Threat category //
We opened the Disney, S&P Global and ZenBusiness leaks: HR tables under a Slack label, other firms' CI secrets, 2.8B warehouse rows with AI logs.
Nov 7–16, 2025: surge in ransomware and infostealer attacks hitting healthcare, education, and industry, with the US most affected and high global risk.
Weekly cyber threat intelligence report analyzing ransomware activity, 136 breaches, and 27K+ infostealer infections shaping the 2026 attack landscape.
Claimed leaks indexed 4–10 Oct 2026: a 642M-row CDEK file, an alleged CenterPoint customer dump and 8M zaimer.kz microloan records.
Ransomware leaks indexed 4–10 Oct 2026: Clop drops 36.9M Suunto records, ShinyHunters dumps CyrusOne (8.4M) and Akira leaks Pipestone HR files.
We compared 831 traditional breaches and 124 ransomware leaks indexed in 30 days with a sample of 216 infostealer logs: saved logins vs flat tables vs whole company file servers.
What the indexed data of the "European Commission" ransomware leak claimed by ShinyHunters contains: 14% of records hold an email, and 70% of those carry bytedance.com.
Claimed leaks indexed 11–17 Oct 2026: Manchester Airports Group (236.1M), Loozap (66.7M) and Airtel (42.1M). None is independently confirmed.
Ransomware listings indexed 11–17 Oct 2026: N0n claims Inter (19.6M), Clop claims ITK Holding (10.7M) and Insomnia lists Metro Tulsa Foot (4.3M).