WORLD WATCH · October 18, 2026 · EXPOSURE
Three new ransomware victims appear on Ransomware.live
Ransomware.live reported three new ransomware victim postings in the last 18 hours.
- Reported by
- Ransomware.live
- Outlets reporting
- 1
- Category
- EXPOSURE
- Newest report
- October 18, 2026
Plain-English brief. Written for readers who work in a second language.
Key takeaways
- Ransomware.live reported three new victim postings in 18 hours.
- N0n posted Amagi Media Labs and Company #92.
- Qilin posted Belcorp with no further details.
What happened
N0n posted Amagi Media Labs as a new victim. The report comes from Ransomware.live. The exposed data includes network and device configuration files from a US broadcast playout site. The exposed data also includes internal network maps of that site. The posting marks the data as not paid and exposed. N0n also posted Company #92, an IT services firm in South Korea. That posting marks the data as pending exposure. Qilin posted Belcorp as a new victim. The source gives no further details for Belcorp.
Why it matters
Broadcast playout systems support live media delivery. Exposed network maps can help attackers plan further access. Pending exposure can still lead to later data release.
What to do
- Review network configuration files for exposed secrets.
- Segment broadcast playout networks from other systems.
- Monitor Ransomware.live postings for your organization name.
SOURCE: INTEL128 WORLD WATCH (UPDATED OCT 18, 2026). This brief summarizes reporting by Ransomware.live. Intel128 writes the summary and credits the outlet. Read the summary as a starting point, not as a substitute for the original reporting.