explore | Grilled Cheese

🔴 Confluent — listed by Thegentlemen

📍 United States · Technology · 12 Oct 2026
🏴 Thegentlemen has listed 922 victims since February 2023.

https://cyberthreatintelligence.net/ransomware-victim/confluent-thegentlemen-2026

#ransomware #thegentlemen #threatintel

🔴 Redact Eversource Energy from leak site

📍 United States · Energy & Utilities · 12 Oct 2026
🏴 Redact has listed 3 victims since June 2026.

https://cyberthreatintelligence.net/ransomware-victim/eversource-energy-redact-2026

#ransomware #threatintel #leaksite

🔴 Thegentlemen puts KFC on leak list

📍 United States · Retail & E-Commerce · 12 Oct 2026
🏴 Thegentlemen has listed 922 victims since February 2023.

https://cyberthreatintelligence.net/ransomware-victim/kfc-thegentlemen-2026

#ransomware #threatintel #darkweb

🔴 MoneyGram — listed by Thegentlemen

📍 United States · Financial Services · 12 Oct 2026
🏴 Thegentlemen has listed 922 victims since February 2023.

https://cyberthreatintelligence.net/ransomware-victim/moneygram-thegentlemen-2026

#ransomware #thegentlemen #threatintel

🔴 Placer AI listed on Thegentlemen’s site

📍 United States · Technology · 12 Oct 2026
🏴 Thegentlemen has listed 922 victims since February 2023.

https://cyberthreatintelligence.net/ransomware-victim/placer-ai-thegentlemen-2026

#ransomware #threatintel #leaksite

🗞 Probably Fine Daily No. 15

One pulse says Artifactory is being exploited through three chained CVEs. The question this morning is what one pulse is worth

https://ninjalabz.io/daily/2026-10-12/

#cybersecurity #threatintel #infosec

~Asec~
Ransomware, breaches, access trading and hacktivist DDoS claims surged, while supply-chain risks and law-enforcement takedowns continued.
-
IOCs: LAPSUS$, Montage, RansomHouse
-
#DarkWeb #Ransomware #ThreatIntel

~Asec~
Sentinel Market launched, PwnForums migrated BreachForums accounts, and RaidForums changed domains, increasing impersonation risks.
-
IOCs: (None identified)
-
#BreachForums #DarkWeb #ThreatIntel

🇦🇷 We tracked Synq1xxs listing Sanatorio San Geronimo, an Argentine healthcare facility, in a data leak claim. Alleged sample contains ~10,000 patient records with names, IDs, imaging data and physician info. #DataBreach #ThreatIntel

This entry + more → go.darkwebsonar.io/synq1xxs-blu...

~Asec~
Global breach claims and VPN/RDP/RMM access trading raise ransomware and identity-theft risks.
-
IOCs: ShinyHunters, CL0P
-
#DarkWeb #DataBreach #ThreatIntel