HIGHRansomware
Global

New StormEncryptor ransomware used by former Medusa affiliate

·Source: BleepingComputer

Updated:

Executive Summary

A financially motivated threat actor previously associated with the Medusa ransomware operation is now deploying a new ransomware strain called StormEncryptor. [...]

Analysis

A financially motivated threat actor previously associated with the Medusa ransomware operation is now deploying a new ransomware strain called StormEncryptor. [...]
Source Attribution

Originally published by BleepingComputer on Aug 10, 2026.

Related Threats

HIGHRansomware

CISA Unveils New Cybersecurity Resources for K-12 Schools and Districts

A recent report claims ransomware attacks on K-12 are down for the first half of 2026, while another news story’s headline today claims schools are becoming a new cybersecurity battleground. New? We don’t think it’s new. But the education sector has long been characterized as providing low-hanging fruit for criminals, and recent attacks on edtech... Source

DataBreaches.net
HIGHRansomware

Texas Hearing Institute Ransomware Attack Affects 30,000 Patients

Texas Hearing Institute has announced a cybersecurity incident involving the protected health information of almost 30,000 patients. Data breaches have […] The post Texas Hearing Institute Ransomware Attack Affects 30,000 Patients appeared first on The HIPAA Journal .

HIPAA Journal
HIGHRansomware

Shell investigates 'potential incident' after Clop data theft claims

Oil giant Shell has confirmed it is investigating a potential security incident after the Clop ransomware gang claimed it stole 89GB of data. [...]

BleepingComputer