Skip to content
Ransomware

Suppcenter.global / suppcentersa.com listed by m3rx ransomware group

The m3rx ransomware group has listed suppcenter.global / suppcentersa.com on their leak site.

By
Siberpol Intelligence Unit
Published
3 min read
3 min read
  • Ransomware group: m3rx
  • Country: Argentina
  • Sector: Professional Services
  • Announcement date: June 11, 2026

m3rx ransomware group claims data breach at suppcenter.global / suppcentersa.com

The threat actor known as m3rx has officially listed suppcenter.global / suppcentersa.com on its ransomware leak site. This announcement, made on June 11, 2026, constitutes a claim of a data breach against the organization. Such listings are a common tactic used by ransomware groups to pressure victims into paying ransoms, often employing a method known as double extortion. In these scenarios, attackers not only encrypt an organization's systems but also steal sensitive information, threatening to leak it publicly if their demands are not met.

The claim made by the m3rx group suggests that they have successfully obtained data belonging to the institution. By publishing the organization's name on a public leak site, the group aims to cause reputational harm and operational disruption. This type of public exposure is designed to increase the pressure on the targeted entity by notifying its clients, partners, and the broader public about the alleged compromise.

Details regarding the alleged data theft

While the m3rx group has publicly announced that they have obtained data from suppcenter.global / suppcentersa.com, the specific details provided in the leak site listing remain highly limited. At this time, the group has not provided any information regarding the total volume of the data allegedly stolen or the specific number of files involved in the breach.

Furthermore, the listing does not contain any details or sample files regarding the nature of the data that was allegedly taken. The group has not specified whether the stolen information includes personal identifiers, financial records, or proprietary corporate intelligence. The lack of specifics is a common occurrence in the early stages of a leak site announcement, where the primary goal is the initial notification of the breach rather than the detailed disclosure of the stolen assets.

About suppcenter.global / suppcentersa.com

SuppCenter Global is a managed security service provider (MSSP) that operates within the Latin America region. The organization specializes in Xcitium (formerly COMODO) solutions, offering a range of cybersecurity services to its clientele. Their expertise covers cybersecurity architecture, threat prevention, and the implementation of Zero Trust technology support.

The company serves a diverse client base, including large enterprises, retail companies, and various entities within the public sector. Because they function as a managed security service provider, they play a critical role in the security infrastructure of the organizations they support, acting as a specialized layer of defense for their customers' digital environments.

Analysis and potential implications of the incident

This incident suggests that sensitive data within suppcenter.global / suppcentersa.com may be at risk of exposure. Because the institution operates as an MSSP, the breach may potentially pose secondary risks to supply chain security. When a service provider that manages security for other companies is compromised, it can create a ripple effect, potentially jeopardizing the trust and security of the entire ecosystem of clients they serve.

As the institution is based in Argentina, any potential data breaches may need to be evaluated within the scope of local data protection regulations. Organizations operating in such environments must ensure they are compliant with regional mandates regarding breach notification and data handling. It is also worth noting that public information regarding the m3rx group remains limited, making it difficult to ascertain their specific motivations or long-term patterns.

Given the nature of the threat, there is a possibility that targeted phishing or identity theft attempts against the institution's clients may be observed. In the wake of such claims, organizations typically focus on strengthening their defensive postures. Common defensive steps for organizations in the professional services and security sectors include implementing strict access controls, enhancing monitoring capabilities, and conducting thorough forensic investigations to determine the scope of any potential intrusion. Maintaining a robust incident response plan is essential for mitigating the impact of such claims and protecting the integrity of the supply chain.

In the Intelligence 360 plan

Executive Protection

Monitor whether your executives’ email addresses and usernames appear in leaks.

Related stories