Threat actors never sleeps. Neither do we. 👁️ The standard for Ransomware Intelligence just got higher. Ransom-DB monitors threat groups and thousands of incidents in real-time. 🌍 🗺️ Live Ransomware Threat Map 📡 Full API Access 📝 Ransomware Blog 📊 Statistics And much more ... ✅ Core access is still FREE. 🚀 Launch deal: 50% OFF Annual Subscriptions (RDB2026). 🚨 Start tracking: ransom-db.com

🚨 Ransom group "Rhysida" publishes "Machelen (Belgium)" - Belgium 🇧🇪 📍 Location: Machelen, Belgium 🏢 Industry: Local Government (Social Services) 🔗 Website: machelen[.]be CPAS/OCMW Machelen is the municipality’s public welfare center, providing social assistance, benefits, housing support, and integration services to residents since 1968. It operates as a VAT-registered public body under NACE 84115.

🔥 Daily Ransomware Digest - Total 46 Victims Top Groups: Booba - 9 victims Everest - 8 victims Play News - 7 victims WhiteArmor - 4 victims Settra - 3 victims Crypto24 - 2 victims BYOD - 2 victims Qilin - 2 victims DireWolf - 1 victim DragonForce - 1 victim Top Attacked Countries: 🇺🇸 United States (24) 🇲🇾 Malaysia (2) 🇨🇦 Canada (2) Top Attacked Industries: 🏥 Healthcare 🏛️ Local government 🏗️ Construction Booba led the day with 9 victims, followed closely by Everest with 8 and Play News with 7. Activity clustered heavily in the United States, which absorbed 24 attacks, while Healthcare emerged as the primary targeted sector. Notably, WhiteArmor listed Kucoin, a prominent global cryptocurrency exchange, while Everest posted Italian furniture designer Natuzzi, and BYOD claimed the University of New Mexico.

🚨 Ransom group "BYOD" publishes "UPDATE: UNM" - United States 🇺🇸 📍 Location: Albuquerque, New Mexico, USA 🏢 Industry: Healthcare 🔗 Website: unmhealth[.]org UNM Health is New Mexico’s only academic medical center, spanning UNM Hospital, Sandoval Regional Medical Center, the Comprehensive Cancer Center, and health sciences schools. It provides 150+ specialties and high-volume care, including significant uncompensated services each year.

🚨 Ransom group "Wallstreet" publishes "Bristol City Council" - United Kingdom 🇬🇧 📍 Location: Bristol, England, UK 🏢 Industry: Local Government 🔗 Website: bristol[.]gov[.]uk Bristol City Council delivers housing, social care, education, waste, planning, parks, libraries, and transport for the city. It oversees a £634.1M 2026/27 net budget and £1.4B+ gross spend, and owns Bristol Waste Company and Goram Homes.

🚨 Ransom group "Booba" publishes "Horizon Eye Specialists & LASIK Center" - United States 🇺🇸 📍 Location: Phoenix, Arizona, USA 🏢 Industry: Healthcare (Ophthalmology & LASIK) 🔗 Website: horizonlaservision[.]com Founded in 1983, Horizon Eye Specialists & LASIK Center operates multiple clinics across the Phoenix Valley, providing LASIK, cataract surgery, dry eye treatment, optical services, and comprehensive eye exams for patients in the region.

🚨 Ransom group "Booba" publishes "BASS Medical Group" - United States 🇺🇸 📍 Location: Walnut Creek, California, USA 🏢 Industry: Healthcare Provider 🔗 Website: bassmedicalgroup[.]com BASS Medical Group (Bay Area Surgical Specialists) is a physician-owned multispecialty provider headquartered in Walnut Creek. Founded in 2006, it delivers primary care, specialty surgery, and cancer/imaging services across 200+ locations in the San Francisco Bay Area.

🚨 Ransom group "Booba" publishes "Charter Township of Commerce" - United States 🇺🇸 📍 Location: Commerce Township, Michigan, USA 🏢 Industry: Local Government 🔗 Website: commercetwp[.]com Charter Township of Commerce provides municipal services in Oakland County, including planning and zoning, fire protection, parks and recreation, and water and sewer utilities. It serves residents and businesses as part of the Detroit metropolitan area.

🚨 Ransom group "Booba" publishes "KING FAMILY MEDICAL" - United States 🇺🇸 📍 Location: Murphy, Texas, USA 🏢 Industry: Healthcare 🔗 Website: kingfamilymedical[.]net King Family Medical is a family medicine clinic offering primary care and telehealth services to patients in Murphy and Garland, Texas. Led by Dr. Scottie L. King, the practice serves local families across the area.

🚨 Ransom group "Booba" publishes "City of Big Spring" - United States 🇺🇸 📍 Location: Big Spring, Texas, USA 🏢 Industry: Local Government 🔗 Website: mybigspring[.]com Big Spring is a home-rule municipality in Howard County, Texas, operating under a council-manager system. The city provides essential services including police, fire, utilities, public works, and parks for residents and businesses across the community.

🚨 Ransom group "Booba" publishes "Aesthetic Specialty Centre" - United States 🇺🇸 📍 Location: Roswell and Greensboro, Georgia, USA 🏢 Industry: Healthcare (Plastic Surgery & Dermatology) 🔗 Website: asc-psd[.]com Founded in 1997 and led by Dr. Marc E. Yune, Aesthetic Specialty Centre is a multi-location clinic providing facial plastic surgery, dermatology, and medical esthetics in Roswell and Lake Oconee (Greensboro), serving patients across Georgia.

🚨 Ransom group "DireWolf" publishes "GRUPO PETROIL" - Mexico 🇲🇽 📍 Location: Mazatlán, Sinaloa, Mexico 🏢 Industry: Oil & Gas - Fuel Distribution and Retail 🔗 Website: grupopetroil[.]com[.]mx Founded in 2000, Grupo Petroil distributes fuel and runs gas stations under Petroil Distribución and RedPetroil, serving transport, agriculture, mining, and fishing. The group has diversified into tourism, education, food processing, health, and automotive.

🚨 Ransom group "Everest" publishes "OR Technology" - Germany 🇩🇪 📍 Location: Rostock, Germany 🏢 Industry: Medical Imaging & Healthcare Technology 🔗 Website: or-technology[.]com OR Technology (Oehm und Rehbein GmbH) develops and manufactures digital X-ray systems, PACS software, and cloud diagnostic solutions for human and veterinary medicine, as well as industry, security, and maritime sectors, serving 12,100+ customers in 140+ countries.

🚨 Ransom group "Everest" publishes "MediSolution" - Canada 🇨🇦 📍 Location: Quebec, Canada 🏢 Industry: Healthcare & Public Sector Software 🔗 Website: medisolution[.]com Founded in 1974, MediSolution delivers ERP and business intelligence platforms- including Virtuo, Clinik, and SyMO-serving healthcare, public, and parapublic organizations across North America. It supports nearly 300 clients and is a Harris Computer Systems subsidiary under Constellation Software.

🚨 Ransom group "Everest" publishes "TECNA ICE" - Colombia 🇨🇴 📍 Location: Bogotá, Colombia 🏢 Industry: Engineering services (Energy & Oil/Gas) 🔗 Website: tecna-ice[.]com Colombian engineering firm (1997) for energy and oil & gas. Delivers integrity and corrosion control, asset/risk management, NDT, and protection engineering, and develops PIDT software, GIS tools, and digital twins across Latin America.

🚨 Ransom group "Everest" publishes "SleepEx LabRetriever" - United States 🇺🇸 📍 Location: Conshohocken, Pennsylvania, USA 🏢 Industry: Healthcare Software 🔗 Website: mylabretriever[.]com SleepEx, founded in 2003, is a privately held U.S. company based in Conshohocken, PA. Its flagship LabRetriever platform is an EMR for sleep laboratories, supporting scheduling, referrals, patient data, CPAP compliance, home sleep testing, physician review, and reporting.

🚨 Ransom group "Crypto24" publishes "Antah HealthCare Group" - Malaysia 🇲🇾 📍 Location: Malaysia 🏢 Industry: Healthcare Distribution 🔗 Website: antahhealthcare[.]com[.]my Antah HealthCare Group is a Malaysian healthcare company focused on distributing pharmaceuticals, medical devices, and consumer health products. It supports hospitals, clinics, and pharmacies nationwide with supply chain, logistics, and product support services.

ULose group are testing stuff I guess

🚨 Ransom group "BYOD" publishes "University of New Mexico" - United States 🇺🇸 📍 Location: Albuquerque, New Mexico, USA 🏢 Industry: Higher Education 🔗 Website: unm.edu UNM, founded in 1889, is New Mexico’s flagship and only R1 research university. With branch campuses and a major Health Sciences Center, it employs 16,000+, drives over $5.2B in statewide impact, and received $307M in federal research grants in 2024.

🔥 Daily Ransomware Digest - Total 27 Victims Top Groups: SafePay - 9 victims Payload - 3 victims WhiteArmor - 3 victims Qilin - 2 victims Audit - 1 victim Aur0ra - 1 victim Doommageddon - 1 victim DragonForce - 1 victim Emperador - 1 victim Falcon - 1 victim Top Attacked Countries: 🇺🇸 United States (6) 🇩🇪 Germany (3) 🇪🇸 Spain (2) Top Attacked Industries: 🎓 Higher Education ⚖️ Law practice 💻 Software engineering SafePay led the day with 9 victims, while Payload and WhiteArmor followed with 3 each. Activity clustered primarily in the United States, followed by Germany, with higher education and legal sectors seeing repeat targeting. Among notable disclosures, WhiteArmor listed J.B. Hunt, a major U.S. freight and logistics company, alongside furniture retailer Lovesac, while Payload concentrated its activity entirely on engineering and industrial firms in Germany.