« All threats

Ransomware group

Vexy

🆕 New group Vexy muestra su primera publicación el 3 de septiembre de 2026 (hace apenas 27 días) en su sitio de filtración, sin evidencia de actividad previa con este u otro nombre. No existe similitud con grupos ransomware conocidos y está presente en MISP Galaxy, indicativo de que es reconocido como una amenaza emergente en el panorama actual.

Victims in the last 90 days19

Most affected countries

  1. India3
  2. Ecuador2
  3. Brazil2
  4. Japan1
  5. Argentina1
  6. Vietnam1
  7. France1
  8. Italy1

Most affected sectors

  1. Technology6
  2. Retail3
  3. Manufacturing2
  4. Hospitality & tourism2
  5. Real estate1
  6. Education1
  7. Telecommunications1
  8. Energy & utilities1

Recent victims

OrganisationCountrySectorClaimedStatus
Summit Electric Supply—Retail9/30/2026◌ Claimed (unverified)
Groupe ProxitelFranceTelecommunications9/29/2026◌ Claimed (unverified)
Majani Insurance Brokers—Finance & insurance9/25/2026◌ Claimed (unverified)
Quy Nhon UniversityVietnamEducation9/19/2026◌ Claimed (unverified)
STP Fashion LabItalyRetail9/17/2026◌ Claimed (unverified)
Hashimoto JimukiJapanTechnology9/15/2026◌ Claimed (unverified)
Strad Solutions—Technology9/13/2026◌ Claimed (unverified)
i2k2 NetworksIndiaTechnology9/10/2026◌ Claimed (unverified)
Logar Network SolutionsBrazilTechnology9/9/2026◌ Claimed (unverified)
United GroupIndiaOther9/7/2026◌ Claimed (unverified)
Libreria Santa FeArgentinaRetail9/7/2026◌ Claimed (unverified)
Sancity—Real estate9/6/2026◌ Claimed (unverified)
McDonald's EcuadorEcuadorHospitality & tourism9/6/2026◌ Claimed (unverified)
Mega VelocityIndiaTechnology9/6/2026◌ Claimed (unverified)
Sancity Soft Touch—Technology9/4/2026◌ Claimed (unverified)
Palsana Enviro—Energy & utilities9/4/2026◌ Claimed (unverified)
Annapurna Fashion—Manufacturing9/4/2026◌ Claimed (unverified)
McDonald's EcuadorEcuadorHospitality & tourism9/3/2026◌ Claimed (unverified)
EngefitasBrazilManufacturing9/3/2026◌ Claimed (unverified)

Claims are published by the criminal groups themselves and are unverified until the organisation or the press confirms them. Names of natural persons (sole traders, individual professionals) are anonymised under the GDPR. We never link to leak sites or stolen data. To request the removal or anonymisation of an entry, contact the site administrator.

Sources: RansomLook (CC BY 4.0), MITRE ATT&CK®, MISP Galaxy, GDELT.