Ransomware attacks continue to evolve with double-extortion tactics and targeted enterprise campaigns. This section analyzes ransomware groups, attack patterns, and defensive strategies CISOs must understand.
121 articles
Victory Personal Care, Inc, a US-based retail company, suffered a high-severity ransomware attack attributed to Nightspire. Details of the affected data and operational impact remain undisclosed.
An unnamed telecommunications managed service provider suffered a high-severity breach in September 2024, where attackers exploited FortiManager vulnerabilities to exfiltrate sensitive data and deploy memory-resident malware. Over 500 managed FortiGate firewalls were compromised, exposing critical infrastructure and client communications.
Intermarché, Netto, Coopérative U, Carrefour, E.Leclerc, and Monoprix suffered a ransomware attack that compromised refrigeration-control systems, leading to widespread food spoilage and equipment damage.
Fortinet firewalls globally were compromised in the FortiBleed campaign, with over 86,000 devices locked and admin access disabled. Attackers leveraged leaked credentials to facilitate ransomware affiliate access.
Palo Alto Networks suffered a ransomware incident exploiting CVE-2026-0257, targeting GlobalProtect VPN. Attackers gained unauthorized access to VPN sessions, risking data compromise.
MonsterCloud, a Florida-based ransomware recovery firm, was compromised when its owner was charged with fraud for secretly paying attackers and overcharging clients. The scheme involved over $19 million in client fees while only $8 million was paid to ransomware operators.
Fortinet FortiGate firewalls were compromised in a global ransomware campaign, with over 86,000 devices locked out due to credential harvesting and brute-force attacks. Attackers established persistent administrative access, enabling ransomware deployment by groups including INC, Lynx, and Payload.
Fairlife, a Coca-Cola subsidiary, suffered a ransomware attack in July 2026 that forced a temporary halt in dairy production. The incident raised broader national security concerns due to its context within a coordinated campaign targeting U.S. critical infrastructure.
OTEIS Conseil & Ingénierie, a French engineering and consulting firm, was targeted by the coinbasecartel ransomware group in August 2026. The attack likely disrupted operations and compromised data integrity.
Navitrans, a Colombian distributor in the commercial truck and heavy machinery sector, was targeted by the Emperador ransomware group. Attackers exfiltrated 223.2 MB of sensitive pricing, financing, and operational data, exposing the company to financial and reputational risks.
Kimberly-Clark was targeted by ShinyHunters in a high-severity ransomware attack, receiving a final warning to pay by September 16, 2026. The threat actor demanded action to prevent data leakage and operational disruption.
Strad Solutions, a UK-based technology provider, suffered a ransomware attack by the Vexy group, disrupting cloud hosting and managed IT services. The incident exposed the company to extortion demands and operational downtime.