Krybit Claims Ransomware Attack on Paraguayan Manufacturer ERSA
Summary
The krybit ransomware group claims it targeted Paraguayan manufacturer ERSA (ersa[.]com[.]py). ransomware.live listed the claim on June 17, 2026; the post says the information is unconfirmed.
Key points
- The monitoring record names ERSA, a Paraguayan manufacturing company, as the alleged victim.
- The claim is attributed to krybit and linked to the group's leak-site post.
- The record says the claimed attack aimed to disrupt operations and system availability; it does not confirm disruption or other impact.
- The post states that the claim's accuracy could not be confirmed.
Article Details
- Victim
- ERSA (Enrique Remmele S.A.C.I.)
- Victim Domain
- ersa.com.py
- Claim Date
- 2026-06-17
- Encryption Status
- Unknown; the reported claim is unconfirmed.
- Encrypted Size
- Not disclosed
- Exfiltration Status
- Unknown; the source does not confirm exfiltration.
- Exfiltrated Data
- Not disclosed
- Exfiltrated Size
- Not disclosed
- Ransom Demand
- Not disclosed
- Leak Status
- A ransomware claim is reported; the source does not confirm publication or a data leak.