#Ransomware
This archive brings together reporting on digital extortion, data leaks, and operational disruption across Latin America. It covers attacker tactics, initial access methods, forensic response, and the business decisions that shape incident handling throughout the region.
OpenAI flags Russian ops in Latin America
OpenAI suspended accounts used in covert influence campaigns in Argentina, Bolivia, Peru and Ecuador, with AI-assisted ransomware reported in Mexico.
Oct 9, 2026 · 3 min
Brazil Police Probe Ransomware Group
Federal Police launched Operation Insidioso after a July attack with sensitive data theft and possible intrusion and extortion charges.
Oct 8, 2026 · 2 min
Nueva EPS denies unauthorized access
Nueva EPS says its checks found no unauthorized access as it continues investigating claims of a data leak.
Oct 8, 2026 · 3 min
Vicksburg shuts down systems after ransomware attack
Vicksburg, Mississippi, temporarily shut down municipal systems after a ransomware attack. Emergency services stayed online.
Oct 6, 2026 · 2 min
Illinois hospital claimed by Wallstreet ransomware
Wallstreet claimed an attack on Gibson Area Hospital in Illinois. FalconFeeds said 600 GB may have been exfiltrated.
Oct 4, 2026 · 3 min
Mexico accounted for 52 ransomware attacks
SCILabs recorded 290 ransomware attacks in Latin America in the first half of 2026. Mexico accounted for 17.93%, with finance in focus.
Oct 4, 2026 · 4 min
Stevens Point, Columbus face ransomware fallout
Stevens Point says it stopped a ransomware attempt before data was stolen. Columbus is still in court over a 2024 data breach.
Oct 2, 2026 · 2 min
Mexico: SAFEPAY Added Auromex
SAFEPAY added Mexican manufacturer Auromex to its leak site. Security Arsenal also documented the group’s TTPs, and a note cited SCILabs.
Oct 2, 2026 · 2 min
Brazil appears in daily ransomware log
Ransom-DB logged Brazil among several ransomware targets, while a SAFEPAY report cited a case in Mexico.
Oct 2, 2026 · 2 min
Mexico and Honduras report fraud with AI
Reports in Mexico and Honduras show fraud, ransomware and AI deepfakes, alongside new uses of AI for monitoring
Oct 1, 2026 · 3 min
Modoc Medical Center reports file theft
The Alturas, California hospital said an unauthorized actor accessed its systems and downloaded files. The number of affected people was not disclosed.
Sep 30, 2026 · 1 min
Argentina’s Education Ministry named in n0n ransomware
A weekly ransomware roundup listed Argentina’s Education Ministry among victims, while Brazil references tied to n0n remain unconfirmed.
Sep 30, 2026 · 4 min
Emperador posts OnTrac, Electrolux victims
Emperador added OnTrac and Electrolux to its leak site, claiming $1 million and up to 75.1 MB of exfiltrated data.
Sep 28, 2026 · 2 min
Peru's Agrofruto SAC listed by Arcus Media
Arcus Media named Peru's Agrofruto SAC as a ransomware victim, with a data leak deadline set for Sept. 30, 2026.
Sep 28, 2026 · 2 min
ARS Renacer and Hospifar listed by ransomware
DragonForce and Titan listed ARS Renacer and Grupo Hospifar on leak sites. Available reports cite sensitive data in the insurer case.
Sep 26, 2026 · 2 min
Mexico Ranked Second in LATAM Ransomware
Mexico logged about 52 ransomware attacks in the first half of 2026, ranking second in Latin America, according to SCILabs.
Sep 26, 2026 · 4 min
Brazil Receita Federal named by Emperador
Emperador kept claiming Brazil’s Receita Federal and said it had 6.3 GB of data. No official breach confirmation.
Sep 24, 2026 · 3 min
U.S. hospitals report data incidents
Grafton City Hospital notified 1,215 people after a phishing-linked breach. Cedar County Memorial is still investigating a possible data exposure.
Sep 22, 2026 · 3 min
INCAN restores radiotherapy after cyberattack
INCAN said radiotherapy has been back to normal since Sept. 11 after a cybersecurity incident affected the unit.
Sep 22, 2026 · 2 min
Hospital Santa Marta extortion conviction upheld
Federal District judges upheld the conviction of two hackers who accessed Santa Marta Hospital data and demanded 43 bitcoins.
Sep 22, 2026 · 3 min