Spanish police arrested a 16-year-old suspected of running the KillSec ransomware group as investigators took its leak site, five servers and at least 110TB of stolen data. Three suspects were arrested and a fourth, the alleged developer, has been identified.
IDC Frontier says customer data in four zones of its IDCF Cloud East Japan Region 1 will be difficult to recover after a ransomware attack that began on 7 October. Customers should restore from their own backups. 495 businesses and local governments are affected.
The FBI and Secret Service say the FortiBleed campaign is still running, and that some victims may be locked out of their own firewalls. The advisory lists the account names attackers leave behind.
Nearly 1.44 million documents from two city departments were published after a two-million-euro demand was declined. Refusing a ransom ends the payment, not the exposure.
A record 123 cases in six months, most of them at smaller companies, and the most common way in was the remote access appliance sitting at the edge of the network.