Ukrainian authorities recently conducted a raid targeting individuals linked to the Black Basta ransomware group, a notorious criminal organization responsible for various cyberattacks. Among those arrested was Oleg Evgenievich Nefedov, who is believed to be one of the group's founders and has been placed on both Europol’s and Interpol’s Most Wanted lists. Black Basta has gained notoriety for deploying ransomware that encrypts victims' files and demands a ransom for their release. The group's activities have affected numerous businesses and organizations worldwide, raising concerns about the growing threat posed by such cybercriminals. This operation underscores the ongoing efforts by law enforcement to combat ransomware and bring perpetrators to justice.
Articles tagged "Ransomware"
Found 436 articles
Ingram Micro, a major IT distribution company, recently suffered a ransomware attack that has affected approximately 42,000 individuals. The breach compromised sensitive personal information, including names, dates of birth, Social Security numbers, and employment-related data. This incident raises significant concerns about data security and the potential misuse of personal information. It highlights the ongoing risks that companies face from cyberattacks and the importance of robust security measures to protect sensitive data. Affected individuals may face identity theft and other consequences stemming from this data exposure.
Help Net Security
A recent survey by Allianz shows that cyber risk is still the top concern for businesses around the world, marking its fifth consecutive year at the top of the list. The survey highlights that threats like ransomware, data breaches, service outages, and regulatory issues are major challenges that impact companies' revenues and customer trust. As businesses increasingly adopt AI technologies, they are also having to rethink their strategies for resilience and recovery in light of these ongoing cyber threats. This situation emphasizes the need for organizations to prioritize their cybersecurity measures to protect against these persistent risks.
Ransomware attacks surged to a record high in 2025, with attackers claiming 4,737 incidents, according to research by Symantec and Carbon Black. Despite significant disruptions to major criminal organizations, ransomware activity did not decline as expected; instead, it adapted and diversified its extortion tactics. This ongoing trend indicates that even when law enforcement intervenes, cybercriminals find ways to continue their operations. The rise in ransomware incidents poses serious risks to businesses and individuals alike, as these attacks can lead to data breaches and financial losses. Companies need to prioritize cybersecurity measures to defend against these evolving threats.
BleepingComputer
Grubhub has confirmed that it recently experienced a data breach, allowing hackers access to its systems. According to reports, the attackers are now demanding a ransom, which adds a layer of urgency to the situation. The breach affects customer data, although specific details about what information was accessed have not been disclosed. This incident raises concerns about the security measures in place at Grubhub and the potential risk to users' personal information. As food delivery services become increasingly popular, breaches like this can undermine customer trust and highlight the need for better cybersecurity practices across the industry.
Kyowon Group, a major South Korean conglomerate, has confirmed that it was hit by a ransomware attack that significantly disrupted its operations. This incident may have also compromised customer data, raising concerns about the safety of personal information for millions of users across its various subsidiaries. Kyowon is involved in diverse sectors including education, publishing, media, and technology, making the potential impact of this breach far-reaching. The company is currently working to assess the damage and restore its systems, but the attack underscores the vulnerabilities that large organizations face in today’s digital landscape. This incident serves as a reminder for companies to bolster their cybersecurity measures to protect sensitive data from similar attacks.
The Kyowon Group, a major South Korean conglomerate, has confirmed that it fell victim to a ransomware attack that has significantly disrupted its operations. During this incident, customer information may have been compromised, raising concerns about potential identity theft and fraud. The company is currently investigating the extent of the data breach and working to restore its systems. This attack not only affects Kyowon’s business operations but also puts its customers at risk as their personal data might be exposed. As cyberattacks become more frequent and sophisticated, businesses must prioritize cybersecurity measures to protect sensitive information.
A recent report from the World Economic Forum (WEF) reveals that cyber fraud has surpassed ransomware as the primary concern for CEOs by 2026. While ransomware attacks have long been a major worry for Chief Information Security Officers (CISOs), the shift in focus to cyber fraud indicates a growing recognition of the risks posed by fraudulent activities online. Cyber fraud can include a range of threats such as identity theft, phishing scams, and financial fraud, which can have severe implications for businesses and their customers. This change in priority suggests that companies may need to reassess their security strategies to better protect against these evolving threats. As cyber fraud continues to rise, it is crucial for organizations to remain vigilant and proactive in their cybersecurity measures.
France has successfully negotiated a prisoner swap with Russia, trading Daniil Kasatkin, who is wanted by the U.S. for his alleged role in ransomware activities, for Laurent Vinatier, a French researcher imprisoned in Russia. This exchange highlights the ongoing tensions between the U.S. and Russia over cybersecurity issues, particularly regarding ransomware operations that have increasingly targeted organizations worldwide. Kasatkin's alleged involvement in these cybercrimes raises concerns about the growing threat of ransomware and the international implications of cybercriminal activities. The exchange also emphasizes the geopolitical dimensions of cybersecurity, as countries grapple with how to handle individuals accused of cyber offenses. This incident could influence future diplomatic discussions related to cybersecurity and international law enforcement cooperation.
In August 2025, the University of Hawaii's Cancer Center experienced a ransomware attack that compromised sensitive data belonging to study participants. The breach included historical documents dating back to the 1990s, which contained Social Security numbers. This incident raises significant concerns about the protection of personal information in medical research, particularly as the stolen data can be used for identity theft and fraud. The university is now facing the challenge of addressing the fallout from this breach, including notifying affected individuals and enhancing their cybersecurity measures to prevent future incidents. As healthcare institutions increasingly rely on digital systems, the need for robust data protection strategies has never been more critical.
Hackread – Cybersecurity News, Data Breaches, AI, and More
The Everest ransomware group has claimed responsibility for a significant data breach at Nissan Motor Corporation, stating that they have stolen 900GB of sensitive internal information. This data reportedly includes various documents and screenshots, which raises concerns about the potential exposure of proprietary information and internal communications. Ransomware attacks like this can have serious implications for companies, including operational disruptions and reputational damage. As attackers continue to target major corporations, it underscores the necessity for robust cybersecurity measures to protect sensitive data. Nissan has not yet publicly confirmed the breach or the specifics of the stolen data, but the incident highlights the ongoing risks companies face from cybercriminals.
Gulshan Management Services, a Texas-based gas station firm, has reported a significant data breach affecting approximately 377,000 individuals. This incident was triggered by a ransomware attack, which typically involves hackers encrypting company files and demanding payment for their release. The breach raises serious concerns about the security of customer data and the potential for identity theft. As more details emerge, affected users need to monitor their financial statements and consider taking steps to protect their personal information. This incident serves as a reminder of the persistent risks businesses face from cybercriminals and the importance of robust cybersecurity measures.
Cybersecurity Blog | SentinelOne
SentinelLABS' research for 2025 reveals significant trends in cybersecurity, particularly the adaptation of ransomware for espionage activities and the growing exploitation of cloud platforms. This shift indicates that attackers are increasingly targeting sensitive information stored in cloud environments, which could put numerous enterprises at risk. Companies using cloud services need to be vigilant and enhance their security measures to protect against these evolving threats. The report suggests that the landscape of cybercrime is becoming more sophisticated, making it essential for organizations to stay informed and prepared. Understanding these trends can help enterprises better defend their systems and data against potential breaches.
The Cybersecurity and Infrastructure Security Agency (CISA) has expanded its Known Exploited Vulnerabilities (KEV) catalog by 20% in 2025, now listing a total of 1,484 vulnerabilities. Among these, 24 new vulnerabilities have been identified as being actively exploited by ransomware groups. This expansion is significant as it highlights the ongoing risk posed by these vulnerabilities to various software and hardware systems. Organizations that rely on affected products need to take immediate action to secure their systems, as these vulnerabilities can lead to severe security breaches if left unaddressed. The increase in vulnerabilities also reflects the evolving tactics of cybercriminals, making it crucial for companies to stay informed and proactive in their cybersecurity efforts.
Security Affairs
Covenant Health, a healthcare organization based in Andover, Massachusetts, experienced a significant ransomware attack in May 2025, attributed to the Qilin group. This incident compromised the personal data of over 478,000 individuals, raising serious concerns about patient privacy and data security. Affected individuals may have had their sensitive health information exposed, which could lead to identity theft and other security risks. The breach emphasizes the ongoing vulnerabilities within the healthcare sector, where attackers increasingly target patient data for ransom. As healthcare providers continue to digitize their services, the need for robust cybersecurity measures becomes more pressing.