Skip to content
Multiple Ransomware Attacks Target Major Organizations on September 18, 2026

Multiple Ransomware Attacks Target Major Organizations on September 18, 2026

First seen 18 Sep 2026, 10:24 UTC

Article Content

Browse articles
ThreatCluster AI
ThreatCluster September 18, 2026 at 15:58 UTC
  • Accela.com reported a data theft of over 50 GB, including sensitive user data.
  • AT&T's breach involved unauthorized access through a contractor, affecting corporate systems.
  • ANYTHINGIT and Giti Corp were listed by ransomware groups without detailed information.

On September 18, 2026, the ransomware group EndZone claimed to have compromised Accela.com, a cloud-based software provider for government agencies, alleging the theft of over 50 GB of sensitive data, including personally identifiable information (PII). Concurrently, AT&T was reported to have suffered a breach through a contractor, with attackers accessing virtual desktop and VPN environments, but no specific data exfiltration details were provided. Additionally, the Spirals group listed ANYTHINGIT, a technology firm, without details on the nature of the attack or data involved. Lastly, Giti Corp, a manufacturing company, was also listed by the KILLSEC group, but no specifics were provided regarding the attack or data compromised. All incidents were reported on the same day, raising concerns about a coordinated effort against high-profile targets.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-09-18
Accela.com compromised
EndZone claimed to have stolen over 50 GB of data from Accela.com, including PII.
Redpacketsecurity
2026-09-18
AT&T breach reported
EndZone alleged that AT&T was compromised through a contractor, accessing corporate systems.
Redpacketsecurity
2026-09-18
ANYTHINGIT listed by Spirals
Spirals listed ANYTHINGIT on a ransomware leak site without specific details on the attack.
Redpacketsecurity
2026-09-18
Giti Corp listed by KILLSEC
KILLSEC listed Giti Corp without providing details on the nature of the attack or data involved.
Redpacketsecurity

More articles in this cluster (4)

Following this threat?

Track EndZone and Anythingit in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed