extortion
Cl0p Targets 40+ Organizations Through PTC Windchill Flaw
The Cl0p ransomware group has claimed responsibility for exploiting a critical vulnerability (CVE-2026-12569) in PTC's Windchill and FlexPLM software, impacting over 40 organizations. The group is using a custom implant for data theft and extortion, demanding payment from victims. Several major companies, including Shell and Philips, are reportedly among the targeted entities, though most have only acknowledged awareness and are investigating.
Ransom Busters Claims It Hacked Ransomware Servers, Asks Victims for Up to $60,000
A new threat actor, operating under the name "Ransom Busters," is contacting ransomware victims directly, claiming to have infiltrated ransomware groups' servers and offering to delete stolen data for a fee between $20,000 and $60,000. Security researchers believe this is likely a ransomware affiliate attempting to extort victims further, rather than a legitimate recovery service, and warn that payments offer no guarantee of data deletion.
ExfilSquad Confirmed to Possess Data From 13 Organizations
Researchers have confirmed that the ExfilSquad extortion group has obtained sensitive data from a minimum of 13 organizations. The group has reportedly published these stolen datasets through torrents.
Uber Freight Investigates Data Breach After Extortion Group Claims Attack
Uber Freight is investigating a data security incident after the extortion group Helix claimed to have stolen nearly one million files. Helix listed Uber Freight on its data leak site, alleging access to mailboxes, OneDrive accounts, and other repositories. The company stated that the incident has been contained and remediated, with no disruption to its business operations, and that federal law enforcement has been engaged.
Ransom Cartel Creator Sentenced to 16 Years for Extortion Scheme
The creator of the Ransom Cartel ransomware, Maksim Silnikau, has been sentenced to 16 years in prison for his role in a scheme that targeted at least 18 companies. Silnikau recruited participants, provided tools, and managed operations, attempting to extort over $5.2 million from victims including businesses, law firms, and educational institutions. His arrest in Poland led to the cessation of Ransom Cartel's activities.
Abbott Investigates Two Cyber Incidents Amid Extortion Claims
Abbott Laboratories is looking into two distinct cybersecurity events. One incident involved unauthorized access to internal legacy systems within its Cancer Diagnostics business. Separately, the company is investigating claims that its LabCentral portal was breached and data was exfiltrated.
Accenture Confirms Security Incident After Hacker Claims 35GB Source-Code Theft
Accenture has acknowledged a security incident after a threat actor advertised what they claim is stolen internal data. The attacker, using the alias "888", says they took more than 35GB of source code and cloud credentials from the consulting giant and are offering it for sale. Accenture says it has addressed the source of the issue and that its operations were not disrupted.
County Government Reportedly Paid $1 Million to Cyber Extortion Group
A small county government in Ohio reportedly paid a cyber extortion group one million dollars. The payment was made to prevent the public release of data stolen during a cyberattack.