On 27 June 2026, a ransomware group known as safepay claimed responsibility for a cyberattack against the German manufacturing company Hellmold-Plank.de. The incident was published on the ransomware…
Ransomware: AiLock claims Hokua (CL) — Not Found
BREACH. Sourced from ransomwarelive, summarised by Matproof.
AI Analysis
What changed and what to do.
A new ransomware incident has been reported involving a group called AiLock, which claims to have targeted an entity named Hokua, based in CL, likely Chile. The publication on ransomware.live on 26 June 2026, under the BREACH framework, indicates that the victim’s data may have been exfiltrated or encrypted, though the specific impact is not yet confirmed. This is a notification of a potential data security event, not a regulatory change, but it signals an active threat that may trigger breach reporting obligations under EU data protection laws.
Organizations in the CL region, particularly those in critical infrastructure, technology, or service sectors, should assess if they or their partners are connected to Hokua. Any EU-based entity with data processing links to this victim, or using similar systems, may face indirect exposure. Compliance teams must verify if personal data of EU residents could be involved, as this would require notification to supervisory authorities under GDPR within 72 hours.
Compliance teams should immediately review their incident response plans, confirm contact with relevant data protection authorities, and conduct a preliminary risk assessment. They should also monitor ransomware.live and similar threat intelligence sources for updates, and ensure that business continuity and data backup protocols are tested. Proactive communication with legal and IT security teams is essential to determine if a breach notification is necessary.
This summary is AI-generated for orientation purposes. For regulatory action, always consult the original source linked above.
More BREACH updates
Latest in BREACH.
A new ransomware incident has been published on the ransomware.live leak site, attributed to the threat actor "play" and targeting J&J Gaming, a company operating in the consumer services sector. The…
On 27 June 2026, a ransomware group known as Play claimed responsibility for a cyberattack against Kuhnline, a German entity. The claim was published on the ransomware.live leak site under the BREACH…
On June 27, 2026, the ransomware group Dragonforce publicly claimed responsibility for a cyberattack against Aptora, a US-based technology company. The claim was published on the ransomware.live leak…
Map this to your controls
Connect regulatory changes to your compliance work.
Matproof maps every regulator update directly to your controls and surfaces the ones that affect your organisation — across 21 frameworks.