Storm-1175 and StormEncryptor: Ransomware Deployed the Same Day the CVE Was Disclosed
Microsoft Threat Intelligence attributed a new ransomware strain, StormEncryptor, to Storm-1175 beginning 2 August 2026 — the same day CVE-2026-18577 ...
ransomware
29 articles on ransomware — privacy laws, security frameworks, and regulatory compliance.
INC Ransomware, SonicWall SMA 1000, and the Theft of MFA Seeds: When Patching Is Not Remediation
INC Ransomware has become the dominant actor exploiting CVE-2026-15409 and CVE-2026-15410 in SonicWall SMA 1000 appliances, with 885 victims claimed a...
Nine Months to Notice: MCBS, 1.26 Million Patients, and the HIPAA Clock That Runs on the Business Associate's Calendar
Attackers were inside Medical Computer Business Services of Augusta, Georgia between 22 and 26 September 2025. The investigation concluded on 28 May 2...
Stadler Rail Refused $12.3 Million and Everest Leaked 271,000 Files: The Compliance Case for Saying No
Attackers used compromised credentials to reach a data-exchange platform shared between Stadler Rail and one of its suppliers. Everest demanded $12.3 ...
Nichirei, RansomHouse, and the Cold Chain: When a Logistics Outage Becomes a Personal-Data Incident
A 13 July 2026 ransomware attack on Nichirei disrupted roughly 140 distribution centres across Japan, affecting food manufacturers, supermarkets, and ...
Conduent's 62 Million-Person Breach Becomes 2026's Cautionary Tale in HIPAA Business-Associate Liability
Conduent Business Solutions told federal regulators on June 4, 2026 that 62,224,658 people had data exposed in a SafePay ransomware intrusion — the th...
Coca-Cola's Fairlife Ransomware Halts US Production: An SEC Item 1.05 Disclosure Test for OT-Sector Manufacturing (2026)
On July 16, 2026, The Coca-Cola Company disclosed a ransomware event at its dairy subsidiary fairlife, LLC, that forced a temporary suspension of US p...
The Negotiator Was Working for the Other Side: Angelo Martino's 70-Month Sentence and the Insider-Risk Hole in the Incident-Response Supply Chain
Angelo Martino, a professional ransomware negotiator at incident response firm DigitalMint, was sentenced to 70 months in prison for secretly working ...
2,279 Victims, 91 Groups, 108 Countries: What GuidePoint's GRIT Q2 2026 Ransomware Report Demands of Your Compliance Program
GuidePoint Security's GRIT Q2 2026 report counts 2,279 ransomware victims — up 7% quarter-over-quarter and 43% year-over-year — spread across a record...
JADEPUFFER and the Machine-Speed Adversary: What the First Fully Autonomous AI Ransomware Means for Your Compliance Clocks
Sysdig says JADEPUFFER is the first documented ransomware operation run end-to-end by an LLM agent — it broke into a Langflow instance via CVE-2025-32...
CIRCIA Slips Again: CISA Now Targets September 2026 for the Final Cyber Incident Reporting Rule — Use the Extra Months, Because the Clocks Are Statutory
The latest Unified Agenda shows CISA expects to finalize the CIRCIA incident reporting rule in September 2026 — the second slip after the October 2025...
Stolen, Then Deleted: The Mount Royal University Attack and the Compliance Problem of Destructive Breaches
Mount Royal University confirmed that attackers who breached its network on June 17, 2026 stole data from its student and employee file storage, then ...
Deutsche Bank on a Ransomware Leak Site: The 'Unsafe' Third-Party Claim as DORA's Live-Fire Test
On July 4, 2026, the resurgent 'Unsafe' ransomware group listed Deutsche Bank on its dark-web leak site, posting alleged database extracts containing ...
MSG Sports and the ShinyHunters Breach: How 26 Million Records and a Single Vishing Call Triggered a Compliance Crisis in 2026
In June 2026, the cybercrime group ShinyHunters breached Madison Square Garden Sports and affiliated MSG entities, claiming more than 26 million custo...
The Canvas Breach: When a Ransom Payment Meets FERPA, and the Login Screen Becomes the Extortion Note
ShinyHunters breached Instructure's Canvas learning platform, exposing data tied to hundreds of millions of users across roughly 8,800 institutions an...
Four Ransomware Settlements, One Lesson: OCR Says the Unpatched Vulnerability Is the HIPAA Violation
HHS' Office for Civil Rights resolved four ransomware-related HIPAA investigations affecting roughly 427,000 individuals and imposed $1,165,000 in pen...
OCR's HIPAA Risk Analysis Initiative Is Evolving in 2026 — And It's Coming for Risk Management Next
HHS's Office for Civil Rights has now brought a dozen enforcement actions under its HIPAA Risk Analysis Initiative, and the agency has signaled the pr...
Risk Analysis in the Crosshairs: What OCR's Four Ransomware Settlements Tell You About the Coming HIPAA Security Rule Amendments
OCR's four ransomware settlements announced in April 2026 — totaling $1.165 million across breaches affecting 427,000 individuals — share one root cau...
The Q2 2026 Ransomware Wave: Qilin, ShinyHunters, and the Compliance Failures Behind the Salesforce Extortion Campaign
May 2026 saw 95 publicly disclosed ransomware attacks across 17 countries, with Qilin and ShinyHunters leading a campaign that increasingly skips encr...
OCR's $245,000 Warning to HR: Employer-Sponsored Health Plans Are HIPAA Covered Entities Too
HHS OCR announced a $245,000 HIPAA settlement in April 2026 against a self-funded employer-sponsored group health plan following a 2021 ransomware att...
Verizon DBIR 2026: Vulnerability Exploitation Overtakes Credentials for the First Time in 19 Years — What the Data Means for Your Security Program
The 2026 Verizon Data Breach Investigations Report analyzed more than 22,000 confirmed breaches and found that vulnerability exploitation now accounts...
West Pharmaceutical Services Ransomware Attack: SEC Disclosure, Healthcare Supply Chain Risk, and What Vendors Must Do Now
West Pharmaceutical Services detected a ransomware attack on May 4, 2026, disclosing via SEC 8-K that attackers exfiltrated data and encrypted systems...
ICO Fines South Staffordshire Water £963K Over 2022 Cl0p Ransomware Attack: What Took So Long, and What It Means
The UK Information Commissioner's Office fined South Staffordshire Water's parent company £963,900 in May 2026 for security failings exposed by the Cl...
Healthcare Ransomware in 2026: $16.9M Average Ransom Demand and the Board Accountability Gap
The average ransom demand across confirmed healthcare incidents has surged to $16.9 million in 2026, up from under $600,000 the prior quarter. With 77...
CIRCIA Final Rule: CISA's 72-Hour Reporting Requirement Is Coming — What Critical Infrastructure Operators Must Know Now
CISA's final rule implementing the Cyber Incident Reporting for Critical Infrastructure Act of 2022 (CIRCIA) is expected in May 2026, though federal a...
Cushman & Wakefield's Vishing-Triggered Breach: ShinyHunters, 500K Salesforce Records, and Third-Party Risk
In late April and early May 2026, Cushman & Wakefield confirmed a cyberattack originating from a voice phishing operation that gave ShinyHunters acces...
Instructure Canvas Breach: ShinyHunters Stole 275 Million Student Records — Twice
ShinyHunters breached Instructure's Canvas learning management system twice in May 2026, stealing an estimated 275 million records — names, email addr...
Trump's 2026 National Cybersecurity Strategy: What the Shift from Compliance to Consequence Means for CISOs and Organizations
The Trump administration's March 2026 cyber strategy and executive order on cyber-enabled crime signal a fundamental policy pivot: less regulatory fri...
Healthcare Under Siege: Ransomware Attacks Surge 49% as Patient Lives Hang in the Balance
In 2025, ransomware groups launched 1,174 publicly disclosed attacks—a 49% year-over-year increase—and healthcare bore the heaviest burden with 22% of...