Threat Watch · Aug 10, 2026

RansomLook recorded 52 new ransomware victim claims in the past 36 hours.

Active Groups

The two most active groups this cycle were qilin (~15 claims) and the gentlemen (~14 claims), together accounting for more than half of this cycle's claims. Other relatively active groups include ethics (4), storm (3), and play (3); victims were mostly small and mid-sized businesses in construction, logistics, manufacturing, and professional services.

Notable Targets

• the gentlemenclaimed attacks on Hong Kong Baptist University and Taiwanese biopharma company PharmaEssentia
• qilinclaimed attacks on Université Libre de Bruxelles in Belgium and the City of Winchester government in the US
• akiraclaimed attacks on photo-processing company One Vision Imaging and IT service provider i4 Solutions, threatening in both cases to upload roughly 170-180GB of corporate data
• ransomhousehas publicly disclosed its attack on Japanese food company Nichirei

Cross-Reference

In the same period CISA issued a dedicated advisory on Gunra ransomware (RaaS, double-extortion model) — see the "🔥 Exploited in the Wild" section of today's daily brief. CISA also confirmed that two sets of vulnerabilities in SonicWall SMA1000 and Progress LoadMaster have been used by ransomware groups for initial access.