◈ Encrygma — AI Cyber Security Intelligence. Defensive research only. No exploit code or attack instructions. All analysis based on public reporting & OSINT. ◈
23 articles tagged with #Data Breach
Encrygma analysts confirm the BYOD ransomware group has compromised Trump Mobile, leaking data of over 3,600 customers. The breach originated from an infostealer infection at a third-party provider.
Encrygma analysts confirm the BYOD ransomware-as-a-service group has leaked sensitive data from Trump Mobile. This incident highlights a growing trend of aggressive double extortion against telecommunications.
The BYOD ransomware-as-a-service group has claimed a breach of Trump Mobile, exposing the personal data of over 3,600 individuals. Encrygma analysts confirm the attack originated from a compromised third-party employee.
Encrygma analysts report a record-high 112 active ransomware groups as of Q3 2026. Recent incidents include a massive data breach at IDC Frontier impacting 1.3 million accounts.
The INC Ransom group has claimed a new victim, The New Community School, as global ransomware incidents continue to climb. This follows recent high-profile activity from groups like Warlock and KillSec.
New intelligence reports confirm that ransomware activity reached a 2026 peak in August with 1,073 incidents. Threat actors continue to leverage double-extortion tactics, with groups like Aurora remaining active.
The Aurora and SafePay ransomware syndicates have intensified their operations, with both groups posting new victim claims on their respective leak sites as of October 5, 2026.
The newly identified ransomware group 'N0n' has claimed its second victim as of October 5, 2026. This activity follows the group's emergence in late September, signaling a rapid expansion in operations.
The emerging 'Audit Team' ransomware group has intensified its operations, recording a spike in victim claims in early October 2026. The group continues to leverage double-extortion tactics to pressure organizations.
The emerging Krybit ransomware group has intensified its operations, successfully breaching and leaking data from an Indian construction firm. This incident highlights a growing trend of sector-specific targeting.
Recent intelligence confirms a surge in double-extortion attacks by Chaos and M3rx, targeting US-based healthcare and legal entities. These groups are leveraging stolen data to force rapid ransom payments.
A massive data breach at the Pentagon has resulted in the exposure of sensitive military records and Social Security numbers for millions of individuals. This incident marks a significant escalation in the ongoing wave of cyber extortion campaigns targeting high-value government infrastructure.
As of September 30, 2026, the Chaos and M3rx ransomware groups have launched targeted double-extortion campaigns against US-based organizations, threatening the release of hundreds of gigabytes of sensitive data.
Global ransomware incidents hit record highs in late September 2026, with groups like Emperador and SafePay aggressively targeting critical infrastructure and financial services using double-extortion tactics.
Ransomware activity has reached record highs in late 2026, with new campaigns by Emperador and SafePay targeting critical sectors. Over 1,000 organizations were impacted in August alone.
Emerging threat actor Panzer has rapidly expanded its operations in September 2026, targeting international organizations across multiple sectors. The group utilizes custom encryption and a dedicated leak site.
Recent intelligence confirms a sustained surge in ransomware activity throughout September 2026. Notable incidents include the ShinyHunters breach of Final statement re PSA and MedusaLocker's targeting of Bulgarian entity Abv.
Global ransomware activity reached record highs in late 2026, with groups like Qilin and ShinyHunters aggressively targeting diverse sectors. Recent incidents include attacks on US and Bulgarian entities.
In a rare display of inter-gang hostility, the prolific extortion group ShinyHunters has claimed a successful breach of the Clop ransomware infrastructure. This development marks a significant shift in the 2026 threat landscape as criminal syndicates begin targeting one another.
In a rare display of inter-group hostility, the prolific extortion group ShinyHunters has successfully breached the infrastructure of the Clop ransomware gang. This development marks a significant shift in the 2026 threat landscape as cybercriminal syndicates increasingly target one another.
The prolific cyber extortion group ShinyHunters has reportedly compromised the infrastructure of the rival Clop ransomware gang. This development occurs as 2026 ransomware activity hits record highs.
Ransomware activity hit a record high in August 2026 with over 1,000 victims reported. Simultaneously, the threat landscape is shifting as major groups like ShinyHunters engage in inter-gang cyber warfare.
Recent intelligence confirms a spike in double-extortion activity as LockBit 5.0 targets Ethiopian banking infrastructure and the Termite group compromises a major U.S. mortgage firm.