Redpacketsecurity Multiple Ransomware Attacks Target Various Companies on September 7, 2026
Article Content
- •Multiple ransomware groups are actively targeting various sectors, including retail and finance.
- •Data exfiltration claims involve sensitive information, but many reports remain unverified.
- •Threat actors are demanding negotiations to prevent data publication, increasing pressure on victims.
On September 7, 2026, multiple companies fell victim to ransomware attacks from various groups, including AURORA, THEGENTLEMEN, and DARK PROJECT. Notable victims include Jinny Beauty Supply, Zanini, and NFM Lending, with claims of extensive data breaches involving sensitive customer and corporate information. The attacks reportedly involved data exfiltration, with some groups threatening to publish stolen data if ransoms are not paid. The scope of the breaches varies, with claims of stolen data ranging from hundreds of gigabytes to sensitive personal information of employees and customers. However, many claims remain unverified, and no ransom amounts have been disclosed. The incidents highlight ongoing vulnerabilities in sectors such as retail, manufacturing, and financial services.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (100)
Following this threat?
Track TheGentlemen and Ben Leeds Properties in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Ransomware Group Pear Targets Adobe Insurance Brokers in Latest Attack Adobe Insurance Brokers, LLC, based in the US, has been hit by a ransomware attack attributed to the group Pear. The breach was discovered on October 21, 2026, highlighting the ongoing threat of ransomware in 2026. The attack vector is likely linked to stolen credentials or phishing emails, common entry points for…
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…