cyber.hendryadrian.com
Ransom Monitor · ransomware.live

Nightspire Claims Sahara Air Products Data and Threatens Release

· Original article ↗

Summary

A ransomware claim attributed to nightspire names Sahara Air Products and alleges access to technical drawings, documents, customer invoices, and shipment histories. The claims are unconfirmed.

Key points

  • The record names Sahara Air Products, a U.S. manufacturing company, as the alleged victim.
  • The claim is attributed to ransomware actor nightspire and monitored by ransomware.live.
  • The group allegedly obtained confidential technical drawings, documents, customer invoices, and shipment histories.
  • The post says the data may be released to pressure payment; the claims have not been independently confirmed.

Article Details

Victim
Sahara Air Products
Victim Domain
Unknown
Attack Date
2026-04-11
Claim Date
2026-04-06
Encryption Status
Unknown
Encrypted Size
Unknown
Exfiltration Status
Claimed by nightspire, but unverified; the source says the data was exfiltrated or threatened for release.
Exfiltrated Data
The claim lists confidential technical drawings, documents, customer invoices, and shipment histories.
Exfiltrated Size
Unknown
Ransom Demand
Unknown
Leak Status
Release was reportedly threatened; actual publication is not confirmed.

Threat Actors

nightspireIdentified as the ransomware group making the claim targeting Sahara Air Products. The reported exfiltration or threat to release data is unverified; the source says it cannot confirm the claim.

Countries

United StatesThe ransomware claim targets Sahara Air Products in the United States, attributed to threat actor nightspire, with data including confidential technical drawings, documents, customer invoices, and shipment histories.

Industries

ManufacturingSector: Manufacturing

Related Articles