{"article":{"annotation":{"article_id":"europol-killsec-ransomware-seizure-october-2026","available_at":"2026-10-07T03:14:15.284168Z","geography_revision":"ef6ee0010dda5fe7b240fd514749b43e214c57da73222d2e40ec83b276dd0977","id":"6bdce86935de5524f1459771338f12abdaca3d1af8eea4060699d0bfa5d10a89","input_sha256":"136d74389d10a8802b028c6349b640d000c89935a6376e868718cc8d492142d6","limitations":["Rule-derived subjects are candidates, not verified editorial labels or calibrated model probabilities.","Coverage is distinct from event location. Unknown country/city/coordinates remain absent; no automatic geocoding.","Article geometries keep their stated precision and methodology; reproducing them is not independent coordinate verification."],"method":"controlled-rules-v1","places":[],"rules_sha256":"d28c9c89703b56bd91fd887965d416d0115c2473d4bfbd3e558bcceafc3941dd","schema_version":1,"subjects":[{"concept_id":"medtop:20000086","confidence":null,"confidence_method":null,"evidence":[{"field":"en.title+en.summary","language":"en","note":"Subject suggested from the title or summary: ransomware","source_urls":["https://www.europol.europa.eu/media-press/newsroom/news/teenager-suspected-of-leading-killsec-ransomware-group-law-enforcement-seizes-servers-and-leak-site"]}],"method":"controlled-rules-v1","rule_id":"cyber-crime","status":"candidate"}],"taxonomy_revision":"1f2db31d811fca07e99b16d402c10e2cc2965c9df1c7b41d9be348b40a24e7fb","taxonomy_version":"IPTC Media Topics 2026-Q2"},"api_url":"https://newsverum.com/api/v1/articles/europol-killsec-ransomware-seizure-october-2026?lang=en","category":"security","content":{"key_points":[],"paragraphs":["Europol said on 1 October 2026 that authorities took control of the KillSec group’s leak site on 30 September in Operation KillSwitch, an investigation led by Germany. The site had been used to threaten victims with publication of stolen files; at least 110 terabytes of data were secured against unauthorised access.","Three people were provisionally arrested and eight properties searched in Greece, Romania, Spain and the United Kingdom. Investigators are examining around 1,000 suspected attacks and have so far identified about 500 as successful; Europol said that figure could change as seized evidence is reviewed."],"sections":[]},"corrections":[{"at":"2026-10-07T00:55:43+03:00","language":"en","text":"German and Portuguese editions and translations of the data and correction explanations have been added to this article."},{"at":"2026-10-07T05:57:34+03:00","language":"en","text":"Data classification added: each figure now carries a measure identifier with its unit, geography, frequency and type. No figure, unit or date changed."}],"country":null,"data":{"blocks":[{"description":{"ar":"حدث أمني أو إجراء مؤسسي أورده المصدر.","de":"Sicherheitsereignis oder institutionelle Maßnahme laut Quelle.","en":"Security event or institutional action reported by the source.","es":"Acontecimiento de seguridad o actuación institucional comunicada por la fuente.","fr":"Événement de sécurité ou action institutionnelle rapportée par la source.","pt":"Evento de segurança ou ação institucional informada pela fonte.","tr":"Kaynağın bildirdiği güvenlik olayı veya kurumsal işlem."},"id":"security-event","items":[{"date":"2026-09-30","description":{"ar":"سيطرت السلطات على موقع التسريب وأمّنت ما لا يقل عن 110 تيرابايت من البيانات، ونفذت ثلاثة اعتقالات مؤقتة وثماني عمليات تفتيش في أربع دول.","de":"Behörden übernahmen die Kontrolle über die Leak-Seite, sicherten mindestens 110 Terabyte Daten und führten in vier Ländern drei vorläufige Festnahmen und acht Durchsuchungen durch.","en":"Authorities took control of the leak site, secured at least 110 terabytes of data, and carried out three provisional arrests and eight searches across four countries.","es":"Las autoridades tomaron el control del sitio, aseguraron al menos 110 terabytes de datos y realizaron tres detenciones provisionales y ocho registros en cuatro países.","fr":"Les autorités ont pris le contrôle du site, sécurisé au moins 110 téraoctets de données et mené trois arrestations provisoires et huit perquisitions dans quatre pays.","pt":"As autoridades assumiram o controle do site, protegeram pelo menos 110 terabytes de dados e realizaram três prisões provisórias e oito buscas em quatro países.","tr":"Yetkililer sızıntı sitesinin kontrolünü ele geçirdi, en az 110 terabayt veriyi koruma altına aldı ve dört ülkede üç geçici tutuklama ile sekiz arama gerçekleştirdi."},"label":{"ar":"السيطرة على موقع تسريب بيانات KillSec وخوادمها","de":"Beschlagnahmung der Leak-Seite und Server von KillSec","en":"Seizure of KillSec leak site and servers","es":"Incautación del sitio de filtraciones y servidores de KillSec","fr":"Saisie du site de divulgation et des serveurs de KillSec","pt":"Apreensão do site de vazamentos e dos servidores da KillSec","tr":"KillSec sızıntı sitesi ve sunucularına el konulması"},"status":"occurred"}],"methodology":{"ar":"يلخص تاريخ الحدث ووصفه الإجراء الوارد في المصدر؛ ولم تُجرَ قياسات أو توقعات إضافية.","de":"Datum und Beschreibung fassen die von der Quelle gemeldete Maßnahme zusammen; es werden keine zusätzlichen Messungen oder Prognosen vorgenommen.","en":"The event date and description summarise the action reported by the source; no additional measurement or forecast is made.","es":"La fecha y la descripción resumen la actuación comunicada por la fuente; no se añade ninguna medición ni previsión.","fr":"La date et la description résument l’action rapportée par la source ; aucune mesure ni prévision supplémentaire n’est ajoutée.","pt":"A data e a descrição resumem a ação informada pela fonte; nenhuma medição ou previsão adicional é feita.","tr":"Etkinlik tarihi ve açıklama kaynakta bildirilen eylemi özetler; ek ölçüm veya tahmin yapılmamıştır."},"sourceUrls":["https://www.europol.europa.eu/media-press/newsroom/news/teenager-suspected-of-leading-killsec-ransomware-group-law-enforcement-seizes-servers-and-leak-site"],"title":{"ar":"تطور أمني","de":"Sicherheitsentwicklung","en":"Security development","es":"Hecho de seguridad","fr":"Événement de sécurité","pt":"Desenvolvimento de segurança","tr":"Güvenlik gelişmesi"},"type":"events","updatedAt":"2026-10-07T00:55:43+03:00"},{"description":{"ar":"القيمة الكمية الرئيسية الواردة في المصدر.","de":"Wichtige quantitative Angabe laut Quelle.","en":"Key quantitative figure stated by the source.","es":"Dato cuantitativo principal comunicado por la fuente.","fr":"Principal chiffre quantitatif indiqué par la source.","pt":"Principal dado quantitativo informado pela fonte.","tr":"Kaynağın belirttiği temel nicel değer."},"id":"security-figures","items":[{"basis":"observed","label":{"ar":"البيانات المؤمنة في موقع التسريب","de":"Auf der Leak-Seite gesicherte Daten","en":"Data secured on leak site","es":"Datos protegidos en el sitio de filtraciones","fr":"Données sécurisées sur le site de divulgation","pt":"Dados protegidos no site de vazamentos","tr":"Sızıntı sitesinde güvenceye alınan veri"},"measure":{"aggregation":"stock","frequency":"irregular","geography":"world","id":"europol-killsec-leak-site-data-secured","periodRole":"reference-period","unitCode":"terabyte"},"period":"2026-09-30","unit":"terabytes","value":110,"valueQualifier":"lower-bound"}],"methodology":{"ar":"نُقلت القيمة كما وردت في المصدر؛ ويبين الوصف إن كانت تقريبية أو حداً أدنى أو أعلى.","de":"Der Wert wird wie von der Quelle angegeben wiedergegeben; ein Zusatz kennzeichnet ungefähre oder begrenzte Werte.","en":"Value is reproduced as stated by the source; a qualifier marks an approximate or bounded figure.","es":"El valor se reproduce como lo comunica la fuente; el calificador indica si es aproximado o un límite.","fr":"La valeur est reprise telle qu’indiquée par la source ; un qualificatif signale une approximation ou une borne.","pt":"O valor é reproduzido conforme informado pela fonte; uma qualificação indica valores aproximados ou limitados.","tr":"Değer kaynakta bildirildiği biçimde aktarılmıştır; niteleyici varsa yaklaşık veya sınır değerini gösterir."},"sourceUrls":["https://www.europol.europa.eu/media-press/newsroom/news/teenager-suspected-of-leading-killsec-ransomware-group-law-enforcement-seizes-servers-and-leak-site"],"title":{"ar":"مقياس أورده المصدر","de":"Von der Quelle gemeldete Kennzahl","en":"Measure reported by the source","es":"Medida comunicada por la fuente","fr":"Mesure rapportée par la source","pt":"Medida informada pela fonte","tr":"Kaynağın bildirdiği ölçü"},"type":"metrics","updatedAt":"2026-10-07T00:55:43+03:00"}],"version":1},"data_downloads":[{"formats":{"csv":"https://newsverum.com/api/v1/articles/europol-killsec-ransomware-seizure-october-2026/data/security-event?lang=en&format=csv","json":"https://newsverum.com/api/v1/articles/europol-killsec-ransomware-seizure-october-2026/data/security-event?lang=en&format=json"},"id":"security-event"},{"formats":{"csv":"https://newsverum.com/api/v1/articles/europol-killsec-ransomware-seizure-october-2026/data/security-figures?lang=en&format=csv","json":"https://newsverum.com/api/v1/articles/europol-killsec-ransomware-seizure-october-2026/data/security-figures?lang=en&format=json"},"id":"security-figures"}],"data_types":["events","metrics"],"editorial_illustration":null,"event_id":"event-b263bed7-6d60-53ca-b92f-1b97c9051dcd","event_period":"2026-09-30","event_period_basis":"event-or-reference-period","id":"europol-killsec-ransomware-seizure-october-2026","image":null,"importance":0.6,"language":"en","modified_at":"2026-10-07T05:57:34+03:00","publication_basis":"publication-record","published_at":"2026-10-06T08:59:00+00:00","reading_minutes":1,"region":"world","section_illustration":null,"slug":"europol-killsec-ransomware-seizure-october-2026","sources":[{"checkedAt":"2026-10-06","name":"Europol","publishedAt":"2026-10-01","url":"https://www.europol.europa.eu/media-press/newsroom/news/teenager-suspected-of-leading-killsec-ransomware-group-law-enforcement-seizes-servers-and-leak-site"}],"summary":"Europol said investigators seized the leak site, provisionally arrested three suspects and secured at least 110 terabytes of data in a case linking KillSec to around 1,000 attacks.","text":"Europol said investigators seized the leak site, provisionally arrested three suspects and secured at least 110 terabytes of data in a case linking KillSec to around 1,000 attacks.\n\nEuropol said on 1 October 2026 that authorities took control of the KillSec group’s leak site on 30 September in Operation KillSwitch, an investigation led by Germany. The site had been used to threaten victims with publication of stolen files; at least 110 terabytes of data were secured against unauthorised access.\n\nThree people were provisionally arrested and eight properties searched in Greece, Romania, Spain and the United Kingdom. Investigators are examining around 1,000 suspected attacks and have so far identified about 500 as successful; Europol said that figure could change as seized evidence is reviewed.\n\nGerman and Portuguese editions and translations of the data and correction explanations have been added to this article.\n\nData classification added: each figure now carries a measure identifier with its unit, geography, frequency and type. No figure, unit or date changed.","title":"Europol announces operation against KillSec ransomware infrastructure","topics":[],"translations":[{"api_url":"https://newsverum.com/api/v1/articles/europol-killsec-ransomware-seizure-october-2026?lang=tr","language":"tr","url":"https://newsverum.com/tr/news/europol-killsec-ransomware-seizure-october-2026"},{"api_url":"https://newsverum.com/api/v1/articles/europol-killsec-ransomware-seizure-october-2026?lang=en","language":"en","url":"https://newsverum.com/en/news/europol-killsec-ransomware-seizure-october-2026"},{"api_url":"https://newsverum.com/api/v1/articles/europol-killsec-ransomware-seizure-october-2026?lang=ar","language":"ar","url":"https://newsverum.com/ar/news/europol-killsec-ransomware-seizure-october-2026"},{"api_url":"https://newsverum.com/api/v1/articles/europol-killsec-ransomware-seizure-october-2026?lang=fr","language":"fr","url":"https://newsverum.com/fr/news/europol-killsec-ransomware-seizure-october-2026"},{"api_url":"https://newsverum.com/api/v1/articles/europol-killsec-ransomware-seizure-october-2026?lang=es","language":"es","url":"https://newsverum.com/es/news/europol-killsec-ransomware-seizure-october-2026"},{"api_url":"https://newsverum.com/api/v1/articles/europol-killsec-ransomware-seizure-october-2026?lang=de","language":"de","url":"https://newsverum.com/de/news/europol-killsec-ransomware-seizure-october-2026"},{"api_url":"https://newsverum.com/api/v1/articles/europol-killsec-ransomware-seizure-october-2026?lang=pt","language":"pt","url":"https://newsverum.com/pt/news/europol-killsec-ransomware-seizure-october-2026"}],"url":"https://newsverum.com/en/news/europol-killsec-ransomware-seizure-october-2026"},"version":"1"}