Comparitech.com
@comparitech.bsky.social
Providing in-depth tech research and the latest on cybersecurity threats. Follow for all the information on #ransomware attacks as they happen.
🚨 Baltimore City Fire & Police Employees' Retirement System 🇺🇸 has been added to the data leak site of #ransomware gang Qilin.
The government office was closed on November 13 due to "technical issues" - cause unconfirmed.
bit.ly/4bsqDGS
The government office was closed on November 13 due to "technical issues" - cause unconfirmed.
bit.ly/4bsqDGS
November 27, 2025 at 6:03 PM
🚨 Baltimore City Fire & Police Employees' Retirement System 🇺🇸 has been added to the data leak site of #ransomware gang Qilin.
The government office was closed on November 13 due to "technical issues" - cause unconfirmed.
bit.ly/4bsqDGS
The government office was closed on November 13 due to "technical issues" - cause unconfirmed.
bit.ly/4bsqDGS
🚨 C2 Vehicles (Country Club Enterprises) has been added to the data leak site of #ransomware gang Akira. 14 GB stolen.
The golf cart and low-speed vehicle retailer recently notified 229 people of an Aug '25 data breach following a cyber attack.
bit.ly/4bsqDGS
The golf cart and low-speed vehicle retailer recently notified 229 people of an Aug '25 data breach following a cyber attack.
bit.ly/4bsqDGS
November 27, 2025 at 3:12 PM
🚨 C2 Vehicles (Country Club Enterprises) has been added to the data leak site of #ransomware gang Akira. 14 GB stolen.
The golf cart and low-speed vehicle retailer recently notified 229 people of an Aug '25 data breach following a cyber attack.
bit.ly/4bsqDGS
The golf cart and low-speed vehicle retailer recently notified 229 people of an Aug '25 data breach following a cyber attack.
bit.ly/4bsqDGS
‼️Scientific consulting service, JASCO Applied Sciences 🇨🇦 is notifying US residents of a data breach following a cyber attack in July.
#Ransomware gang Rhysida claimed the attack, issuing a 10 BTC ransom demand ($1.22M) to delete the stolen data.
bit.ly/3Kojm1U
By: @becmoody.bsky.social
#Ransomware gang Rhysida claimed the attack, issuing a 10 BTC ransom demand ($1.22M) to delete the stolen data.
bit.ly/3Kojm1U
By: @becmoody.bsky.social
November 27, 2025 at 2:45 PM
‼️Scientific consulting service, JASCO Applied Sciences 🇨🇦 is notifying US residents of a data breach following a cyber attack in July.
#Ransomware gang Rhysida claimed the attack, issuing a 10 BTC ransom demand ($1.22M) to delete the stolen data.
bit.ly/3Kojm1U
By: @becmoody.bsky.social
#Ransomware gang Rhysida claimed the attack, issuing a 10 BTC ransom demand ($1.22M) to delete the stolen data.
bit.ly/3Kojm1U
By: @becmoody.bsky.social
🚨 The City of Santa Paula 🇺🇸 has been added to the data leak site of #ransomware gang Qilin.
On November 12, the City said that it was "currently experiencing a network outage affecting email and internal servers." Cause unconfirmed.
bit.ly/4bsqDGS
On November 12, the City said that it was "currently experiencing a network outage affecting email and internal servers." Cause unconfirmed.
bit.ly/4bsqDGS
November 27, 2025 at 11:30 AM
🚨 The City of Santa Paula 🇺🇸 has been added to the data leak site of #ransomware gang Qilin.
On November 12, the City said that it was "currently experiencing a network outage affecting email and internal servers." Cause unconfirmed.
bit.ly/4bsqDGS
On November 12, the City said that it was "currently experiencing a network outage affecting email and internal servers." Cause unconfirmed.
bit.ly/4bsqDGS
🚨 Electricidad Panamericana 🇦🇷 has been added to the data leak site of #ransomware gang Dire Wolf. 100 GB allegedly stolen.
The Argentinian electrical supply company is currently experiencing a "technical incident" which is affecting its systems.
bit.ly/3T0yGne
The Argentinian electrical supply company is currently experiencing a "technical incident" which is affecting its systems.
bit.ly/3T0yGne
November 27, 2025 at 10:14 AM
🚨 Electricidad Panamericana 🇦🇷 has been added to the data leak site of #ransomware gang Dire Wolf. 100 GB allegedly stolen.
The Argentinian electrical supply company is currently experiencing a "technical incident" which is affecting its systems.
bit.ly/3T0yGne
The Argentinian electrical supply company is currently experiencing a "technical incident" which is affecting its systems.
bit.ly/3T0yGne
‼️ Dartmouth College 🇺🇸 is notifying 35K+ people of a data breach following hackers' exploitation of a zero-day vulnerability in the Oracle E-Business Suite software.
Names, SSNs & financial info affected.
#Ransomware gang Clop claimed the attack.
bit.ly/4iqdke3
By: @pabischoff.bsky.social
Names, SSNs & financial info affected.
#Ransomware gang Clop claimed the attack.
bit.ly/4iqdke3
By: @pabischoff.bsky.social
November 26, 2025 at 4:25 PM
‼️ Dartmouth College 🇺🇸 is notifying 35K+ people of a data breach following hackers' exploitation of a zero-day vulnerability in the Oracle E-Business Suite software.
Names, SSNs & financial info affected.
#Ransomware gang Clop claimed the attack.
bit.ly/4iqdke3
By: @pabischoff.bsky.social
Names, SSNs & financial info affected.
#Ransomware gang Clop claimed the attack.
bit.ly/4iqdke3
By: @pabischoff.bsky.social
🚨 Edmon Publishing 🇨🇦 has been added to the data leak site of #ransomware gang DragonForce. 101.93 GB stolen.
The Canadian law book publisher noted issues with its website yesterday but the cause is unconfirmed. The website has since been restored.
bit.ly/3T0yGne
The Canadian law book publisher noted issues with its website yesterday but the cause is unconfirmed. The website has since been restored.
bit.ly/3T0yGne
November 26, 2025 at 1:11 PM
🚨 Edmon Publishing 🇨🇦 has been added to the data leak site of #ransomware gang DragonForce. 101.93 GB stolen.
The Canadian law book publisher noted issues with its website yesterday but the cause is unconfirmed. The website has since been restored.
bit.ly/3T0yGne
The Canadian law book publisher noted issues with its website yesterday but the cause is unconfirmed. The website has since been restored.
bit.ly/3T0yGne
🚨 Iberia 🇪🇸 has been added to the data leak site of #ransomware gang Everest. 596 GB of data allegedly stolen.
This week, the Spanish airline confirmed its customers had been impacted in a data breach following a cyber attack via a supplier.
bit.ly/3T0yGne
This week, the Spanish airline confirmed its customers had been impacted in a data breach following a cyber attack via a supplier.
bit.ly/3T0yGne
November 25, 2025 at 5:00 PM
🚨 Iberia 🇪🇸 has been added to the data leak site of #ransomware gang Everest. 596 GB of data allegedly stolen.
This week, the Spanish airline confirmed its customers had been impacted in a data breach following a cyber attack via a supplier.
bit.ly/3T0yGne
This week, the Spanish airline confirmed its customers had been impacted in a data breach following a cyber attack via a supplier.
bit.ly/3T0yGne
‼️ Pittsburgh law firm, Davies, McFarland, & Carroll 🇺🇸 is notifying 54K+ people of a data breach following a cyber attack in May '25. SSNs, medical data & health insurance info compromised.
#Ransomware gang Lynx claimed the attack on the legal company.
bit.ly/3XU44VK
By: @pabischoff.bsky.social
#Ransomware gang Lynx claimed the attack on the legal company.
bit.ly/3XU44VK
By: @pabischoff.bsky.social
November 25, 2025 at 4:29 PM
‼️ Pittsburgh law firm, Davies, McFarland, & Carroll 🇺🇸 is notifying 54K+ people of a data breach following a cyber attack in May '25. SSNs, medical data & health insurance info compromised.
#Ransomware gang Lynx claimed the attack on the legal company.
bit.ly/3XU44VK
By: @pabischoff.bsky.social
#Ransomware gang Lynx claimed the attack on the legal company.
bit.ly/3XU44VK
By: @pabischoff.bsky.social
🚨Kulturrådet - Swedish Arts Council 🇸🇪 has been added to the data leak site of #ransomware gang RansomHouse.
The government agency has just recovered from a data breach which impacted systems from October 31, 2025 to November 20, 2025.
bit.ly/3T0yGne
The government agency has just recovered from a data breach which impacted systems from October 31, 2025 to November 20, 2025.
bit.ly/3T0yGne
November 25, 2025 at 10:36 AM
🚨Kulturrådet - Swedish Arts Council 🇸🇪 has been added to the data leak site of #ransomware gang RansomHouse.
The government agency has just recovered from a data breach which impacted systems from October 31, 2025 to November 20, 2025.
bit.ly/3T0yGne
The government agency has just recovered from a data breach which impacted systems from October 31, 2025 to November 20, 2025.
bit.ly/3T0yGne
🚨 #Ransomware gang Devman is demanding $400K for 500 GB of data from the Georgia Superior Court Clerks’ Cooperative Authority 🇺🇸
GSCCCA's systems are currently down while it deals with a "credible and ongoing cybersecurity threat."
bit.ly/4pOP87F
By: @pabischoff.bsky.social
GSCCCA's systems are currently down while it deals with a "credible and ongoing cybersecurity threat."
bit.ly/4pOP87F
By: @pabischoff.bsky.social
November 24, 2025 at 7:34 PM
🚨 #Ransomware gang Devman is demanding $400K for 500 GB of data from the Georgia Superior Court Clerks’ Cooperative Authority 🇺🇸
GSCCCA's systems are currently down while it deals with a "credible and ongoing cybersecurity threat."
bit.ly/4pOP87F
By: @pabischoff.bsky.social
GSCCCA's systems are currently down while it deals with a "credible and ongoing cybersecurity threat."
bit.ly/4pOP87F
By: @pabischoff.bsky.social
🚨 Akehurst Landscape Service 🇺🇸 has been added to the data leak site of #ransomware gang Akira.
The company posted a notice about a "temporary system interruption" on its Facebook page on November 7, 2025.
Akira has claimed 646 victims this year.
bit.ly/4bsqDGS
The company posted a notice about a "temporary system interruption" on its Facebook page on November 7, 2025.
Akira has claimed 646 victims this year.
bit.ly/4bsqDGS
November 24, 2025 at 3:28 PM
🚨 Akehurst Landscape Service 🇺🇸 has been added to the data leak site of #ransomware gang Akira.
The company posted a notice about a "temporary system interruption" on its Facebook page on November 7, 2025.
Akira has claimed 646 victims this year.
bit.ly/4bsqDGS
The company posted a notice about a "temporary system interruption" on its Facebook page on November 7, 2025.
Akira has claimed 646 victims this year.
bit.ly/4bsqDGS
🚨 mToilet 🇵🇱 has been added to the data leak site of #ransomware gang Chaos. 450 GB stolen.
The Polish portable toilet rental company suffered an attack on November 11, 2025, which resulted in a temporary loss of data.
bit.ly/3T0yGne
The Polish portable toilet rental company suffered an attack on November 11, 2025, which resulted in a temporary loss of data.
bit.ly/3T0yGne
November 24, 2025 at 2:16 PM
🚨 mToilet 🇵🇱 has been added to the data leak site of #ransomware gang Chaos. 450 GB stolen.
The Polish portable toilet rental company suffered an attack on November 11, 2025, which resulted in a temporary loss of data.
bit.ly/3T0yGne
The Polish portable toilet rental company suffered an attack on November 11, 2025, which resulted in a temporary loss of data.
bit.ly/3T0yGne
🚨 Outback Pharmacies 🇦🇺 was added to the data leak site of #ransomware gang Beast. 150 GB stolen.
The healthcare company confirmed its systems had been impacted on November 21, 2025. Progress in restoring these was made over the weekend.
bit.ly/3T0yGne
The healthcare company confirmed its systems had been impacted on November 21, 2025. Progress in restoring these was made over the weekend.
bit.ly/3T0yGne
November 24, 2025 at 1:37 PM
🚨 Outback Pharmacies 🇦🇺 was added to the data leak site of #ransomware gang Beast. 150 GB stolen.
The healthcare company confirmed its systems had been impacted on November 21, 2025. Progress in restoring these was made over the weekend.
bit.ly/3T0yGne
The healthcare company confirmed its systems had been impacted on November 21, 2025. Progress in restoring these was made over the weekend.
bit.ly/3T0yGne
🚨 College Superieur De Montreal 🇨🇦 has been added to the data leak site of #ransomware gang Rhysida with a 5 BTC ($430K USD) ransom.
The Canadian college noted a cyber attack on its systems at the beginning of October. Classes were canceled for a week.
bit.ly/3T0yGne
The Canadian college noted a cyber attack on its systems at the beginning of October. Classes were canceled for a week.
bit.ly/3T0yGne
November 24, 2025 at 11:23 AM
🚨 College Superieur De Montreal 🇨🇦 has been added to the data leak site of #ransomware gang Rhysida with a 5 BTC ($430K USD) ransom.
The Canadian college noted a cyber attack on its systems at the beginning of October. Classes were canceled for a week.
bit.ly/3T0yGne
The Canadian college noted a cyber attack on its systems at the beginning of October. Classes were canceled for a week.
bit.ly/3T0yGne
‼️ Fowler Elementary School District 45 🇺🇸 has just started issuing data breach notifications following a #ransomware attack in May 2025. SSNs affected.
Interlock was responsible for the attack and allegedly stole 401 GB of data, including 63.6K files.
bit.ly/4bsqDGS
Interlock was responsible for the attack and allegedly stole 401 GB of data, including 63.6K files.
bit.ly/4bsqDGS
November 21, 2025 at 1:21 PM
‼️ Fowler Elementary School District 45 🇺🇸 has just started issuing data breach notifications following a #ransomware attack in May 2025. SSNs affected.
Interlock was responsible for the attack and allegedly stole 401 GB of data, including 63.6K files.
bit.ly/4bsqDGS
Interlock was responsible for the attack and allegedly stole 401 GB of data, including 63.6K files.
bit.ly/4bsqDGS
‼️ WEL Companies 🇺🇸 is notifying 123K people of a data breach following a cyber attack in Jan '25. SSNs and IDs are among the data affected.
#Ransomware gang RansomHub claimed the attack on the transport company with 189 GB allegedly stolen.
bit.ly/3LR50Yr
#Ransomware gang RansomHub claimed the attack on the transport company with 189 GB allegedly stolen.
bit.ly/3LR50Yr
November 20, 2025 at 5:28 PM
‼️ WEL Companies 🇺🇸 is notifying 123K people of a data breach following a cyber attack in Jan '25. SSNs and IDs are among the data affected.
#Ransomware gang RansomHub claimed the attack on the transport company with 189 GB allegedly stolen.
bit.ly/3LR50Yr
#Ransomware gang RansomHub claimed the attack on the transport company with 189 GB allegedly stolen.
bit.ly/3LR50Yr
🚨 #Ransomware gang Sinobi has claimed an October attack on Heywood Healthcare 🇺🇸 550 GB of data allegedly stolen.
Heywood Hospital in Gardner and Athol Hospital in Athol suffered over 2 weeks of downtime due to the attack.
bit.ly/3XAGTzJ
By: @pabischoff.bsky.social
Heywood Hospital in Gardner and Athol Hospital in Athol suffered over 2 weeks of downtime due to the attack.
bit.ly/3XAGTzJ
By: @pabischoff.bsky.social
November 19, 2025 at 4:56 PM
🚨 #Ransomware gang Sinobi has claimed an October attack on Heywood Healthcare 🇺🇸 550 GB of data allegedly stolen.
Heywood Hospital in Gardner and Athol Hospital in Athol suffered over 2 weeks of downtime due to the attack.
bit.ly/3XAGTzJ
By: @pabischoff.bsky.social
Heywood Hospital in Gardner and Athol Hospital in Athol suffered over 2 weeks of downtime due to the attack.
bit.ly/3XAGTzJ
By: @pabischoff.bsky.social
🚨 Perry Brothers Oil Company Inc. 🇺🇸 has been added to the data leak site of #ransomware gang Akira. 20 GB allegedly stolen.
The automotive retail company noted computer and phone system disruption in October. Cause unconfirmed.
bit.ly/4bsqDGS
The automotive retail company noted computer and phone system disruption in October. Cause unconfirmed.
bit.ly/4bsqDGS
November 19, 2025 at 3:08 PM
🚨 Perry Brothers Oil Company Inc. 🇺🇸 has been added to the data leak site of #ransomware gang Akira. 20 GB allegedly stolen.
The automotive retail company noted computer and phone system disruption in October. Cause unconfirmed.
bit.ly/4bsqDGS
The automotive retail company noted computer and phone system disruption in October. Cause unconfirmed.
bit.ly/4bsqDGS
🛑 Digital IDs: 50 countries ranked by digital ID requirements and uses
🔺 37 have digital IDs
🔺 9 more are creating them (inc. UK)
🇵🇭 The Philippines’ eGovPH app requested the most (15) dangerous permissions
🇦🇪 The UAE app had the most trackers (7)
bit.ly/49rFNxB
🔺 37 have digital IDs
🔺 9 more are creating them (inc. UK)
🇵🇭 The Philippines’ eGovPH app requested the most (15) dangerous permissions
🇦🇪 The UAE app had the most trackers (7)
bit.ly/49rFNxB
November 19, 2025 at 2:04 PM
🛑 Digital IDs: 50 countries ranked by digital ID requirements and uses
🔺 37 have digital IDs
🔺 9 more are creating them (inc. UK)
🇵🇭 The Philippines’ eGovPH app requested the most (15) dangerous permissions
🇦🇪 The UAE app had the most trackers (7)
bit.ly/49rFNxB
🔺 37 have digital IDs
🔺 9 more are creating them (inc. UK)
🇵🇭 The Philippines’ eGovPH app requested the most (15) dangerous permissions
🇦🇪 The UAE app had the most trackers (7)
bit.ly/49rFNxB
🚨 Grande Prairie Public Library 🇺🇸 has been added to the data leak site of #ransomware gang INC.
The library was shut from Oct 29 to Nov 10 due to technical difficulties. Cause unknown.
Qilin also claimed an attack on the government library on Oct 19.
bit.ly/4bsqDGS
The library was shut from Oct 29 to Nov 10 due to technical difficulties. Cause unknown.
Qilin also claimed an attack on the government library on Oct 19.
bit.ly/4bsqDGS
November 19, 2025 at 1:25 PM
🚨 Grande Prairie Public Library 🇺🇸 has been added to the data leak site of #ransomware gang INC.
The library was shut from Oct 29 to Nov 10 due to technical difficulties. Cause unknown.
Qilin also claimed an attack on the government library on Oct 19.
bit.ly/4bsqDGS
The library was shut from Oct 29 to Nov 10 due to technical difficulties. Cause unknown.
Qilin also claimed an attack on the government library on Oct 19.
bit.ly/4bsqDGS
🚨 NEW November 2025 #ransomware attacks:
🇰🇷 LG Energy Solution, Akira (1.7 TB) - US subsidiary affected
🇵🇰 Punjab Forensic Science Agency, Beast (900 GB)
🇨🇭 Käner Personal AG, Brotherhood (139 GB)
364 attacks this month so far - 14 confirmed.
bit.ly/3T0yGne
🇰🇷 LG Energy Solution, Akira (1.7 TB) - US subsidiary affected
🇵🇰 Punjab Forensic Science Agency, Beast (900 GB)
🇨🇭 Käner Personal AG, Brotherhood (139 GB)
364 attacks this month so far - 14 confirmed.
bit.ly/3T0yGne
November 19, 2025 at 9:53 AM
🚨 NEW November 2025 #ransomware attacks:
🇰🇷 LG Energy Solution, Akira (1.7 TB) - US subsidiary affected
🇵🇰 Punjab Forensic Science Agency, Beast (900 GB)
🇨🇭 Käner Personal AG, Brotherhood (139 GB)
364 attacks this month so far - 14 confirmed.
bit.ly/3T0yGne
🇰🇷 LG Energy Solution, Akira (1.7 TB) - US subsidiary affected
🇵🇰 Punjab Forensic Science Agency, Beast (900 GB)
🇨🇭 Käner Personal AG, Brotherhood (139 GB)
364 attacks this month so far - 14 confirmed.
bit.ly/3T0yGne
‼️Marquis Software Solutions 🇺🇸 which serves 700+ banks was hit by a #ransomware attack in Aug '25.
That's according to Community 1st Credit Union which is notifying 6.9K people of the data breach.
Marquis is said to have paid a ransom (hackers unknown).
bit.ly/4pc4mmE
By: @pabischoff.bsky.social
That's according to Community 1st Credit Union which is notifying 6.9K people of the data breach.
Marquis is said to have paid a ransom (hackers unknown).
bit.ly/4pc4mmE
By: @pabischoff.bsky.social
November 18, 2025 at 5:17 PM
‼️Marquis Software Solutions 🇺🇸 which serves 700+ banks was hit by a #ransomware attack in Aug '25.
That's according to Community 1st Credit Union which is notifying 6.9K people of the data breach.
Marquis is said to have paid a ransom (hackers unknown).
bit.ly/4pc4mmE
By: @pabischoff.bsky.social
That's according to Community 1st Credit Union which is notifying 6.9K people of the data breach.
Marquis is said to have paid a ransom (hackers unknown).
bit.ly/4pc4mmE
By: @pabischoff.bsky.social
🚨 Recently confirmed Nov '25 #ransomware attacks:
🇿🇦 Eastern Cape Department of Human Settlements, NightSpire (20 GB)
🇩🇪 Radio Arabella, Unknown (no ransom paid)
🇮🇹 SIAD S.p.A., Everest (159 GB)
🇯🇵 Tokai Software Development Co., Ltd., Unknown
bit.ly/3T0yGne
🇿🇦 Eastern Cape Department of Human Settlements, NightSpire (20 GB)
🇩🇪 Radio Arabella, Unknown (no ransom paid)
🇮🇹 SIAD S.p.A., Everest (159 GB)
🇯🇵 Tokai Software Development Co., Ltd., Unknown
bit.ly/3T0yGne
November 18, 2025 at 11:18 AM
🚨 Recently confirmed Nov '25 #ransomware attacks:
🇿🇦 Eastern Cape Department of Human Settlements, NightSpire (20 GB)
🇩🇪 Radio Arabella, Unknown (no ransom paid)
🇮🇹 SIAD S.p.A., Everest (159 GB)
🇯🇵 Tokai Software Development Co., Ltd., Unknown
bit.ly/3T0yGne
🇿🇦 Eastern Cape Department of Human Settlements, NightSpire (20 GB)
🇩🇪 Radio Arabella, Unknown (no ransom paid)
🇮🇹 SIAD S.p.A., Everest (159 GB)
🇯🇵 Tokai Software Development Co., Ltd., Unknown
bit.ly/3T0yGne
🚨 x9 Oracle E-Business Suite Zero-Day Exploit victims have been so far (via Clop):
🇺🇸 x6 US companies
🇿🇦🇦🇺🇯🇵 x1 South African, Australian & Japanese company
🏫 x2 educational institutions
🏭 x3 manufacturers
📁 24K records affected
bit.ly/3JYxJKi
By: @pabischoff.bsky.social
🇺🇸 x6 US companies
🇿🇦🇦🇺🇯🇵 x1 South African, Australian & Japanese company
🏫 x2 educational institutions
🏭 x3 manufacturers
📁 24K records affected
bit.ly/3JYxJKi
By: @pabischoff.bsky.social
November 17, 2025 at 3:43 PM
🚨 x9 Oracle E-Business Suite Zero-Day Exploit victims have been so far (via Clop):
🇺🇸 x6 US companies
🇿🇦🇦🇺🇯🇵 x1 South African, Australian & Japanese company
🏫 x2 educational institutions
🏭 x3 manufacturers
📁 24K records affected
bit.ly/3JYxJKi
By: @pabischoff.bsky.social
🇺🇸 x6 US companies
🇿🇦🇦🇺🇯🇵 x1 South African, Australian & Japanese company
🏫 x2 educational institutions
🏭 x3 manufacturers
📁 24K records affected
bit.ly/3JYxJKi
By: @pabischoff.bsky.social