Ransomware: upcoming dates

Recent

• Cybersecurity09/25/2026@CyberDesk

  WorldLeaks Claims Nike Hack as Nike Probes a Possible Breach

  Nike Philip H. Knight Campus, 1, Merlo Station, Marlene Village, Beaverton, Washington County, Oregon, 97005, United StatesNike

  

  Starts 01/22/2026CONFIRMEDDate confidence: CONFIRMEDStated as firmHow firmly the source words the date: confirmed, scheduled, estimated, delayed or unverified.Show all CONFIRMED pins82% CONFIDENCEOverall confidence: 82%How well the pin's source and references back up its dates.Weighted average of how firmly 6 references, the source included, support the pin's start and end times; a reference counts half as much for every 180 days older than the newestShow all pins at 75% confidence or better253 days agoSecurityWeek^[1]: Nike "was listed as a victim on the Tor-based leak website operated by the WorldLeaks gang on January 22".

  The WorldLeaks extortion gang listed Nike on its leak site on 22 January 2026 and then dumped about 1.4TB of what it said were 188,347 internal Nike design and manufacturing files; Nike said only that it was investigating a potential cybersecurity incident.

  00
• Food09/27/2026@DrinksDesk

  Ransomware Attack Halts Asahi's Beer Orders and Shipments in Japan

  Flamme d’Or, 浅草通り, 吾妻橋一丁目, 吾妻橋, 墨田区, 東京都, 130-0001, 日本Asahi Group Holdings

  

  Starts 09/29/2025CONFIRMEDDate confidence: CONFIRMEDStated as firmHow firmly the source words the date: confirmed, scheduled, estimated, delayed or unverified.Show all CONFIRMED pins87% CONFIDENCEOverall confidence: 87%How well the pin's source and references back up its dates.Weighted average of how firmly 4 references, the source included, support the pin's start and end times; a reference counts half as much for every 180 days older than the newestShow all pins at 75% confidence or better1.0 years agoAsahi's 3 October 2025 update says the company 'announced on September 29 that its systems are experiencing disruption due to a cyberattack' and that its servers 'were targeted by a ransomware attack'.^[1]

  A ransomware attack on Asahi Group Holdings' systems on 29 September 2025 suspended order-taking and shipments across its Japanese businesses and stopped Asahi Breweries' six domestic factories until 2 October.

  00
• Cybersecurity09/24/2026@CyberDesk

  Cl0p Starts Emailing Executives Claiming Oracle E-Business Suite Data Theft

  2300, Oracle Way, Lakeshore, Austin, Travis County, Texas, 78741, United StatesOracle

  

  Starts 09/29/2025CONFIRMEDDate confidence: CONFIRMEDStated as firmHow firmly the source words the date: confirmed, scheduled, estimated, delayed or unverified.Show all CONFIRMED pins87% CONFIDENCEOverall confidence: 87%How well the pin's source and references back up its dates.Weighted average of how firmly 4 references, the source included, support the pin's start and end times; a reference counts half as much for every 180 days older than the newestShow all pins at 75% confidence or better1.0 years agoGoogle^[1] Threat Intelligence Group: 'Beginning Sept. 29, 2025, Google Threat Intelligence Group (GTIG) and Mandiant began tracking a new, large-scale extortion campaign by a threat actor claiming affiliation with the CL0P extortion brand.'

  A group using the Cl0p extortion brand began mass-emailing executives, saying it had stolen data from their companies' Oracle E-Business Suite systems and demanding payment.

  00
• Cybersecurity09/21/2026@CyberDesk

  Colonial Pipeline Shuts Down After a Ransomware Attack

  Colonial Pipeline Company, Alpharetta, Georgia, United StatesColonial Pipeline Company

  

  Starts 05/07/2021CONFIRMEDDate confidence: CONFIRMEDStated as firmHow firmly the source words the date: confirmed, scheduled, estimated, delayed or unverified.Show all CONFIRMED pins90% CONFIDENCEOverall confidence: 90%How well the pin's source and references back up its dates.Weighted average of how firmly 2 references, the source included, support the pin's start and end times; a reference counts half as much for every 180 days older than the newestShow all pins at 75% confidence or better5.4 years agoThe day is not disputed: "On May 7, 2021, Colonial Pipeline ... suffered a ransomware cyberattack" and operations were halted the same day.^[1]

  Colonial Pipeline halted every pipeline it runs after DarkSide ransomware hit the computers managing the system, cutting off the line that carries most of the gasoline and jet fuel to the US Southeast. The company paid a ransom of about 75 bitcoin, and fuel shortages and panic buying followed along the East Coast.

  00