🔴 Confluent — listed by Thegentlemen

📍 United States · Technology · 12 Oct 2026
🏴 Thegentlemen has listed 922 victims since February 2023.

https://cyberthreatintelligence.net/ransomware-victim/confluent-thegentlemen-2026

#ransomware #thegentlemen #threatintel

🔴 Redact Eversource Energy from leak site

📍 United States · Energy & Utilities · 12 Oct 2026
🏴 Redact has listed 3 victims since June 2026.

https://cyberthreatintelligence.net/ransomware-victim/eversource-energy-redact-2026

#ransomware #threatintel #leaksite

🔴 Thegentlemen puts KFC on leak list

📍 United States · Retail & E-Commerce · 12 Oct 2026
🏴 Thegentlemen has listed 922 victims since February 2023.

https://cyberthreatintelligence.net/ransomware-victim/kfc-thegentlemen-2026

#ransomware #threatintel #darkweb

🔴 MoneyGram — listed by Thegentlemen

📍 United States · Financial Services · 12 Oct 2026
🏴 Thegentlemen has listed 922 victims since February 2023.

https://cyberthreatintelligence.net/ransomware-victim/moneygram-thegentlemen-2026

#ransomware #thegentlemen #threatintel

🔴 Placer AI listed on Thegentlemen’s site

📍 United States · Technology · 12 Oct 2026
🏴 Thegentlemen has listed 922 victims since February 2023.

https://cyberthreatintelligence.net/ransomware-victim/placer-ai-thegentlemen-2026

#ransomware #threatintel #leaksite

🗞 Probably Fine Daily No. 15

One pulse says Artifactory is being exploited through three chained CVEs. The question this morning is what one pulse is worth

https://ninjalabz.io/daily/2026-10-12/

#cybersecurity #threatintel #infosec

~Asec~
Ransomware, breaches, access trading and hacktivist DDoS claims surged, while supply-chain risks and law-enforcement takedowns continued.
-
IOCs: LAPSUS$, Montage, RansomHouse
-
#DarkWeb #Ransomware #ThreatIntel

~Asec~
Sentinel Market launched, PwnForums migrated BreachForums accounts, and RaidForums changed domains, increasing impersonation risks.
-
IOCs: (None identified)
-
#BreachForums #DarkWeb #ThreatIntel

🇦🇷 We tracked Synq1xxs listing Sanatorio San Geronimo, an Argentine healthcare facility, in a data leak claim. Alleged sample contains ~10,000 patient records with names, IDs, imaging data and physician info. #DataBreach #ThreatIntel

This entry + more → go.darkwebsonar.io/synq1xxs-blu...

~Asec~
Global breach claims and VPN/RDP/RMM access trading raise ransomware and identity-theft risks.
-
IOCs: ShinyHunters, CL0P
-
#DarkWeb #DataBreach #ThreatIntel

⚠️ Precursor (early-warning): Manufacturing · US leads predicted ransomware risk; crews thegentlemen, qilin. Shadow model.
#threatintel

A 'DoS' patch hid unauthenticated root RCE in NetScaler SAML - now in CISA KEV with web shells dropped. https://intel.threadlinqs.com/threat/TL-2026-3321 #ThreatIntel #CVE_2026_8452 #Youre #NetScaler

🔴 Company #24 — listed by N0n

📍 11 Oct 2026
🏴 N0n has listed 9 victims since September 2026.

https://potatothreatintelligence.net/ransomware-victim/company-24-n0n-2026

#ransomware #n0n #threatintel

🔴 Company #24 — listed by N0n

📍 11 Oct 2026
🏴 N0n has listed 9 victims since September 2026.

https://cyberthreatintelligence.net/ransomware-victim/company-24-n0n-2026

#ransomware #n0n #threatintel

🔴 Spelman Logistics — listed by Emperador

📍 Transportation · 11 Oct 2026
🏴 Emperador has listed 38 victims since August 2026.

https://cyberthreatintelligence.net/ransomware-victim/spelman-logistics-emperador-2026

#ransomware #emperador #threatintel

New on the CTI.FYI Blog:

This Week in Ransomware: October 04, 2026 to October 11, 2026

Read: https://cti.fyi/blog/this-week-in-ransomware-2026-10-04-to-2026-10-11.html

#ransomware #threatintel #cybersecurity #infosec

🔴 Company #20 — listed by N0n

📍 11 Oct 2026
🏴 N0n has listed 9 victims since September 2026.

https://cyberthreatintelligence.net/ransomware-victim/company-20-n0n-2026

#ransomware #n0n #threatintel

🔴 Company #21 — listed by N0n

📍 11 Oct 2026
🏴 N0n has listed 9 victims since September 2026.

https://cyberthreatintelligence.net/ransomware-victim/company-21-n0n-2026

#ransomware #n0n #threatintel

🔴 Company #22 — listed by N0n

📍 11 Oct 2026
🏴 N0n has listed 9 victims since September 2026.

https://cyberthreatintelligence.net/ransomware-victim/company-22-n0n-2026

#ransomware #n0n #threatintel

🔴 Company #23 — listed by N0n

📍 11 Oct 2026
🏴 N0n has listed 9 victims since September 2026.

https://cyberthreatintelligence.net/ransomware-victim/company-23-n0n-2026

#ransomware #n0n #threatintel