Cuba Ransomware Gang Ransomware — Victims, Campaigns & Activity

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
January 7, 2026
Last Seen
June 9, 2026

The Cuba Ransomware Gang is a ransomware threat actor referenced in recent reporting.

Cuba Ransomware Gang is a ransomware_group tracked across 2 threat clusters and 2 intelligence report mentions on ThreatCluster. First observed January 7, 2026; most recent activity June 9, 2026.

Overview

The Cuba Ransomware Gang is a ransomware threat actor referenced in recent reporting. The latest article ties the group to evolving attack surfaces around backup infrastructure, highlighting its potential focus on exploiting backup systems to deploy ransomware and maximize impact.

Related Threat Clusters

Recent Intelligence Reports

  • Veeam releases security update for critical backup server vulnerability | brief — Scworld · June 9, 2026
  • New Veeam vulnerabilities expose backup servers to RCE attacks — Bleepingcomputer · January 7, 2026

Frequently asked questions

What is Cuba Ransomware Gang?

The Cuba Ransomware Gang is a ransomware threat actor referenced in recent reporting.

Is Cuba Ransomware Gang still active?

The most recent intelligence report mentioning Cuba Ransomware Gang on ThreatCluster is dated June 9, 2026. Activity was first observed January 7, 2026, giving a tracked span from then to June 9, 2026.

What is Cuba Ransomware Gang associated with?

Across ThreatCluster reporting, Cuba Ransomware Gang most frequently co-occurs with FIN7, Data Breach, Ransomware, CVE-2024-40711, CVE-2025-55125, among 12 tracked related entities.

What are the latest developments involving Cuba Ransomware Gang?

The most significant recent cluster is “Critical RCE Vulnerability in Veeam Backup Exposes Organizations to Attacks” (11 articles · Updated June 9, 2026). Cuba Ransomware Gang appears across 2 threat clusters in total, listed above with sources.

How much reporting does ThreatCluster have on Cuba Ransomware Gang?

Cuba Ransomware Gang appears in 2 intelligence report mentions across 2 deduplicated threat clusters, aggregated from 17,000+ monitored sources.

CVSS v3.1 Breakdown