Ransomware continue unabated: recent notable cases in 2025

In recent months, multiple organizations around the world—from hospitals to governments—have suffered serious ransomware attacks. Here are some of the most notable:

1. Ingram Micro (IT) – 𝑆𝑎𝑓𝑒𝑃𝑎𝑦 paralyzed global orders. Discovered: 07/29/2025 – Details

2. Kettering Healh (hospitals) – 𝐼𝑛𝑡𝑒𝑟𝑙𝑜𝑐𝑘 encrypted medical systems. Discovered: 06/04/2025 – Details

3. Optima Tax Relief (tax services) – 𝐶ℎ𝑎𝑜𝑠 exfiltrated 69 GB of tax data. Discovered: 06/06/2025 – Details

4. Lee Enterprises (publishing) – 𝑄𝑖𝑙𝑖𝑛 published internal data and ~40,000 SSNs. Discovered: 02/27/2025 – Details

5. Wlthungerhilfe (NGO) – 𝑅ℎ𝑦𝑠𝑖𝑑𝑎 demanded 20 BTC and blocked donations. Discovered: 06/29/2025 – Details

6. Cookeville Regional Medical Center – 𝑄𝑖𝑙𝑖𝑛 attacked healthcare infrastructure. Discovered: 08/02/2025 – Details

7. Melilla (Government) – 𝑄𝑖𝑙𝑖𝑛 affected digital services. Discovered: 06/26/2025 – Details

8. Wegley Higginbotham (banking) – 𝐴𝑘𝑖𝑟𝑎 blocked online portals. Discovered: 07/12/2025 – Details

9. BlackSuit / Royal (criminal colective) – attacked 450 companies and generated $370 million before their downfall. Details

10. Hennessy Funds (logistics) – 𝐿𝑜𝑐𝑘𝐵𝑖𝑡 disrupted European distribution routes. Discovered: 05/09/2025 – Details

All these leaks are available on Breach House, an open platform where we compile information published by cybercriminal groups in real time: https://breach.house/

🔎 If you want to check whether your data is part of any of these leaks, go to 𝐻𝑎𝑣𝑒 𝐼 𝐵𝑒𝑒𝑛 𝑅𝑎𝑛𝑠𝑜𝑚, a specialized search engine fed directly from Breach House: HaveIbeenramsoned?

The difference lies in immediacy: while this news reaches the media hours or days later, it was recorded almost immediately on Breach House.

In a scenario where governments, hospitals, and companies alike are attacked, early information is key to protecting yourself.

📌 Breach House: where attacks are recorded before they make the news.

🔁 For more details on BlakSuit, Darkeye Industries tells you all about it in the previous post.