2026 Siveco — ransomware leak-site claim; PAN-OS exploitation cited in OSINT (May)
Data compromised
Unspecified asset-management and corporate data per actor marketing
Technical writeup
French asset-management software vendor Siveco (siveco.com) appeared in late-May 2026 dark-web monitoring with renewed ransomware marketing—sometimes referencing prior CoinbaseCartel branding from March 2026 and parallel OSINT chatter tying intrusions to exploitation of Palo Alto Networks PAN-OS captive-portal vulnerabilities (CVE-2026-0300). No Siveco forensic bulletin, CNIL filing, or consolidated victim count was uniformly indexed in English trade press at catalog time; BreachHistory tracks the entry as an actor-claimed industrial-software extortion row pending official notice.
Root cause
Ransomware extortion claim; OSINT cited PAN-OS zero-day exploitation narratives