Rosetta Intel
Briefings/Daily BriefAI FrontierRansomware
Rosetta Lab ↗Blur Horizon LLC
Ransomware2026-07-07
Ransomware·2026-07-07

Ransomware Watch · Jul 7, 2026

Data source: RansomLook api/posts?days=1. Pulled 9 posts today; discovered timestamps cluster in 2026-07-03 ~ 07-04 (nothing newer on RansomLook's side in the past 24–48h; the feed lags, recorded as actually returned).

Overview

  • Total new posts: 9
  • Groups involved: 4 (qilin, play, the gentlemen, titan)
  • Watchlist hits: 7 (group hits qilin/play + sector hits financial/medical)

Watchlist Hits (Priority)

GroupVictimSectorGeoHitLink
qilinTQ Financial ServicesFinancial—group:qilin · sector:financialRansomLook
qilinSisint——group:qilinRansomLook
qilinSitmaticManufacturing?—group:qilinRansomLook
qilinGoodwill ManasotaNon-profitUSgroup:qilinRansomLook
qilinMd Lewis——group:qilinRansomLook
playSilvestri & Associates InsuranceFinancial/InsuranceUSgroup:play · sector:financialRansomLook
playLocati ArchitectsConstruction/ArchUSgroup:playRansomLook

All New Posts

GroupVictimSectorDiscoveredLink
qilinTQ Financial ServicesFinancial2026-07-03link
qilinSisint—2026-07-03link
qilinSitmaticManufacturing?2026-07-03link
qilinGoodwill ManasotaNon-profit2026-07-03link
qilinMd Lewis—2026-07-03link
playSilvestri & Associates InsuranceInsurance2026-07-04link
playLocati ArchitectsArchitecture2026-07-04link
the gentlemenMedic RescueHealthcare/EMS2026-07-04link
titanEureka Construction INCConstruction2026-07-04link

Anomalies / Trend Notes

  • qilin released a wave of 5 victims in one batch(published with identical timestamps) — the most active group this round, spanning financial / non-profit / manufacturing with no geographic concentration.
  • play keeps up a steady output, this round hitting an insurance firm (sensitive financial sector).
  • the gentlemenhit a medical emergency service (Medic Rescue) — the critical-infrastructure / healthcare angle deserves attention; the group is not in the watchlist groups, but the victim's sector is sensitive.
  • titanis a relatively uncommon small group, 1 post this round, no unusual surge yet.
  • Feed lag: nothing newer than 07-05 within today's window; if there is still no update tomorrow, check whether RansomLook's scraping side has stalled.
← Prev
Ransomware Watch · Jul 6, 2026
Next →
Ransomware Watch · Jul 8, 2026