RANSOMWARE VICTIM

Magnolia (Israel)

magnolia-jewellery.com
bavacai📍 IL (IL)📅 May 5, 2026
8
same group

Attack Intelligence

Magnolia (Israel) was compromised in a ransomware attack attributed to bavacai in May 2026. The organization, operating in an undisclosed sector in IL, was added to the group's data leak site as part of an extortion campaign.

bavacai operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

Israeli jewelry company. Silver & accessories, participates in Vicenza jewelry fair (2025/2026). Sells via buyme.co.il gift cards. ~38k files, invoices in Hebrew (SI/IN/OV prefix).

Other Victims — bavacai (8)

Quick Facts

CountryIL (IL)
Attack DateMay 5, 2026
Domainmagnolia-jewellery.com
Intel Sourceransomlook

Threat Group

bavacai
Motivation: financial
View group profile →

External Links

Data sourced from Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Victim listing does not imply confirmed breach — intelligence based on group claims.