Ransomware & Leaks Attacks Map (last 7 days)
Ransomware Attacks Today
All Attacks in Last 30 Days
Leak Coverage — All Sources
- Leaked293350%
- Pending289149%
- Deleted831%
- Other indexed sources
- Data breaches58447
- Stealer logs14395
- Leads198
All Data
Data registered since November 2013.
| Classification | Target Identity | Source / Actor | Discovered | Location | Business Category | Intel Link | Leak status |
|---|---|---|---|---|---|---|---|
| Ransomware | M*** P**** M*** View Details _ | netrunner | 28/09/2026 | MY | — | pending | |
|
The entity w**.m********.c**.m* is cataloged as a ransomware victim operating within the MY sector context. Its identifier suggests a domain or asset structure relevant to network infrastructure monitoring, though specific operational details remain masked per threat-intelligence indexing protocols. The entity is associated with the threat actor netrunner, indicating potential exposure to intrusion-focused ransomware campaigns targeting regional infrastructure. This listing type documents the entity's status within the threat-intelligence index without disclosing confirmed breach specifics. It was listed as a ransomware victim associated with netrunner. |
|||||||
| Ransomware | MinMor Industries View Details _ | cry0 | 28/09/2026 | — | pending | ||
|
Coming soon... |
|||||||
| Ransomware | Arnold Center View Details _ | qilin | 28/09/2026 | US | NGOs / Associations | pending | |
|
N/A |
|||||||
| Ransomware | bakemyday.se View Details _ | incransom | 28/09/2026 | SE | Retail / E-commerce | pending | |
|
Bake My Day vill erbjuda fler människor hantverksmässiga, äkta och generösa konditori- och bageriupplevelser! Våra rykande färska bröd och bakverk är bakade från grunden för hand på utvalda råvaror. Employees: 10 Revenue: $5 Million Phone Number: 010 199 71 71 |
|||||||
| Ransomware | safescaffolding.net View Details _ | threeam | 28/09/2026 | GB | Construction / Real Estate | pending | |
|
Safe Scaffolding is a privately held contractor operating primarily in the commercial and residential construction industry. The company provides physical scaffolding infrastructure, materials, and equipment setup to support building and renovatio |
|||||||
| Ransomware | coosalud.com View Details _ | threeam | 28/09/2026 | CO | Healthcare / Pharma | pending | |
|
Coosalud EPS (Coosalud Entidad Promotora de Salud S.A.) is one of the major health promotion entities (EPS) in Colombia, primarily managing subsidized and contributory healthcare regimes with multi-million-peso operating volumes. Alongside its sub |
|||||||
| Ransomware | pistonespersan.com.ar View Details _ | threeam | 28/09/2026 | AR | Manufacturing / Engineering | pending | |
|
Pistones Persan specializes in high-performance pistons and accessories, offering over 600 products from 53 brands. The company is certified under ISO standards and INMETRO, ensuring original quality. With a presence in more than 31 countries acro |
|||||||
| Ransomware | midwestbit.com View Details _ | threeam | 28/09/2026 | US | IT | pending | |
|
Midwest Business Technology specializes in providing customized IT solutions and services to businesses and government agencies across the U.S. Their offerings include managed IT services, software development, cybersecurity solutions, and various |
|||||||
| Ransomware | apexus.com View Details _ | threeam | 28/09/2026 | US | Services | pending | |
|
Apexus, founded in 2007, is a business services company that manages the 340B Prime Vendor Program supporting the 340B Drug Pricing Program. The company negotiates pricing discounts with pharmaceutical manufacturers, provides educational resources |
|||||||
| Ransomware | bhn-expertise.com View Details _ | threeam | 28/09/2026 | DE | Services | pending | |
|
BHN Expertise is an accounting firm that helps businesses manage their financial records and grow smartly. With offices across Normandy in cities like Bolbec, Caen, Rouen, and Yvetot, they provide local support and personalized accounting services |
|||||||
| Ransomware | stjames.wa.edu.au View Details _ | threeam | 28/09/2026 | AU | Education | pending | |
|
St James’ Anglican School provides a holistic education for students from Kindergarten to Year 12, focusing on unlocking individual potential and fostering excellence across various disciplines. The school offers a diverse curriculum that includes |
|||||||
| Ransomware | Goodrich Logistics View Details _ | Doommageddon | 28/09/2026 | Transportation / Travel / Logistics | pending | ||
|
Status: upcoming | Deadline: 2026-10-05T00:00:00Z |
|||||||
| Ransomware | Chem Process Systems Pvt. Ltd. View Details _ | Doommageddon | 28/09/2026 | IN | Manufacturing / Engineering | pending | |
|
Status: upcoming | Deadline: 2026-10-05T00:00:00Z |
|||||||
| Ransomware | Starr Whitehouse Landscape Architects View Details _ | play | 28/09/2026 | US | Services | pending | |
|
United States |
|||||||
| Ransomware | Ever Ready First Aid View Details _ | play | 28/09/2026 | US | Healthcare / Pharma | pending | |
|
United States |
|||||||
| Ransomware | PKSF — Palli Karma-Sahayak Foundation View Details _ | medusalocker | 28/09/2026 | BD | Other | pending | |
|
Organization with 13 emails extracted. Domain: 08trl.exit |
|||||||
| Ransomware | Amazon Informatica View Details _ | emperador | 28/09/2026 | BR | IT | pending | |
|
Amazon Informática LTDA is a prominent Information Technology (IT) solutions integrator and managed services provider founded in Brazil in 1995. Amazon Informática's primary market focus is the public sector and government agencies, serving various state and federal entities in Brazil.To support these operations, they maintain strategic corporate offices in Brasília/DF (to service the federal government cluster) and Belém/PA. Furthermore, the company has expanded its footprint internationally with operational branches in Latin America and Europe (Portugal), where they deliver customized government tech solutions and enterprise infrastructure support to large private corporations in those regions. Full commitment of the network having full access to infrastructure, thus ensuring full access to the databases containing confidential and financial information! Virtual Infrastructure and Database Cluster with active administrative master credentials exposed in text clear inside get_bk.bat. Hosts compromised. The targets contain production and integration databases with sensitive PII schemas, employee registries, banking credentials, CPF, and RG data. TOX ID: 3D6EF83C3C4517FE42B212A934D4B08579A5F20522828C4E4818EA117F53063377C4D769640B SESSION: 052a5fe97f7b1822c2225ba884b5f719c07ec99da7d838421a20958938f54cb539 [Sector: Government, Technology] |
|||||||
| Ransomware | New World Diagnostics View Details _ | qilin | 28/09/2026 | PH | IT | pending | |
|
N/A |
|||||||
| Ransomware | Netech (Neeser Technik AG) View Details _ | payload | 28/09/2026 | CH | IT | pending | |
|
Netech (Neeser Technik AG) is a Swiss engineering and industrial services company based in Seuzach. It specializes in comprehensive maintenance, retrofitting, and overhauls of industrial machinery and manufacturing systems. The firm provides end-to-end technical support for production facilities, covering mechanical engineering, pneumatics, and electrical control systems. |
|||||||
| Ransomware | Juntadeandalucia View Details _ | medusalocker | 28/09/2026 | ES | Public Sector | pending | |
|
Organization with 198 emails extracted. Domain: juntadeandalucia.es |
|||||||
| Ransomware | Premiumfruits View Details _ | medusalocker | 28/09/2026 | ES | Agriculture / Food | pending | |
|
Organization with 3292 emails extracted. Domain: premiumfruits.eu |
|||||||
| Ransomware | The Center for Kidney Care View Details _ | interlock | 28/09/2026 | US | IT | pending | |
|
The Kidney Center is a leading provider of nephrology services in South Jersey, specializing in the diagnosis and treatment of kidney disease and hypertension. Due to their negligence in their own safety and the safety of their clients, confidential medical information, including medical records, lab/dialysis/transplant data, billing/insurance data, and patient demographics, was compromised and exposed. Their cybersecurity breaches violate the HIPAA privacy and security regulations. |
|||||||
| Ransomware | S...d View Details _ | SilentRansomGroup | 28/09/2026 | Other | pending | ||
|
Redacted entry - full company name pending disclosure (FULL DATA TIMER active). |
|||||||
| Ransomware | Geebee Garments View Details _ | akira | 28/09/2026 | Manufacturing / Engineering | pending | ||
|
Geebee Garments is a renowned apparel manufacturer with over 130 years of experience, operating facilities in the UAE and Bangladesh. The company specializes in a wide range of products, inc luding casual wear, formal wear, and workwear, catering to leading brands globally. We will upload 100gb of corporate data soon. Employee information (passports, SSN), financials, client information, NDAs and so on. |
|||||||
| Ransomware | Knit View Details _ | akira | 28/09/2026 | Finance / Legal / Insurance | pending | ||
|
One of our essential beliefs is that architecture changes lives. This belief guides our path ev ery day. We seek clients and relationships who are equally interested in improving their city, their business, their school, their neighborhood or the place they call home. We will upload 175gb of corporate data soon. Employee information (passports, DLs, credit cards ), projects, financials, client information, NDAs and so on. |
|||||||
| Ransomware | SKLG View Details _ | qilin | 28/09/2026 | JP | Manufacturing / Engineering | pending | |
|
N/A |
|||||||
| Ransomware | ATCO Ltd View Details _ | medusalocker | 28/09/2026 | CA | IT | pending | |
|
Organization with 80 emails extracted. Domain: mail.gmail.com |
|||||||
| Ransomware | Kellys Home Center View Details _ | pear | 28/09/2026 | US | Healthcare / Pharma | pending | |
|
The company specializes in selling high-quality home appliances, mattresses, and furniture |
|||||||
| Ransomware | Nissho Electric Manufacturing Co., Ltd. View Details _ | qilin | 28/09/2026 | JP | Manufacturing / Engineering | pending | |
|
N/A |
|||||||
| Ransomware | manno.ch View Details _ | safepay | 28/09/2026 | CH | IT | pending | |
|
The official website, manno.ch, provides residents, businesses and visitors with information about municipal administration, public services, local regulations, infrastructure, cultural … |
|||||||
| Ransomware | auromex.com View Details _ | safepay | 28/09/2026 | MX | Manufacturing / Engineering | pending | |
|
The company is headquartered in Samut Prakan Province and has more than five decades of experience in the surface-finishing industry. … |
|||||||
| Ransomware | cromados.com View Details _ | safepay | 28/09/2026 | ES | Manufacturing / Engineering | pending | |
|
The company's registered business activities include thermal treatment of metals, organic and electrolytic coatings, and the manufacture and commercialization of … |
|||||||
| Ransomware | lfgholding.com View Details _ | safepay | 28/09/2026 | CH | Other | pending | |
|
The company operates as an independent, partner-owned wealth-management group and manages a portfolio of specialized financial-services businesses. Its operating companies … |
|||||||
| Ransomware | fedelmundo.com.ph View Details _ | safepay | 28/09/2026 | PH | Communication / Marketing | pending | |
|
The institution traces its origins to 1957, when Filipino pediatrician and scientist Dr. Fe del Mundo established Children's Memorial Hospital … |
|||||||
| Ransomware | bio-strath.com View Details _ | safepay | 28/09/2026 | CH | Healthcare / Pharma | pending | |
|
The company was established in 1961 and operates the Bio-Strath brand, which is particularly associated with liquid and tablet nutritional … |
|||||||
| Ransomware | sumperk.cz View Details _ | safepay | 28/09/2026 | CZ | Retail / E-commerce | pending | |
|
The official website, sumperk.cz, serves as the city's principal digital information and service portal for residents, businesses, visitors and other … |
|||||||
| Ransomware | eagroep.com View Details _ | safepay | 28/09/2026 | NL | Agriculture / Food | pending | |
|
The group is headquartered in Deventer, Overijssel, and brings together several specialized business units operating in areas such as career … |
|||||||
| Ransomware | Holiday Inn Vilnius View Details _ | safepay | 28/09/2026 | LT | Hospitality / Food & Beverage / Tourism | pending | |
|
The property operates under the international Holiday Inn brand of IHG Hotels & Resorts. The hotel provides 134 guest rooms, … |
|||||||
| Ransomware | Dediserve Ltd View Details _ | N0n | 28/09/2026 | GB | IT | pending | |
|
Cloud infrastructure provider (iomart group) · Dublin, Ireland / FRA1 Frankfurt DC | The complete customer register of the FRA1 cloud — 167 tenant accounts with infrastructure details; Disk images of tenant servers: a regulated forex broker's portal (payment gateway configuration, trading-account records), a payment services provider's systems including its internal password vault, and a production real-estate platform; The provider's internal operations mailbox and monitoring configuration | All 46 FRA1 servers are paused and intact - restorable automatically within the hour of settlement. | [ACTIVE: deadline 2026-10-01 05:16 UTC] |
|||||||
| Ransomware | SiteProRentals View Details _ | emperador | 28/09/2026 | Services | pending | ||
|
SitePro Rentals is a Texas-based construction and industrial equipment rental company founded in 2021. A subsidiary of Sammons Industrial, it rents aerial lifts, forklifts, and earthmoving equipment, serving contractors across the U.S. from over 30 locations. We have every employee's Social Security number. Home addresses. Birth dates. Salaries. We know who's sick, who's on leave, who got fired and why. We also have 338,000 pay records.... Shortly, you will receive an email containing the instructions on how to proceed with this situation. The ransom is relatively small, just $150k USD in XMR... If you do not receive the email, contact us at: Email: [email protected] Session: 05651c7323273b723588d47455471ee9e27feb5187a30f2933554a705aacb38358 [Sector: Construction] |
|||||||
| Ransomware | Electrolux 2... View Details _ | emperador | 28/09/2026 | SE | Manufacturing / Engineering | pending | |
|
Hi Electrolux, im getting kind of inpatient, therefore i might just leak something. If i hear nothing from you in the next 3 days, more data WILL be leaked. Thanks. Emails: [email protected] Session: 05651c7323273b723588d47455471ee9e27feb5187a30f2933554a705aacb38358 [Sector: Retail, Manufacturing, Transportation] |
|||||||
| Ransomware | SMCare View Details _ | Panzer | 28/09/2026 | null | pending | ||
|
Scenario Management is a specialist support provider based in Lancashire, serving areas including Blackpool, Wyre, Fylde, and Preston. The company offers 24-hour supported living and residential services, as well as short stay respite care for individuals with learning disabilities, complex needs, autism, and associated mental health issues. Their services are designed for those who may challenge services or have forensic backgrounds. Scenario Management aims to provide comprehensive support tailored to the needs of their clients. |
|||||||
| Ransomware | AHEAD View Details _ | incransom | 28/09/2026 | US | Services | pending | |
|
AHEAD is a Chicago-based IT consulting and engineering firm specializing in the digital transformation of large enterprises. It offers strategic consulting and managed services across cloud, cybersecurity, data and AI, infrastructure, and operations. The company positions itself as an "engineering-led" partner that takes responsibility for outcomes at every stage — from design to ongoing operations. Following its acquisition of CDI, AHEAD's revenue exceeded $3.7 billion, with a workforce of more than 2,500 employees across 40 locations worldwide. |
|||||||
| Ransomware | nsbsd.org View Details _ | incransom | 28/09/2026 | US | Other | pending | |
|
North Slope Borough School District is a public school district serving the remote communities of Alaska's North Slope, headquartered in Utqiaġvik. It operates 11 schools across the borough, enrolling approximately 2,044 students from Pre-K through 12th grade. The district's mission is rooted in Iñupiaq culture, aiming to develop students who are "empowered, culturally rooted, bilingual, healthy, critical, creative, life-long learners". For the 2025-2026 fiscal year, the district received $38,766,371 in local funding from the North Slope Borough, with per-pupil spending significantly above the national average at approximately $40,367 |
|||||||
| Stealers | CenturionTXT.rar View Details _ | LogsPlanet | 28/09/2026 | — | leaked | ||
|
📭 BUY PRIVATE — ADMIN: @BuzzLogsPlanet ➖➖➖➖➖➖➖➖➖➖➖➖➖➖➖ 🔑Pass: @CenturionTXT ➖➖➖➖➖➖➖➖➖➖➖➖➖➖➖ 🤑 Main Channel || Reserve Channel 🤑 |
|||||||
| Stealers | LOLZTEAM CLOUD [TG @LolzTeamCloud].rar View Details _ | LogsPlanet | 28/09/2026 | — | leaked | ||
|
📭 BUY PRIVATE — ADMIN: @BuzzLogsPlanet ➖➖➖➖➖➖➖➖➖➖➖➖➖➖➖ 🔑Pass: @LolzTeamCloud ➖➖➖➖➖➖➖➖➖➖➖➖➖➖➖ 🤑 Main Channel || Reserve Channel 🤑 |
|||||||
| Breaches | Omaze_b1nd.net.rar View Details _ | NEW MIX | 28/09/2026 | — | leaked | ||
| Breaches | K7Maths_b1nd.net.rar View Details _ | NEW MIX | 28/09/2026 | — | leaked | ||
| Breaches | [614K] Morele.net.rar View Details _ | NEW MIX | 28/09/2026 | — | leaked | ||
|
Morele.net [Email:Pass] DEHASHED Compromised accounts: 614.482 |
|||||||
| Ransomware | Asesoría FAR View Details _ | Panzer | 27/09/2026 | — | pending | ||
|
Asesoría FAR is a Barcelona-based firm providing property management, accounting, tax, and business advisory services. |
|||||||
| Ransomware | Ressources Si View Details _ | Panzer | 27/09/2026 | FR | — | pending | |
|
Ressources Si is a company that operates in the Movie Theaters industry. It employs 10to19 people and has 1Mto5M of revenue. |
|||||||
| Ransomware | First Secure Bank Group View Details _ | Storm | 27/09/2026 | US | Finance / Legal / Insurance | pending | |
|
First Secure Bank Group is a U.S.-based financial services organization focused on providing community-oriented banking solutions to individuals, families, and businesses. The group operates through affiliated banking institutions, including First Secure Bank and The State Bank Group. Its services include personal and business checking and savings accounts, commercial and consumer lending, mortgages, online banking, treasury services, and other financial products. First Secure Bank Group emphasizes personalized customer service, long-term relationships, and supporting the financial growth of the communities it serves. Through its network of banking institutions, the group provides accessible financial solutions while maintaining a strong focus on local businesses, community development, and responsible banking practices. The company headquarters is located in 2175 Oneida St, Joliet, IL 60435, USA. 51-200 Employees |
|||||||
| Ransomware | XICO View Details _ | qilin | 27/09/2026 | MX | Retail / E-commerce | pending | |
|
N/A |
|||||||
| Ransomware | Island View Details _ | qilin | 27/09/2026 | CA | Services | pending | |
|
N/A |
|||||||
| Ransomware | Revenga Smart Solutions View Details _ | qilin | 27/09/2026 | ES | Manufacturing / Engineering | pending | |
|
N/A |
|||||||
| Ransomware | Willatt & Flickinger View Details _ | qilin | 27/09/2026 | US | Services | pending | |
|
N/A |
|||||||
| Ransomware | Pantaneiro Capas View Details _ | arcusmedia | 27/09/2026 | BR | Manufacturing / Engineering | pending | |
|
www.pantaneirocapas.com.br—Pantaneiro Capas has been in the waterproof products market for Deadline: 2026-10-04 11:32:00.000000 |
|||||||
| Ransomware | Car Service Abschlepp View Details _ | emperador | 27/09/2026 | DE | Transportation / Travel / Logistics | pending | |
|
CSA Car Service Abschlepp- & Bergungsdienst GmbH Genslerstraße 72, 13055 Berlin Archived personal and corporate data of employees and customers Here are the most important documents [Sector: Transportation] |
|||||||
| Stealers | Obsidian Project.rar View Details _ | LogsPlanet | 27/09/2026 | — | leaked | ||
|
📭 BUY PRIVATE — ADMIN: @BuzzLogsPlanet ➖➖➖➖➖➖➖➖➖➖➖➖➖➖➖ 🔑Pass: [Telegram link: professional/enterprise only] ➖➖➖➖➖➖➖➖➖➖➖➖➖➖➖ 🤑 Main Channel || Reserve Channel 🤑 |
|||||||
| Stealers | Acolyte Bases.rar View Details _ | LogsPlanet | 27/09/2026 | — | leaked | ||
|
📭 BUY PRIVATE — ADMIN: @BuzzLogsPlanet ➖➖➖➖➖➖➖➖➖➖➖➖➖➖➖ 🔑Pass: @AcolyteBases ➖➖➖➖➖➖➖➖➖➖➖➖➖➖➖ 🤑 Main Channel || Reserve Channel 🤑 |
|||||||
| Ransomware | ARCA UNLIMITED Architects View Details _ | BlackLocks | 26/09/2026 | ZA | Manufacturing / Engineering | pending | |
|
Views: 49 |
|||||||
| Ransomware | cipher.systems View Details _ | m3rx | 26/09/2026 | US | IT | leaked | |
|
+1 703-672-0051 , At Cipher Systems, we specialize in delivering enterprise-grade IT solutions designed to help businesses evolve, secure, and scale in a rapidly changing digital world. From future-proof cloud infrastructures to next-gen cybersecurity and AI-powered intelligence, our solutions are engineered for performance and built for growth. With deep expertise in software engineering, IT consulting, and data science, we turn complex challenges into streamlined outcomes—ensuring that your systems are secure, your data is insightful, and your technology is always a step ahead. Stolen: -- |
|||||||
| Ransomware | International Chemical Co. View Details _ | Barracuda | 26/09/2026 | — | pending | ||
|
International Chemical Company (ICC) manufactures specialty metalworking fluids, industrial cleaners, rust preventatives, and custom chemical formulations. We have extracted the most important files from their main file server and possess data on their sales, formulas, patents, manufacturing, contracts, and partners. For example, we possess the full formulation and manufacturing instructions for I.C.C.’s patented Biodraulic hydraulic oil. And even more than that. It is available for sale to competitors. Victim website: https://e-icc.com | Severity: HIGH | Size: 90 GB | Status: selling | $50,000 |
|||||||
| Ransomware | M****n View Details _ | payoutsking | 26/09/2026 | US | IT | pending | |
| Ransomware | Apollo 21 – Quality Truck, Bus & Trailer Spare Parts South Africa View Details _ | BlackLocks | 26/09/2026 | ZA | IT | pending | |
|
Views: 985 |
|||||||
| Ransomware | Applied Composites View Details _ | Storm | 26/09/2026 | US | Manufacturing / Engineering | pending | |
|
Applied Composites is a leading U.S. manufacturer specializing in advanced composite components, assemblies, engineering, and tooling for the aerospace, defense, and space industries. The company provides highly engineered composite structures for aircraft, engines, missiles, unmanned aerial vehicles (UAVs), satellites, and launch vehicles. Its vertically integrated capabilities include design, tooling, manufacturing, machining, assembly, testing, and engineering support. Applied Composites operates multiple specialized facilities equipped with autoclaves, CNC machining centers, clean rooms, and advanced testing equipment. The company serves major aerospace and defense organizations and focuses on delivering lightweight, durable, high-performance composite solutions for demanding commercial, military, and space applications. The company headquarters is located in 25671 Commercentre Drive, Lake Forest, CA 92630, United States. 501-1000 Employees |
|||||||
| Ransomware | Guardrisk View Details _ | thegentlemen | 26/09/2026 | ZA | Services | pending | |
|
guardrisk.co.za rocketreach.co/guardrisk-insurance-company-ltd-profile_b5a52494f9c62c8e Guardrisk is a South African specialist insurance group, founded in 1993 and widely recognized as the pioneer and market leader of cell captive insurance in Africa — a model that allows companies to run their own "branded" insurance business under Guardrisk's licensed infrastructure instead of building a full insurer themselves. Headquartered in Sandton, Johannesburg, the group operates licensed insurers for life, non-life, and microinsurance, plus international cells in Mauritius and Gibraltar, and employs around 530 people. It has been wholly owned since 2013–14 by Momentum Group (JSE: MTN-listed MTM), which acquired it for R1.6 billion. For the financial year ended 30 June 2025, Guardrisk managed total assets of R68 billion and over 240 active cells, generating net revenue of ~R2 billion and pre-tax trading profit of ~R1 billion |
|||||||
| Ransomware | Metalware Corporation View Details _ | thegentlemen | 26/09/2026 | CA | Manufacturing / Engineering | pending | |
|
metalware.ca zoominfo.com/c/metalware-corp/57640606 Metalware Corporation is a Canadian manufacturer of industrial steel shelving and storage systems, based in Montreal, Quebec, and in business since the early 1950s. The company is best known as the inventor of boltless ("No-Bolt") shelving, patented in 1954 by founders Irving and Ben Levitt — a design that became the industry standard for order-picking warehouses. Still family-owned and led by second/third-generation owners (President Mark Levitt), Metalware produces its flagship Interlok No-Bolt line, E-Series widespan shelving, multi-tier/high-bay systems, shelf-supported mezzanines, and modular drawer solutions at its Montreal plant, selling through a network of authorized distributors across North America. Its reference clients include the Government of Canada (Canada Revenue Agency, Department of National Defence), Porsche, and Walmart |
|||||||
| Ransomware | Magna Legal Services View Details _ | Storm | 26/09/2026 | US | Retail / E-commerce | pending | |
|
Magna Legal Services is a nationwide provider of comprehensive litigation support and legal services, serving law firms, corporations, insurance companies, and government organizations. Founded in 2007 and headquartered in Philadelphia, Pennsylvania, the company supports clients throughout the entire litigation process. Its services include court reporting, deposition services, medical record retrieval, jury consulting, trial presentation, legal graphics, video production, investigations, service of process, interpreting and translation, and virtual proceedings. Magna combines legal expertise with technology to help attorneys manage complex cases efficiently. The company has expanded its national presence through strategic acquisitions and currently operates across numerous locations throughout the United States. The company headquarters is located in 1635 Market Street, 8th Floor, Philadelphia, PA 19103, United States. 501-1000 Employees |
|||||||
| Ransomware | StMicroelectronics View Details _ | thegentlemen | 26/09/2026 | IT | IT | pending | |
|
st.com zoominfo.com/c/stmicroelectronics/114508234 Revenue $13.1 Billion STMicroelectronics (ST) is one of the world's largest semiconductor companies and Europe's biggest chipmaker, headquartered in Geneva, Switzerland. Formed in 1987 through the merger of Italian and French state-owned chip companies, it is a fully integrated manufacturer — it designs, produces, and sells its own chips. Its core products are microcontrollers (the flagship STM32 family), sensors, analog and power chips, silicon carbide devices for electric vehicles, and chips for data centers and satellites. The company serves over 200,000 customers worldwide — including Apple, Tesla, Bosch, Samsung, and SpaceX — supplying components for cars, smartphones, industrial equipment, and data centers. It operates 14 manufacturing plants across Europe and Asia, employs about 49,000 people, and invests roughly 17% of its revenue in R&D. |
|||||||
| Ransomware | Hell Helmut GmbH View Details _ | thegentlemen | 26/09/2026 | AT | Retail / E-commerce | pending | |
|
fachhandel-hell.at Hell Helmut GmbH is a small family-owned B2B wholesale company based in Hall in Tirol, Austria, operating for over 20 years and specialized in sanitary and heating supplies. The company positions itself as a system supplier for underfloor heating, serving professional installers across Tyrol, Vorarlberg, and Salzburg. It sources directly from leading manufacturers — primarily IMI Heimeier (thermostatic and balancing valves) and Uponor (underfloor heating and drinking water systems) — guaranteeing original quality. Its key differentiator is in-house prefabrication: ready-made manifold stations and water metering stations built exclusively from IMI and Uponor components. The business is 100% owned and personally managed by its founder Helmut Hell, with a lean team of about 5–6 people. Overall, it is a classic regional specialist wholesaler: small, owner-run, and focused on system-based project supply rather than retail. |
|||||||
| Ransomware | Magnetos y Refacciones View Details _ | thegentlemen | 26/09/2026 | MX | Retail / E-commerce | pending | |
|
magnetos.com.mx zoominfo.com/c/magnetos-y-refacciones-sa-de-cv/1288761434 Magnetos y Refacciones, S.A. de C.V. is a Mexican trading and service company founded in 1977 and headquartered in Guadalajara, Jalisco. Its core business is supplying magnet wire, bearings, insulating varnishes, electric motors, and spare parts for motor repair — wholesale and retail, serving customers across all 32 Mexican states. Its second key business is a nationwide network of authorized service centers performing warranty and post-warranty repair for Groupe SEB brands (Krups, T-Fal, Rowenta, Moulinex) and Taurus in 8–10 Mexican cities. The company employs around 129 people and is part of a small group operated by Corporación Rodaja. It also exports to Central America (mainly El Salvador), with about US$4.2 million in shipments over the last five years. Despite nearly 50 years on the market, it has virtually no digital presence — its website is an empty placeholder. |
|||||||
| Ransomware | ANP Health View Details _ | thegentlemen | 26/09/2026 | BR | Healthcare / Pharma | pending | |
|
anphealthsolutions.com ANP Health Services Inc. is a Florida-based recruitment agency specializing in placing foreign-trained nurses into U.S. hospitals, with a strong focus on Latin America (especially Venezuela). Founded in 2019 by Nelson Hurtado, a Venezuelan immigrant and registered nurse, the company provides an end-to-end service: credential validation, NCLEX exam preparation, English training, direct-hire placement with 150+ partner hospitals, and visa sponsorship (EB-3 Green Card for the nurse and family). It has helped over 2,000 nurses from 28 countries, with candidates typically earning $70–100K per year plus sign-on bonuses. The company is a Certified Ethical Recruiter (CGFNS Alliance) — one of only about 16 accredited firms in the U.S. — and employs roughly 30–50 people across 9 countries. Estimated revenue is $10–50 million annually. |
|||||||
| Ransomware | Progeny View Details _ | thegentlemen | 26/09/2026 | AG | Agriculture / Food | pending | |
|
progenyag.com zoominfo.com/c/progeny-ag/351504348 Erwin-Keith, Inc. (Progeny Ag Products) is a family-owned seed and grain company founded in 1984 in the Arkansas Delta (Wynne, Arkansas, USA), operating under the Progeny brand since 1997. The company develops and markets its own varieties of soybeans, corn, wheat, and rice, selling across 10–11 Southern U.S. states. Its rice brand ProGold is licensed from the University of Arkansas — and ProGold L4 and M3 varieties are now included in the university's official 2026 recommended planting list. Beyond seeds, the company runs grain elevators (including a rail facility), a trucking fleet across 9 states, and grain marketing programs (HTA, basis-only, and average pricing contracts). Estimated revenue is around $26 million with roughly 100+ employees (seasonal workforce included), and the business remains led by the founding Erwin and Keith families. |
|||||||
| Ransomware | Grupo MARSAN View Details _ | thegentlemen | 26/09/2026 | MX | Retail / E-commerce | pending | |
|
grupomarsan.com zoominfo.com/c/grupo-marsan/460771135 Grupo Marsan is a Spanish Tier 2 automotive supplier founded in 1951 in Vigo, Spain, specializing in industrial surface coatings — cataphoresis (e-coating), powder and liquid painting — plus metal stamping, assembly, and JIT logistics, with a capacity of 300,000 parts per day. The company operates plants in Spain (Vigo, Zaragoza), Portugal, and Mexico, and also builds and runs dedicated in-house coating lines inside clients' facilities, supported by its own technology center M-Tech. It works under IATF automotive quality standards within supply chains of major OEMs and Tier 1 suppliers. After a liquidity crisis in 2024, the group was recapitalized with private and Galician public funds (~47.5% held by Xesgalicia and Vigo Activo), and Marcos Oubiña was appointed CEO. FY2024 revenue exceeded €28 million with ~450 employees, and in 2025 the company acquired KATA Aragón, growing to ~500 employees |
|||||||
| Ransomware | Agrocampo View Details _ | thegentlemen | 26/09/2026 | CO | Agriculture / Food | pending | |
|
agrocampo.com.co zoominfo.com/c/agrocampo/433785602 Agrocampo S.A.S. is Colombia's first and only veterinary hypermarket, founded in 1979 by veterinarian Alfonso Villa and headquartered in Bogotá, serving as the country's leading distributor of veterinary drugs and agricultural supplies for over 45 years. The company operates one flagship hypermarket in Bogotá plus a 24/7 distribution center of ~8,000 m² in Cota, delivering 15,000+ products to ~980 municipalities (99% of Colombia's territory) through e-commerce, call center, and a network of partner veterinary stores it deliberately does not compete with. It generates around COP 164 billion (~USD 40 million) in annual revenue with a team of ~270–300 employees, and also operates in Panama, Guatemala, and Costa Rica. |
|||||||
| Ransomware | Markisol View Details _ | thegentlemen | 26/09/2026 | SE | Services | pending | |
|
markisol.se zoominfo.com/c/markisol-ab/357807356 Markisol Group is a Swedish family-owned manufacturer of window blinds (roller, venetian, pleated, roman, and panel) headquartered in Ronneby, Sweden, founded in the late 1960s by Bo Persson, who started making blinds at age 6 alongside his father and built the company into one of the world's leading blind producers. The company has been a supplier to IKEA since 1983 and is fully vertically integrated — it designs and builds its own patented assembly machines (up to 400 blinds per hour), produces its own components, and weaves and prints its own fabrics at its textile plant in Narva, Estonia (in the historic Krenholm factory). |
|||||||
| Ransomware | Trifecta Software View Details _ | thegentlemen | 26/09/2026 | US | IT | pending | |
|
trifectasoftware.com zoominfo.com/c/trifecta-software/464122642 Trifecta Software is a small Costa Rican software development company based in San José, founded in 2011 by Joseph Phillips, a Costa Rican engineer and entrepreneur. The company provides custom software development for U.S. clients (mostly under NDA), plus CRM implementation based on open-source vTiger (branded CostaRicaCRM), and operates within a family of related businesses including a digital marketing agency (Mercadeo Asertivo) and an e-invoicing SaaS (Facturero.com). Its founder previously co-founded a health-tech startup that was acquired by Huli Health in 2018. The team is small — around 6 people — with revenue estimated between $250K and $1.5 million annually. In November 2025, the company registered a new legal entity in Panama, and in 2026 repositioned itself with an "AI-first" custom software branding. |
|||||||
| Ransomware | PuroClean View Details _ | thegentlemen | 26/09/2026 | US | Services | pending | |
|
puroclean.com purocleanfranchise.com PuroClean is North America's largest privately owned property damage restoration franchise, known as "The Paramedics of Property Damage®", with 500+ franchise locations across the U.S., Canada, and Puerto Rico, headquartered in Tamarac, Florida. It provides 24/7 emergency services — water damage mitigation, fire and smoke restoration, mold remediation, biohazard cleanup, and reconstruction — responding within two hours, and is a preferred provider for 3 of the top 5 U.S. insurance carriers. The brand was launched in 2001 under the legal entity PuroSystems, LLC; in 2015 it was acquired by Mark W. Davis (former co-founder/CEO of Belfor North America) and Frank Torre, who grew the network from 222 to 500+ locations. The franchisor's audited revenue is $31.8 million (FY2025), while system-wide franchise sales exceed $400 million, with an average franchise unit generating ~$942K per year. |
|||||||
| Ransomware | Brancoptica View Details _ | thegentlemen | 26/09/2026 | PT | Services | pending | |
|
brancoptica.pt Brancóptica, Lda is a family-owned optical retail chain founded in 1961 in Cartaxo, Portugal (Ribatejo region) by José Francisco Branco de Oliveira, originally as "Oculista do Cartaxo." Now led by the founder's son Rui Oliveira, the company operates 20+ stores across three districts — Santarém, Lisbon, and Leiria — under the banner of the international Opticalia alliance (part of EssilorLuxottica). Beyond selling eyewear (Ray-Ban, Gucci, and designer brands), it provides professional optometry and orthoptics services with a team of 20+ qualified specialists, and runs its own e-commerce store on Shopify. The company employs roughly 31–51 people with estimated revenue in the €2–10 million range. It is a rare example of a family optical chain that has survived and grown amid the mass decline of independent opticians in Portugal, winning the ÓpticaPro 2024 Social Responsibility Award. |
|||||||
| Ransomware | Craisa View Details _ | thegentlemen | 26/09/2026 | IT | pending | ||
|
craisa.com zoominfo.com/c/craisa/345610542 CRAISA S.A. is a Costa Rican distributor of agricultural, construction, and industrial machinery, founded in 1981 and headquartered in Heredia. It is the official exclusive dealer of CASE IH (agriculture) and CASE Construction Equipment in Costa Rica, covering the entire country through branches in Heredia, San Carlos, Guápiles, and Cartago. The company also distributes specialty brands including Antonio Carraro (Italian specialty tractors), Hangcha (forklifts), XAG agricultural drones, and precision farming systems (Raven/Trimble), while offering in-house service workshops, genuine parts supply, and equipment financing. It employs around 43 people with a highly loyal management core (many directors with 15–22 years of tenure), operates under SAP Business One, and holds official "Carbono Neutral" certification from the Costa Rican government. |
|||||||
| Ransomware | Crystal Glass View Details _ | thegentlemen | 26/09/2026 | GB | Manufacturing / Engineering | pending | |
|
crystalglassltd.co.uk Crystal Glass (Leeds) Ltd is a family-owned glass company based in Leeds, West Yorkshire, UK, founded in 1962 and officially registered as a limited company in 1974. It operates 5 branches — Leeds (HQ), Bradford, Harrogate, Wakefield, and Castleford — covering all of West Yorkshire. Its core services are 24/7/365 emergency glazing, double glazing replacement, and custom glasswork (shower screens, shopfronts, mirrors, partitions, and commercial facades). The company runs a lean family-managed SME model with roughly 10–25 employees and estimated revenue of £1–3 million per year |
|||||||
| Ransomware | Pajulahti View Details _ | thegentlemen | 26/09/2026 | FI | Retail / E-commerce | pending | |
|
pajulahti.com zoominfo.com/c/pajulahti/369113600 Pajulahti Sports Institute is one of Finland's oldest and largest sports institutes, founded in 1929 and located on 110 hectares by Lake Iso-Kukkanen in Nastola (Lahti), about an hour from Helsinki. It is Finland's only official Olympic and Paralympic Training Center, known for its focus on endurance sports and paralympic athletics. Since January 2025, Pajulahti has been merged with Kisakallio and the Helsinki-based Urhea campus into Kolmen kampuksen urheiluopisto — the largest sports institute in Finland, with 3 campuses, ~200 employees, 73,000 m² of sports facilities, 320,000 visitors per year, and ~500 students in professional sports education. The merged group generates about €26 million in annual revenue, operates on a non-profit basis (owned by foundations) |
|||||||
| Ransomware | Ligue se Grupo View Details _ | thegentlemen | 26/09/2026 | PT | Services | pending | |
|
grupoligue-se.pt Ligue-se Grupo is a Portuguese IT and business-services group founded in 2009 in Funchal, Madeira (born from the merger of accounting firm Contatlântico and IT company Enterformatic). It runs several businesses: Chip7 retail computer stores (Madeira + Lisbon) selling PCs, laptops and accessories with repair services; GoClick, a B2B IT arm handling infrastructure, cybersecurity, cloud/Microsoft 365, ERP software (Sage, PHC, ZoneSoft) and hotel-tech solutions; and Ligue.Gest, offering accounting, payroll and tax consulting. Led by CEO Ivo Herculano Caires and CFO Élia Caires, it targets SMEs and private clients across Madeira and mainland Portugal. In short: one group covering everything from hardware sales and repairs to IT management and bookkeeping. |
|||||||
| Ransomware | Charles Keith View Details _ | thegentlemen | 26/09/2026 | SG | Retail / E-commerce | pending | |
|
charleskeith.com zoominfo.com/c/charles--keith-pte-ltd/347827969 CHARLES & KEITH Singapore-based fashion brand founded in 1996 by brothers Charles and Keith Wong, selling women's shoes, bags, wallets and accessories. Its model is vertical integration: own designs, direct Asian factories and a fast-fashion pace of 20–30 new styles a week, delivering a "luxury look at an affordable price" (shoes ~$40–220, bags ~$30–190). Today it runs about 700 stores across 30+ countries with revenue of roughly US$1 billion. Marketing is driven by K-pop ambassadors (ITZY, Han So Hee, Kim You Jung) and Met Gala appearances, plus lines like L'INITIAL and PEDRO. Fully family-owned (it bought back LVMH's 20% stake in 2016), it is one of Asia's biggest fashion exporters. Main weak spots: paid/slow online returns and average durability of PU-leather products. |
|||||||
| Ransomware | ENKEI******* View Details _ | thegentlemen | 26/09/2026 | Manufacturing / Engineering | pending | ||
|
This company specializes in manufacturing light-alloy aluminum wheels for automakers — that is, it supplies factory rims for new cars rather than selling to retail consumers. It is the U.S. production arm of a major Japanese group, a global leader in this industry, with a casting plant in the American Midwest and its own in-house die-making capability. Its main clients are large car manufacturers (mass-market Japanese brands and new EV makers), with products going straight to vehicle assembly lines. The business is currently undergoing restructuring: part of its capacity is being shut down due to labor shortages and high operating costs, with production being consolidated at a single plant. |
|||||||
| Ransomware | FTAPI Software View Details _ | thegentlemen | 26/09/2026 | US | IT | pending | |
|
ftapi.com zoominfo.com/c/ftapi-software/346927067 FTAPI (founded 2010, Munich, Germany) is a software company offering a secure, GDPR-compliant platform for exchanging sensitive business data and automating workflows — encrypted email and file transfer, virtual data rooms, digital forms and no-code process automation. It serves 2,000+ organizations and over a million users, mainly in public administration, healthcare, insurance and industry, with all data hosted exclusively in Germany under strict certifications (ISO 27001, BSI C5, SOC 2) and optional zero-knowledge encryption. Its core selling point is European digital sovereignty — a compliant alternative to US cloud tools like Dropbox under GDPR, NIS-2 and DORA regulations. In 2025 it raised €65 million from PE investors Armira and Tikehau Capital, which took control to fund EU expansion and acquisitions. The company employs around 150 people and targets becoming a leading European player in secure data exchange by 2028–29. |
|||||||
| Ransomware | Crossett View Details _ | termite | 26/09/2026 | US | Manufacturing / Engineering | pending | |
|
Crossett Home is a leading petroleum transporter operating in major markets across the Eastern <a href="http://U.S">U.S</a>. and Ontario, Canada. Established in 1928, the company specializes in safe and reliable fuel transportation services, supported by a fleet of over 100 modern tractors and 210 trailers. |
|||||||
| Stealers | CenturionTXT.rar View Details _ | LogsPlanet | 26/09/2026 | — | leaked | ||
|
📭 BUY PRIVATE — ADMIN: @BuzzLogsPlanet ➖➖➖➖➖➖➖➖➖➖➖➖➖➖➖ 🔑Pass: [Telegram link: professional/enterprise only] ➖➖➖➖➖➖➖➖➖➖➖➖➖➖➖ 🤑 Main Channel || Reserve Channel 🤑 |
|||||||
| Stealers | @BreachForumsCloud.rar View Details _ | LogsPlanet | 26/09/2026 | — | leaked | ||
| Breaches | Agricol_bank.zip View Details _ | NEW MIX | 26/09/2026 | — | leaked | ||
| Breaches | vehicleinfo.json View Details _ | Umbrella Резерв | 26/09/2026 | — | leaked | ||
|
Lo vehicle to number ka database By Abhigyan credit hatane wlaa randi |
|||||||
| Breaches | Mate1.com 27.5kk.txt View Details _ | NEW MIX | 26/09/2026 | — | leaked | ||
| Breaches | Animoto.com 13.3kk.txt View Details _ | NEW MIX | 26/09/2026 | — | leaked | ||
| Breaches | Dubsmash.com 12.3kk.txt View Details _ | NEW MIX | 26/09/2026 | — | leaked | ||
| Breaches | LSGB.net 10kk [+500k ReHashed 2019].txt View Details _ | NEW MIX | 26/09/2026 | — | leaked | ||
| Breaches | GFAN.com 10kk Китай.txt View Details _ | NEW MIX | 26/09/2026 | — | leaked | ||
| Breaches | Armorgames.com 7.7kk.txt View Details _ | NEW MIX | 26/09/2026 | — | leaked | ||
| Breaches | STOREPASCHER.COM_CUSTOMERS.csv View Details _ | NEW MIX | 26/09/2026 | — | leaked | ||
| Breaches | FULL_unicotaxi.com_@Datavortex_BD.7z View Details _ | DataVortex.pro2 | 26/09/2026 | — | leaked | ||
|
🔥 USA/MIX User Data 🔥 💰 FREE DM @Datavortex_BD to claim |
|||||||
| Breaches | sample2_siscontri_@Datavortex_BD.csv View Details _ | DataVortex.pro2 | 26/09/2026 | — | leaked | ||
| Breaches | sample3_siscontri_@Datavortex_BD.csv View Details _ | DataVortex.pro2 | 26/09/2026 | — | leaked | ||
| Breaches | sample4_siscontri_@Datavortex_BD.csv View Details _ | DataVortex.pro2 | 26/09/2026 | — | leaked | ||
| Breaches | sample5_siscontri_@Datavortex_BD.csv View Details _ | DataVortex.pro2 | 26/09/2026 | — | leaked | ||
| Breaches | sample_siscontri_@Datavortex_BD.csv View Details _ | DataVortex.pro2 | 26/09/2026 | — | leaked | ||
| Ransomware | N... View Details _ | SilentRansomGroup | 25/09/2026 | — | pending | ||
|
Redacted entry - full company name pending disclosure (FULL DATA TIMER active). |
|||||||
| Ransomware | S... View Details _ | SilentRansomGroup | 25/09/2026 | — | pending | ||
|
Redacted entry - full company name pending disclosure (FULL DATA TIMER active). |
|||||||
| Ransomware | GE Vernova Inc. View Details _ | metaencryptor | 25/09/2026 | US | IT | pending | |
|
GE Vernova Inc. is a global energy equipment manufacturing and services company headquartered in Cambridge, Massachusetts. Formed from General Electric's energy businesses, it operates across Power, Wind, and Electrification segments, with its technology helping generate roughly a quarter of the world's electricity. |
|||||||
| Ransomware | PKF Hadiwinata View Details _ | metaencryptor | 25/09/2026 | ID | Manufacturing / Engineering | pending | |
|
PKF Hadiwinata is a top-10 accounting and professional services firm in Indonesia, headquartered in the financial district of Jakarta. Founded in 1987, it is a member of PKF International and provides audit, tax, business solutions, and consulting services. |
|||||||
| Ransomware | Platinum Healthcare Staffing View Details _ | metaencryptor | 25/09/2026 | US | Healthcare / Pharma | pending | |
|
Platinum Healthcare Staffing is a healthcare staffing agency headquartered in Lafayette, USA, founded in 2005. It provides nursing and allied healthcare professionals, including RNs, LPNs, and CNAs, to hospitals, clinics, and medical facilities. |
|||||||
| Ransomware | Electrolux & Ontrac View Details _ | emperador | 25/09/2026 | null | pending | ||
|
Hello Electrolux & OnTrac, Still no response from you. When we called your IT helpdesk posing as threat researchers and asked about the breach, we were told, "We cannot talk about it." You have one week before we release more data - starting with information on your employees. We'd prefer to settle this directly. Same goes for OnTrac. We recently learned that OnTrac has been paying employees as little as $14.50 an hour. As a result, we will be releasing salary information for all of their employees. I also managed to get in touch with a former OnTrac employee, chill guy. Said his time there was horrible. EMAIL: [email protected] SESSION: 05651c7323273b723588d47455471ee9e27feb5187a30f2933554a705aacb38358 [Sector: Retail, Manufacturing, Transportation] |
|||||||
| Ransomware | Securitas Group View Details _ | everest | 25/09/2026 | SE | Services | pending | |
|
[AI generated] Securitas Group is a Swedish multinational security services company headquartered in Stockholm, Sweden. It operates in the security industry, providing guarding services, electronic security, fire and safety solutions, corporate risk management, and remote monitoring. Founded in 1934, it operates globally across dozens of countries, serving clients ranging from small businesses to large corporations, government agencies, and critical infrastructure providers. |
|||||||
| Ransomware | Morula IVF View Details _ | everest | 25/09/2026 | ZA | Healthcare / Pharma | pending | |
|
[AI generated] Morula IVF is a network of fertility clinics operating in Indonesia, specializing in in vitro fertilization (IVF) and other assisted reproductive technologies. It operates within the healthcare industry, specifically reproductive medicine, offering services such as fertility consultations, egg and sperm preservation, and infertility treatments. The company has multiple clinic locations across major Indonesian cities, serving patients seeking fertility treatment options. |
|||||||
| Ransomware | Tobin & Company View Details _ | Wallstreet | 25/09/2026 | US | Other | pending | |
|
Tobin & Company, CPA’s is a small accounting firm based in Harrison, New York, providing accounting, tax, auditing, and business consulting services, with a particular focus on nonprofit organizations. |
|||||||
| Ransomware | Ar Valve Resources View Details _ | Wallstreet | 25/09/2026 | GB | Energy | pending | |
|
AR Valve Resources is a UK-based distributor of industrial valves, actuators, regulators, instrumentation, and spare parts. Based in Kent, the company serves national and international customers with product sourcing, technical support, testing, certification, documentation, and shipping services. |
|||||||
| Ransomware | GTFM View Details _ | Wallstreet | 25/09/2026 | US | IT | pending | |
|
GTFM LLC is a company operating through gtfmllc.com. Its website currently provides limited publicly accessible information, so its specific products or services could not be confirmed. |
|||||||
| Ransomware | Beatus Cartons View Details _ | Wallstreet | 25/09/2026 | GB | Manufacturing / Engineering | pending | |
|
Beatus Cartons is a UK-based, privately owned manufacturer of printed folding cartons and packaging. Established in 1940, it produces solidboard, litho-laminated, and plastic packaging for industries including confectionery, pharmaceuticals, food, health and beauty, and automotive. |
|||||||
| Ransomware | Reliance Audit View Details _ | everest | 25/09/2026 | Services | pending | ||
|
[AI generated] N/A I don't have verified, reliable information about a specific company named "Reliance Audit." This name is generic and could refer to multiple small firms or local audit/accounting practices in different countries, so I cannot confirm details about its services, industry positioning, or country of operation without risking inaccurate information. |
|||||||
| Ransomware | UNIRITA View Details _ | everest | 25/09/2026 | JP | Services | pending | |
|
[AI generated] UNIRITA Inc. is a Japanese IT company headquartered in Tokyo, Japan, operating in the information technology and systems software industry. It specializes in IT operations management software, system infrastructure solutions, and IT services, including its well-known product "Senju Family" for job scheduling and system operation management. UNIRITA also provides IT consulting, systems integration, and outsourcing services primarily to enterprise clients in Japan. |
|||||||
| Ransomware | CENELEC View Details _ | everest | 25/09/2026 | BE | Services | leaked | |
|
[AI generated] CENELEC (European Committee for Electrotechnical Standardization) is a Brussels, Belgium-based standardization organization operating across Europe. It develops voluntary electrotechnical standards to support the single market, covering electrical equipment, energy, and related technologies. Working alongside CEN and ETSI, it collaborates with national committees from European countries. Its industry is standardization and technical regulation within the electrotechnical and electronics sector. |
|||||||
| Ransomware | ETS View Details _ | everest | 25/09/2026 | Services | pending | ||
|
[AI generated] N/A "ETS" is too generic an identifier to reliably describe—there are numerous distinct organizations using this name or acronym across different industries and countries (for example, testing and assessment organizations, engineering firms, electronic transaction services, and technology companies), and without additional context I cannot determine which specific entity is being referenced. |
|||||||
| Ransomware | Breast Implant Center of Hawaii View Details _ | Wallstreet | 25/09/2026 | US | Healthcare / Pharma | pending | |
|
Breast Implant Center of Hawaii is a plastic surgery and aesthetics clinic serving patients across Hawaii. Based in Kailua-Kona, it offers breast augmentation, implant revision, breast lifts, body contouring. |
|||||||
| Ransomware | Majani Insurance Brokers View Details _ | Vexy Ransomware | 25/09/2026 | KE | Finance / Legal / Insurance | pending | |
|
Majani Insurance Brokers is an independent insurance broker serving both businesses and individuals. It arranges insurance products across areas including general business insurance, motor, medical, life, investment, marine, liability, property and agricultural-related covers |
|||||||
| Ransomware | Iberia Compositech Manufacturing View Details _ | qilin | 25/09/2026 | ES | Manufacturing / Engineering | leaked | |
|
N/A |
|||||||
| Ransomware | taspenlife.com View Details _ | lockbit5 | 25/09/2026 | KZ | Services | pending | |
|
Taspen Life offers a range of insurance products including health protection, group protection, and... |
|||||||
| Ransomware | anery.com.br View Details _ | lockbit5 | 25/09/2026 | BR | Retail / E-commerce | pending | |
|
Somos a Anery Home Care Temos paixão por cuidar Nossa especialidade é cuidar de pessoas, com todo o... |
|||||||
| Ransomware | corisricambi.it View Details _ | lockbit5 | 25/09/2026 | IT | IT | pending | |
|
Presenti sul territorio da oltre un ventennio, la CO.R.I.S. S.r.l. è cresciuta all'interno del... |
|||||||
| Ransomware | pharma5.ma View Details _ | incransom | 25/09/2026 | MA | Healthcare / Pharma | leaked | |
|
Pharma5 21, Rue des Asphodèles, Maârif Extension, 20100 Casablanca, Morocco 05 22 23 62 15 pharma5.ma Leaked data: 50Gb Corporate and financial information, data on products and their supply, quality control and certification, drug testing and related issues, employee personal data, counterparties, and much more. |
|||||||
| Ransomware | TapClicks (marketing analytics platform) View Details _ | N0n | 25/09/2026 | US | IT | pending | |
|
Marketing analytics / SaaS · United States | The complete platform source code (97,000+ commits with full history); The multi-tenant instance management system with production architecture; A customer's full marketing database: 354 advertising platform datasets, client lists, user accounts with password hashes, ad-platform connection credentials | Everything is real, complete and verifiable. | [ACTIVE: deadline 2026-09-28 01:59 UTC] |
|||||||
| Stealers | La haine Project 🇫🇷.rar View Details _ | LogsPlanet | 25/09/2026 | — | leaked | ||
|
📭 BUY PRIVATE — ADMIN: @BuzzLogsPlanet ➖➖➖➖➖➖➖➖➖➖➖➖➖➖➖ 🔑Pass: [Telegram link: professional/enterprise only] ➖➖➖➖➖➖➖➖➖➖➖➖➖➖➖ 🤑 Main Channel || Reserve Channel 🤑 |
|||||||
| Stealers | Acolyte Bases.rar View Details _ | LogsPlanet | 25/09/2026 | — | leaked | ||
|
📭 BUY PRIVATE — ADMIN: @BuzzLogsPlanet ➖➖➖➖➖➖➖➖➖➖➖➖➖➖➖ 🔑Pass: @AcolyteBases ➖➖➖➖➖➖➖➖➖➖➖➖➖➖➖ 🤑 Main Channel || Reserve Channel 🤑 |
|||||||
| Stealers | LogsPlanet [@ProjectLogsPlanet].rar View Details _ | LogsPlanet | 25/09/2026 | — | leaked | ||
|
📭 BUY PRIVATE — ADMIN: @BuzzLogsPlanet ➖➖➖➖➖➖➖➖➖➖➖➖➖➖➖ 🔑Pass: @ProjectLogsPlanet ➖➖➖➖➖➖➖➖➖➖➖➖➖➖➖ 🤑 Main Channel || Reserve Channel 🤑 |
|||||||
| Breaches | ParliamentUganda.csv View Details _ | NEW MIX | 25/09/2026 | UG | — | leaked | |
| Breaches | tiktakpet.co.il-2026-01-24-00-00.zip View Details _ | Database World ROC | 25/09/2026 | CO | — | leaked | |
| Breaches | 23543252352.xlsx View Details _ | Базы Директоров / ЛПР / | 25/09/2026 | — | leaked | ||
|
Компании строительного сектора - рост сотрудников 24/25 Есть номер телефона, почта Под запрос найдем контакты ЛПР. Связь: Telegram ВКонтакте +79397886929 Яндекс.Мессенджер Отзывы |
|||||||
| Breaches | СБП - @StormBaseAdapter.sql View Details _ | Database World ROC | 25/09/2026 | — | leaked | ||
|
Date: 2022 Records: 1M+ Contains: Full Name, Phone Number, Bank Name SBP (Stands for Faster Payments System). It’s basically Russia’s instant bank transfer system — you can send money using just someone’s phone number. |
|||||||
| Breaches | sample @duckyhax.zip View Details _ | Database World ROC | 25/09/2026 | — | leaked | ||
|
Selling the complete dump of afd.de, containing hundreds of thousands of emails, attachments, several hundred emails and other personal information including party officials and other high profile people. Sample included AfD (Alternative für Deutschland) is a right wing populist political party in Germany founded in 2013. It began as a Eurosceptic party opposing eurozone bailouts but later shifted focus to anti-immigration and anti-islam positions especially after the 2015 migrant crisis. The party is known for its nationalist stance and has faced controversy over links to far right extremism with parts of it monitored by German domestic intelligence. Size: 300GB (Compressed) Date of breach: 14.09.2026 Price: 1000$ |
|||||||
| Breaches | criminals_kz_2k.csv View Details _ | formaceft_db | 25/09/2026 | — | leaked | ||
|
666 |
|||||||
| Breaches | lomonosov_1.2M.csv View Details _ | formaceft_db | 25/09/2026 | — | leaked | ||
|
свежая выгрузка профилей участников научных олимпиад, конференций, школьников, студентов и абитуриентов с портала «Ломоносов» (ConfHub) Общий объём: ~1 122 800+ строк (1.2M) География: Россия — более 645 000+ Казахстан —~6870+ Привязка к организациям: 668 000+ участников с указанием точного места учёбы / работы [Telegram link: professional/enterprise only] 🖤 [Telegram link: professional/enterprise only] 🖤 [Telegram link: professional/enterprise only] |
|||||||
| Breaches | equrylys_experts_employments_sample_6k.csv View Details _ | formaceft_db | 25/09/2026 | — | leaked | ||
| Breaches | equrylys_master_sample_6k.csv View Details _ | formaceft_db | 25/09/2026 | — | leaked | ||
| Breaches | aisoip_corporate_debtors.csv View Details _ | formaceft_db | 25/09/2026 | — | leaked | ||
|
Урезанный сэмпл |
|||||||
| Breaches | aisoip_individuals_debtors_light_1.65M.csv View Details _ | formaceft_db | 25/09/2026 | — | leaked | ||
|
Урезанный сэмпл N2️⃣ |
|||||||
| Breaches | skb-techno.ru.zip View Details _ | Da | ta NeverDie | 25/09/2026 | RU | — | leaked | |
| Breaches | skarera.bitrix24.ru.zip View Details _ | Da | ta NeverDie | 25/09/2026 | RU | — | leaked | |
| Breaches | portal.1sb.su.zip View Details _ | Da | ta NeverDie | 25/09/2026 | — | leaked | ||
|
✔️Автор утечек: Wiskas |
|||||||
| Breaches | rusdorznak.ru.zip View Details _ | formaceft_db | 25/09/2026 | RU | — | leaked | |
| Breaches | 1sb.admin24.app.zip View Details _ | formaceft_db | 25/09/2026 | — | leaked | ||
|
✔️Автор утечек: Wiskas |
|||||||
| Ransomware | Armada Credit Bureau View Details _ | Spirals | 24/09/2026 | UG | Services | pending | |
|
Armada Credit Bureau Limited is a duly licensed credit reporting and analytics company |
|||||||
| Ransomware | Westside GI View Details _ | pear | 24/09/2026 | US | — | pending | |
|
Ambulatory endoscopy center |
|||||||
| Ransomware | Martin Lawrence Galleries View Details _ | pear | 24/09/2026 | US | Services | pending | |
|
Premier gallery of fine art in America |
|||||||
| Ransomware | Indroj Medical Group Inc. View Details _ | pear | 24/09/2026 | US | IT | pending | |
|
The Web's Free NPI Registry Search & Provider Reference Site |
|||||||
| Ransomware | efada.sa View Details _ | krybit | 24/09/2026 | SA | Services | pending | |
|
efada.sa... |
|||||||
| Ransomware | NEAD Pro View Details _ | rhysida | 24/09/2026 | null | pending | ||
|
NEAD Pro Nead Pro is a professional multidisciplinary firm based in Gorizia and Udine, Italy, that provides legal, tax, bankruptcy, and accounting consulting services.What it is: a network share belonging to two Italian professional firms located at Via Roma 20, Gorizia (Friuli-Venezia Giulia):NEAD SRL (NORTH EAST ADVISORS S.R.L.) - an accounting firm, dottore commercialista, P.IVA 01114220310, REA GO-72906;NEAD PRO - PROFESSIONISTI RIUNITI - a law firm, P.IVA 01157140318.Volume: ~575,000 files / ~253 GB. The root contains a single branch Nuova directory\NEAD\ (plus an empty Documenti folder and a scatter of PDF scans at the root level).Structure and contents:Branch Volume ContentsNEAD PRO SITE - Documenti 231,137 files / 193.5 GB Law firm: 03.PRATICHE (46,620 files: CIVILE 9,665, PENALE 537, SOVRAINDEBITAMENTO 1,208), 04. INCARICHI (85,321: FALLIMENTI 22,492, ESECUZIONI 28,509, ADS 14,547, TRUST, CURATELE), SEGRETERIA with CREDENZIALI VARIE.xlsx (~40 firm accounts: SPID, PEC, banks, 2 cards with full PAN+CVC, safe code), bank scans (BANCOMAT PIN, BCC agreements)NEAD SRL SITE - Documenti 101,125 / 55.3 GB Accounting firm: 03.CLIENTI - 199 active + 184 former client folders (730, CU, F24, contracts), 44 private SOGEI Entratel .P12 keys (signing clients' tax returns), ISA/IRAP tax filings 2019�2020, client master data, Account.xlsxPRIMA NOTA - Documenti 1,885 / 871 MB Cash books 2019�2026 (21 xlsx): CASSA / CONTO CORRENTE / POS / CARTA / SISTERPOWERBI - Documenti 548 / 627 MB 37 financial BI models .pbix (BI_ISIDE, BI_NEAD, ATHENA, PNAI)ARCHIVIO 921 / 2.6 GB MPS bank statements 2020�2024, NEAD SRL account closure, firm mail archivePOSTA SARDAMAR / PANEGIOCHI / ISIDE / ADMIN SRL ~165+ / ~174 MB Client and firm mail: IVECO Capital leasing, accertamento Agenzia Entrate, Capitaneria di Porto, verbali poliziaES. IMM. 112-2024 10 files Real-estate enforcement proceedings (Tribunale di Gorizia): bank statements and CIE (ID cards) of auction participantsNEAD root ~85 PDF / 127 MB Scanned bank statements, F24 forms, IPZS envelope with the PIN/PUK of a CIE cardMost sensitive data: client dossiers with tax codes (codici fiscali), court case files (civil/criminal/bankruptcy), medical documents (Art. 9 GDPR), the firm's credential database with full PAN+CVC of two cards and the safe code, 52 Entratel electronic signature keys, ~100 SEPA mandates with IBANs and signatures, client PST archives (7.5 GB), a client's Huawei phone backup (Facebook/Gmail/Telegram databases), passports of foreign shareholders. More |
|||||||
| Ransomware | bnlawmacau.com www.bn-ip.com View Details _ | incransom | 24/09/2026 | MO | Finance / Legal / Insurance | pending | |
|
full data all country |
|||||||
| Ransomware | welgenone.com View Details _ | incransom | 24/09/2026 | US | Manufacturing / Engineering | pending | |
|
Welgen One is a mobile wellness service provider based in Georgia, USA, offering personalized wellness care and dispensary access across Atlanta. The company focuses on delivering innovative healthcare solutions, including remote patient monitoring and onsite wellness programs, to enhance overall well-being. Targeting individuals seeking convenient and comprehensive health services, Welgen One aims to revolutionize the healthcare experience by prioritizing patient-centered care. With a commitment to accessibility and customization, they utilize advanced technology and data to optimize health outcomes |
|||||||
| Ransomware | ukbjja.org View Details _ | incransom | 24/09/2026 | GB | — | pending | |
|
full data |
|||||||
| Ransomware | Prater & Ridley Attorneys At Law View Details _ | Wallstreet | 24/09/2026 | US | Finance / Legal / Insurance | pending | |
|
Prater, Ridley & Llamas – Attorneys at Law is a law firm based in Temple, Texas, United States. Established in 1993, it provides legal services in family law, criminal defense, probate, estate administration, and related civil matters for clients throughout Central Texas. |
|||||||
| Ransomware | Catholic University of El Salvador View Details _ | Wallstreet | 24/09/2026 | SV | Education | pending | |
|
The Catholic University of El Salvador (UNICAES) is a private Catholic university founded in 1982 in Santa Ana, El Salvador. |
|||||||
| Ransomware | Dao Group View Details _ | qilin | 24/09/2026 | IT | pending | ||
|
N/A |
|||||||
| Ransomware | All Tech Machine & Engineering View Details _ | qilin | 24/09/2026 | US | IT | pending | |
|
N/A |
|||||||
| Ransomware | Inversiones Bolívar View Details _ | qilin | 24/09/2026 | CO | Services | pending | |
|
N/A |
|||||||
| Ransomware | Zig Inge Group View Details _ | qilin | 24/09/2026 | AU | Services | pending | |
|
N/A |
|||||||
| Ransomware | Wallatec View Details _ | akira | 24/09/2026 | Manufacturing / Engineering | pending | ||
|
Wallatec creates high-performance carbonation systems for restaurants and busy kitchens. Their equipment is built to handle intense daily use, working perfectly even in the most hectic envir onments. We will upload 15gb of corporate data soon. Employee information (passports), projects, financi als, client information and so on. |
|||||||
| Ransomware | Agora coopérative agricole View Details _ | qilin | 24/09/2026 | FR | Services | pending | |
|
N/A |
|||||||
| Ransomware | GDM Pipelines View Details _ | qilin | 24/09/2026 | GB | Manufacturing / Engineering | pending | |
|
N/A |
|||||||
| Ransomware | Strack Companies View Details _ | akira | 24/09/2026 | US | IT | pending | |
|
Strack Construction is a commercial and industrial construction contractor headquartered in St. Joseph, Minnesota. Founded in 1938, the family-owned company provides design-build, general co ntracting, construction management, and real estate development services. We will upload 60gb of corporate data soon. Employee information, projects (drawings and specif ications), detailed financials, client information, NDAs and so on. |
|||||||
| Ransomware | Revolut View Details _ | ImNotAVillain | 24/09/2026 | GB | Finance / Legal / Insurance | pending | |
|
Revolut data on sale. Contact information at the bottom of the page. Includes 680 high-value networth users. |
|||||||
| Ransomware | Italy View Details _ | ImNotAVillain | 24/09/2026 | IT | — | pending | |
|
Italy is being exposed for failing to follow proper data protection laws. Includes 85,000+ Files — 150GB. Top departments, units, offices affected. |
|||||||
| Ransomware | airtanzania.co.tz / airtanzania.com View Details _ | krybit | 24/09/2026 | TZ | Transportation / Travel / Logistics | pending | |
|
Air Tanzania Company Limited (ATCL) is the national flag carrier airline of Tanzania, established on March 11, 1977 foll... |
|||||||
| Ransomware | www.jonesthegrocer.com View Details _ | krybit | 24/09/2026 | AU | Retail / E-commerce | pending | |
|
Jones the Grocer is a premium gourmet food retail and cafe brand founded in 1996 in Sydney, Australia, originally launch... |
|||||||
| Ransomware | Grupo Caberj View Details _ | incransom | 24/09/2026 | BR | — | pending | |
|
O Grupo Caberj, que oferece uma ampla gama de seguros, foi hackeado há 10 dias |
|||||||
| Ransomware | winfashion View Details _ | dragonforce | 24/09/2026 | Retail / E-commerce | leaked | ||
|
══════════════════════════ ══════════════════════════ ══════════════════════════ WINFASHION TECHNOLOGIES DUMP: DATA LEAK ANALYSIS OF A B2B ERP PLATFORM FOR THE FASHION INDUSTRY ══════════════════════════ ══════════════════════════ ══════════════════════════ This is a preliminary analysis, processing of sensitive data is currently underway. Target: WinFashion Technologies (Los Angeles, USA) — an international B2B provider of ERP solutions (WF125sR / Fabric ERP V.10) for 250+ fashion brands. Offices in New York, Shanghai, and India. Integrations: Shopify, Acenda, JOOR, NuORDER, CommerceHub, FashionGo. BPO/EDI processing via Inovis/QRS. DUMP VOLUME: ~205K files / ~13K directories / ~73 Gigabytes AT-RISK FILES: 125,274 (61.0%) Critical: 9,350 High: 78,174 Medium: 37,750 PRELIMINARY FINDINGS: ▸ kaktus.bak (5.64 GB) — full MSSQL backup of the "Kaktus" client's ERP installation (Customer Master, Style Master, EDI, AR) ▸ 6 SSL PFX containers + EDI-VAN client certificate for ECGrid/OpenText ▸ 33,307 .shxml files — WinSCP SFTP session logs (hosts, paths, sizes) ▸ 332 ASP.NET Web.config files — potentially hardcoded Shopify / Authorize.Net secrets ▸ 171 files with PAN / CreditCard / Cardholder / Payment data — Authorize.Net payment processing code ▸ 39 files with IBAN / SWIFT / BankAccount data — bank account details ▸ 259 Invoice Register / Invoice data files — Excel payment registers (up to 124 MB) CLIENT DATA (~40 BRANDS): ▸ STYLEMASTER.xlsx (48 MB) — aggregated product catalog export ▸ Vendors.XLS (20 MB) + test customers.XLS (7 MB) — Kaktus vendors and customers ▸ 40,621 EDI files (.edi / .850 / .856 / .810 / .997 / .852 / .832 / .846) — full B2B trade lifecycle (PO, ASN, invoices, price catalogs) INTELLECTUAL PROPERTY: ▸ 8,577 .cs files — integration source code (Authorize.Net, Shopify, Acenda, JOOR, NuORDER, DSCO) ▸ 5,828 .pbd files — PowerBuilder WF125sR ERP core ▸ 3,398 .sql files — DB schema, triggers, CLR procedures ▸ 18 .dbf / .mdf files — legacy DBASE / FOXPRO / MSSQL tables without encryption HR / PII: ▸ INV EMPLOYEE ALLOWANCE YTD.xlsx (76 MB) — employee HR data ▸ AR Aging 12.30.25.xls + AR Aging 12.29.25.XLS — accounts receivable for Monrow and Kaktus clients REGULATORY RISKS: ▸ PCI DSS — compromise of PAN processing code + Authorize Excel registers ▸ CCPA / CPRA — HR-PII (76 MB), California jurisdiction ▸ FTC — "total security" claims amidst PFX / DBF / Web.config compromise ▸ SEC (Regulation FD) — risk for publicly traded client issuers ▸ GDPR — PII of customers / vendors across ~40 brands The dump represents a cross-tenant B2B SaaS incident involving the disclosure of trade secrets for ~40 fashion brands, the compromise of the Authorize.Net payment infrastructure, and the exposure of the full ERP source code. |
|||||||
| Ransomware | agiliance.fr View Details _ | ZaWoo | 24/09/2026 | FR | IT | leaked | |
|
Agiliance is a French accounting and business advisory group headquartered across the Haute-Saône and Doubs regions. Its website describes Agiliance as the result of bringing together 8 small-to-medium-sized accounting firms, combining their expertise and tools while retaining a local, client-oriented approach. |
|||||||
| Ransomware | www.francare.com View Details _ | ZaWoo | 24/09/2026 | FR | IT | leaked | |
|
FRANCARE Industries is a French international technical-supply, engineering, and maintenance company, headquartered in Paris, France. The company was founded in 1988 and specializes in supplying equipment, technologies, and technical services to industrial and healthcare customers internationally |
|||||||
| Ransomware | amb-pvc.com View Details _ | ZaWoo | 24/09/2026 | FR | Manufacturing / Engineering | pending | |
|
AMB (Ateliers de Menuiseries Bidet), also known as Atelier de Menuiseries Bidet, is a French manufacturer specializing in PVC and aluminium joinery products. The company is based in Bourguenolles, Normandy, France. Its website is amb-pvc.com. |
|||||||
| Ransomware | Arizona Vascular Medical Equipment, Inc View Details _ | dragonforce | 24/09/2026 | US | Healthcare / Pharma | leaked | |
|
Arizona Vascular Medical Equipment, Inc. is a trusted provider of specialized medical devices, focusing primarily on compression therapy solutions and vascular care equipment. Headquartered in Mesa, Arizona, the company is dedicated to improving patient mobility and quality of life by delivering high-quality medical products and personalized customer service across the United States. |
|||||||
| Ransomware | BMGP Groupe View Details _ | dragonforce | 24/09/2026 | FR | Manufacturing / Engineering | leaked | |
|
BMGP Groupe (Polyresine) is an established French manufacturer specializing in the formulation, production, and distribution of synthetic resins and high-performance technical polymers. Founded in 1972, the company serves a wide range of industrial sectors, providing tailored chemical formulations for applications such as industrial flooring, waterproofing, encapsulation, and specialized coatings. They are known for engineering reliable, durable chemical solutions to meet complex industrial specifications. |
|||||||
| Ransomware | Elite Industech Co., Ltd View Details _ | dragonforce | 24/09/2026 | TH | Manufacturing / Engineering | leaked | |
|
Elite Industech Co., Ltd. (established in 2003) is a certified Class-A waste treatment plant based in Kaohsiung, Taiwan. The company operates within the circular economy sector, specializing in the eco-friendly processing of electronic waste (E-waste) and the recycling of rare and precious metals |
|||||||
| Ransomware | HEC Group View Details _ | dragonforce | 24/09/2026 | TW | Services | pending | |
|
On August 30, HEC Group issued an official statement addressed to shareholders of TPE:3032 and other stakeholders, announcing that the company had been the target of a cyberattack. In its statement, the company claimed that the breach was detected immediately, that high-tech countermeasures were deployed, and that no corporate documentation was lost. The incident was characterized as a minimal, random occurrence. The reality, however, is starkly different. Our operation against the company began weeks prior to that publication. Due to a systemic failure to implement basic security principles, we gained nearly total control over the infrastructure supporting the development and commercial operations of the entire corporate group. We conducted a methodical and comprehensive review of the documentation, exfiltrating a vast amount of data. We remained undetected for as long as necessary to secure everything we sought. Only after completing our objectives did we initiate the data encryption process, the company's technical staff did not even detect our presence until many hours later. At the time of their official announcement, HEC Group's leadership knew the statement was entirely false. Its sole purpose was to manipulate stock market trading. Instead of contacting us to mitigate the damage, management chose to deceive the exchange. When we finally managed to contact the company's leadership and offered them a chance to make their official statement more truthful in exchange for the deletion of the taken documents, they showed no interest. If the leadership of HEC Group has decided to pursue a path of selfdestruction, we will not stand in their way. To prove that HEC Group’s statement was a fabrication and that our claims are accurate, we will now publish a portion of the exfiltrated data. This initial release will consist of over 360,000 files, drawn from a total volume measuring in terabytes. This data will provide stock exchange regulators and partner companies with exhaustive evidence of the actual events. The remaining documents will not be released publicly at this time, as we have devised a more strategic use for them. While the countdown timer below this publication runs, the companies affiliated with HEC Group, their shareholders, and regulatory authorities have time to prepare. HEC Group has one final opportunity to accept our proposal and avoid the consequences. |
|||||||
| Ransomware | Final statement re PSA View Details _ | shinyhunters | 24/09/2026 | null | pending | ||
|
Good afternoon, We have no further comments to make regarding our PSA statement we released the other day. Our organisation is highly confident we have achieved our goal and our intentions we repeatedly made clear to journalists and in our public statements. There is 5 days remaining still. We have no comment yet regarding what we will do if the victim entity does not comply with our kind request . Nonetheless, we got what we wanted and we have a business to run and operate as usual. We will not be responding to any press inquiries about this and we will not be sharing updates about other datasets we have that we did not yet disclose to the public. We reiterate and want to assiduously emphasise we are NOT extorting the victim in question, this is NOT financially motivated and this is NOT a ransom. Thank you for your time and attention to this matter. This is now old news. Regards, SH | Updated: 24 Sep 2026 |
|||||||
| Ransomware | Solucioning S.A. View Details _ | Barracuda | 24/09/2026 | AR | — | pending | |
|
This is a small company of 4-5 people, yet it has big clients in the oil production sector. Unfortunately, the company neglected data security, allowing us to gain access to all their confidential files - projects, documents, blueprints, and so on. The company has been ignoring us for five days now, and we will soon publish their files. This is a warning. We do not wish to harm anyone, but we are prepared to inflict maximum damage. Victim website: https://www.solucioning.com/ | Severity: HIGH | Size: 463 GB | Status: selling | $100,000 |
|||||||
| Ransomware | eTeam View Details _ | EndZone | 24/09/2026 | IT | pending | ||
|
Revenue: Revenue: $229 million eTeam Inc. is a privately held global workforce solutions and business transformation company. Founded in 1999 by Ben Thakur, the company is certified as a Minority Business Enterprise (MBE). It has grown from a boutique IT staffing agency into a massive global network, managing thousands of internal employees and contract workers across continents. We successfully exfiltrated all employee records (15K), including full names, email addresses, home addresses, DOBs, SSNs, phone numbers, contracts, managers, hire dates, salaries and more. We engaged with eTeam privately some time back, and now we are going public with the announcement as eTeam was negligent of the incident that took place then. We're giving you one more chance. Speak soon or leak soon! |
|||||||
| Stealers | OnlyLogs - @OnlyLogsCloud.rar View Details _ | LogsPlanet | 24/09/2026 | — | leaked | ||
|
📭 BUY PRIVATE — ADMIN: @BuzzLogsPlanet ➖➖➖➖➖➖➖➖➖➖➖➖➖➖➖ 🔑Pass: [Telegram link: professional/enterprise only] ➖➖➖➖➖➖➖➖➖➖➖➖➖➖➖ 🤑 Main Channel || Reserve Channel 🤑 |
|||||||
| Stealers | LINK ТG - @WichLoveFromR.rar View Details _ | Pegasus Cloud | 24/09/2026 | — | leaked | ||
|
Free Upload Pass: @AltairSupport ➡️ Channel sponsor 🟦 Reserve Channel 🟦 |
|||||||
| Stealers | CenturionTXT.rar View Details _ | LogsPlanet | 24/09/2026 | — | leaked | ||
|
📭 BUY PRIVATE — ADMIN: @BuzzLogsPlanet ➖➖➖➖➖➖➖➖➖➖➖➖➖➖➖ 🔑Pass: [Telegram link: professional/enterprise only] ➖➖➖➖➖➖➖➖➖➖➖➖➖➖➖ 🤑 Main Channel || Reserve Channel 🤑 |
|||||||
| Breaches | Apollo.io Full 126M 380GB Tg @ShuiYazi.7z.012 View Details _ | Database World ROC | 24/09/2026 | IO | — | leaked | |
| Breaches | Apollo.io Full 126M 380GB Tg @ShuiYazi.7z.011 View Details _ | Database World ROC | 24/09/2026 | IO | — | leaked | |
| Breaches | Apollo.io Full 126M 380GB Tg @ShuiYazi.7z.010 View Details _ | Database World ROC | 24/09/2026 | IO | — | leaked | |
| Breaches | Apollo.io Full 126M 380GB Tg @ShuiYazi.7z.009 View Details _ | Database World ROC | 24/09/2026 | IO | — | leaked | |
| Breaches | Apollo.io Full 126M 380GB Tg @ShuiYazi.7z.008 View Details _ | Database World ROC | 24/09/2026 | IO | — | leaked | |
| Breaches | Apollo.io Full 126M 380GB Tg @ShuiYazi.7z.007 View Details _ | Database World ROC | 24/09/2026 | IO | — | leaked | |
| Breaches | Apollo.io Full 126M 380GB Tg @ShuiYazi.7z.006 View Details _ | Database World ROC | 24/09/2026 | IO | — | leaked | |
| Breaches | Apollo.io Full 126M 380GB Tg @ShuiYazi.7z.005 View Details _ | Database World ROC | 24/09/2026 | IO | — | leaked | |
| Breaches | Apollo.io Full 126M 380GB Tg @ShuiYazi.7z.004 View Details _ | Database World ROC | 24/09/2026 | IO | — | leaked | |
| Breaches | Apollo.io Full 126M 380GB Tg @ShuiYazi.7z.003 View Details _ | Database World ROC | 24/09/2026 | IO | — | leaked | |
| Breaches | Apollo.io Full 126M 380GB Tg @ShuiYazi.7z.002 View Details _ | Database World ROC | 24/09/2026 | IO | — | leaked | |
| Breaches | Apollo.io Full 126M 380GB Tg @ShuiYazi.7z.001 View Details _ | Database World ROC | 24/09/2026 | IO | — | leaked | |
| Breaches | Apollo_BF.7z.004 View Details _ | Database World ROC | 24/09/2026 | — | leaked | ||
| Breaches | Apollo_BF_.7z.001 View Details _ | Database World ROC | 24/09/2026 | — | leaked | ||