Oct 2 – October 3, 2026 · 2 reports
- KillSec takedown detail: the leak site and servers were seized in Operation KillSwitch, with three arrests on September 30 and a 16-year-old identified as the alleged administrator of a group linked to roughly 500 victims over two years (BleepingComputer, Dark Reading) (earlier coverage). · Oct 3 · none · Breaches, Takedowns & Attribution
- International police disrupted the KillSec ransomware operation and arrested three suspects on September 30. A 16-year-old detained in Spain is suspected of being its administrator and primary operator. Operation KillSwitch also placed five central servers, the leak site, and associated domains under law-enforcement control, and secured at least 110 TB of stolen data. Europol · Oct 2 · observed · Threat Activity & Supply Chain