{"id":1362,"date":"2026-07-07T10:16:05","date_gmt":"2026-07-07T08:16:05","guid":{"rendered":"https:\/\/comsource.cz\/?p=1362"},"modified":"2026-10-07T19:31:46","modified_gmt":"2026-10-07T17:31:46","slug":"june-cyber-incidents-czechia-ransomware-leaked-data","status":"publish","type":"post","link":"https:\/\/comsource.cz\/en\/june-cyber-incidents-czechia-ransomware-leaked-data\/","title":{"rendered":"Cyber incidents in Czechia in June: ransomware targets manufacturing and healthcare as trading in leaked data grows"},"content":{"rendered":"<p><strong>June confirmed a shift from mass campaigns towards targeted operations against individual Czech companies. Although the total number of active hacking groups declined, attacks on specific organisations in Czechia remained intense. Ransomware gangs successfully breached at least three Czech companies, while underground forums saw more offers of data belonging to Czech users. These findings come from an analysis by ComSource, a Czech company specialising in cybersecurity, network infrastructure and data analytics.<\/strong><\/p>\n<p><em>\u201cThe decline in the number of active hacking groups recorded by our monitoring does not necessarily mean the situation is improving. On the contrary, we see that fewer actors are still capable of carrying out successful ransomware attacks against individual Czech companies across very different sectors, from manufacturing and healthcare to energy,\u201d<\/em> says Michal \u0160tus\u00e1k, cybersecurity expert and co-owner of ComSource.<\/p>\n<p>A total of 15 attacks against organisations in Czechia were recorded during the month, with Fortibleed the most active group, responsible for five incidents. The most significant confirmed ransomware attacks against Czech companies included incidents involving The Gentlemen and Qilin. Manufacturing, healthcare and energy were key sectors of interest to the attackers.<\/p>\n<p><em>\u201cHacking groups such as The Gentlemen and Qilin are not opportunistic players. They are professional ransomware-as-a-service operations with their own development capabilities, actively borrowing source code from other gangs and using artificial intelligence to improve their tools. Czech companies can no longer base their defences on the assumption that they operate in a small market outside attackers\u2019 main areas of interest,\u201d<\/em> warns Michal \u0160tus\u00e1k of ComSource.<\/p>\n<p>Alongside ransomware, ComSource\u2019s June analysis recorded significant trading in leaked data connected with Czechia. A total of 140 credential leaks were identified. Botnets and so-called stealer logs, containing data collected by infostealer malware from compromised computers, accounted for 97% of the leaks. Domains associated with public administration and education were particularly affected.<\/p>\n<p><em>\u201cInfostealers are among today\u2019s most dangerous tools because stolen credentials remain in circulation through underground channels for months or even years, and attackers repeatedly reuse them in further attacks. Companies should assume that an old leaked password will sooner or later reappear in a new campaign,\u201d<\/em> adds Michal \u0160tus\u00e1k of ComSource.<\/p>\n<p>Offers of specific databases linked to Czech organisations also appeared on the dark web. These included an unspecified Czech corporate database offered for sale on BreachForums and a data leak from the website of a school in Moravia. A total of 45,836 phishing events were detected during the month.<\/p>\n<p><em>\u201cThe combination of ransomware, infostealers and active trading in leaked data on forums shows how threats overlap and reinforce one another. A single compromise can begin a chain of events that ends in a ransomware attack months later. That is why it is essential to monitor not only current attacks but also signals from the underground forums where attacks are being prepared,\u201d<\/em> concludes Michal \u0160tus\u00e1k of ComSource.<\/p>\n<p>The analysis of the Czech cyber landscape was prepared in cooperation with Group-IB, whose key partner in Czechia is ComSource. Group-IB is a leading global cybersecurity solutions provider specialising in preventing cyberattacks, investigating fraud and protecting digital assets. The company operates in dozens of countries and is known for its research into threat intelligence, phishing and organised cybercrime.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>June confirmed a shift from mass campaigns towards targeted operations against individual Czech companies. Although the total number of active hacking groups declined, attacks on specific organisations in Czechia remained intense. Ransomware gangs successfully breached at least three Czech companies, while underground forums saw more offers of data belonging to Czech users. These findings come [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":1280,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"footnotes":""},"categories":[7,23,29],"tags":[],"class_list":["post-1362","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized","category-cybersecurity-en","category-press-releases"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v25.1 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>June Cyber Threats: Ransomware and Data Leaks | ComSource<\/title>\n<meta name=\"description\" content=\"ComSource\u2019s June analysis of cyber threats in Czechia: targeted ransomware attacks, stolen credentials and the growing trade in leaked data.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/comsource.cz\/en\/june-cyber-incidents-czechia-ransomware-leaked-data\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"June Cyber Threats: Ransomware and Data Leaks | ComSource\" \/>\n<meta property=\"og:description\" content=\"ComSource\u2019s June analysis of cyber threats in Czechia: targeted ransomware attacks, stolen credentials and the growing trade in leaked data.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/comsource.cz\/en\/june-cyber-incidents-czechia-ransomware-leaked-data\/\" \/>\n<meta property=\"og:site_name\" content=\"ComSource\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/ComSource\" \/>\n<meta property=\"article:published_time\" content=\"2026-07-07T08:16:05+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-10-07T17:31:46+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/comsource.cz\/wp-content\/uploads\/2026\/09\/seagul-cybersecurity-10194200_1920-1024x683.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1024\" \/>\n\t<meta property=\"og:image:height\" content=\"683\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Dagmar Zweschperov\u00e1\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Dagmar Zweschperov\u00e1\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/comsource.cz\/en\/june-cyber-incidents-czechia-ransomware-leaked-data\/\",\"url\":\"https:\/\/comsource.cz\/en\/june-cyber-incidents-czechia-ransomware-leaked-data\/\",\"name\":\"June Cyber Threats: Ransomware and Data Leaks | ComSource\",\"isPartOf\":{\"@id\":\"https:\/\/comsource.cz\/en\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/comsource.cz\/en\/june-cyber-incidents-czechia-ransomware-leaked-data\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/comsource.cz\/en\/june-cyber-incidents-czechia-ransomware-leaked-data\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/comsource.cz\/wp-content\/uploads\/2026\/09\/seagul-cybersecurity-10194200_1920.png\",\"datePublished\":\"2026-07-07T08:16:05+00:00\",\"dateModified\":\"2026-10-07T17:31:46+00:00\",\"author\":{\"@id\":\"https:\/\/comsource.cz\/en\/#\/schema\/person\/8154e01b531b48967cfad01950d937e7\"},\"description\":\"ComSource\u2019s June analysis of cyber threats in Czechia: targeted ransomware attacks, stolen credentials and the growing trade in leaked data.\",\"breadcrumb\":{\"@id\":\"https:\/\/comsource.cz\/en\/june-cyber-incidents-czechia-ransomware-leaked-data\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/comsource.cz\/en\/june-cyber-incidents-czechia-ransomware-leaked-data\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/comsource.cz\/en\/june-cyber-incidents-czechia-ransomware-leaked-data\/#primaryimage\",\"url\":\"https:\/\/comsource.cz\/wp-content\/uploads\/2026\/09\/seagul-cybersecurity-10194200_1920.png\",\"contentUrl\":\"https:\/\/comsource.cz\/wp-content\/uploads\/2026\/09\/seagul-cybersecurity-10194200_1920.png\",\"width\":1920,\"height\":1280},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/comsource.cz\/en\/june-cyber-incidents-czechia-ransomware-leaked-data\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/comsource.cz\/en\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Cyber incidents in Czechia in June: ransomware targets manufacturing and healthcare as trading in leaked data grows\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/comsource.cz\/en\/#website\",\"url\":\"https:\/\/comsource.cz\/en\/\",\"name\":\"ComSource\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/comsource.cz\/en\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\",\"publisher\":{\"@id\":\"https:\/\/comsource.cz\/#organization\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/comsource.cz\/en\/#\/schema\/person\/8154e01b531b48967cfad01950d937e7\",\"name\":\"Dagmar Zweschperov\u00e1\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/comsource.cz\/en\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/5244299ea5bcb5afc48268d25615ace7e74d6f8039a508df0d298ac674b548ed?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/5244299ea5bcb5afc48268d25615ace7e74d6f8039a508df0d298ac674b548ed?s=96&d=mm&r=g\",\"caption\":\"Dagmar Zweschperov\u00e1\"},\"url\":\"https:\/\/comsource.cz\/en\/author\/dagmar-zweschperova\/\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/comsource.cz\/#organization\",\"name\":\"ComSource\",\"legalName\":\"ComSource s.r.o.\",\"url\":\"https:\/\/comsource.cz\/\",\"telephone\":\"+420226801700\",\"email\":\"info@comsource.cz\",\"address\":{\"@type\":\"PostalAddress\",\"streetAddress\":\"Nad Vr\u0161ovskou horou 1423\/10\",\"addressLocality\":\"Praha 10\",\"postalCode\":\"101 00\",\"addressCountry\":\"CZ\"},\"sameAs\":[\"https:\/\/www.linkedin.com\/company\/comsource-s.r.o.\/\",\"https:\/\/www.facebook.com\/ComSource\",\"https:\/\/www.youtube.com\/channel\/UCR0pWsBktzx2V-kbtF8Beuw\",\"https:\/\/www.instagram.com\/comsource_czech_\/\"],\"logo\":{\"@type\":\"ImageObject\",\"@id\":\"https:\/\/comsource.cz\/#brand-logo\",\"url\":\"https:\/\/comsource.cz\/wp-content\/themes\/comsource\/Assets\/img\/logotype\/dark.svg\",\"contentUrl\":\"https:\/\/comsource.cz\/wp-content\/themes\/comsource\/Assets\/img\/logotype\/dark.svg\",\"caption\":\"ComSource\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"June Cyber Threats: Ransomware and Data Leaks | ComSource","description":"ComSource\u2019s June analysis of cyber threats in Czechia: targeted ransomware attacks, stolen credentials and the growing trade in leaked data.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/comsource.cz\/en\/june-cyber-incidents-czechia-ransomware-leaked-data\/","og_locale":"en_US","og_type":"article","og_title":"June Cyber Threats: Ransomware and Data Leaks | ComSource","og_description":"ComSource\u2019s June analysis of cyber threats in Czechia: targeted ransomware attacks, stolen credentials and the growing trade in leaked data.","og_url":"https:\/\/comsource.cz\/en\/june-cyber-incidents-czechia-ransomware-leaked-data\/","og_site_name":"ComSource","article_publisher":"https:\/\/www.facebook.com\/ComSource","article_published_time":"2026-07-07T08:16:05+00:00","article_modified_time":"2026-10-07T17:31:46+00:00","og_image":[{"width":1024,"height":683,"url":"https:\/\/comsource.cz\/wp-content\/uploads\/2026\/09\/seagul-cybersecurity-10194200_1920-1024x683.png","type":"image\/png"}],"author":"Dagmar Zweschperov\u00e1","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Dagmar Zweschperov\u00e1","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/comsource.cz\/en\/june-cyber-incidents-czechia-ransomware-leaked-data\/","url":"https:\/\/comsource.cz\/en\/june-cyber-incidents-czechia-ransomware-leaked-data\/","name":"June Cyber Threats: Ransomware and Data Leaks | ComSource","isPartOf":{"@id":"https:\/\/comsource.cz\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/comsource.cz\/en\/june-cyber-incidents-czechia-ransomware-leaked-data\/#primaryimage"},"image":{"@id":"https:\/\/comsource.cz\/en\/june-cyber-incidents-czechia-ransomware-leaked-data\/#primaryimage"},"thumbnailUrl":"https:\/\/comsource.cz\/wp-content\/uploads\/2026\/09\/seagul-cybersecurity-10194200_1920.png","datePublished":"2026-07-07T08:16:05+00:00","dateModified":"2026-10-07T17:31:46+00:00","author":{"@id":"https:\/\/comsource.cz\/en\/#\/schema\/person\/8154e01b531b48967cfad01950d937e7"},"description":"ComSource\u2019s June analysis of cyber threats in Czechia: targeted ransomware attacks, stolen credentials and the growing trade in leaked data.","breadcrumb":{"@id":"https:\/\/comsource.cz\/en\/june-cyber-incidents-czechia-ransomware-leaked-data\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/comsource.cz\/en\/june-cyber-incidents-czechia-ransomware-leaked-data\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/comsource.cz\/en\/june-cyber-incidents-czechia-ransomware-leaked-data\/#primaryimage","url":"https:\/\/comsource.cz\/wp-content\/uploads\/2026\/09\/seagul-cybersecurity-10194200_1920.png","contentUrl":"https:\/\/comsource.cz\/wp-content\/uploads\/2026\/09\/seagul-cybersecurity-10194200_1920.png","width":1920,"height":1280},{"@type":"BreadcrumbList","@id":"https:\/\/comsource.cz\/en\/june-cyber-incidents-czechia-ransomware-leaked-data\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/comsource.cz\/en\/"},{"@type":"ListItem","position":2,"name":"Cyber incidents in Czechia in June: ransomware targets manufacturing and healthcare as trading in leaked data grows"}]},{"@type":"WebSite","@id":"https:\/\/comsource.cz\/en\/#website","url":"https:\/\/comsource.cz\/en\/","name":"ComSource","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/comsource.cz\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US","publisher":{"@id":"https:\/\/comsource.cz\/#organization"}},{"@type":"Person","@id":"https:\/\/comsource.cz\/en\/#\/schema\/person\/8154e01b531b48967cfad01950d937e7","name":"Dagmar Zweschperov\u00e1","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/comsource.cz\/en\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/5244299ea5bcb5afc48268d25615ace7e74d6f8039a508df0d298ac674b548ed?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/5244299ea5bcb5afc48268d25615ace7e74d6f8039a508df0d298ac674b548ed?s=96&d=mm&r=g","caption":"Dagmar Zweschperov\u00e1"},"url":"https:\/\/comsource.cz\/en\/author\/dagmar-zweschperova\/"},{"@type":"Organization","@id":"https:\/\/comsource.cz\/#organization","name":"ComSource","legalName":"ComSource s.r.o.","url":"https:\/\/comsource.cz\/","telephone":"+420226801700","email":"info@comsource.cz","address":{"@type":"PostalAddress","streetAddress":"Nad Vr\u0161ovskou horou 1423\/10","addressLocality":"Praha 10","postalCode":"101 00","addressCountry":"CZ"},"sameAs":["https:\/\/www.linkedin.com\/company\/comsource-s.r.o.\/","https:\/\/www.facebook.com\/ComSource","https:\/\/www.youtube.com\/channel\/UCR0pWsBktzx2V-kbtF8Beuw","https:\/\/www.instagram.com\/comsource_czech_\/"],"logo":{"@type":"ImageObject","@id":"https:\/\/comsource.cz\/#brand-logo","url":"https:\/\/comsource.cz\/wp-content\/themes\/comsource\/Assets\/img\/logotype\/dark.svg","contentUrl":"https:\/\/comsource.cz\/wp-content\/themes\/comsource\/Assets\/img\/logotype\/dark.svg","caption":"ComSource"}}]}},"_links":{"self":[{"href":"https:\/\/comsource.cz\/en\/wp-json\/wp\/v2\/posts\/1362","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/comsource.cz\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/comsource.cz\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/comsource.cz\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/comsource.cz\/en\/wp-json\/wp\/v2\/comments?post=1362"}],"version-history":[{"count":1,"href":"https:\/\/comsource.cz\/en\/wp-json\/wp\/v2\/posts\/1362\/revisions"}],"predecessor-version":[{"id":1364,"href":"https:\/\/comsource.cz\/en\/wp-json\/wp\/v2\/posts\/1362\/revisions\/1364"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/comsource.cz\/en\/wp-json\/wp\/v2\/media\/1280"}],"wp:attachment":[{"href":"https:\/\/comsource.cz\/en\/wp-json\/wp\/v2\/media?parent=1362"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/comsource.cz\/en\/wp-json\/wp\/v2\/categories?post=1362"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/comsource.cz\/en\/wp-json\/wp\/v2\/tags?post=1362"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}