INTEL128

WORLD WATCH · October 25, 2026 · EXPOSURE

Two groups claim new victims

Two groups claimed separate victims in the same reporting period.

Reported by
Ransomware.live
Outlets reporting
1
Category
EXPOSURE
Newest report
October 25, 2026

Plain-English brief. Written for readers who work in a second language.

Key takeaways

What happened

The report comes from Ransomware.live. Whitearmor claimed Hisense as a victim. Whitearmor stated possession of Hisense's GCRM production document store. Whitearmor stated possession of the full warranty-claims archive for Malaysia and Singapore. Whitearmor listed customer names as part of that archive. Anubis claimed Newcomer Cremations, Funerals and Receptions as a victim. Anubis stated possession of customers' personal documents. Anubis stated possession of the company's internal documents.

Why it matters

Each claim indicates a possible exfiltration of documents. No stated fact shows a response from either victim. No stated fact shows containment or notification action.

What to do

Verify access logs for affected document stores. Check existing data controls for customer records. Confirm contact paths for known document repositories.

SOURCE: INTEL128 WORLD WATCH (UPDATED OCT 25, 2026). This brief summarizes reporting by Ransomware.live. Intel128 writes the summary and credits the outlet. Read the summary as a starting point, not as a substitute for the original reporting.

Is your domain on a list like this one?

Intel128 sweeps your own domain against 4,000+ surface, deep and dark web sources. The sweep is free, takes about a minute, and the report lands in your inbox.

RUN A FREE SWEEP →