WORLD WATCH · October 16, 2026 · EXPOSURE
Ransomware groups name new victims on Ransomware.live
Ransomware.live reported new victims for several groups on 16 October 2026.
- Reported by
- Ransomware.live
- Outlets reporting
- 1
- Category
- EXPOSURE
- Newest report
- October 16, 2026
Plain-English brief. Written for readers who work in a second language.
Key takeaways
- N0n named a Brazilian packaging manufacturer.
- Play named four organizations in three countries.
- Redact named ONEOK, Inc. in oil and gas.
- The trend shows 41 items in 18 hours.
What happened
The report comes from Ransomware.live. N0n named Prafesta Ind. e Com. de Embalagens Ltda as a victim. Prafesta makes packaging by extrusion in Brazil. Its exposed data includes Senior Sapiens ERP, Vetorh HR, eSocial filings, invoices, CPF numbers and bank data. Play named WSBI-ESBG, New Tec Tool Limited, MicroSearch Corporation and Pure Options. Redact named ONEOK, Inc. ONEOK works in oil and gas energy and reports revenue of $39.4B USD. The trend includes 41 items from Ransomware.live in 18 hours.
Why it matters
The exposed data includes worker IDs, bank data and invoices. The victims are in Brazil, Belgium, Canada and the United States. The trend shows many new victim posts in one day.
What to do
- Review exposure of payroll and invoice data.
- Monitor for leaked CPF and bank records.
- Prepare incident response for named sectors.
SOURCE: INTEL128 WORLD WATCH (UPDATED OCT 17, 2026). This brief summarizes reporting by Ransomware.live. Intel128 writes the summary and credits the outlet. Read the summary as a starting point, not as a substitute for the original reporting.