Redpacketsecurity Multiple Ransomware Attacks Target Major Organizations on September 18, 2026
Article Content
- •Accela.com reported a data theft of over 50 GB, including sensitive user data.
- •AT&T's breach involved unauthorized access through a contractor, affecting corporate systems.
- •ANYTHINGIT and Giti Corp were listed by ransomware groups without detailed information.
On September 18, 2026, the ransomware group EndZone claimed to have compromised Accela.com, a cloud-based software provider for government agencies, alleging the theft of over 50 GB of sensitive data, including personally identifiable information (PII). Concurrently, AT&T was reported to have suffered a breach through a contractor, with attackers accessing virtual desktop and VPN environments, but no specific data exfiltration details were provided. Additionally, the Spirals group listed ANYTHINGIT, a technology firm, without details on the nature of the attack or data involved. Lastly, Giti Corp, a manufacturing company, was also listed by the KILLSEC group, but no specifics were provided regarding the attack or data compromised. All incidents were reported on the same day, raising concerns about a coordinated effort against high-profile targets.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (6)
Following this threat?
Track EndZone and Anythingit in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
ENDZONE Ransomware Targets Absolute Bail Bonds On November 14, 2026, the ENDZONE ransomware group claimed to have attacked Absolute Bail Bonds, a California-based surety bail bond agency. The attackers reportedly exfiltrated 5 GB of database files and source code while encrypting 3.5 TB of data on the company's domain controller, including backups. The claims…