Skip to content
Ransomware Attacks Target Shelco Filters and Town of Sutton

Ransomware Attacks Target Shelco Filters and Town of Sutton

First seen 12 Sep 2026, 10:22 UTC

Article Content

Browse articles
ThreatCluster AI
ThreatCluster September 12, 2026 at 10:52 UTC
  • Shelco Filters and Town of Sutton listed as ransomware victims on September 12, 2026.
  • Shelco Filters reportedly has 191 GB of data linked to the incident, but details are sparse.
  • Both incidents are unverified with no confirmed data exfiltration or ransom demands.

On September 12, 2026, Shelco Filters, a U.S.-based manufacturing company, and the Town of Sutton, Massachusetts, were both listed as victims on ransomware leak sites by the threat groups SECUROTROP and GLOBAL, respectively. The listings indicate that Shelco Filters has 191 GB of data associated with the incident, although no details on data types or ransom demands were provided. Similarly, the Town of Sutton's listing lacks specifics on the nature of the attack or the impact on municipal services. Both incidents are currently unverified, and no confirmation of data exfiltration or system encryption has been reported. The status of both cases is marked as 'AWAITING,' suggesting that the threat actors have not finalized their demands or actions. As of now, no independent evidence corroborates these claims, making the situation uncertain.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-09-12
Shelco Filters listed on ransomware leak site
The manufacturing company was identified as a victim by SECUROTROP, with 191 GB of data claimed to be involved.
Redpacketsecurity
2026-09-12
Town of Sutton listed on ransomware leak site
The municipal authority of Sutton, Massachusetts, was listed by GLOBAL without details on the attack's impact or data involved.
Redpacketsecurity

More articles in this cluster (2)

Following this threat?

Track Securotrop and Shelco Filters in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed