Skip to content
Multiple Victims Targeted by Ransomware Groups on September 29, 2026

Multiple Victims Targeted by Ransomware Groups on September 29, 2026

First seen 29 Sep 2026, 19:12 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •September 30, 2026 at 18:35 UTC
  • •Multiple ransomware groups have claimed new victims on the same day.
  • •Affected organizations span various sectors, including education and healthcare.
  • •No specific attack vectors or ransom details were disclosed in the reports.

On September 29, 2026, several ransomware groups, including Braincipher, Gammax, Wallstreet, and Lockbit5, announced new victims on the Ransomware.Live platform. The affected organizations include latitudesubro.com, maxwell, mulholland.com, AHeadStart Tutoring, Crowder Industries, Inc, Gibson Area Hospital & Health Services, and spg.co.kr. The attacks appear to involve extortion tactics typical of ransomware operations, although specific attack vectors or methods were not detailed in the articles. The scope of the impact is significant, affecting various sectors including education and healthcare. As of now, the current status of these incidents is unclear, with no specific details on ransom demands or data exfiltration provided. The articles emphasize the need for organizations to bolster their cybersecurity measures in light of these ongoing threats.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Timeline

2026-09-29
Braincipher announces new victims
Braincipher lists latitudesubro.com, maxwell, and mulholland.com as new ransomware victims.
Ransomware.Live
2026-09-29
Gammax announces new victims
Gammax lists AHeadStart Tutoring and Crowder Industries, Inc as new ransomware victims.
Ransomware.Live
2026-09-29
Wallstreet announces new victim
Wallstreet identifies Gibson Area Hospital & Health Services as a new victim.
Ransomware.Live
2026-09-29
Lockbit5 announces new victim
Lockbit5 lists spg.co.kr as a new ransomware victim.
Ransomware.Live

More articles in this cluster (7)

Following this threat?

Track LockBit5 and AHeadStart Tutoring in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed