Ransomware

On October 10, 2026, ransomware intelligence trackers reported that the group "Redact" had listed DexCom — the Nasdaq-listed continuous glucose monitoring maker with roughly 4.97 billion dollars in revenue and about 11,100 employees — on its dark-web leak site, alleging it exfiltrated 3.3 terabytes of company data. Treat that claim carefully: this is an attacker-side allegation only. DexCom has not publicly confirmed any incident, no regulatory filing has surfaced, and no independent forensic evidence has corroborated the listing.

The most lucrative ransomware operation of the year never encrypted a single file. According to internal chat logs leaked this week and analyzed by blockchain forensics firm Crystal Intelligence, a cybercrime collective known as Silent Ransom Group — also tracked as Luna Moth — claims it collected roughly $207 million from 27 law firms between April and September 2026 using nothing more than phone calls, social engineering, and the threat of publishing stolen data.

The FBI and the Department of Justice announced October 8 that they have seized seven domains and disrupted two hacking tools tied to Flax Typhoon, the China-linked threat group U.S. authorities associate with Integrity Technology Group, a Beijing-based information-security company Washington says holds contracts with the Chinese government. The operation targeted reconnaissance and spear-phishing infrastructure that prosecutors say was used to scan — and in some cases infiltrate — critical infrastructure networks in the United States and abroad.

A ransomware group calling itself Chaos announced on October 9, 2026 that it had exfiltrated 1,500 gigabytes of data from Astrana Health, Inc., a California-based physician-management company whose network supports roughly 20,000 affiliated medical providers. The group claims the theft followed Astrana's decision not to negotiate with the attackers, and says the stolen trove includes patient diagnoses and personal information.