Comparitech

🚨 Abfallentsorgung Kreis Kassel 🇩🇪 has been added to the data leak site of ransomware gang SafePay. The German municipal utilities company was targeted in an attack in February 2026. No data breach was evident at the time. bit.ly/3T0yGne

‼️Phoenix Art Museum 🇺🇸 is issuing data breach letters following a cyber attack in December 2025. SSNs affected. Ransomware gang Rhysida claimed the attack, issuing a 10 BTC ($667,000 ransom) to the non-profit. bit.ly/4dRmfF5

🚨 Franziskusschule Wilhelmshaven 🇩🇪 has been added to the data leak site of ransomware gang Payload. 13 GB allegedly stolen. The German school was targeted in an attack earlier this month but restored systems quickly and said there was no data loss. bit.ly/3T0yGne

‼️Mullinax Ford of Central Florida 🇺🇸 is issuing data breach notifications following a cyber attack in Dec '25. Names, SSNs & driver's licenses affected. Ransomware group DragonForce claimed the attack on the car dealership. 294.65 GB of data stolen. bit.ly/4bsqDGS

🚨 Clearwater Marine Aquarium 🇺🇸 has been added to the data leak site of ransomware gang Qilin. 84 GB allegedly stolen. The Floridian non-profit is currently experiencing issues with its online ticketing systems. Cause unconfirmed. bit.ly/4bsqDGS

🚨 Uniwersytetu Warszawskiego 🇵🇱 has been added to the site of ransomware gang Interlock. 850 GB allegedly stolen. In Feb '26, the University of Warsaw confirmed a cybersecurity incident had occurred in Jan '26. No data breach was evident at the time. bit.ly/3T0yGne

🚨 The Navigator Company 🇵🇹 has confirmed its systems were impacted in a cyber attack in March 2025 and that a data breach has occurred. Ransomware group SafePay claimed the attack on the Portuguese paper manufacturer at the time. bit.ly/3T0yGne

‼️Cookeville Regional Medical Center 🇺🇸 warns 338,000 people of a data breach following a ransomware attack in July 2025. SSNs, financial data & medical info affected. Rhysida claimed the attack with a 10 BTC ($1.15M) ransom. bit.ly/4mw7Dx3

🚨 Bendigo & District Aboriginal Co-operative 🇦🇺 has been added to the data leak site of ransomware gang INC. The Australian community service and healthcare agency confirmed a cyber attack had impacted its systems earlier this month. bit.ly/3T0yGne

🚨 Signature Healthcare 🇺🇸 has been added to the site of ransomware gang Anubis. 2 TB of data allegedly stolen. Signature Healthcare (inc. Brockton Hospital) is dealing with an ongoing cybersecurity incident, which is causing widespread disruption. bit.ly/4mq2AhM

📣 Our Q1 2026 ransomware roundup is live! 🔺 2,200 attacks in total (UP 2% from Q4 2025) 🏥 Attacks on healthcare DOWN 14% 🏫 Attacks on education DOWN 23% ⚕️ Attacks on healthcare businesses* UP 35% 🚚 Attacks on transport companies UP 29% bit.ly/3Q9oBoL *Businesses operating in the healthcare sector (e.g. medical device manufacturers and pharmaceutical companies), not those providing direct care.

‼️Medical implant maker TriMed 🇺🇸 warns 80,000+ people of a data breach following a cyber attack in September 2025. Names, DoBs & medical implant numbers and details breached. Ransomware gang Lynx claimed the attack on the healthcare business. bit.ly/41ZRtSZ

🛑 Critical Infrastructure at Risk: 179 ICS Devices Exposed Online Our scan for internet-facing Modbus devices found: 🔺179 exposed devices 🇺🇸 x57 🇸🇪 x22 🇹🇷 x19 🚉 x1 device from a national railway network ⚡️x2 devices from national power grids bit.ly/4sq6QPJ

‼️Woodfords Family Services 🇺🇸 has increased the number of people involved in its April 2024 ransomware attack to 41,984 (from 8,073). The healthcare company was targeted by Medusa, who issued a $300K ransom for 198.5 GB of stolen data. bit.ly/4bsqDGS

‼️Heart South Cardiovascular Group 🇺🇸 warns 46,000+ people of data breach following cyber attack in November 2025. Ransomware gang Rhysida claimed the attack and issued the healthcare company with a 6 BTC ($630K USD) ransom. bit.ly/41nIJWG

🚨 Community College of Beaver County 🇺🇸 has been added to the data leak site of ransomware gang Interlock. 780 GB allegedly stolen. CCBC confirmed it was hit by an attack on March 9, 2026. In-person classes didn’t fully resume until March 30. bit.ly/4dxA7Eb

🚨 Kopran Ltd 🇮🇳 has been added to the data leak site of ransomware gang DragonForce. 283.8 GB of data stolen. The Indian pharmaceutical manufacturer confirmed a cyber attack on its systems on February 20, 2026. bit.ly/3T0yGne

🚨 x2 recent ransomware attacks on government entities in the Czech Republic were claimed over the weekend 🇨🇿 - Zámek Náměšť nad Oslavou - The Gentlemen - Městský úřad Jemnice - LockBit 33 attacks on government orgs have been confirmed this year so far. bit.ly/3T0yGne

‼️Mister Guns 🇺🇸 is notifying 21,225 people of a data breach following unauthorized access to its systems in November 2025. Ransomware gang Securotrop claimed an attack on the Texas gun store at the time, alleging to have stolen 290 GB of data. bit.ly/4toB5Ho