The pysa ransomware group listed Ribasalvarez on its data leak site on 2021-09-09.