
Vanderbilt University hit in BYOD ransomware attack, data theft claimed
Users must shut down university devices and leave university Wi-Fi; Vanderbilt has not confirmed encryption or stolen data.
38 stories, newest first · one card per story

Users must shut down university devices and leave university Wi-Fi; Vanderbilt has not confirmed encryption or stolen data.

The unverified listing names personal data and kiosk devices but shows no count, ransom, or encryption evidence.

The torrent is said to hold 421,179 emails and over 100,000 files, with messages dated through September 12, 2026.

Hackmanac reported 108,426 files and one HR set of 213,084 records, but those figures are unverified.

Foresiet has not confirmed access methods, file encryption, or a victim count, and published no indicators of compromise.

ScarlettGroup threatens data disclosure with countdown timers on its dark web leak site.
Extortion group n0n claims data from 38 shipping and port firms and demands ransoms by October 19.

Extortion group n0n listed 38 global ports, terminals, and shipping firms on its leak site.

The Gentlemen ransomware group listed U.S. KFC on its leak site, but the October 2026 claim remains unverified.

Silent Ransom Group allegedly took about $207 million from 27 law firms using phone social engineering, not encryption.
Silent Ransom Group says leaked Luna Moth Files chats are fake, but the published data appears authentic.

BYOD claims it leaked 3,615 Trump Mobile customer records with contact and order details.

Europol's Operation KillSwitch dismantled KillSec ransomware after about 500 confirmed attacks and seized 110 terabytes.

Spanish police arrested a suspected 16-year-old KillSec administrator; joint operation seized the ransomware group's leak site, 110 TB of data and five servers.

International Operation KillSwitch seized KillSec's servers and leak site, arrested three suspects, and identified a 16-year-old as the ransomware gang's leader.

Europol-led Operation KillSwitch dismantled KillSec ransomware, seizing its leak site and 110TB of stolen data; a 16-year-old alleged leader was identified.

Zscaler ThreatLabz reports top ransomware groups' exfiltrated data volume jumped 276% year-over-year to 896 TB despite payments falling to $327.8M.

ShinyHunters claims it stole personal and assignment data on FBI agents to force retraction of an agency advisory.

Stolen FBI agents’ medical exams surfaced after ShinyHunters claimed a breach of about 60,000 staff.

ShinyHunters defaced Clop's leak site via unpatched Grav CMS path traversal CVE-2026-42608; Grav patched the 1.7 branch.

New ransomware gang n0n threatens to destroy backups and has listed more than a dozen victims.

ShinyHunters claims it breached FBI systems, defaced a recruitment site, and stole sensitive information.

Galago ransomware, linked to Panzer, allegedly stole 105 GB from Icelandic healthcare firm Inter ehf; its leak site is inactive.
Extortion group 'The Seven Deadly Sins' lists Canva on new leak site after attacking the design firm via a vendor's Salesforce instance.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views