgh law firm, Davies, McFarland, & Carroll 🇺🇸 is notifying 54K+ people of a data breach following a cyber attack in May '25. SSNs, medical data & health insurance info compromised.
#Ransomware gang Lynx claimed the attack on the legal company.
bit.ly/3XU44VK
By: @pabischoff.bsky.social
#Ransomware gang Lynx claimed the attack on the legal company.
bit.ly/3XU44VK
By: @pabischoff.bsky.social
‼️ Bok Financial 🇺🇸 is issuing data breach letters to 2,878 people following a ransomware attack on third-party fintech company, Linedata 🇫🇷 Names and SSNs affected.
The attack on Linedata occurred in Aug '25. No hackers claimed the attack.
bit.ly/3T0yGne
The attack on Linedata occurred in Aug '25. No hackers claimed the attack.
bit.ly/3T0yGne
Map of worldwide ransomware attacks (updated daily) - Comparitech
Each dot represents the location of a ransomware attack, with the color of the dot indicating the sector affected (healthcare, education, government, and business). This map updates daily and pinpoint...
bit.ly
November 25, 2025 at 2:51 PM
‼️ Bok Financial 🇺🇸 is issuing data breach letters to 2,878 people following a ransomware attack on third-party fintech company, Linedata 🇫🇷 Names and SSNs affected.
The attack on Linedata occurred in Aug '25. No hackers claimed the attack.
bit.ly/3T0yGne
The attack on Linedata occurred in Aug '25. No hackers claimed the attack.
bit.ly/3T0yGne
🚨Kulturrådet - Swedish Arts Council 🇸🇪 has been added to the data leak site of #ransomware gang RansomHouse.
The government agency has just recovered from a data breach which impacted systems from October 31, 2025 to November 20, 2025.
bit.ly/3T0yGne
The government agency has just recovered from a data breach which impacted systems from October 31, 2025 to November 20, 2025.
bit.ly/3T0yGne
November 25, 2025 at 10:36 AM
🚨Kulturrådet - Swedish Arts Council 🇸🇪 has been added to the data leak site of #ransomware gang RansomHouse.
The government agency has just recovered from a data breach which impacted systems from October 31, 2025 to November 20, 2025.
bit.ly/3T0yGne
The government agency has just recovered from a data breach which impacted systems from October 31, 2025 to November 20, 2025.
bit.ly/3T0yGne
🚨 #Ransomware gang Devman is demanding $400K for 500 GB of data from the Georgia Superior Court Clerks’ Cooperative Authority 🇺🇸
GSCCCA's systems are currently down while it deals with a "credible and ongoing cybersecurity threat."
bit.ly/4pOP87F
By: @pabischoff.bsky.social
GSCCCA's systems are currently down while it deals with a "credible and ongoing cybersecurity threat."
bit.ly/4pOP87F
By: @pabischoff.bsky.social
November 24, 2025 at 7:34 PM
🚨 #Ransomware gang Devman is demanding $400K for 500 GB of data from the Georgia Superior Court Clerks’ Cooperative Authority 🇺🇸
GSCCCA's systems are currently down while it deals with a "credible and ongoing cybersecurity threat."
bit.ly/4pOP87F
By: @pabischoff.bsky.social
GSCCCA's systems are currently down while it deals with a "credible and ongoing cybersecurity threat."
bit.ly/4pOP87F
By: @pabischoff.bsky.social
🚨 Akehurst Landscape Service 🇺🇸 has been added to the data leak site of #ransomware gang Akira.
The company posted a notice about a "temporary system interruption" on its Facebook page on November 7, 2025.
Akira has claimed 646 victims this year.
bit.ly/4bsqDGS
The company posted a notice about a "temporary system interruption" on its Facebook page on November 7, 2025.
Akira has claimed 646 victims this year.
bit.ly/4bsqDGS
November 24, 2025 at 3:28 PM
🚨 Akehurst Landscape Service 🇺🇸 has been added to the data leak site of #ransomware gang Akira.
The company posted a notice about a "temporary system interruption" on its Facebook page on November 7, 2025.
Akira has claimed 646 victims this year.
bit.ly/4bsqDGS
The company posted a notice about a "temporary system interruption" on its Facebook page on November 7, 2025.
Akira has claimed 646 victims this year.
bit.ly/4bsqDGS
🛍️ The data privacy costs of Black Friday bargains
🔺 The average app requests access to nearly 29 permissions, 8 are “dangerous”
🔺 Most common: camera and precise location access
🔺 23% of apps potentially violate Google’s privacy policy standards
🔺 The average app has 7 trackers
bit.ly/4ocHh2g
🔺 The average app requests access to nearly 29 permissions, 8 are “dangerous”
🔺 Most common: camera and precise location access
🔺 23% of apps potentially violate Google’s privacy policy standards
🔺 The average app has 7 trackers
bit.ly/4ocHh2g
The data privacy costs of Black Friday bargains: 100 Black Friday apps analyzed - Comparitech
We analyzed 101 of the most popular Black Friday apps for Android to find out what personal information they collect after you’ve downloaded them. On average, each app requested access to nearly 29 pe...
bit.ly
November 24, 2025 at 3:05 PM
🛍️ The data privacy costs of Black Friday bargains
🔺 The average app requests access to nearly 29 permissions, 8 are “dangerous”
🔺 Most common: camera and precise location access
🔺 23% of apps potentially violate Google’s privacy policy standards
🔺 The average app has 7 trackers
bit.ly/4ocHh2g
🔺 The average app requests access to nearly 29 permissions, 8 are “dangerous”
🔺 Most common: camera and precise location access
🔺 23% of apps potentially violate Google’s privacy policy standards
🔺 The average app has 7 trackers
bit.ly/4ocHh2g
🚨 mToilet 🇵🇱 has been added to the data leak site of #ransomware gang Chaos. 450 GB stolen.
The Polish portable toilet rental company suffered an attack on November 11, 2025, which resulted in a temporary loss of data.
bit.ly/3T0yGne
The Polish portable toilet rental company suffered an attack on November 11, 2025, which resulted in a temporary loss of data.
bit.ly/3T0yGne
November 24, 2025 at 2:16 PM
🚨 mToilet 🇵🇱 has been added to the data leak site of #ransomware gang Chaos. 450 GB stolen.
The Polish portable toilet rental company suffered an attack on November 11, 2025, which resulted in a temporary loss of data.
bit.ly/3T0yGne
The Polish portable toilet rental company suffered an attack on November 11, 2025, which resulted in a temporary loss of data.
bit.ly/3T0yGne
🚨 Outback Pharmacies 🇦🇺 was added to the data leak site of #ransomware gang Beast. 150 GB stolen.
The healthcare company confirmed its systems had been impacted on November 21, 2025. Progress in restoring these was made over the weekend.
bit.ly/3T0yGne
The healthcare company confirmed its systems had been impacted on November 21, 2025. Progress in restoring these was made over the weekend.
bit.ly/3T0yGne
November 24, 2025 at 1:37 PM
🚨 Outback Pharmacies 🇦🇺 was added to the data leak site of #ransomware gang Beast. 150 GB stolen.
The healthcare company confirmed its systems had been impacted on November 21, 2025. Progress in restoring these was made over the weekend.
bit.ly/3T0yGne
The healthcare company confirmed its systems had been impacted on November 21, 2025. Progress in restoring these was made over the weekend.
bit.ly/3T0yGne
🚨 College Superieur De Montreal 🇨🇦 has been added to the data leak site of #ransomware gang Rhysida with a 5 BTC ($430K USD) ransom.
The Canadian college noted a cyber attack on its systems at the beginning of October. Classes were canceled for a week.
bit.ly/3T0yGne
The Canadian college noted a cyber attack on its systems at the beginning of October. Classes were canceled for a week.
bit.ly/3T0yGne
November 24, 2025 at 11:23 AM
🚨 College Superieur De Montreal 🇨🇦 has been added to the data leak site of #ransomware gang Rhysida with a 5 BTC ($430K USD) ransom.
The Canadian college noted a cyber attack on its systems at the beginning of October. Classes were canceled for a week.
bit.ly/3T0yGne
The Canadian college noted a cyber attack on its systems at the beginning of October. Classes were canceled for a week.
bit.ly/3T0yGne
❗️UPDATE: Norway Savings Bank 🇺🇸 is also notifying 51K people of a data breach following this #ransomware attack on Marquis Software Solutions.
Total affected so far = 57,876.
bit.ly/4pc4mmE
Total affected so far = 57,876.
bit.ly/4pc4mmE
‼️Marquis Software Solutions 🇺🇸 which serves 700+ banks was hit by a #ransomware attack in Aug '25.
That's according to Community 1st Credit Union which is notifying 6.9K people of the data breach.
Marquis is said to have paid a ransom (hackers unknown).
bit.ly/4pc4mmE
By: @pabischoff.bsky.social
That's according to Community 1st Credit Union which is notifying 6.9K people of the data breach.
Marquis is said to have paid a ransom (hackers unknown).
bit.ly/4pc4mmE
By: @pabischoff.bsky.social
November 21, 2025 at 1:55 PM
❗️UPDATE: Norway Savings Bank 🇺🇸 is also notifying 51K people of a data breach following this #ransomware attack on Marquis Software Solutions.
Total affected so far = 57,876.
bit.ly/4pc4mmE
Total affected so far = 57,876.
bit.ly/4pc4mmE
‼️ Fowler Elementary School District 45 🇺🇸 has just started issuing data breach notifications following a #ransomware attack in May 2025. SSNs affected.
Interlock was responsible for the attack and allegedly stole 401 GB of data, including 63.6K files.
bit.ly/4bsqDGS
Interlock was responsible for the attack and allegedly stole 401 GB of data, including 63.6K files.
bit.ly/4bsqDGS
November 21, 2025 at 1:21 PM
‼️ Fowler Elementary School District 45 🇺🇸 has just started issuing data breach notifications following a #ransomware attack in May 2025. SSNs affected.
Interlock was responsible for the attack and allegedly stole 401 GB of data, including 63.6K files.
bit.ly/4bsqDGS
Interlock was responsible for the attack and allegedly stole 401 GB of data, including 63.6K files.
bit.ly/4bsqDGS
‼️ WEL Companies 🇺🇸 is notifying 123K people of a data breach following a cyber attack in Jan '25. SSNs and IDs are among the data affected.
#Ransomware gang RansomHub claimed the attack on the transport company with 189 GB allegedly stolen.
bit.ly/3LR50Yr
#Ransomware gang RansomHub claimed the attack on the transport company with 189 GB allegedly stolen.
bit.ly/3LR50Yr
November 20, 2025 at 5:28 PM
‼️ WEL Companies 🇺🇸 is notifying 123K people of a data breach following a cyber attack in Jan '25. SSNs and IDs are among the data affected.
#Ransomware gang RansomHub claimed the attack on the transport company with 189 GB allegedly stolen.
bit.ly/3LR50Yr
#Ransomware gang RansomHub claimed the attack on the transport company with 189 GB allegedly stolen.
bit.ly/3LR50Yr
🚨 #Ransomware gang Sinobi has claimed an October attack on Heywood Healthcare 🇺🇸 550 GB of data allegedly stolen.
Heywood Hospital in Gardner and Athol Hospital in Athol suffered over 2 weeks of downtime due to the attack.
bit.ly/3XAGTzJ
By: @pabischoff.bsky.social
Heywood Hospital in Gardner and Athol Hospital in Athol suffered over 2 weeks of downtime due to the attack.
bit.ly/3XAGTzJ
By: @pabischoff.bsky.social
November 19, 2025 at 4:56 PM
🚨 #Ransomware gang Sinobi has claimed an October attack on Heywood Healthcare 🇺🇸 550 GB of data allegedly stolen.
Heywood Hospital in Gardner and Athol Hospital in Athol suffered over 2 weeks of downtime due to the attack.
bit.ly/3XAGTzJ
By: @pabischoff.bsky.social
Heywood Hospital in Gardner and Athol Hospital in Athol suffered over 2 weeks of downtime due to the attack.
bit.ly/3XAGTzJ
By: @pabischoff.bsky.social
🚨 Perry Brothers Oil Company Inc. 🇺🇸 has been added to the data leak site of #ransomware gang Akira. 20 GB allegedly stolen.
The automotive retail company noted computer and phone system disruption in October. Cause unconfirmed.
bit.ly/4bsqDGS
The automotive retail company noted computer and phone system disruption in October. Cause unconfirmed.
bit.ly/4bsqDGS
November 19, 2025 at 3:08 PM
🚨 Perry Brothers Oil Company Inc. 🇺🇸 has been added to the data leak site of #ransomware gang Akira. 20 GB allegedly stolen.
The automotive retail company noted computer and phone system disruption in October. Cause unconfirmed.
bit.ly/4bsqDGS
The automotive retail company noted computer and phone system disruption in October. Cause unconfirmed.
bit.ly/4bsqDGS
🚨 CLOP just claimed 10 new victims - all of which are US-based and include:
🏭 x7 manufacturers (inc. 2 in the healthcare sector)
🏫 x3 educational institutions
The #ransomware gang's latest victims are from an Oracle zero-day vulnerability exploit.
bit.ly/4bsqDGS
🏭 x7 manufacturers (inc. 2 in the healthcare sector)
🏫 x3 educational institutions
The #ransomware gang's latest victims are from an Oracle zero-day vulnerability exploit.
bit.ly/4bsqDGS
November 19, 2025 at 2:28 PM
🚨 CLOP just claimed 10 new victims - all of which are US-based and include:
🏭 x7 manufacturers (inc. 2 in the healthcare sector)
🏫 x3 educational institutions
The #ransomware gang's latest victims are from an Oracle zero-day vulnerability exploit.
bit.ly/4bsqDGS
🏭 x7 manufacturers (inc. 2 in the healthcare sector)
🏫 x3 educational institutions
The #ransomware gang's latest victims are from an Oracle zero-day vulnerability exploit.
bit.ly/4bsqDGS