Weekly Ransomware & Breach Intelligence Recap

Weekly Ransomware & Breach Intelligence Recap

Between September 8 – 14, 2025, ransomware activity remained high worldwide. Our monitoring highlights the Top-5 most impactful cases:

1. Deerfield Management & Singular Genomics (USA) – Incransom:

Healthcare investment & biotech research compromised with an alleged 20 TB of sensitive R&D data exfiltrated. Impact includes intellectual property exposure and risks to pharma/biotech supply chains.

2. Republic of Panama – Ministry of Economy & Finance (Panama) – Incransom:

Government ministry with 1.5 TB of confidential financial, budgetary, and email data compromised. Major implications for national finance and governance.

3. Xerox Corporation (USA) – Incransom:

Global document management and print technology giant targeted. Attack poses risks to enterprise clients worldwide and possible exposure of sensitive client data.

4. Office of the Registrar of Political Parties (Kenya) – Qilin:

Critical government body overseeing political party registration and funding. Breach could undermine political processes and data integrity.

5. Miesa Group (Spain) – Incransom:

Engineering and automation firm with ~1.6 TB exfiltrated. Attack threatens industrial systems IP and exposes vulnerabilities in process control infrastructure.

Trend Insight: Government, healthcare, and industrial engineering remain high-value targets, with data exfiltration volumes scaling into the terabytes. Incransom and Quilin as Top 1 and Top 2 Ransomware groups with most impact.

📊 Beyond ransomware, our source breach.house detected in the same timeframe:

• 152 new infostealer packages

• 124 fresh breaches

Trend Insight: Healthcare, finance, and manufacturing remain top-targeted verticals, while critical infrastructure and supply chain exposures are on the rise.

Discover all attacks and leaks and check if your data has been compromised at:

📌 Breach House

🔎 HaveIbeenransomed?