Ransomware and Data-Extortion Claims Targeting Luxshare, McDonald’s India, and US Healthcare Providers

Ransomware and data-extortion activity was reported across multiple sectors, with threat actors using leak sites to pressure victims and amplify impact. The RansomHub ransomware-as-a-service operation claimed it breached Chinese manufacturer Luxshare and stole sensitive manufacturing and R&D archives allegedly tied to major technology firms (including Apple, Nvidia, Tesla, and LG). The posted sample was described as containing engineering artifacts such as 3D CAD/Parasolid files, PCB manufacturing data, and engineering documentation, plus some project-related PII; the breach had not been independently confirmed at the time of reporting.

Separately, the Everest ransomware group claimed it breached McDonald’s India, alleging exfiltration of 861 GB of internal documents and customer personal data and threatening publication if demands were not met; McDonald’s India had not confirmed the claim. In US healthcare, Valley Eye Associates confirmed a ransomware incident with data exfiltration during a short intrusion window, while Qilin publicly claimed responsibility and alleged 139 GB stolen and posted—suggesting a non-payment outcome. A related but distinct development involved healthcare IT vendor Veradigm, which agreed to a $10.5M settlement tied to a prior (2024) breach affecting 2+ million patients, underscoring ongoing legal and financial exposure following large-scale patient-data compromises.