Rosetta Intel
Briefings/Daily BriefAI FrontierRansomware
Rosetta Lab ↗Blur Horizon LLC
Ransomware2026-06-29
Ransomware·2026-06-29

Ransomware Watch · Jun 29, 2026

ℹ️ Data source: RansomLook api/posts?days=1. The feed has advanced this run, with the latest discovered at 2026-06-28T12:52Z (the stall at 06-26 seen in the previous two editions has cleared). A relatively quiet day within the window.

Overview

  • Total new posts: 6
  • Groups involved: 5(redact ×2, play ×2, safepay / cmd organization 1 each)
  • Watchlist hits: 2(both group:play)

Watchlist Hits (read these first)

GroupVictimSectorGeoHitDiscovered
playKuhnlinemanufacturing/servicesUS?group:play2026-06-27T20:59
playJ&J Gaminggaming/hospitalityUSgroup:play2026-06-27T20:59

All New Posts

GroupVictimSectorGeoDiscovered
redactFCCI Insurance Groupinsurance (property & casualty)US2026-06-27T20:20
redactHologichealthcare/medical diagnosticsUS2026-06-27T20:22
playKuhnlinemanufacturing/servicesUS?2026-06-27T20:59
playJ&J Gaminggaming/hospitalityUS2026-06-27T20:59
safepayhellmold-plank.deservices/SMBDE2026-06-27T20:59
cmd organizationFidelity Security Groupphysical security/guardingZA?2026-06-28T12:52

Anomalies / Trend Notes

  • Feed advancing again: last week's two consecutive editions (06-27, 06-28) were stuck at 06-26T15:57 on days=1; this run has moved normally to 06-28T12:52, back to baseline.
  • Sensitive targets(no automatic hit; manually annotated):
    • redact → Hologic— a leading US medical diagnostics/imaging equipment maker; if confirmed, this carries healthcare supply chain and patient-related data risk.
    • redact → FCCI Insurance Group— a US property/casualty insurer, where underwriting data is highly sensitive.
    • redacthas posted two large US targets back to back; worth tracking whether the group is entering a new active phase.
  • playposted 2 North American victims within a single minute (Kuhnline, J&J Gaming), continuing its steady high-frequency output.
  • cmd organization → Fidelity Security Group— note this is a physical security/guarding company (likely South African), not a financial institution (do not confuse it with Fidelity Investments).
← Prev
Ransomware Watch · Jun 28, 2026
Next →
Ransomware Watch · Jun 30, 2026