A new strain of ransomware known as Osiris has been identified, targeting a major food service franchisee operator in Southeast Asia in November 2025. The attackers utilized a malicious driver called POORTRY in a technique known as bring your own vulnerable driver (BYOVD), which helps them disable security measures on the victim's systems. This method allows the ransomware to operate without detection, increasing the risk of data theft and operational disruption. The emergence of Osiris is concerning as it reflects a growing trend in ransomware attacks that exploit existing drivers to bypass security protocols. Organizations, especially those in sensitive sectors like food services, need to be vigilant and ensure their security measures can defend against such sophisticated techniques.
A failure in operational security by the INC ransomware group has allowed researchers to recover data stolen from 12 U.S. organizations. This incident highlights vulnerabilities in the ransomware gang's methods, which typically aim to keep their operations hidden and secure. The affected organizations were able to regain access to their compromised data, which could lessen the impact of the attack. Such operational oversights by attackers can provide critical opportunities for recovery and response for victims. This situation serves as a reminder for organizations to remain vigilant and proactive in their cybersecurity measures to protect against ransomware threats.
The Everest ransomware group has claimed responsibility for a data breach affecting McDonald's India. They provided screenshots as proof, which reportedly include sensitive information such as financial reports, audit trails, pricing data, and internal communications. This incident raises concerns about the security of corporate data and the potential implications for customer trust and business operations. Companies need to take this threat seriously and evaluate their cybersecurity measures to prevent similar breaches. The exposure of such sensitive data could lead to financial losses and reputational damage for McDonald's India.
Hackread – Cybersecurity News, Data Breaches, AI, and More
The Everest ransomware group has claimed responsibility for a data breach involving McDonald's India, potentially affecting customer information. This incident raises significant concerns about the security of customer data, as ransomware attacks often lead to sensitive information being stolen or compromised. McDonald's India has not yet confirmed the breach or provided details about the extent of the data involved. Ransomware attacks like this can damage a company's reputation and erode customer trust, especially in a market where data privacy regulations are becoming stricter. As the situation unfolds, customers and stakeholders will be closely monitoring how McDonald's responds and what measures are put in place to prevent future incidents.
Ingram Micro, a major player in the information technology sector, experienced a ransomware attack in July 2025 that compromised the personal data of over 42,000 individuals. The breach raises serious concerns about data security and the potential misuse of sensitive information, as attackers often seek to exploit such data for financial gain or identity theft. The scale of the incident highlights the ongoing risks that companies face from cyber threats, particularly in the IT sector, which is often targeted due to its critical role in global infrastructure. Affected individuals should remain vigilant for signs of identity theft and consider monitoring their accounts for unusual activity. Organizations must strengthen their cybersecurity measures to prevent similar incidents in the future.
Ukrainian authorities recently conducted a raid targeting individuals linked to the Black Basta ransomware group, a notorious criminal organization responsible for various cyberattacks. Among those arrested was Oleg Evgenievich Nefedov, who is believed to be one of the group's founders and has been placed on both Europol’s and Interpol’s Most Wanted lists. Black Basta has gained notoriety for deploying ransomware that encrypts victims' files and demands a ransom for their release. The group's activities have affected numerous businesses and organizations worldwide, raising concerns about the growing threat posed by such cybercriminals. This operation underscores the ongoing efforts by law enforcement to combat ransomware and bring perpetrators to justice.
Ingram Micro, a major IT distribution company, recently suffered a ransomware attack that has affected approximately 42,000 individuals. The breach compromised sensitive personal information, including names, dates of birth, Social Security numbers, and employment-related data. This incident raises significant concerns about data security and the potential misuse of personal information. It highlights the ongoing risks that companies face from cyberattacks and the importance of robust security measures to protect sensitive data. Affected individuals may face identity theft and other consequences stemming from this data exposure.
A recent survey by Allianz shows that cyber risk is still the top concern for businesses around the world, marking its fifth consecutive year at the top of the list. The survey highlights that threats like ransomware, data breaches, service outages, and regulatory issues are major challenges that impact companies' revenues and customer trust. As businesses increasingly adopt AI technologies, they are also having to rethink their strategies for resilience and recovery in light of these ongoing cyber threats. This situation emphasizes the need for organizations to prioritize their cybersecurity measures to protect against these persistent risks.
Ransomware attacks surged to a record high in 2025, with attackers claiming 4,737 incidents, according to research by Symantec and Carbon Black. Despite significant disruptions to major criminal organizations, ransomware activity did not decline as expected; instead, it adapted and diversified its extortion tactics. This ongoing trend indicates that even when law enforcement intervenes, cybercriminals find ways to continue their operations. The rise in ransomware incidents poses serious risks to businesses and individuals alike, as these attacks can lead to data breaches and financial losses. Companies need to prioritize cybersecurity measures to defend against these evolving threats.
Grubhub has confirmed that it recently experienced a data breach, allowing hackers access to its systems. According to reports, the attackers are now demanding a ransom, which adds a layer of urgency to the situation. The breach affects customer data, although specific details about what information was accessed have not been disclosed. This incident raises concerns about the security measures in place at Grubhub and the potential risk to users' personal information. As food delivery services become increasingly popular, breaches like this can undermine customer trust and highlight the need for better cybersecurity practices across the industry.
Kyowon Group, a major South Korean conglomerate, has confirmed that it was hit by a ransomware attack that significantly disrupted its operations. This incident may have also compromised customer data, raising concerns about the safety of personal information for millions of users across its various subsidiaries. Kyowon is involved in diverse sectors including education, publishing, media, and technology, making the potential impact of this breach far-reaching. The company is currently working to assess the damage and restore its systems, but the attack underscores the vulnerabilities that large organizations face in today’s digital landscape. This incident serves as a reminder for companies to bolster their cybersecurity measures to protect sensitive data from similar attacks.
The Kyowon Group, a major South Korean conglomerate, has confirmed that it fell victim to a ransomware attack that has significantly disrupted its operations. During this incident, customer information may have been compromised, raising concerns about potential identity theft and fraud. The company is currently investigating the extent of the data breach and working to restore its systems. This attack not only affects Kyowon’s business operations but also puts its customers at risk as their personal data might be exposed. As cyberattacks become more frequent and sophisticated, businesses must prioritize cybersecurity measures to protect sensitive information.
A recent report from the World Economic Forum (WEF) reveals that cyber fraud has surpassed ransomware as the primary concern for CEOs by 2026. While ransomware attacks have long been a major worry for Chief Information Security Officers (CISOs), the shift in focus to cyber fraud indicates a growing recognition of the risks posed by fraudulent activities online. Cyber fraud can include a range of threats such as identity theft, phishing scams, and financial fraud, which can have severe implications for businesses and their customers. This change in priority suggests that companies may need to reassess their security strategies to better protect against these evolving threats. As cyber fraud continues to rise, it is crucial for organizations to remain vigilant and proactive in their cybersecurity measures.
France has successfully negotiated a prisoner swap with Russia, trading Daniil Kasatkin, who is wanted by the U.S. for his alleged role in ransomware activities, for Laurent Vinatier, a French researcher imprisoned in Russia. This exchange highlights the ongoing tensions between the U.S. and Russia over cybersecurity issues, particularly regarding ransomware operations that have increasingly targeted organizations worldwide. Kasatkin's alleged involvement in these cybercrimes raises concerns about the growing threat of ransomware and the international implications of cybercriminal activities. The exchange also emphasizes the geopolitical dimensions of cybersecurity, as countries grapple with how to handle individuals accused of cyber offenses. This incident could influence future diplomatic discussions related to cybersecurity and international law enforcement cooperation.
In August 2025, the University of Hawaii's Cancer Center experienced a ransomware attack that compromised sensitive data belonging to study participants. The breach included historical documents dating back to the 1990s, which contained Social Security numbers. This incident raises significant concerns about the protection of personal information in medical research, particularly as the stolen data can be used for identity theft and fraud. The university is now facing the challenge of addressing the fallout from this breach, including notifying affected individuals and enhancing their cybersecurity measures to prevent future incidents. As healthcare institutions increasingly rely on digital systems, the need for robust data protection strategies has never been more critical.