Threat Watch · Jun 29, 2026

ℹ️ Data source: RansomLook api/posts?days=1. The feed has advanced this run, with the latest discovered at 2026-06-28T12:52Z (the stall at 06-26 seen in the previous two editions has cleared). A relatively quiet day within the window.

Overview

• Total new posts: 6
• Groups involved: 5(redact ×2, play ×2, safepay / cmd organization 1 each)
• Watchlist hits: 2(both group:play)

Watchlist Hits (read these first)

All New Posts

Anomalies / Trend Notes

• Feed advancing again: last week's two consecutive editions (06-27, 06-28) were stuck at 06-26T15:57 on days=1; this run has moved normally to 06-28T12:52, back to baseline.
• Sensitive targets(no automatic hit; manually annotated):
  • redact → Hologic— a leading US medical diagnostics/imaging equipment maker; if confirmed, this carries healthcare supply chain and patient-related data risk.
  • redact → FCCI Insurance Group— a US property/casualty insurer, where underwriting data is highly sensitive.
  • redacthas posted two large US targets back to back; worth tracking whether the group is entering a new active phase.
• playposted 2 North American victims within a single minute (Kuhnline, J&J Gaming), continuing its steady high-frequency output.
• cmd organization → Fidelity Security Group— note this is a physical security/guarding company (likely South African), not a financial institution (do not confuse it with Fidelity Investments).