Payload Ransomware claims the hack of Royal Bahrain Hospital
2026-03-15T20:51:46Z•bfdb4fbe68dc9117f86052fe78fe3ad22b9a9f31f0ecdcd2e0af74d79c78ecb9
SEO-poisoningVPN-impersonationavreconcisacredential-theftdata-exfiltrationgoogle-chromehealthcarehive0163interpolknown-exploited-vulnerabilitylaw-enforcementpayload-ransomwarephishingransomwaresocksescortstorm-2561
What happened
Multiple high-impact incidents reported: Payload Ransomware claims a breach of Royal Bahrain Hospital with ~110 GB of stolen data and published items on its Tor leak site; Storm-2561 is running an SEO-poisoning campaign that lures victims to spoofed Ivanti/Cisco/Fortinet VPN sites to harvest corporate credentials; Starbucks disclosed a phishing-driven breach of its Partner Central portal affecting 889 employees; IBM/others report Hive0163 using AI-assisted ‘Slopoly’ malware to maintain persistence in ransomware campaigns; law enforcement (INTERPOL, US/EU) disrupted large-scale infrastructure —
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- bfdb4fbe68dc9117f86052fe78fe3ad22b9a9f31f0ecdcd2e0af74d79c78ecb9
- Enrichment time
- 2026-03-15T20:51:46Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.