A claimed attack tied to createinfor.pt remains unverified, and the case shows how quickly an extortion label can turn into an operational and reputational test.
A ransomware-style victim entry names CreateInfor in Portugal, but the blank stolen-data field keeps the core question open: claim, intrusion, or both?