Based in Switzerland. Financial Services sector. Disclosed 7 Nov 2026. Incident profile, threat group background and sector analysis.

Based in Brazil. Government & Defense sector. Disclosed 7 Nov 2026. Incident profile, threat group background and sector analysis.

ThreatMon's Threat Intelligence Team has reported two new victim claims involving the Rhysida and NightSpire ransomware groups. The reported organizations operate in different countries and industries, highlighting continued ransomware targeting across European business sectors. Rhysida Claims Swiss Finance Company Treuhand & Immobilien Abt AG Unverified ransomware claim The Rhysida ransomware group has claimed responsibility for an alleged cyberattack against Treuhand & Immobilien Abt AG, a Switzerland-based company operating in the finance sector.

Based in United States. Disclosed 4 Nov 2026. Incident profile, threat group background and sector analysis.

the Report Two ransomware groups, Qilin and Rhysida, have published new victim claims on November 7, 2026, according to ThreatMon threat-intelligence monitoring. Qilin: Claims ROXFARMA, an organization classified under the manufacturing sector. Rhysida: Claims Tribunal de Justiça do Estado de Minas Gerais, a Brazilian state judicial institution. Both listings represent unverified threat-actor claims. Neither independently confirms data theft, successful encryption, or the publication of stolen information.

Professional Services sector. Disclosed 4 Nov 2026. Incident profile, threat group background and sector analysis.

Ransomware Activity Report – November 7, 2026 Two ransomware groups, Qilin and Rhysida, have listed new organizations on their alleged victim lists, according to threat intelligence monitoring published by ThreatMon on November 7, 2026. The latest claims involve a financial-sector organization identified as AXE - EXPERTS and Brazil’s Tribunal de Justiça do Estado de Minas Gerais. Both listings highlight the continued targeting of organizations across different industries, including financial services and government institutions.

the Report Threat intelligence monitoring platform ThreatMon reported two new victim claims published by ransomware groups Rhysida and Qilin on November 7, 2026. The reported victims are the Tribunal de Justiça do Estado de Minas Gerais, a Brazilian state judiciary institution, and AXE - EXPERTS, listed under the finance sector. Both entries represent threat-actor claims that have not yet been independently verified.

Introduction: Two Ransomware Groups Report New Victim Claims The ransomware threat landscape recorded two additional victim claims on November 7, 2026, involving two different ransomware operations: Qilin and Rhysida. According to threat intelligence monitoring published by ThreatMon, Qilin listed XK NET SA DE CV as a newly claimed victim, while Rhysida reportedly added the Tribunal de Justiça do Estado de Minas Gerais, a Brazilian state court, to its victim list.