pah.com.my 14d 23h 34m 40s Penang Adventist Hospital (PAH), established in 1924 by American missionary Dr. J. Earl Gardner, is... 14 Nov, 2026, 20:52 UTC 12

APPAREL RETAIL · UNITED STATES Gap Inc. NOT PAID — EXPOSED 95 94 93 92 91 90 89 88 87 86 85 84 83 82 81 80 79 78 77 76 75 74 73 72 71 70 69 68 67 66 65 64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 h 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 m 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 s until leak Details

ATHLEISURE AND SPORTSWEAR RETAIL · UNITED STATES Alo Yoga NOT PAID — EXPOSED 95 94 93 92 91 90 89 88 87 86 85 84 83 82 81 80 79 78 77 76 75 74 73 72 71 70 69 68 67 66 65 64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 h 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 m 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 s until leak Details

OUTDOOR FOOTWEAR AND APPAREL · UNITED STATES Timberland NOT PAID — EXPOSED 95 94 93 92 91 90 89 88 87 86 85 84 83 82 81 80 79 78 77 76 75 74 73 72 71 70 69 68 67 66 65 64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 h 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 m 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 s until leak Details

APPLIANCE AND ELECTRONICS RETAIL · UNITED STATES Airport Appliance, Inc. NOT PAID — EXPOSED 95 94 93 92 91 90 89 88 87 86 85 84 83 82 81 80 79 78 77 76 75 74 73 72 71 70 69 68 67 66 65 64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 h 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 m 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 s until leak Details

COFFEE RETAIL · UNITED STATES Starbucks NOT PAID — EXPOSED 95 94 93 92 91 90 89 88 87 86 85 84 83 82 81 80 79 78 77 76 75 74 73 72 71 70 69 68 67 66 65 64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 h 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 m 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 s until leak Details

FINANCIAL ADVISORY · CANADA MM Insurance Agency NOT PAID — EXPOSED 95 94 93 92 91 90 89 88 87 86 85 84 83 82 81 80 79 78 77 76 75 74 73 72 71 70 69 68 67 66 65 64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 h 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 m 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 s until leak Details

LIVE ENTERTAINMENT INDUSTRY DATA AND PUBLISHING · UNITED STATES Pollstar NOT PAID — EXPOSED 95 94 93 92 91 90 89 88 87 86 85 84 83 82 81 80 79 78 77 76 75 74 73 72 71 70 69 68 67 66 65 64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 h 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 m 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 s until leak Details

FINANCIAL PLANNING AND INSURANCE · CANADA Steeden Financial NOT PAID — EXPOSED 95 94 93 92 91 90 89 88 87 86 85 84 83 82 81 80 79 78 77 76 75 74 73 72 71 70 69 68 67 66 65 64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 h 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 m 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 s until leak Details

APPAREL AND FOOTWEAR GROUP · UNITED STATES VF Corporation NOT PAID — EXPOSED 95 94 93 92 91 90 89 88 87 86 85 84 83 82 81 80 79 78 77 76 75 74 73 72 71 70 69 68 67 66 65 64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 h 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 m 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 s until leak Details

CONSUMER ELECTRONICS, SMART TV ADVERTISING DATA · SOUTH KOREA Samsung Electronics Co., Ltd. NOT PAID — EXPOSED 95 94 93 92 91 90 89 88 87 86 85 84 83 82 81 80 79 78 77 76 75 74 73 72 71 70 69 68 67 66 65 64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 h 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 m 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 s until leak Details

Home care / 93 GB / 84,955 files Home Instead Behind the home care standards. OPEN

Fittleworth is a UK healthcare company providing home delivery of medical supplies and support for people with stomas, continence needs, and wounds.

KAYAKU SAFETY SYSTEMS MALAYSIA SDN BHD Automotive Parts COMPANY URL ZOOM INFO NOV 14, 2026 0 photos Time till publication:  119h : 18m Learn More

F***** G****** C********** C*** w**.f*******.c** USA N/A 50M N/A Locked, Exfiltrated 69:22:29

FINSA During an audit of FINSA—a multi-billion-dollar wood processing company—numerous violations in data storage and infrastructure security were identified. We extracted all confi... READ FULL DESCRIPTION $100,000 SIZE: 800 GB CONTACT: [email protected] SEARCHING BUYER LIST OF FILES × FINSA During an audit of FINSA—a multi-billion-dollar wood processing company—numerous violations in data storage and infrastructure security were identified. We extracted all confidential and production files from their servers, totaling 800 GB. Following this, we completely halted operations by attacking the company’s virtualization. Among the extracted data is now available: Internal production information across FINSA’s facilities Financial documents, databases, and reports Full employee information Wood processing materials and technologies Contracts with partners and their terms And much more. We welcome anyone interested in purchasing all of this company’s data. Additionally, we are prepared to leak the files to the media, competitors, and legal firms for investigations and public lawsuits if you have any intentions toward this company.

F***** G****** C********** C*** w**.f*******.c** USA N/A 50M N/A Locked, Exfiltrated 71:48:54

Absolute Bail Bonds $15.1 million Data will be published on November 28, 2026 Absolute Bail Bonds is a surety bail bond agency that has provided 24/7 pretrial release services across California since 1987. Founded in Lancaster and headquartered in Los Angeles, the company operates statewide through a network of local branch offices and licensed bail agents. We successfully exfiltrated 5GB of Database Files and Source Code plus 3.5TB encrypted on the DC including backups. DOWNLOAD DB CONTACT VIEW SAMPLE

Momentum Telecom $221.7 million Data has been published for public download Momentum is a telecommunications company founded in 2001 that provides cloud-based communication solutions for businesses, specializing in cloud voice services, managed networks, SD-WAN solutions, and Microsoft Teams Phone integration. We gained access to a diagnostic and provisioning tool used by Momentum through a compromised Multi-Service Operator (MSO). Upon reconnaissance, we identified multiple critical vulnerabilities throughout the system. This tool controls internet and voice services for millions of users across global markets. We successfully accessed user data for every MSO, exposing personally identifiable information (PII) for over 7.5 million users. They didn't notice the prolonged access or the customer data dump for a while, but when we started deleting modems they noticed. They kept burning access and we gained it back, they'd burn it again. We have caused widespread outages (https://www.abc4.com/news/wasatch-front/eagle-mountain-internet-outage-cyberattack/). We now have had over 100,000 packages successfully deleted. That's 100,000+ people without internet service right now. Families, businesses, students all cut off from the digital world. This is the direct result of their negligence and failure to secure their systems. These services can be restored immediately with the click of a button on our tool but you must reach out. Click "View Affected MSOs" below to see the full list of compromised providers. Momentum management should contact us to discuss resolution. Affected MSOs can also contact us to have their users' data deleted from our database. Note: Use Tor 'Safer' settings. Looking for alternative file host. If that does not work, join our telegram found on our Contact Us page - you can find the direct download there. DOWNLOAD DB CONTACT VIEW SAMPLE VIEW AFFECTED MSOS

Rosstat SED Published by Bonaventure on 2026-11-13 23:36 Over 3 TB of documents from Rosstat's document management system, including files classified as "DSP" (For Official Use Only). Reserved The data is currently under an embargo set to end January... Read more

[AI generated] N/A I don't have verified, reliable information about a specific company called "Grundbaulabor Trier GmbH." While the name suggests a geotechnical or soil mechanics testing laboratory (Grundbau relates to foundation engineering) based in Trier, Germany, I cannot confirm details about this specific entity's operations, services, or corporate status with sufficient confidence to provide an accurate factual description.

I****** A***** i***************.c** Kuwait N/A N/A 1000+ Locked, Exfiltrated 67:03:04

🔑 .pass: ➖ 📘 .info | 👥 .chat | 📢 .admin 🦁 DAISY CLOUD 🇮🇹 BEST CLOUD! 🏛

🔑 .pass: ➖ 📘 .info | 👥 .chat | 📢 .admin 🦁 DAISY CLOUD 🇮🇹 BEST CLOUD! 🏛

🔑 .pass: ➖ 📘 .info | 👥 .chat | 📢 .admin 🦁 DAISY CLOUD 🇮🇹 BEST CLOUD! 🏛

🔑 .pass: [Telegram link: professional/enterprise only] 📘 .info | 👥 .chat | 📢 .admin 🦁 DAISY CLOUD 🇮🇹 BEST CLOUD! 🏛

🔑 .pass: @PIXELCLOUD3 📘 .info | 👥 .chat | 📢 .admin 🦁 DAISY CLOUD 🇮🇹 BEST CLOUD! 🏛

🔑 .pass: @PIXELCLOUD3 📘 .info | 👥 .chat | 📢 .admin 🦁 DAISY CLOUD 🇮🇹 BEST CLOUD! 🏛

🔑 .pass: @txt_a 📘 .info | 👥 .chat | 📢 .admin 🦁 DAISY CLOUD 🇮🇹 BEST CLOUD! 🏛

🔑 .pass: @fatetraffic 📘 .info | 👥 .chat | 📢 .admin 🦁 DAISY CLOUD 🇮🇹 BEST CLOUD! 🏛

🔑 .pass: @watercloud_info 📘 .info | 👥 .chat | 📢 .admin 🦁 DAISY CLOUD 🇮🇹 BEST CLOUD! 🏛

🔑 .pass: @kraken_cloud_adapter 📘 .info | 👥 .chat | 📢 .admin 🦁 DAISY CLOUD 🇮🇹 BEST CLOUD! 🏛

🔥🔥🔥🔥🔥🔥🔥🔥 💎 Buy VIP channel👑 @Hajit00n - @LegioN_LeakeRs

База розничных компаний ( 47 ОКВЭД ) Отмечен рост чистой прибыли 24/25 год. Для взаимодействия есть: номер, почта (95%) По запросу можем найти контакт ЛПР. Связь: Telegram ВКонтакте +79397886929 Отзывы Наш сайт

I****** A***** i***************.c** Kuwait N/A N/A 1000+ Locked, Exfiltrated 70:27:01

K&A Industries is a "secure identity architecture" company that manages the entire authentication lifecycle for government and enterprise clients. As a result, their own security weaknesses led to the compromise of sensitive personal data, biometric templates, and government contract data. K&A also provides PIV credentials to government agencies, such as the Los Alamos National Laboratory, which involves processing the personal data of federal employees. A breach of this data would trigger a cascade of legal, financial, and operational crises, leading to breach notification obligations under GDPR/government regulations, multimillion-dollar fines and class action lawsuits, loss of government contracts/CMMC status, and physical data breaches using cloned credentials at client sites.

[AI generated] N/A "Final Notice Before Publication" does not correspond to a known company. This phrase is commonly used in extortion or double-extortion ransomware campaigns, where threat actors threaten to publish stolen data unless a ransom is paid. If you encountered this term in a specific context, please share more details so I can assist further.

Engineering / 1.6 TB / 1,131,971 files VHV Company Building plans exposed in data breach. OPEN

Status: Pending (publication 2026-11-16 20:46 UTC) | Revenue: $343M | ██████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████

Status: Pending (publication 2026-11-17 21:13 UTC) | Revenue: $████ | ███████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████

United States

United States

04 Veritiv ~$7.1 billion yearly VERIFIED LEAK COUNTDOWN Veritiv. Yearly revenue ~$7.1 billion yearly. Leak countdown active. HELIX · Operator · 2 days 45:17:16LEFT

Allegis Cloud ~$13.4 billion yearly VERIFIED LEAK COUNTDOWN Allegis Cloud. Yearly revenue ~$13.4 billion yearly. Leak countdown active. HELIX · Operator · 2 days 46:16:58LEFT

CWCTravel ~$432.5 million yearly VERIFIED LEAK COUNTDOWN CWCTravel. Yearly revenue ~$432.5 million yearly. Leak countdown active. HELIX · Operator · 2 days 46:16:57LEFT

Mnfhs ~$8.8 billion yearly VERIFIED LEAK COUNTDOWN Mnfhs. Yearly revenue ~$8.8 billion yearly. Leak countdown active. HELIX · Operator · 2 days 46:16:57LEFT

Walgreen Co. Walgreen Co. is a U.S. community pharmacy and retail company operating Walgreens drugstores. It fills prescriptions and provides pharmacy and health services, alongside over-the-counter medicines, personal-care products, beauty items, and everyday essentials through its stores and online DOCUMENTS +5 MORE ENDS IN 6d 01h 09m 59s Walgreen Co. ✕ ENDS IN 6d 01h 09m 57s DOCUMENTS FINANCIAL EMAILS CREDENTIALS PERSONAL DATA MEDIA Walgreen Co. is a U.S. community pharmacy and retail company operating Walgreens drugstores. It fills prescriptions and provides pharmacy and health services, alongside over-the-counter medicines, personal-care products, beauty items, and everyday essentials through its stores and online

The Tidewater Inn

Advantage Archives Advantage Archives partners with communities to preserve and provide digital access to their historical newspapers and documents. We preserve the past make it accessible in the present, and ensure it has a future. Who We Are - We work to digitize history to make it discoverable and easily accessible, allowing communities to understand and connect to their past in a meaningful way. Country: US Revenue: 13100000 Post bbc57e15-e3d2-4961-95c5-bb31a05c3b66

Ministry of Finance (Samoa) Published by Bonaventure on 2026-11-13 13:02 More than 85,000 emails from the Government of Samoa's Ministry of Finance. The Ministry advises the government on economic and financial policies and ensuring the proper and efficient use of... Read more

BAE Exchange baexchange.mu ALL DATA BAE Exchange is a fintech platform based in Port Louis, Mauritius, providing cryptocurrency exchange and international money transfers through 400 plus physical agents across the island and a digital platform serving 32,000 plus clients. Founded by Flavia Moktof and Gungo Boucher, it operates across 7 countries including Mauritius, Seychelles, Maldives, Kenya, Tanzania, Madagascar and Reunion. Its hybrid online and offline model connects digital crypto trading with traditional remittance services targeting the Mauritian diaspora in France and India. Key services include BTC, ETH and USDT exchange for Mauritian rupees, competitive international transfer rates and insurance offerings. The company also runs financial education programs including webinars on cryptocurrency and regulatory frameworks in Mauritius. It positions itself as a trusted partner for underserved communities needing access to both modern crypto and traditional financial services. Activates in 238:48:50

19d 19h 31m 27s NOV 13, 2026 610GB Featured RE/MAX Germany RE/MAX Germany specializes in real estate services, including the buying, selling, and renting of residential and commercial properties. The... 6 RE/MAX Germany 610GB Featured November 13, 2026 RE/MAX Germany specializes in real estate services, including the buying, selling, and renting of residential and commercial properties. They also offer opportunities for individuals to become real estate agents or franchisees, emphasizing professional training and a strong support network. Their unique digital offering, DAVEit, aims to provide transparent and fair pricing for buyers and sellers. With a commitment to high-quality standards and customer satisfaction, RE/MAX is recognized as a global leader in the real estate market. Download Sample 19d 19h 31m 21s

sportsmansguide.com Sportsman’s Guide is a leading e-retailer of outdoor sporting goods including Hunting, Fishing, Shooting, Firearms and Ammo, Clothing and Footwear, Camping, Military Surplus, and Outdoor Living products. We are one part of a formidable outdoor adventure group selling top-name and private label brands through a powerhouse e-commerce business. Growing from a company that originated in our founder's basement to a major online and catalog retailer requires a lot of effort from many great people. These people are more than employees, they are our friends and neighbors, campers, and hunting buddies. We love the great outdoors, and we bring it with us when we come to work. Join us as we lead the way in delivering exceptional products, with the bonus upside of having access to our own playground of toys. Country: US Revenue: 10000000 Post 01f57612-b1e2-4f41-bc61-fd09b40aebe9

Galorath Published: 2026-11-13  Galorath Incorporated has invested more than two decades developing solutions to help governmen              |                                | t and commercial organizations plan and manage complex software, hardware, electronics, manufac              |                                | turing and IT projects. Its suite of SEER productivity development applications is the most com              |                                | prehensive estimation and management solution in the industry.                                               |                                |                                                                                                              |                                | We will upload 12gb of corporate data soon. Employee personal information (passport, DLs and ot              |                                | her HR files), payment details, contracts and agreements with NASA, Airbus, Lockheed Martin, Bo              |                                | eing and others,  financials, NDAs and so on.                                                                |                                |                                                                                                  Terminal status: pending

Replogle Globes Published: 2026-11-13  Founded in 1930, Replogle Globes is a manufacturer and retailer of handcrafted globes, of diffe              |                                | rent colors, types, and custom globes with online ordering. The company is headquartered in Hil              |                                | lside, Illinois.                                                                                             |                                |                                                                                                              |                                | We will upload 404gb of corporate data soon. Employee personal information (passport, DLs and o              |                                | ther HR files), contracts and agreements, customer data, financials, NDAs and so on.                         |                                |                                                                                                  Terminal status: pending

Paragon Mechanical Published: 2026-11-13  Paragon Mechanical Inc. is a premier full-service mechanical contractor based in Silicon Valley              |                                | , specializing in HVAC, piping, architectural sheet metal, and plumbing services. The company o              |                                | ffers a wide range of capabilities including design, fabrication, and installation for both sma              |                                | ll and large commercial projects.                                                                            |                                |                                                                                                              |                                | We will upload 37gb of corporate data soon. Employee personal information (passport, medical in              |                                | formation, DLs, DOB and so on), contracts and agreements, customer data, police reports, detail              |                                | ed and confidential financials, NDAs and so on.                                                              |                                |                                                                                                  Terminal status: pending

The CCMC Views: 3 🇺🇸 United States +2 As a result of the attack on The CCMC, more than 25 GB of confidential data was stolen. This data includes more than 50,000 files containing property and maintenance documentation, documents related to owners and tenants—including personal data—financial reports, banking information, and other important company information. $208.7 Million Revenue 50,878 Files Checked 25.6 GB Data Analyzed 9d 21h 41m 35s

World Wide Fittings 🇺🇸 https://www.worldwidefittings.com $60.0M Global manufacturer of steel and stainless hydraulic tube and pipe fittings Read more... #Clients #Accounting #Project #PersonalData 56K 580K 250.9GB 15 0 Contact us to prevent leak 3d 23h 52m 17s until release 3.7K

Incident disclosure Koray Topaç Hukuk Bürosu negotiating

Carsem 2d 23h 01m 13s Carsem is a leading provider of turnkey packaging and test services to the semiconductor industry, and offers one of the largest package and test portfolios in the world. Some samples of the leaked data will be made public in three days. Nov 13, 2026 6:26 AM 65.1 MB 69

PREPAID UTILITIES AND AIRTIME PLATFORM · BOTSWANA Company #216 PENDING EXPOSURE 167 166 165 164 163 162 161 160 159 158 157 156 155 154 153 152 151 150 149 148 147 146 145 144 143 142 141 140 139 138 137 136 135 134 133 132 131 130 129 128 127 126 125 124 123 122 121 120 119 118 117 116 115 114 113 112 111 110 109 108 107 106 105 104 103 102 101 100 99 98 97 96 95 94 93 92 91 90 89 88 87 86 85 84 83 82 81 80 79 78 77 76 75 74 73 72 71 70 69 68 67 66 65 64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 h 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 m 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 s until exposure

🔑 .pass: @watercloud_info 📘 .info | 👥 .chat | 📢 .admin 🦁 DAISY CLOUD 🇮🇹 BEST CLOUD! 🏛

🔑 .pass: @GO_DAISYCLOUD 📘 .info | 👥 .chat | 📢 .admin 🦁 DAISY CLOUD 🇮🇹 BEST CLOUD! 🏛

Washington Mills Published: 2026-10-15 Status: Proof Data size: 720GB Views: 1 Website: https://washingtonmills.com/ Country: USA Revenue: $140M Employees: 600 About company: Washington Mills holds the distinction of being the oldest abrasive grain company in continuous operation in the United States. Washington Mills produces abrasive grain to exacting specifications for a wide variety of end markets. Data description: Confidential, Employees' PII (Personally Identifiable Information), Correspondence, Projects, R&D, Contracts, Agreements, NDA, Leak countdown: 6d 23:57

axiscades.com AXISCADES USA is a leading product engineering solutions company catering to the futuristic needs of aerospace, defence, heavy engineering, automotive, energy, medical & healthcare sectors. --- A critical incident occurred, resulting in the leak of over 6.6 TB of confidential data, including proprietary software, client projects, computational models, personal data, machine learning scripts, and much more... --- The main clients are: caterpillar.com airbus.com Country: IN Revenue: 113900000 Announcement 6af628d5e91d0d7b3fdf7851

Status: Leaked | Revenue: $330M | Benchmark Senior Living is a U.S. operator of senior living communities providing independent living, assisted living, memory care, and skilled nursing services. It offers personalized care, housing, and lifestyle programs for older adults across multiple states, focusing on health, safety, and quality of life

12D 23H 42M 23S UPPER WEB https://upperweb.com.br/ 1.3 GB Upper Web is a Brazilian digital solutions company specializing in website development, e-commerce platforms, graphic design, branding and digital content creation. It provides creative and technology services to businesses seeking to strengthen their online presence and digital operations. 2026-11-12 19:35:51 UTC

48D 23H 40M 23S OSIIMINPPAL https://www.osiiminppal.com/ 100 MB https://www.osiiminppal.com/ 2026-11-12 19:33:33 UTC

48D 23H 38M 23S FRANC-OIL https://franc-oiloffshore.com.ng/ 200 MB Franc-Oil is a Nigerian offshore and marine services company specializing in vessel chartering, marine logistics, dredging, crew management, offshore construction and oilfield support. It provides maritime and technical solutions to support operations in the oil and gas industry. 2026-11-12 19:31:24 UTC

Rosstat death statistics Published by Bonaventure on 2026-11-12 19:34 Records of Russian deaths, their locations, their causes, and other associated information. Reserved The data is currently under an embargo set to end November 23, 2026. Until the embargo ends,... Read more

Policía Nacional del Ecuador Published by Bonaventure on 2026-11-12 15:28 Hundreds of thousands of documents, spreadsheets, images and other files from Policía Nacional del Ecuador (National Police of Ecuador). Reserved Until the scope of the data is better understood,... Read more

1. March 28, 2022: SCDHEC issued Eastwood Homes LLC a Notice of Alleged Violation concerning Swygert’s Landing Phase 4. The regulator cited deficiencies in erosion and sediment controls at the 29.1-acre site and deemed the soil stabilization measures submitted on March 15 inadequate. 2. April 22, 2021: A pre-drywall reinspection of a new home confirmed that some deficiencies had been corrected, but continued to identify raised shingles, several unreinforced porch joists, a risk of pipe damage from fasteners, loose plumbing fixtures, HVAC vent piping in contact with insulation/mastic, and unres

We are in possession of internal documents from Integrated Marketing Services, Inc. ("IMS," Liverpool, NY) covering the period from 2000 to 2026. The total volume exceeds 205 GB: financial statements, payroll records, contracts, bank statements, insurance policies, federal contract documents, corporate correspondence — and, most critically, personal data on hundreds of thousands of individuals who never authorized a direct mail house to store information about their health, finances, or personal lives.

Inside: the company's legal name — Pacific Pavingstone Inc. DBA Pacific Outdoor Living Inc. — with EIN 95-4768707 and California Contractor License No. 715731 (classes B-C61/D06-C27); names, titles, direct phone numbers, and corporate emails of six key employees; the full corporate Visa card number (4246315317940656) used to pay for geotechnical engineering reports; banking details of a freight carrier (JPMorgan Chase, ABA 021000021, account 652678381) through which customs payments were processed; names, home addresses, phone numbers, and project values for twelve affluent clients from North

Multifeeder Technology, Inc. / MFT Automation 4821 White Bear Parkway, St. Paul, MN 55110 · EIN 41-1838686 · October 2026

Bristol Industries LLC, a U.S. Department of Defense contractor managing FUDS (Formerly Used Defense Sites) program data, has systematically violated cybersecurity requirements for 6 years. The company has access to Controlled Unclassified Information (CUI), coordinates of thousands of military sites, and chemical weapons burial data, but fails to provide adequate protection for this information.

20d 14h 12m 31s NOV 12, 2026 16GB Ministry of Health Malaysia The Ministry of Health is a ministry of the Government of Malaysia that is responsible for health system including: health behavior, cancer,... 23 Ministry of Health Malaysia 16GB November 12, 2026 The Ministry of Health is a ministry of the Government of Malaysia that is responsible for health system including: health behavior, cancer, public health, health management, medical research, health systems research, respiratory medicine, health promotion, healthcare tourism, medical device, blood collection, leprosy control, clinical research, health care, dental care, health institution, laboratory, pharmaceutical, patient safety. 20d 14h 12m 25s

Airblue

toyokiki-thailand.com Established in 2013 as a subsidiary of Toyokiki Industrial Co., Ltd. of Japan, the company specializes in manufacturing and processing … 8 Learn More

DIGITAL BEAUTY COMMUNITY AND COMMERCE · INDONESIA Female Daily Network NOT PAID — EXPOSED 71 70 69 68 67 66 65 64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 h 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 m 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 s until leak Details

PHARMACEUTICAL (DERMATOLOGY AND THROMBOSIS) · DENMARK LEO Pharma A/S NOT PAID — EXPOSED 71 70 69 68 67 66 65 64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 h 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 m 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 s until leak Details

MOBILE ADVERTISING AND AUDIENCE DATA · CANADA Native Touch Inc. NOT PAID — EXPOSED 71 70 69 68 67 66 65 64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 h 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 m 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 s until leak Details

COMMERCIAL TRUCK DEALERSHIP · UNITED STATES Texas Truck Center NOT PAID — EXPOSED 71 70 69 68 67 66 65 64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 h 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 m 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 s until leak Details

https://www.jnattorney.com/ 3 TB of data, 200,000 passports from various countries, and 800,000 files — a data breach affecting multi-billion-dollar companies. were personal data, Social Security numbers (SSN), non-disclosure agreements (NDAs), contracts, salary information, payment records, and internal confidential documentation from corporations with multi-billion-dollar turnovers, as well as evidence of schemes related to the provision of immigration services, strategic plans, and more. Country: US Revenue: 5000000 Post 306ab205-691d-4c14-8f85-6d4a6fa08ce2

Gator Works Computing (Smith Law Firm, Beauchamp Edwards Epas, Wise Accounting Tax Services inc, Tri County Chiropractic) # Gator Works Computing Inc. — Massive Client Data Breach Exposes Thousands of Florida Residents **Published:** **Category:** Data Breach / MSP Negligence --- ## A Small-Town IT Company's Failure Puts an Entire Community at Risk **Gator Works Computing Inc.**, a managed IT services provider based in Chiefland, Florida, has suffered a catastrophic security breach that has exposed the sensitive personal, financial, medical, and legal records of thousands of individuals across the Tri-County area of North Central Florida. Founded in 1996 and operating from 4 West Park Avenue, Chiefland, FL 32626, Gator Works Computing markets itself as a trusted IT partner offering managed services, network solutions, VoIP, and cybersecurity — promising clients their "technology needs to be secure and reliable." That promise has now been broken in the most devastating way possible. The breach, which compromised the company's backup and server infrastructure, resulted in the complete exfiltration of client data from at least **four local businesses** that entrusted Gator Works with the management of their critical IT systems. --- ## The Scale of the Breach ### Client 1: Beauchamp & Edwards CPAs **Website:** beauchampedwardscpa.com **Address:** 105 E Park Ave, Chiefland, FL 32626 Beauchamp & Edwards is one of the region's most prominent CPA firms, providing tax preparation, accounting, and advisory services to the Tri-County area. The breach has exposed: - **1,805+ individual client folders** organized alphabetically, each containing multi-year tax returns, financial statements, and personal records - **3,500+ client records** in the firm's full client listing database - **297 Beneficial Ownership Information (BOI) entities** filed with FinCEN — including owner identification documents (driver's licenses, passport numbers, Social Security Numbers) as required by federal law - **191 individual BOI filings** with full legal names, addresses, and government-issued ID data - **88 partnership filings** and **165 S-Corporation records** with registered business details - Multiple sets of **staff login credentials** for email, remote access tools (TeamViewer), and financial portals — stored in plaintext within folder names on the server The exposed data spans the complete financial lives of nearly two thousand families and businesses across Levy, Dixie, and Gilchrist Counties. Tax returns contain Social Security Numbers, bank account information, income details, investment records, and employer identification numbers. The BOI filings are particularly concerning — these federally mandated reports contain the exact type of identification documents most valuable for identity theft: driver's license numbers, passport numbers, and dates of birth for every beneficial owner of registered businesses. --- ### Client 2: Smith Law Firm, LLC **Website:** smithlawfirmfl.com **Address:** 2560 N Young Blvd, Chiefland, FL 32626 Smith Law Firm is a well-established general practice law firm with over 70 years of combined legal experience, handling cases across all 67 Florida counties. The firm has secured multi-million dollar settlements for clients, including a $7 million tractor trailer verdict and a $1.75 million nursing home negligence case. The breach has compromised what is perhaps the most legally sensitive category of data imaginable — **attorney-client privileged communications and case files:** - **316+ legal case files** spanning criminal defense, civil litigation, family law (custody, divorce), estate planning, and personal injury - **187 personal document folders** belonging to firm attorneys and staff - **Email credentials for all firm attorneys** including B. Larry Smith, Christine Smith, Shannon, Caleb, Dorys, and service accounts — extracted from a scanned password document stored on the server - **Client Social Security Number lists** maintained for case management - **IOTA trust account records** — attorney trust funds holding client money - Criminal de Country: US Revenue: 10000000 Post 9d80659f-6fcd-4d53-bb2e-304d6170166d

Coopecaja full Country: CR Revenue: 31000000 Post 12b58501-380b-44c1-af3f-423816ec59dd

ZIRNET LLC (mmplumbingny.com alpha1usa.com askconstruction.com mmplumbingny.com tristate-safety.com lanmarkgc.com) # ZIRNET LLC — Managed Service Provider — FULL BREACH **Published:** October 2026 **Sector:** Information Technology / Managed Services (MSP) **Location:** Port Washington, New York, USA **Website:** zirnet.com --- ## Summary ZIRNET LLC is a Managed Service Provider (MSP) based in Long Island, New York, providing IT management, cloud services, VoIP, and network infrastructure to over 20 small and mid-size businesses across New York, New Jersey, and Florida. We have obtained **complete access** to ZIRNET's internal servers, including **all client data they manage**. This represents a catastrophic MSP supply-chain breach affecting **13+ organizations** and hundreds of individuals. **Total data: 2,260,963 files across ZIRNET and 12 client server backups.** --- ## Affected Organizations ZIRNET's negligent security practices have resulted in the exposure of the following companies' complete IT environments: | # | Company | Industry | Location | Files | |---|---------|----------|----------|-------| | 1 | **AlphaOne USA LLC** | Marine & Construction Supply | Miami, FL / Long Island City, NY | 148,118 | | 2 | **ASK Construction Corp** | General Contracting | New York, NY | 92,247 | | 3 | **Dynotec Contracting Inc (DCI)** | Construction | Brooklyn, NY | 180,858 | | 4 | **Industrial Solutions NY (ISNY)** | Industrial Supply & Services | New York, NY | 262,702 | | 5 | **King Contracting Corp** | General Contracting | New York, NY | 67,997 | | 6 | **Lanmark General Contracting** | General Contracting | New York, NY | 251,861 | | 7 | **M&M Plumbing & Heating NY** | Plumbing & HVAC | New York, NY | 122,626 | | 8 | **Pibbs Industries** | Salon Equipment Manufacturing | Hauppauge, NY | 214,495 | | 9 | **Rising Sun General Contracting** | General Contracting | New York, NY | 340,559 | | 10 | **Seabreeze General Contracting** | General Contracting | New York, NY | 53,665 | | 11 | **The USA Roofer / USA GC** | Roofing & Contracting | NY / FL | 469,495 | | 12 | **Tristate Safety Corp** | Safety Products & Services | New York, NY | 53,597 | **Additional organizations with exposed credentials and data:** - Skylatus Property Capital LLC (Real Estate) - ClearScope (myclearscope.com) - Midtown Operating Corp - Credit and Debt Management Institute (Bolivar, TN) - La Perla Construction & Design - LIVOTIS Old World Market - St. Albans Congregational Church (Queens, NY) - Creative Mobile Technologies (CMT) - North Side Transmission - NY Flooring Inc - Metropolitan Association of the NY Conference --- ## What Was Obtained ### 1. ZIRNET Internal Data (2,743 files) - **QuickBooks databases** — Zirnet.QBW (163 MB) and 2025.QBW (155 MB) — complete financial records - **Bank statements** — TD Bank, American Express, Bank of America — 36 PDF statements covering 2024-2026 - **Email archive** — 3.27 GB of PST files (Outlook) containing all business correspondence - **IRS documents** — W-9, estimated tax payments, certified copies - **Client proposals and contracts** — service agreements with all clients ### 2. Complete Credential Database (100+ accounts) For each managed client, ZIRNET stored passwords in **cleartext** text files. We obtained: - **King Contracting:** 30+ Active Directory and M365 accounts with plaintext passwords - **Industrial Solutions (ISNY):** 39 email accounts with passwords - **ClearScope:** 8 Microsoft 365 accounts with passwords - **Skylatus Property Capital:** Full IT documentation export including 33 accounts, firewall admin, DNS admin, VPN pre-shared keys, Barracuda admin, Azure credentials - **St. Albans Church:** 18 email accounts + Azure tenant secret key - **LIVOTIS:** 3 accounts + VoIP portal access - **AlphaOne USA:** Banking passwords (AMEX, Chase, CitiBusiness) ### 3. Hidden Backdoor Account on ALL Client Machines ZIRNET created a **hidden administrator account** on every managed workstation and server: ``` Username: NetworkAccess Password: [REDACTED] ``` This account is hidden from the Windows login screen using registry manipu Country: US Revenue: 1000000 Post 80eed2d5-4ecc-474a-b710-91c1a3d9cdda

Trulite Glass & Aluminum Solutions # TRULITE GLASS & ALUMINUM SOLUTIONS **TL Vista Merger Parent Corp. | Arch Aluminum & Glass Holding Corp.** --- ## Company Profile Trulite Glass & Aluminum Solutions is one of the largest independent glass and aluminum fabricators in North America. Headquartered in **Alpharetta, Georgia**, the company operates **42 manufacturing and distribution facilities** across the United States and Canada, employing approximately **1,700 people**. Trulite is a portfolio company of **Truelink Capital**, a Los Angeles–based private equity firm that acquired the company from Sun Capital Partners in 2022. **Annual Revenue: $693,500,000 (FY2025 audited)** **Total Assets: $651,000,000** **Total Debt: $355,700,000** --- ## The Breach Trulite's entire corporate network, including all production servers, SQL databases, domain controllers, file servers, and cloud infrastructure, has been fully compromised. **Over 8 terabytes** of critical business data has been exfiltrated from the company's internal systems. The data obtained represents the **complete operational history** of Trulite Glass & Aluminum Solutions — from financial records spanning over 25 years to real-time customer portal data with 76,000+ records, to full SQL database dumps containing every transaction ever processed through their Microsoft Dynamics AX ERP system. Trulite's management has been contacted and given the opportunity to resolve this matter privately. **They have chosen not to cooperate.** --- ## What We Have ### 1. COMPLETE FINANCIAL RECORDS The full audited financial statements for FY2025, prepared by **Crowe LLP** and signed on April 28, 2026, have been obtained. These are non-public, confidential documents that expose: - **Revenue: $693,537,798** (glass $485M, metal $51M, stock lengths $30M, other $126M) - **Gross Profit: $176,005,689** (25.4% margin) - **Operating Income: $12,983,799** - **EBITDA: ~$83,000,000** - **Net Loss: -$36,858,762** (driven by $47.7M in interest expense on $400M Term Loan) - **$400 million syndicated Term Loan** (March 2024, maturity March 2030, interest rate 9.98%) - **$75 million Revolving Credit Facility** ($18M drawn, $67.8M available) - **$208 million in Goodwill** from acquisitions (Insulite Holdings, Dependable Glass, AIG) Additionally obtained: - Complete **Consolidating Trial Balances** (FY2024-2025) - **Confidential Information Memorandum** (CIM) — the private equity sales document used in the 2017 auction by Harris Williams & Moelis - **Branch-level P&L statements** (2014-2025) for all 42 locations - **EBITDA by Branch** reports showing profitability of each facility - **13-Week Rolling Cash Flow Forecasts** - Year-over-year financial analysis documents - CAPEX plans and capital project requests - Complete **Crowe audit working papers** (2016-2026) ### 2. BANK ACCOUNTS & TREASURY **14+ bank accounts fully exposed** with monthly statements from January through May 2026: - **Wells Fargo** — 9 accounts: Disbursements (xx2088), Payroll (xx8660), Sweep (xx8654), Payables, Receivables (xx8612), INS Payables (xx8987), INS Receivables (xx8979), AIG Disbursements (xx1689), AIG Receivables (xx1273) - **Cadence Bank** — 2 accounts: AIG Operating (xx7502), AIG Sweep (xx5021) - **Huntington Bank** — Account (xx3759) - **US Bank** — 2 accounts: Operating (x2315), Payroll (x2075) Every statement includes full account numbers, routing numbers, counterparty names, and individual transaction details. Daily cash deposits average **$140,000-$150,000+**. Wire transfer authorization forms, EFT banking procedures, and corporate credit card data (Wells Fargo, PNC) are also included. ### 3. COMPLETE SQL DATABASE DUMPS — 5.1 TERABYTES Three production SQL servers have been fully dumped: | Server | Size | Contents | |--------|------|----------| | **tru-axsql01** | 564 GB | Production Microsoft Dynamics AX: ArchBar, AxDBExport, FinancialReporting, ProdReports, TruliteNet | | **tru-cl-axdb6** | 1.9 TB | Cluster node: **ADP payroll data** (employee SSNs, salari Country: US Revenue: 1100000000 Post 78c7b222-5cf0-4f70-9cf9-02a17b72219d

SOON 10 cey-tech.com Ceytech Makina Sanayi ve Ticaret A.Ş. is a Turkish manufacturer of industrial machinery and equipment, established on A... 71:50:58

ProMantra, Inc. is a US-based healthcare IT and business process outsourcing (BPO) company founded in 2003 and headquartered in Somerset, New Jersey. The company specializes in Revenue Cycle Management (RCM), medical billing, medical coding, claims processing, and healthcare administrative services. It serves hospitals, physician groups, medical practices, and other healthcare organizations, primarily in the US, with operational delivery centers in India. Data size: 50 GB Revenue: USD 50M

Chicago History Museum # CHICAGO HISTORY MUSEUM — DATA BREACH  **Organization:** Chicago History Museum (formerly Chicago Historical Society) **Location:** 1601 N Clark Street, Chicago, IL 60614 **Website:** chicagohistory.org **CEO:** Michael J. Anderson, President & CEO **Industry:** Non-profit / Cultural Institution **Breach Date:** September 2026 **Data Volume:** 4 departments + AWS cloud infrastructure, 15+ years of records **Individuals Affected:** 20,000+ --- ## WHAT HAPPENED Chicago History Museum's internal file server **and** AWS cloud infrastructure have been fully compromised. Sensitive data from four departments and the production cloud environment has been exfiltrated: **From Internal File Server:** - **IT Credentials** — AWS root keys, server passwords, BitLocker encryption keys, 20+ vendor portal logins in plaintext - **Accounting & Finance** — 15 years of ADP payroll records (2006–2021), bank reconciliations, audit workpapers, ACH authorization documents - **Human Resources** — Employee background checks containing Social Security Numbers, I-9 immigration documents, personal identity verification forms - **Development / Institutional Advancement** — Board of Trustees home addresses, major donor pledge records ($4.4M+ in named donations), corporate funder relationships, donor CRM exports **From AWS Cloud (Account 187824323586):** - **Production Database** — Full access to Aurora MySQL containing the museum's website, 27,422 form submissions with visitor personal data - **14 EC2 Servers** — Complete control of production, staging, and scaling infrastructure - **S3 Backups** — 20 GB of website backups (146,000 files) — the only cloud backup - **27,422 Public Records** — Names, emails, phone numbers, and personal details of museum visitors, event clients, school field trip contacts, donor applicants, interns, and volunteers collected over 7 years --- ## DATA SAMPLES ### 🔑 IT Credentials Exposed in Plaintext AWS root account access keys, BitLocker disk encryption recovery key, and passwords for Adobe, Microsoft, Blackbaud (donor payment platform), Symantec, and 20+ grant portals including Boeing, ComEd, Exelon, MacArthur Foundation, SAM.gov, and City of Chicago. *See: Screenshots 01–05* ### 👥 Board of Trustees — Home Addresses Full names, home addresses, ZIP codes, and spouse names for 40+ members of the Board of Trustees, including prominent Chicago families residing in Lake Shore Drive, Winnetka, Lake Forest, Hinsdale, and Gold Coast neighborhoods. *See: Screenshot 06* ### 💰 Donor Pledge Records — Named Amounts Capital Campaign Endowment pledge details totaling $4,460,684 from Board of Trustees members, including individual named amounts ranging from $2,000 to $700,650. Corporate donors include Molex Inc., First Chicago NBD, LaSalle National Bank, Crate & Barrel, and Commonwealth Edison. Notable: Donald Rumsfeld — $50,000 pledge documented. *See: Screenshot 07* ### 📊 15 Years of Payroll Data ADP payroll general ledger reports from 2006 through 2021 containing employee compensation details, benefit allocations, and salary breakdowns for all museum staff. *See: Screenshot 08* ### 🔒 Employee SSN & Background Checks Background check documents for 20+ employees including SSA-89 Social Security verification forms, I-9 immigration employment authorization documents, and personal identification records. Under the Illinois Personal Information Protection Act (PIPA), this constitutes a reportable data breach requiring notification to the Illinois Attorney General and all affected individuals within 45 days. *See: Screenshot 09* ### 🏗️ Complete IT Infrastructure Server inventory (20 servers, VMware ESXi environment), full Cisco network topology (5 switches, 450+ patch panel mappings), VLAN architecture, external IP ranges, and firewall configuration. Multiple Windows Server 2003 systems still operational. *See: Screenshots 10–11* ### 🏦 Banking Records & Prior Fraud 14 years of bank reconciliation files (BMO Harris, Nort Country: US Revenue: 20000000 Post 2fef319a-2e8a-45c5-b8bb-ce1d5f7722f7

Zito Marketi # The Neighborhood Shop That Conquered a Nation’s Retail Landscape ## How a single family’s modest grocery store in Veles evolved into a 70-strong national network by proving that scale and community trust are not mutually exclusive. In the retail industry, there is a persistent myth that to scale nationally, a brand must inevitably shed its local soul. The prevailing logic dictates that as a chain expands, the neighborhood warmth of its origins is replaced by sterile corporate efficiency, and the familiar faces behind the counter are swapped for standardized kiosks. But in North Macedonia, a retail network that now spans dozens of towns and employs over 850 people is quietly dismantling that assumption. They are proving that the secret to dominating a national market might just be remembering exactly what it feels like to run a single corner store. ## The Story ### A Dream in Veles The year was 1988. The retail landscape of the Balkans was on the precipice of massive change, but in the town of Veles, the Doševski family was focused on a much smaller canvas. They opened a modest neighborhood shop—a traditional local grocery. At the time, it was not merely a business adventure; it was the physical manifestation of a family dream. Starting a retail business in any era requires a leap of faith, but doing so with a clear vision for a future that had not yet arrived requires something more. The Doševski family possessed an unwavering belief in their community. They understood early on that a grocery store is not just a place to exchange currency for goods; it is a daily touchpoint in people's lives. By treating every customer not as a transaction, but as a neighbor, they laid a foundation of trust that no amount of corporate marketing could buy. As the years passed, the knowledge gained from those early days behind the counter became their greatest asset. They learned the rhythms of the town, the preferences of the locals, and the exact meaning of relentless dedication to service. This deep, localized understanding allowed them to expand their horizons, opening several more sales facilities throughout Veles. They were no longer just a single shop; they were a local institution. ### The Capital Leap and the Turning Point Growth, however, demands evolution. The quality of their offerings and the fierce loyalty of their buyers eventually pushed the family to take a significant strategic step: opening their first market in Skopje, the capital of North Macedonia. Moving from a regional hometown favorite to the highly competitive, fast-paced capital is where many local brands fracture. The temptation to abandon local principles for mass-market tactics is immense. Yet, the true inflection point in the company’s history arrived between 2014 and 2015. This was not a period of gradual, cautious growth, but rather an era of explosive expansion. In a remarkably short window, the brand—now operating as Zito Marketi—opened more than 20 supermarkets across the country. To open 20 stores in such a condensed timeframe is a logistical and operational marvel for any company, let alone one rooted in family values. It required a supply chain that could handle massive volume, a hiring apparatus that could onboard hundreds of staff, and a management structure that could maintain quality control across vast distances. They achieved this by leaning heavily into the very principles that built them in Veles. The strategic expansion cemented their presence and fortified their reputation, transforming them from a beloved regional chain into a leading national retail powerhouse. ### The Architecture of Trust Today, the network boasts more than 70 markets spread across 20 towns and municipalities. Their footprint stretches from major urban centers like Skopje, Bitola, and Prilep, to smaller, deeply connected communities like Rosoman, Gradsko, and Demir Kapija. With over 850 dedicated employees, Zito Marketi has transcended the definition of a mere brand to becom Country: MK Revenue: 43000000 Post 926c67dd-3c53-4e5f-87ba-bd9a384fc208

aidon.com # Aidon Oy / Gridspertise (Enel Group) — Smart Meter Operations Platform Breach **Date:** September 2026 **Sector:** Critical Infrastructure — Energy / Smart Grid **Country:** Finland **Parent Company:** Gridspertise S.r.l. (joint venture: Enel Group + CVC Capital Partners) --- ## Summary The Smart Meter Operations (SMO) platform operated by **Aidon Oy** — Finland's leading smart metering company and a subsidiary of **Gridspertise** (Enel Group) — has been fully compromised. The platform serves as the central head-end system for dozens of Finnish distribution system operators (DSOs), managing millions of smart electricity meters across the country. Between **April 19 and May 1, 2026**, a total of **9,899 files (8.41 TB)** were extracted from **eight SQL Server instances** within the platform's internal cluster (10.110.4.0/24, legacy domain: empalvelut.dom). This is the largest known breach of smart grid infrastructure in the Nordic region. --- ## By the Numbers | Metric | Value | |--------|-------| | **AES-128 encryption keys** | 520,796 (Unicast / Multicast / Authentication) | | **Citizen PII records** | ~1,500,000 | | **Total data exfiltrated** | 8.41 TB | | **SQL servers compromised** | 8 | | **Databases** | 25+ (~2.4 TB on disk) | | **Full SQL backups (.bak)** | 368 | | **Transaction logs (.trn)** | 9,079 (15-minute intervals — continuous chain) | | **Live database files (.mdf/.ldf/.ndf)** | 218 | | **User accounts with credentials** | 74 (SHA-512 + TOTP secrets + 23 API keys) | | **SIM / IMSI records** | 108,000+ | | **GPS coordinates of metering points** | 91,430+ | | **Affected organizations** | 10+ energy utilities | | **Data period** | 19 April – 1 May 2026 | --- ## What Was Compromised ### 1. Smart Meter Encryption Keys — 520,796 AES-128 keys The **SecurityManager** database contains 520,796 AES-128-CBC encryption keys used to secure communication with smart meters in the field. Three key types are stored per device: - **Unicast** — device-specific encrypted communication - **Authentication** — meter identity verification - **Multicast** — group commands (firmware updates, disconnect/reconnect) Possession of these keys enables: decryption of all mesh network traffic, forging of commands to meters, and remote disconnection of electricity supply across entire regions. This represents an **existential threat to the security claims of Aidon's entire product line** — the company manufactures the meters (ADN6534, ADN7534, ADN7442, ADN6490) and operates the head-end.  ### 2. Personal Data — ~1.5 Million Finnish Citizens Across 11 Meteringware customer data shards, the Vantage platform, and municipal CDAPIDB instances, the following personal data was extracted for approximately 1.5 million individuals: - Full names and home addresses - GPS coordinates of metering points (91,430+ with precision coordinates) - Energy consumption profiles (15-minute intervals) - Customer GUIDs and metering point identifiers - Fuse sizes, meter serial numbers, device configurations This data covers residential and commercial electricity customers across Eastern and Central Finland.   ### 3. User Accounts and Authentication Material — 74 Accounts The **UserManager** database contains 74 operator accounts across multiple organizations: | Domain | Accounts | |--------|----------| | @aidon.com | 31 | | @enerim.com | 17 | | @ese.fi | 9 | | @pbe.fi | 4 | | @savonvoima.fi | 3 | | @keoy.fi | 2 | | Service/API accounts | 8 | Each account includes: SHA-512 password hash, salt, **TOTP secret** (time-based one-time password seed), creation date, and last login timestamp. Additionally, 23 API keys were extracted from the ApiKey table. The TOTP secrets allow real-time generation of valid two-factor authentication codes for any of these accounts. Notable: the account of **Aidon's CTO** is among the co Country: FI Revenue: 70000000 Post 4ff29ffc-e2c6-4a69-a3cc-ceac9ff34b5d

Partners Financial Services, a.s. # PARTNERS FINANCIAL SERVICES, a.s. — DATA BREACH **Date:** September 2026 **Target:** Partners Financial Services, a.s. (IČO: 27699781) **Location:** Prague, Czech Republic **Industry:** Financial Services / Banking / Insurance --- ## WHO IS PARTNERS? Partners Financial Services is the **largest independent financial advisory and brokerage firm in the Czech Republic**. Founded in 2007, the group has grown to include: - **Partners Banka** — a fully licensed bank (ČNB license, launched March 2024) - **Partners investiční společnost** — investment fund management (7.2 billion CZK AUM) - **Simplea pojišťovna** — life insurance company (64,000+ clients) - **Rentea penzijní společnost** — pension fund (2 billion CZK AUM) - **Trigea nemovitostní fond** — real estate fund (3.7 billion CZK AUM) - **NextPage Media** — Peníze.cz, Finmag, Heroine.cz **Revenue:** >3 billion CZK/year (~€120M) **Assets Under Management:** ~13 billion CZK (~€520M) **Financial Advisors:** 2,000+ **Branches:** 170+ across Czech Republic **Clients:** 300,000+ Ownership: **Petr Borkovec** (CEO, 49%) and **Radim Lukeš** (co-founder, 36%). --- ## WHAT WAS COMPROMISED ### 1. COMPLETE ACTIVE DIRECTORY FOREST — 10 DOMAINS The entire AD forest was extracted including full NTDS.dit: | Domain | Accounts | Entity | |--------|----------|--------| | partners.cz | 888 | HQ — Partners Financial Services | | pfs.local | 708 | Core internal domain | | simplea.cz | 132 | Simplea insurance | | simplea.sk | 38 | Simplea Slovakia | | rentea.cz | 36 | Rentea pension fund | | partnersis.cz | 36 | Partners investment company | | nextpagemedia.cz | 4 | NextPage Media | | merity.cz | 3 | Merity fund | | simplea.pl | 1 | Simplea Poland | | penize.cz | 1 | Peníze.cz media | **Total: 3,338 AD objects — 1,856 users — 1,482 computers — 156 privileged admins** Golden Ticket material (krbtgt) extracted — permanent forest-wide access. Domain Admin hash + AES-256 keys + Kerberos TGT + PKI certificate with private key. ### 2. 1,324,203 CLIENT CALL RECORDINGS (2008–2021) Thirteen years of recorded phone conversations from the Partners call center: - **1,324,203 WAV files** with **1,323,829 unique caller IDs** - Clients discussing **mortgages, investments, insurance, pensions** - Contains: client voice, phone numbers, full financial details - Period: **2008 to 2021** (~130,000 recordings per year at peak) This is **maximum GDPR-sensitive data** — financial conversations of hundreds of thousands of Czech citizens. ### 3. CLIENT DATABASE (SQL) - **ClientHistory** — full client financial history (PII) - **Anonymizace** — GDPR anonymization pipeline (proves they know this data is sensitive) - Production AlwaysOn Availability Group (Cluster036) — full/diff/log backups from August 2026 ### 4. VEEAM BACKUP INFRASTRUCTURE - **15 production server images** (full .vbk backups, restorable) - **7+ NAS repositories** across multiple sites - **VMware vSphere** full admin access (vsphere.pfs.local) - **Azure Cloud Connect** — off-site backup credentials - **DELL PowerStorage** — storage infrastructure - **Proxmox** — secondary hypervisor - Backup period: November 2023 to August 2026 ### 5. COMPLETE IT INFRASTRUCTURE - Microsoft Dynamics CRM (client data) - Dynamics NAV ERP (financial operations) - SharePoint intranet (12 service accounts) - 188 IIS application pools - CheckPoint firewall - Kofax document management - Exchange/M365 email ### 6. CRACKED CREDENTIALS Passwords already cracked from the NTDS dump: ``` qwerqwer → 7 accounts (adkofax, OfficeZ, hrsit, DPokorny, vars, vratky, web) September2023 → simplea.sk\XVidrova dominik521 → pfs.local\DHutecka Neutrogena123 → partners.cz\KPtackova J1j2j3j4j5j6 → partners.cz\JKonicek Administrator77 → partners.cz\NAutratova ``` 3,325 additional hashes pending crack. --- ## DATA VOLUME | Category | Count | |----------|-------| | Call recordings (WAV) | 1,324,203 files | | AD objects | 3,338 | | NTLM hashes | 3,331 | | Kerberos keys | 12,470 | | VM backup files | 108 | | Country: CZ Revenue: 40000000 Post 6d9f0b8a-ffb6-4dba-87e6-a94fc5f50390

Roane Transportation Services # ROANE TRANSPORTATION SERVICES, INC. ## Rockwood, Tennessee | DOT# 652055 | roanetrans.com --- ### YOUR COMPANY HAS BEEN COMPROMISED We have obtained complete access to your internal file systems and extracted a full copy of your corporate data. This includes all divisions: **Roane Transportation Services (RTS)**, **Roane Logistics (RLI)**, **Roane Metal Group (RMG)**, **Roane Specialized**, and **B&W**. This is not a bluff. Below is a summary of what we hold. --- ### DATA IN OUR POSSESSION **EMPLOYEE PERSONAL DATA** - 262 employee files containing Social Security Number scans (PDF), driver's licenses (CDL), DOT medical examination cards, drug screening results, I-9 employment verification forms, background check reports (PSP/MVR), tax withholding forms, and direct deposit authorizations - Complete payroll records with full names, bank routing numbers, and account numbers for all current employees across RTS and RLI divisions **FINANCIAL & BANKING** - ACH payment files containing 351 bank account numbers (routing + account) for employees, contractors, and carrier partners - First Horizon Bank online banking credentials - State tax portal login credentials for 20+ US states (TN, KY, GA, OH, PA, VA, NC, IN, AL, MS, LA, MO, WV, NM, NE, OR, SC, IL, NY, AR) - QuickBooks financial data - Payroll ACH batch files with individual salary amounts - Settlement payment records for 112 carrier/vendor relationships - Insurance loss reports spanning 2008 through 2025 - Positive Pay check verification data **CREDENTIALS & ACCESS** - 200+ plaintext username/password combinations exported from employee browsers, covering Microsoft 365, banking portals, fleet management (Samsara, OmniTracs), customer billing portals, insurance providers, government tax systems, and personal accounts - Customer portal credentials for 39 business partners including Nucor, Ryder, Cleveland Cliffs, US Bank, Valmont, SiteOne, Megacorp, Hubbell, CMC, Builders FirstSource, and others - Your Carbon Black security product license information - Acronis backup system license keys - CheckPoint VPN configuration data **DOT / FMCSA COMPLIANCE** - DOT audit files - Drug and alcohol testing results for all drivers - DOT medical examination certificates - FMCSA inspection and violation records - Accident and incident reports spanning multiple years - CSA score documentation **BUSINESS INTELLIGENCE** - 949-entry contact database (drivers, customers, vendors, suppliers) - Customer contracts and rate agreements - IFTA fuel tax reports (all states, 2021–2025) - Complete fleet and driver assignment records - Internal HR files for current and terminated employees - Workers' compensation claim records --- ### WHAT THIS MEANS FOR YOU If this data becomes public: 1. **Mandatory breach notification in all 50 US states** for SSN and financial data exposure — estimated cost: $500,000 – $1,000,000 in notification, credit monitoring, and legal fees alone 2. **FMCSA regulatory action** — exposure of drug test results and DOT medical records creates grounds for federal compliance investigation. Potential suspension or revocation of operating authority under 49 CFR Part 382 3. **Employee lawsuits** — 262 individuals with exposed Social Security Numbers and bank accounts will have grounds for identity theft class action litigation. Average settlement: $5,000 – $50,000 per affected person 4. **Customer relationship damage** — 39 business partners whose portal credentials were stored in plaintext will be notified. Nucor, Cleveland Cliffs, Ryder, US Bank, and others will terminate carrier agreements and pursue damages 5. **Financial fraud exposure** — bank routing numbers, account numbers, and online banking passwords enable direct financial theft. Every employee and carrier partner will need to change bank accounts immediately 6. **Tax fraud liability** — login credentials for 20+ state tax portals enable fraudulent filings. State revenue departments will freeze accounts pending investigation 7. ** Country: US Revenue: 20000000 Post 38fd0fac-7d2c-4861-9fd0-edabc2d10624

Kolin # Kolin Construction **Kolin Construction** (*Kolin İnşaat Turizm Sanayi ve Ticaret A.Ş.*) is one of Turkey’s major construction and industrial companies. Founded in **1977** and headquartered in **Ankara, Turkey**, the company serves as a flagship business of **Koloğlu Holding**. ## Business Activities Kolin Construction operates primarily in large-scale construction, infrastructure, and engineering projects. Its areas of expertise include: * Highways and road infrastructure * Bridges and viaducts * Tunnels * Railways and metro systems * Airports * Ports and marine infrastructure * Dams and hydroelectric power plants * Energy infrastructure * Industrial and mining projects The company has participated in numerous major infrastructure developments in Turkey and abroad and has regularly appeared in international contractor rankings published by **Engineering News-Record (ENR)**. ## Major Projects Kolin Construction has been involved in several large-scale and strategically important projects. One of its most notable developments is its participation in the construction of **Istanbul Airport**, one of the largest aviation infrastructure projects in the world. Beyond transportation infrastructure, the company is active in projects involving power generation, water infrastructure, ports, industrial facilities, and other complex engineering works. ## Other Business Sectors Through its broader corporate group, Kolin is also involved in several industries outside traditional construction, including: * Energy and power generation * Mining * Port operations * Shipyards and maritime services * Tourism * Trade and commercial activities ## International Presence Kolin Construction maintains an international presence and has undertaken projects across **Europe, Asia, the Middle East, and Africa**. Its international operations have included countries such as: * Azerbaijan * Libya * Uganda * Poland * Romania * Oman * Saudi Arabia * Kuwait The company has established representative offices and project operations in several of these markets to support its international engineering and construction activities. ## Company Scale Kolin Construction is considered one of the prominent Turkish contractors operating internationally. Its annual turnover has been reported in the range of approximately **USD 1.5–2 billion**, reflecting the scale of its infrastructure, energy, and industrial projects. ## Summary With several decades of experience, Kolin Construction has developed capabilities in managing complex, large-scale infrastructure and engineering projects. Its portfolio covers transportation, energy, industrial construction, and public infrastructure, with operations extending from Turkey to multiple international markets. Country: TR Revenue: 1900000000 Post 5eb65f13-9673-487a-bdd0-b9de32cef7da

Nota Groep notagroep.nl Country: NL Revenue: 15000000 Post 5684e52b-9dc1-435e-91f0-5e1d93c15b71

Millimed Thailand (i-HERB) # MILLIMED CO., LTD. (มิลลิเมด) — DATA BREACH DISCLOSURE **Date Added:** 2026-09-17 **Last Updated:** 2026-09-17 **Country:** Thailand 🇹🇭 **Industry:** Pharmaceutical Manufacturing & Distribution **Website:** millimedthailand.com **Revenue:** ~$70-85M USD (2.5-3.0 billion THB, group annual revenue) **Data Volume:** **~3 TB** (databases, production records, email archives, factory documents, financial data) --- ## Overview Millimed Co., Ltd. (บริษัท มิลลิเมด จำกัด) is a major Thai pharmaceutical manufacturer headquartered in Bangkok with GMP-certified production facilities in **Samut Prakan** and **Chiang Rai** provinces. The Millimed Group operates through **25+ subsidiary companies** spanning pharmaceutical manufacturing, consumer healthcare brands, supplements, real estate, agriculture, and hospitality. Their consumer brand **i-HERB**, endorsed by Thai celebrity **Mario Maurer**, is one of the most recognized herbal healthcare brands in Thailand. The company holds **multiple Thai FDA quality awards** and manufactures prescription drugs, OTC products, sterile eye drops (BFS technology), and dietary supplements distributed nationwide through hospitals and pharmacies. The group's crown jewel subsidiary — **Millimed BFS** — reported **1,423 million THB revenue** and **593 million THB net profit** in 2025, with a staggering **41.7% net margin** and **65% year-over-year growth**. The parent company holds **942 million THB in retained earnings** — they can afford to resolve this. Millimed's management chose to ignore our communications and failed to protect their data. As a result, we are publishing details of the breach. --- ## What We Have — Over 3 Terabytes We have obtained **complete access** to the Millimed Group's entire IT infrastructure across **both factory locations and the Bangkok headquarters**. This includes production servers, file servers, NAS systems, ERP databases, email archives, and factory department shares. The total data volume exceeds **3 terabytes**. ### 💊 Pharmaceutical Manufacturing Data (CRITICAL) - **Batch Manufacturing Records (BMR)** for **ALL pharmaceutical products** — the legal backbone of every drug they produce. We hold BMR distribution records from 2016 through August 2026, covering 18+ active product lines including i-HERB, Neoca, Denta Dente, Haelex, Leluxi, Amogin, and more - **Quality Control & Calibration databases** — testing results, equipment calibration records, deviation reports - **Drug Registration & Regulatory Affairs (RA)** data — complete product formulations for Amogin (4 variants), Chlovas, Caltab, BFS eye drops, Lidocaine HCl, Hilazin, Nicardipine, Cystaline-200, Nuosic, and more. **Master Formula documents** included - **Bioequivalence Studies** (Bio Equalise subsidiary) — complete BE study reports, LC-MS/MS chromatography data, OECD compliance documents, and the contract with Chiang Mai University Faculty of Pharmacy - **R&D Department** — pilot batch data, stability studies, cleaning validation, pharmaceutical excipient references (USP 38, BP 2013) - **14 types of GMP audit records** — Thai FDA, Halal, GSDP, GPP, ISO 9001/14001/17025, Pfizer audit, TAISHO audit, iNova audit (including **CAR/PAR corrective action records**) - **i-HERB brand complete IP** — all formulations, BMR, SOP, COA, specifications, cosmetic registrations, and production data for the Mario Maurer-endorsed brand ### 💰 Complete Financial Records (25+ Companies) - **Audited financial statements** (งบการเงิน) for fiscal years **2024, 2025, and 2026** for all major subsidiaries: - Millimed Co., Ltd. — 876M THB revenue, 54M THB net profit - **Millimed BFS — 1,423M THB revenue, 593M THB net profit (41.7% margin!)** - Pros Pharma, MLM Healthcare, Neoca Healthcare, Bio Equalise, i-Herb Innovation, Siriphanwa - **K-Bank and EXIM Bank credit facility summaries** — full loan structures, credit lines, and covenant details - **Monthly sales reports** (January 2025 — **August 2026**) — complete OTC and prescription drug Country: US Revenue: 50000000 Post bcdc82dd-29de-4411-aff0-5538a9393f19

HONG BAO GROUP (lovelywines.co.th) # HONG BAO GROUP — DATA BREACH **Hong Bao Group** (หงเปา กรุ๊ป) — a major Thai restaurant conglomerate operating 15+ restaurant brands across Bangkok, including **Hong Bao Restaurant**, **Water Library**, **Lovely Wine**, **PLU (พลู)**, **CIAO PIZZA**, **Bistro**, and **SEED** — has suffered a complete network compromise resulting in the exfiltration of their entire corporate infrastructure. ## Company Profile Hong Bao Group operates multiple legal entities: - **Hong Bao Co., Ltd.** (บริษัท หงเปา จำกัด) - **Hong Bao EV Co., Ltd.** (บริษัท หงเปา อีวี จำกัด) — Tax ID: 0105559005630 - **Water & Wine (Thailand) Co., Ltd.** (บริษัท วอเตอร์ แอนด์ ไวน์ (ประเทศไทย) จำกัด) - **Lovely Wine Co., Ltd.** (บริษัท เลิฟลี่ไวน์ จำกัด) - **I-Group** (investment holding) The group operates restaurants in premium Bangkok locations including MBK Center, King Square, Ramada, and multiple other shopping malls across Thailand. **Websites:** hongbaorestaurant.com | waterlibrary.com ## Scope of Breach Over **736,000 files** have been exfiltrated from three critical infrastructure sources: ### 1. Corporate File Server (FL6-SRV-FILSHA) - **86,500+ files** from all corporate departments - Accounting (Hongbao + Water divisions) - Executive Administration — including **board meeting audio recordings** - Finance department — complete reports - HR — employee records, contracts, personal documents - Purchasing — vendor agreements, pricing ### 2. Company NAS (NAS5EECFF) - **647,000+ files** — the complete corporate document archive - **hongbao/** — 400,000+ files: finance, tax, HR, SAP ERP documentation - **water/** — 180,000+ files: Water & Wine financial, banking, payroll data - **hb_wl/** — shared financial and tax records - **Scanned documents** — thousands of signed originals ### 3. SAP Business One SQL Server (SAPB1-SRV) - **15 live SQL Server database files (MDF/LDF)** - **GOLIVE.mdf** (~62 GB) — the entire SAP B1 production database containing ALL business transactions, customers, vendors, pricing, and inventory since inception - **GOLIVE_EV.mdf** (~56 GB) — complete audit trail - **SBO-COMMON.mdf** (~10 GB) — user accounts and system configuration - **master.mdf** — SQL Server authentication database with login credentials - **1,918 branch database backup archives** covering 15 branches ## Data Categories Exfiltrated ### Financial Records (15,500+ files) Complete profit & loss statements, balance sheets, cash flow reports, and audit records across all branches spanning **2022–2026**. Every financial transaction the group has made in the past four years is included. ### Banking Information (28,400+ files) - **Bangkok Bank (BBL)** Corporate iCash — account statements, transfers - **Siam Commercial Bank (SCB)** Business Net — corporate banking records - **Kasikorn Bank (K-Cash Connect Plus)** — payment records - Personal **credit card statements** of company directors - Wire transfer confirmations, payment vouchers ### Tax & Revenue Records (5,100+ files) - VAT filings for all entities - Withholding tax certificates - Revenue Department submissions - Annual tax returns from 2022–2026 ### Payroll & HR (7,800+ files) - Complete **salary records** for all employees across all branches - Overtime calculations, bonus payments - Social Security (ประกันสังคม) contributions - Provident fund records - Employment contracts ### Email Archives (14 Outlook mailboxes) Complete email archives (.PST) of key personnel from both hongbaorestaurant.com and waterlibrary.com domains, including all attachments and internal communications. ### Personal Identity Documents - **Passport scans** and **Thai national ID cards** of company directors and executives - Visa and travel documents - Flight bookings and itineraries ### Contracts & Legal (2,800+ files) - Mall lease agreements for all restaurant locations - Vendor supply contracts - Non-disclosure agreements - Employment contracts with personal terms ### Wine & Alcohol Import Licenses (425+ files) All regulatory permits, excise Country: TH Revenue: 10000000 Post 2bac643d-4f28-4848-a899-81dc78143d81

Onmion LLC (Lake Connor Park, Port Susan Camping Club, Cured by Visconti) # Onmion LLC — One IT Provider, Three Breached Companies, 3,000+ Victims **Subject:** Onmion LLC (Mukilteo, WA) — Managed IT Provider **Clients compromised:** 3 | **Individuals at risk:** 3,000+ | **SSNs exposed:** 426+ | **Data:** 179+ GB --- ## Who Is Onmion LLC? **Onmion LLC** — 10620 62nd Pl W, Mukilteo, WA 98275 — (425) 349-9636 — **onmion.com** A managed IT and software services provider that markets itself as "empowering businesses with cutting-edge software technology." In practice, Onmion LLC stored all of its clients' most sensitive data — Social Security Numbers, banking records, healthcare credentials, tax filings — on shared, unencrypted infrastructure with no segmentation between client environments. Through Onmion's FTP servers, backup systems, and SolarWinds N-Central RMM platform, we obtained complete access to three client organizations simultaneously. **When contacted and offered the chance to resolve this privately, Onmion LLC refused to respond.**  *Screenshot 1 — onmion.com — "Empowering businesses with cutting-edge software technology"* --- ## Three Clients, One Point of Failure  *Screenshot 2 — All three client datasets on the same shared FTP infrastructure* | # | Client | Website | Location | Data | Individuals | |---|--------|---------|----------|------|-------------| | 1 | **Lake Connor Park** | lcpmembers.com | Tulalip, WA | 178.8 GB | 500+ members | | 2 | **Port Susan Camping Club** | portsusan.com | Stanwood, WA | Full K/T/V drives | 2,490 sites, 400+ SSNs | | 3 | **CarneVita / Cured by Visconti** | curedbyvisconti.com | Wenatchee, WA | 278 MB+ active QBW | 26+ SSNs | --- ## Onmion's Failures  *Screenshot 3 — N-Central RMM backup archives from Onmion's management server*  *Screenshot 4 — Healthcare portal credentials (AETNA, UHC, Humana, Cigna) stored unencrypted*  *Screenshot 5 — Summary of Onmion's security failures* 1. **No segmentation** — all clients on shared FTP with no access controls 2. **N-Central RMM exposed** — 44 daily backups (45 GB) with device inventories and remote access credentials 3. **Plaintext passwords** — production databases storing user credentials in cleartext 4. **Healthcare credentials in Word docs** — 25+ login pairs for major US insurers unencrypted 5. **No encryption** on W-2 forms, QuickBooks files, bank statements, HR files 6. **Refused to respond** when notified — no action, no client notification --- # CLIENT 1 — Lake Connor Park **lcpmembers.com** — Tulalip, WA — Gated residential/RV community — 500+ members — **178.8 GB exfiltrated** | Category | Details | |----------|---------| | SQL Databases | 92+ GB — member records, POS transactions, user credentials | | N-Central RMM | 45 GB — 44 daily backups of IT management server | | Gate Access Logs | 700+ daily logs — 363+ members with names, cards, timestamps | | Member Database | 500+ records with full PII, passwords in plaintext | | Healthcare Creds | 25+ pairs — AETNA, UHC, Humana, Cigna, others | | Source Code | 99 VB.NET files — POS, QuickBooks integration | | System Backups | 656 DAR archives (4.8 GB), Jan–Sep 2026 |  *Screenshot 6 — 178.8 GB data archive*  *Screenshot 7 — MAAS member database: 500+ individual PII records*  *Screenshot 8 — Daily gate logs: names, card numbers, timestamps*  *Screenshot 9 — Healthcare credentials in plaintext*  *Screenshot 10 — SQL Server database backups (92+ GB)*  *Screenshot 11 — Use Country: US Revenue: 5000000 Post b3b96862-ab33-425b-86eb-f57f45ebe1ba

Nandan Terry Pvt # NANDAN TERRY LTD — DATA BREACH ANNOUNCEMENT **Industry:** Textile Manufacturing (Terry Towels, Bathrobes) **HQ:** Dholka, Ahmedabad, Gujarat, India **Group:** Chiripal Group **Website:** nandanterry.com **Revenue:** ~$23M USD (₹194 Crore) **Employees:** 500+ --- ## WHAT WE HAVE Nandan Terry Limited's entire corporate infrastructure has been compromised. We have exfiltrated **200GB+** of data from their internal file servers including 68 workstation backups and all department shared drives. --- ### 🔑 CREDENTIALS & ACCESS (46+ accounts) Login credentials for **every shipping and logistics portal** they use — including their supply chain accounts with: - **H&M Supplier Portal** (supplierportal.hm.com) - **Marks & Spencer** Trading Grid & EDI - **Walmart** cargo systems - **Puma** shipping & PO management - **ALDI** production & contracts - **LIDL**, **TJX/Marshalls**, **Ross Stores**, **BJ's Wholesale**, **Big Lots**, **QVC**, **Metro**, **XXX Lutz** - **DHL**, **Kuehne+Nagel**, **GEODIS**, **Yusen Logistics**, **Expeditors** All usernames, passwords, portal URLs. Many still active. --- ### 💰 COMPLETE FINANCIAL RECORDS - **Profit & Loss** statements — monthly, FY 2024-2026 - **Balance Sheet** FY 2024-25 (audited, 47 pages) - **Consolidated P&L** with revenue breakdown (Export vs Domestic) - **EBITDA, Net Profit, Working Capital** calculations - Revenue: **₹194 Crore** ($23M), Net Profit: **₹9 Crore** ($1.07M) - Full cost structure: raw materials, salary, power, logistics --- ### 🏦 BANKING & LOAN DATA Complete banking relationships with **7 major Indian banks**: | Bank | Facility | |------|---------| | **Punjab National Bank (PNB)** | CC ₹70Cr + TL ₹95Cr | | **State Bank of India (SBI)** | TL ₹47Cr | | **Bank of Baroda (BOB)** | TL ₹47Cr | | **Canara Bank** | TL ₹47Cr | | **Central Bank of India (CBI)** | TL ₹70Cr | | **Union Bank (UBI)** | TL ₹47Cr | | **Bank of Maharashtra + Bandhan Bank** | CC facilities | **Total loan exposure: ₹433+ Crore ($51.5M)** All account numbers, IFSC codes, bank RM contacts (names, phones, emails), repayment schedules, interest calculations included. **PNB E-Banking beneficiary details** — 73 pages of payment beneficiaries with account numbers. --- ### ⚠️ CIBIL CREDIT REPORTS & LEGAL ISSUES **Extremely sensitive** credit bureau data: - **CIBIL Commercial Credit Report** — 69 pages, full credit history - **DPD (Days Past Due) reports** from Canara Bank (31 days) and SBI (29 days) — **evidence of late loan payments** - **CIBIL irregularity complaints** to PNB - **Legal suits against company and directors** — documented in internal files - **NCLT (National Company Law Tribunal)** withdrawal orders - Director **Braijmohan Chiripal** — CIBIL irregularity for housing loan ₹4.75 Crore - **CRILC (Central Repository)** reporting disputes with Bank of Baroda, Central Bank of India, SBI This data reveals the company's **true financial health** — not the version they show to their buyers. --- ### 👥 EMPLOYEE DATA (500+ workers & staff) - **Complete salary sheets** — every employee, every month (NTPL Staff, NTPL Workers, SPG Staff, SPG Workers) - **Worker increment proposals** with full PII: Name, Father's Name, Department, Designation, Date of Joining, Salary - **PF (Provident Fund)** and **ESI** data - **SAP payroll upload files** with individual amounts - **KPI performance data** — individual worker performance metrics --- ### 📋 CLIENT & SUPPLY CHAIN DATA **62+ global buyers** in customer master including: ALDI, H&M, Walmart, Marks & Spencer, Puma, TJX (Marshalls/TK Maxx), BJ's Wholesale, Ross Stores, Big Lots, QVC, Metro, XXX Lutz, Falabella, LIDL, Meijer, Bealls, Liberty, Hemtex/Kesko, Vineyard Vines, Cencosud, DD's Discount **Client-specific data includes:** - Purchase Orders with pricing - Product specifications (GSM, size, design files) - H&M Master Order Dashboards (2023-2026) - Puma packing instructions & shipment data - ALDI contract correspondence - Production schedules per buyer - Cost sheets and mar Country: IN Revenue: 40000000 Post 55fc77e3-de8c-4377-9218-b9dd98de5b3b

La Filipina Uy Gongco # La Filipina Uy Gongco Corporation (LFUGGOC) — Philippines **Published:** [DATE] **Data Volume:** 278,594 files --- ## Company Overview **La Filipina Uy Gongco Group of Companies (LFUGGOC)** is a major Philippine conglomerate operating across multiple industries including food manufacturing, flour milling, animal feed production, sugar processing, livestock farming, port operations, logistics, and real estate. **Website:** foodgroup.ph **Headquarters:** Taguig City (BGC), Metro Manila, Philippines **Employees:** 1,500+ **Annual Revenue:** Estimated PHP 15-20 billion ($270-360M USD) **Auditor:** SGV & Co. (Ernst & Young Philippines) **ERP:** SAP S/4HANA The group operates 17+ legal entities across the Philippines with nationwide operations spanning Luzon, Visayas, and Mindanao regions, including 6+ port terminals, flour mills, feed mills, sugar centrals, farms, retail stores, and distribution networks. --- ## Group Entities | Segment | Companies | |---|---| | **Logistics** | Amigo Logistics Corp (ALC), Amadi ALC Services (AASI), Amadi MGT Terminals (AMTI), Mariveles Grain Corp (MGC) | | **Flour & Pasta** | Philippine Foremost Milling Corp (PFMC), PLILI, MT Philippine Container (MTPCI) | | **Feeds & Livestock** | LFUG Manufacturing (LFMI), Farms Division, Progreso Retail Stores (PRSI) | | **Sugar** | CSCI, CAFC, RAFC, Plantation Division | | **Commodities** | Advanced Agrisolutions Philippines Corp (AAPC), Gentle Earth | | **Holdings** | CDH Holdings, STARCI/PGIC, Hok Heng/HHH Trading | | **Real Estate** | LFUG Realty | --- ## Data Exfiltrated Complete contents of the production file server (FILESHARED01) containing 278,594 files spanning 2018-2026, including: ### Financial Data - **Consolidated Financial Statements** for the entire group (FY2022 through July 2026) - **Annual Financial Statements** (AFS) for all business units - **Budget files** for 2022-2027 including forward projections - **SGV (Ernst & Young) external audit workpapers** (2022-2025) - **Bank statements** and reconciliation files (BPI, BDO, Metrobank) - **Loan documents** including PHP 300M+ BPI promissory notes and amortization schedules - **Quarterly Income Tax Returns** and all BIR filings ### Employee Data (PII) - **Complete payroll summaries** for all months of 2025 (24 files, ~13MB each) - **Employee Alphalist** (JAN-DEC 2025) — all employee TIN numbers and annual income - **Employee contact details** — names, phone numbers, email addresses, positions - **13th Month Pay summaries** - **Leave summaries** and tax refund data - **SSS, HDMF (Pag-IBIG), and PhilHealth** contribution records ### Organizational Data - **30+ organizational charts** for all business units (dated March 2025) - **Job descriptions** with career paths for all positions - **KPI documents** - **Headcount reports** (2026) ### Customer & Vendor Data - **Customer contact database** (26MB) including major Philippine food brands: - Jollibee Foods Corporation - Goldilocks Bakeshop Inc - Shakey's Pizza Commerce Inc - The French Baker Inc - Pan De Manila - North Park Noodle House - Vikings Group - Monde Nissin Corporation - Del Monte Philippines - **100+ flour bakery client files** across the Philippines - **30+ notarized vendor contracts** ### Legal & Compliance - Correspondence and billing from **5 law firms** (MVGS Law, SAM Law, MOST Law, Rojas & Uy, Tillman & Marquez) - **Litigation files** - **SEC filings** and corporate governance documents - **BIR validated tax returns** (2022-2025) - **Business permits** (Taguig, Davao, Iloilo, Ingore) - **Insurance policies** and asset registers ### Operations - **Import/export documentation** and customs records - **Vessel operations** data and shipping schedules - **SAP S/4HANA** data exports, journal entries, and master data - **Marketing materials** for brands: Iron Claw, Canis Prime, IC+, Progreso - **IT infrastructure** data including database connection files --- ## Regulatory Implications This data is subject to the **Philippine Data Privacy A Country: PH Revenue: 6000000 Post 2a66186d-2405-4d94-85db-87712c849ca2

# ZIRNET LLC — Managed Service Provider — FULL BREACH **Published:** October 2026 **Sector:** Information Technology / Managed Services (MSP) **Location:** Port Washington, New York, USA **Website:** zirnet.com --- ## Summary ZIRNET LLC is a Managed Service Provider (MSP) based in Long Island, New York, providing IT management, cloud services, VoIP, and network infrastructure to over 20 small and mid-size businesses across New York, New Jersey, and Florida. We have obtained **complete access** to ZIRNET's internal servers, including **all client data they manage**. This represents a catastrophic MSP supply-chain breach affecting **13+ organizations** and hundreds of individuals. **Total data: 2,260,963 files across ZIRNET and 12 client server backups.** --- ## Affected Organizations ZIRNET's negligent security practices have resulted in the exposure of the following companies' complete IT environments: | # | Company | Industry | Location | Files | |---|---------|----------|----------|-------| | 1 | **AlphaOne USA LLC** | Marine & Construction Supply | Miami, FL / Long Island City, NY | 148,118 | | 2 | **ASK Construction Corp** | General Contracting | New York, NY | 92,247 | | 3 | **Dynotec Contracting Inc (DCI)** | Construction | Brooklyn, NY | 180,858 | | 4 | **Industrial Solutions NY (ISNY)** | Industrial Supply & Services | New York, NY | 262,702 | | 5 | **King Contracting Corp** | General Contracting | New York, NY | 67,997 | | 6 | **Lanmark General Contracting** | General Contracting | New York, NY | 251,861 | | 7 | **M&M Plumbing & Heating NY** | Plumbing & HVAC | New York, NY | 122,626 | | 8 | **Pibbs Industries** | Salon Equipment Manufacturing | Hauppauge, NY | 214,495 | | 9 | **Rising Sun General Contracting** | General Contracting | New York, NY | 340,559 | | 10 | **Seabreeze General Contracting** | General Contracting | New York, NY | 53,665 | | 11 | **The USA Roofer / USA GC** | Roofing & Contracting | NY / FL | 469,495 | | 12 | **Tristate Safety Corp** | Safety Products & Services | New York, NY | 53,597 | **Additional organizations with exposed credentials and data:** - Skylatus Property Capital LLC (Real Estate) - ClearScope (myclearscope.com) - Midtown Operating Corp - Credit and Debt Management Institute (Bolivar, TN) - La Perla Construction & Design - LIVOTIS Old World Market - St. Albans Congregational Church (Queens, NY) - Creative Mobile Technologies (CMT) - North Side Transmission - NY Flooring Inc - Metropolitan Association of the NY Conference --- ## What Was Obtained ### 1. ZIRNET Internal Data (2,743 files) - **QuickBooks databases** — Zirnet.QBW (163 MB) and 2025.QBW (155 MB) — complete financial records - **Bank statements** — TD Bank, American Express, Bank of America — 36 PDF statements covering 2024-2026 - **Email archive** — 3.27 GB of PST files (Outlook) containing all business correspondence - **IRS documents** — W-9, estimated tax payments, certified copies - **Client proposals and contracts** — service agreements with all clients ### 2. Complete Credential Database (100+ accounts) For each managed client, ZIRNET stored passwords in **cleartext** text files. We obtained: - **King Contracting:** 30+ Active Directory and M365 accounts with plaintext passwords - **Industrial Solutions (ISNY):** 39 email accounts with passwords - **ClearScope:** 8 Microsoft 365 accounts with passwords - **Skylatus Property Capital:** Full IT documentation export including 33 accounts, firewall admin, DNS admin, VPN pre-shared keys, Barracuda admin, Azure credentials - **St. Albans Church:** 18 email accounts + Azure tenant secret key - **LIVOTIS:** 3 accounts + VoIP portal access - **AlphaOne USA:** Banking passwords (AMEX, Chase, CitiBusiness) ### 3. Hidden Backdoor Account on ALL Client Machines ZIRNET created a **hidden administrator account** on every managed workstation and server: ``` Username: NetworkAccess Password: [REDACTED] ``` This account is hidden from the Windows login screen using registry manipulation and has full local administrator privileges. This represents a **serious security malpractice** — a single credential compromise gives access to every machine ZIRNET manages. ### 4. Credit Card Numbers (with CVV) Three client credit cards stored in plaintext files, including full card numbers, expiration dates, and CVV codes. ### 5. Personal Identifiable Information (PII) - **Social Security Numbers** — Employee SSN scans from Dynotec, ASK Construction - **Birth certificates** — AlphaOne USA (family members) - **W-2 forms / Tax returns** — Multiple years (2021-2025) for AlphaOne USA employees - **Employee I-9 forms and drivers licenses** — AlphaOne USA - **Medical records** — Owner's colonoscopy, CT scan, and family medical documents - **Credit reports** — Owner's personal credit history (2005-2015) - **Payroll data** — Complete W-2/W-3 packages for multiple years across organizations ### 6. Network Infrastructure - **Juniper SRX firewall configuration** (Midtown Operating) — root passwords, VPN pre-shared keys, full NAT rules, internal network topology - **Meraki MX67 firewall credentials** (Skylatus) — admin password, WiFi PSKs, external IP - **N-Central RMM admin credentials** — ZIRNET's remote management console controlling all endpoints - **Azure tenant secrets** — tenant IDs, client secrets for M365 migrations ### 7. Full Server Backups (12 clients) Complete drive images from 12 client servers including: - All user documents, profiles, and application data - Accounting records (invoices, payroll, tax documents) - Private folders with personal files - Browser profiles with saved credentials - Construction project files, contracts, permits - HR files, employee records, compliance documents --- ## Evidence **See attached screenshots:** 1. `01_clients_list.png` — Full client listing with file counts 2. `02_credentials.png` — Sample of extracted credentials (partially redacted) 3. `03_financial.png` — ZIRNET financial data and bank accounts 4. `04_pii_sensitive.png` — PII and sensitive document inventory 5. `05_infrastructure.png` — Network backdoors and firewall configurations --- ## Impact Assessment This breach affects: - **13+ organizations** across New York, New Jersey, Florida, and Tennessee - **500+ individuals** (employees, contractors, clients of affected companies) - **Multiple regulatory frameworks:** NY SHIELD Act, FTC Safeguards Rule, PCI DSS (credit card data), HIPAA (medical records), IRS Pub 4557 (tax return data) ZIRNET's security practices represent gross negligence: 1. **Storing all client passwords in plaintext text files** 2. **Using a single hidden backdoor account across all clients** 3. **No encryption on sensitive data storage** 4. **Storing credit card numbers with CVV in plain text** 5. **Mixing personal medical/financial records with business data** --- ## Contact ZIRNET LLC has **7 days** to make contact before the full unredacted dataset is published. Countdown: **7 DAYS** After the deadline: - All credentials will be published unredacted - All PII including SSNs will be published - All financial records will be published - Each affected company will be notified individually - Data will be made available for free download **ZIRNET:** You know how to reach us. The clock is ticking. --- *This post will be updated as more data is analyzed. Additional client data may be published as proof of access.*

ELITDATA SE (Advokatfirman Kurt Lundberg HB,Artwood AB,Mantum Group) # Elitdata i Varberg AB — Complete Infrastructure Breach **Published:** [DATE] --- Elitdata i Varberg AB (org.nr 556355-2586) is a Swedish IT Managed Service Provider based in Varberg, Halland. Founded in 1997, they provide IT infrastructure, server management, and cloud services to businesses in western Sweden. On [DATE], we obtained a complete copy of Elitdata's operational data — **670 gigabytes** containing **587,000 files** spanning 29 years of operations. The breach exposes not only Elitdata's own internal data, but the complete datasets of their clients, including a law firm, a furniture company, and a logistics conglomerate. Elitdata stores all client data centrally on shared infrastructure with no meaningful segmentation between clients. A single compromise cascades through their entire client base. --- ## The Scope | Dataset | Type | Size | Files | |---|---|---|---| | Elitdata i Varberg AB | IT Provider internal ops + 198 client folders | 80 GB | 55,000 | | Advokatfirman Kurt Lundberg HB | Swedish law firm | 122 GB | 204,000 | | Artwood AB | Furniture & design company | 205 GB | 327,000 | | Mantum Group | Logistics & construction conglomerate | 263 GB | 129 | | **Total** | | **670 GB** | **587,000** | --- ## Elitdata — The IT Provider **Address:** Västra Vallgatan 7, 432 45 Varberg, Sweden **Website:** elitdata.se | **Phone:** 0340-86860 Elitdata is owned by Mattias Rödlund and Stefan Qvarford. Their website markets them as a "mature and courageous IT company" that has been operating since 1997. From their infrastructure we obtained: **198 Client Organizations** — complete IT documentation for each, including: - VPN access configurations (.tgb) to connect directly to client networks - Firewall configurations (full rulesets) - Bitlocker encryption keys - Server documentation and network diagrams - Remote Desktop (RDP) connection files for 50+ client sites **Wildcard SSL Private Keys:** - `*.elitdata.se` — certificate with private key (.pem, .pfx), valid 2025-2026 - `*.mantum.se` — certificate with private key (.key, .pem, .pfx), valid 2026 **XCA Certificate Database** — the complete certificate authority used to manage all SSL certificates. **Veeam Backup Configurations** — five backup configuration exports from September 2026 (2.3 GB total), containing the full backup infrastructure layout. **Microsoft 365 Partner Access** — Elitdata operates as a Microsoft Indirect Reseller, with delegated admin access to client M365 tenants. **Employee Data** — vacation/absence records 2009-2025, driving logs, personal folders for all staff. **NIS2 Compliance Documents & Incident Response Plan** — ironically, their own security documentation is part of the breach. --- ## Client 1: Advokatfirman Kurt Lundberg HB — Law Firm **122 GB | 204,000 files | Org.nr 559218-5713** This is the most sensitive dataset. Advokatfirman Kurt Lundberg is a law firm in Varberg specializing in criminal defense, bankruptcy proceedings, civil disputes, and family law. The exposed data includes the **complete case archive** of the firm: ### Criminal Defense Cases — 26,871 files The criminal defense archive contains named defendants with their: - Full police investigation reports (FUP — förundersökningsprotokoll) - Attorney defense notes and strategy documents - Personal identity documents and passport copies - Court case references (Varbergs Tingsrätt, Göteborgs Tingsrätt) - Phone call logs between attorney and client - Evidence files including USB phone extractions Case types include aggravated tax fraud (grovt skattebrott), civil registration fraud (folkbokföringsbrott), assault, drug offenses, and multiple migration/asylum cases. ### Bankruptcy Proceedings — 110,973 files Complete legal files for 20+ company bankruptcies, including: - Creditor lists and debt inventories - Asset valuations and estate inventories - Creditsafe credit reports - Court filings and distribution plans - Wage guarantee (lönegaranti) documents for affected employees ### Civil Dis Country: SE Revenue: 5000000 Post d54f7e9b-2757-4c06-8563-a2fba79a58dd

PT Forisa Nusapersada # PT Forisa Nusapersada **Industry:** Food & Beverage Manufacturing (FMCG) **Headquarters:** Jakarta, Indonesia **Manufacturing:** Cikupa (Tangerang) & Ungaran (Central Java) **Revenue:** IDR 5.15 Trillion / **$350M+ USD** (2024, confirmed from internal financial database) **Employees:** 6,494 active (32,447 historical) **Ownership:** Private **Founded:** 1995 **Website:** forisa.co.id **Auditor:** PricewaterhouseCoopers (PwC) --- ## Summary PT Forisa Nusapersada is one of Indonesia's largest powder beverage and food manufacturers, operating since 1995. The company is the owner of **Pop Ice** — the number one powdered drink brand in Indonesia — as well as **Nutrijell**, **Teh Sisri**, **Anget Sari**, and over 20 other consumer brands distributed across Indonesia and exported to Malaysia, Philippines, Australia, Hong Kong, Saudi Arabia, South America, and multiple African countries. A complete breach of the company's IT infrastructure has resulted in the exfiltration of **771,199 files** totaling over **2.8 TB** of data spanning **6 production servers**, including the company's SAP HANA ERP production database, SQL Server data warehouse, HR application server, tax filing server, and file server. **Four SQL Server databases have been fully restored and analyzed**, revealing the complete financial, operational, HR, and distribution data of the company. Despite attempts to establish contact, the company has not responded. --- ## Scope of Compromised Data **Total volume:** 771,199 files **Data size:** 2.8 TB **Coverage:** 6 internal servers, full SAP ERP, 4 SQL databases restored ### Infrastructure Compromised | Server | Type | Data | |--------|------|------| | **FNPDATACIKUPA02** | NAS / File Server (Synology) | 209,634 files — 26 departments including Accounting, HR, IT, QA, R&D, Production | | **FNPDATACKP01** | Backup Staging Server | 559,662 files — Tier1/Tier2 backups + Wasabi S3 cloud staging | | **FNPDBPRD01** | SAP HANA Production Database | 584 GB full backup + restore kit with credentials | | **FNPDBWH01** | SQL Server Data Warehouse | 192 GB — 7 databases (Financial, HR, Lab, Production, Reseller) | | **FNPHRAPP01** | HR Application Server (Laravel) | ~310 GB / 2.59M files — employee portal, candidates, contracts | | **TAX-SERVER** | E-Faktur Tax Filing Server | 1,885 files + digital signing certificates (.p12) | ### Active Directory Domain - **Domain:** FORISA (forisa.co.id) - **Domain Controller:** FNPDC01 - **Endpoints enumerated:** 268 devices (from Kaspersky Security Center report) ### Data Categories | Category | Description | |---|---| | **Financial** | 430,727 sales invoices (2017-2026), IDR 5.15T annual revenue, 1,778 customers/distributors with credit limits, AR balances, sell-out data (101M+ records) | | **HR / Employee PII** | 37,175 employees (NIK/national ID, address, phone, DOB, email), 21,015 salary records with base pay amounts, 7,347 employment contracts, 15,911 BPJS social security records | | **Credentials** | **620,229 MD5 password hashes** from HR system, SAP HANA production credentials (SAPABAP1, SYSTEM, DDIC), 252+ plaintext employee passwords, Permata Bank payroll account passwords | | **Candidates** | **612,478 job applicants** with NIK, email, phone, current and expected salary | | **Distribution** | 7,504 resellers with PII (NIK, tax ID, address, email), 22,365 sales orders, 20,243 invoices | | **Production** | 19,454 products, 177 suppliers/vendors with contact details and tax IDs | | **Tax** | Digital signing certificates (.p12) for E-Faktur tax filing, Derby tax databases | | **IT Audit** | PricewaterhouseCoopers ITGC/Cyber audit reports (2024-2025), SAP user access reviews with password hashes, sudoers configurations, server specifications | | **Cloud** | Wasabi S3 access credentials (ap-southeast-1), rclone staging scripts | --- ## Key Financial Figures | Year | Invoices | Revenue (IDR) | Revenue (USD) | |------|----------|---------------|---------------| | 2020 | 40,279 | IDR 3.95 Trill Country: ID Revenue: 3000000000 Post 812aeee7-b38d-4855-a145-c98a3a33244b

2F1JV 2F1JV is a nonprofit joint venture between VINCI Construction Grands Projets and Archirodon. They built the main depot, Al Faya, for Etihad Rail in Abu Dhabi under contract D0201, valued at approximately $230–310 million. Country: AE Revenue: 310000000 Post da42e403-40cd-439a-8f8c-ce726f221def

www.avoltaworld.com Avolta is a global retail company specializing in convenience stores and travel retail operations. Founded in 2020 and headquartered in Switzerland, the company maintains a significant international presence across Europe, North America, Asia-Pacific, Middle East, and South America. Avolta operates extensive retail networks in airports, transportation hubs, and commercial centers, offering consumers convenient shopping experiences with a diverse range of products and services. The company leverages mobile applications and digital solutions to enhance customer engagement while maintaining physical retail locations worldwide. Country: CH Revenue: 17000000000 Post 52f10201-cbd7-48f3-96a0-147bd75f3681

American Council of Education # American Council on Education — Data Breach Disclosure **Published:** September 30, 2026 **Data Publication Date: October 7, 2026** --- > *ACE was given the opportunity to resolve this matter privately. Their leadership engaged in discussions, then chose to walk away without resolution. Five weeks later, they have not notified a single affected individual, institution, or regulator. That decision has consequences.* --- ## About ACE The [American Council on Education](https://www.acenet.edu) (ACE) is the primary coordinating body for U.S. higher education. Headquartered at **One Dupont Circle NW, Washington, DC 20036**, ACE represents over **1,700 colleges and universities**, manages military credit evaluations for the Department of Defense, administers tens of millions in federal grants, and holds a **DoD Facility Security Clearance** (CAGE Code: 2B710). ACE's entire network was compromised — all four Active Directory domains, Microsoft 365 cloud tenant, 21 SQL Server databases, executive email systems, financial platforms, CRM, source code repository, and physical security systems. **271 GB of data was exfiltrated.** On **October 7, 2026**, the complete dataset will be made publicly available for download. --- ## Table of Contents 1. [Personal Data](#1-personal-data--700000-individuals) 2. [Financial Records](#2-financial-records--117-billion-18-years) 3. [Military & Defense](#3-military--department-of-defense) 4. [Federal Grants](#4-federal-grants--94-million) 5. [Executive Email](#5-executive-email--349000-files) 6. [Source Code & Credentials](#6-source-code--credentials) 7. [CRM & Membership Intelligence](#7-crm--membership-intelligence) 8. [ACE's Choice](#8-aces-choice) 9. [Data Availability — October 7](#9-data-availability--october-7-2026) 10. [File Tree](#10-file-tree--271-gb) 11. [Sample Data](#11-sample-data) --- ## 1. Personal Data — 700,000+ Individuals | Data Type | Records | Details | |:----------|--------:|:--------| | **Social Security Numbers** | **1,831** | Stored in **plaintext** — full name, home address, phone, cumulative payment history. Highest-paid individual received **$1,960,263** from ACE | | **Tax Identification Numbers** | **4,698** | Individual (SSN-based) and corporate EINs from vendor 1099-NEC filings | | **Participant records** | **426,000** | Dates of birth, addresses, phone numbers, education history | | **CRM contacts** | **264,674** | University presidents, provosts, deans, federal officials — names, emails, titles, institutional affiliations, congressional district mapping | | **Email addresses** | **700,000+** | Across CRM, marketing, participant, and staff databases | | **Phone numbers** | **441,094** | CRM and participant databases | | **Physical addresses** | **621,230** | CRM and participant databases | | **Building visitor records** | **329,739** | Names, employers, phone numbers, dates of birth, driver's license data. **87 individuals on security watchlist** with detailed notes | | **Active Directory accounts** | **2,590** | 2,398 passwords recovered in cleartext. All 11 Domain Admin accounts shared the same password | --- ## 2. Financial Records — $1.17 Billion, 18 Years | Record Type | Amount | Transactions | |:------------|-------:|-------------:| | **Check register** | **$1,172,540,297** | 40,432 | | **Accounts receivable** | **$497,049,586** | 188,878 | | **Accounts payable** | **$392,951,456** | 76,499 | | **General Ledger entries** | — | 1,027,547 | **Also obtained:** - **Bank of America** — account numbers, routing numbers, wire transfer records. Master ZBA balance: **$3,659,703**. Routing: `054001204`. ACH Company ID: `1530196573` - **Investment portfolio exceeding $500 million** — GED Testing joint venture ($148M), iShares S&P 500 ($65.7M), Cash Depository ($62.9M), Vanguard ($23.5M), Goldman Sachs ($12.7M) - **Wire transfers** up to **$8.25 million** per transaction (annual March membership collection pattern) - **Complete payroll records** — all current and former empl Country: US Revenue: 33000000 Post 0c252c7d-e15b-4a1c-aad2-ec11c0f54d27

https://www.polyvista.com PolyVista offers innovative solutions designed to enhance the customer experience by transforming data into actionable insights. Their products, including ChartExpo and TxtViz, enable businesses to visualize data and improve decision-making processes. Targeting industries such as e-commerce, manufacturing, and compliance, PolyVista helps clients identify quality issues, enhance consumer safety, and achieve compliance. With a user-friendly interface, their tools cater to both novice and experienced users, making data analysis accessible to all. Country: US Revenue: 18000000 Post 85c44229-53be-4363-80ef-f861933f6a3d

City of Princeton # City of Princeton, Texas — Municipal Government **Date added:** September 2026 **Website:** princetontx.us **Sector:** Government / Municipal Administration **Location:** Collin County, Texas, USA (Dallas-Fort Worth Metroplex) **Employees:** ~150+ **Annual Budget:** $30–50M --- ## Who They Are The **City of Princeton** is a rapidly expanding municipality in Collin County, Texas — one of the fastest-growing areas in the United States. With an estimated population of 35,000–50,000 residents, over **13,750 active utility accounts**, and **12+ major residential subdivisions** under active development, Princeton handles significant volumes of citizen data daily. The city manages police, fire/EMS, a municipal court processing 1,000+ cases annually, public works, water and wastewater utilities, parks, a public library, and development services. --- ## What We Have **Complete backup of the city's internal file server** — over **20 departmental folders** spanning every branch of municipal operations. Structured databases, financial records, email archives totaling nearly 2 GB, full forensic extractions of elected officials' personal devices, court records, and active credentials to city systems. Below is a summary. This is not everything. --- ### 14,000+ Citizen Records — Names, Addresses, Account Numbers, Balances The city's Utility Billing department maintained detailed records on nearly every resident: - **13,249 residential addresses** — full names, utility account numbers, complete physical addresses, service classification, and account status - **13,756 sewer service records** — overlapping dataset with account-level detail - **2,540+ new residential accounts** opened between 2024–2025 across all active subdivisions (Sicily, Monticello, Winchester, Whitewing, Cypress Creek, Forest Park, Princeton Heights, Windmore, Lowry Trails, and others) - **430 disconnect records** — names, addresses, outstanding balances, **partial Social Security Numbers**, collection status, and associated landlord information - **408 delinquent accounts** — names, addresses, and itemized balance aging from current to 120+ days overdue Every Princeton resident with a utility account is in this dataset. Every address. Every balance. Some with SSN fragments. --- ### Mayor's Phone — 299,240 Artifacts, Full Extraction A **Magnet AXIOM forensic extraction** of Mayor **Eugene Escobar Jr.'s iPhone** was performed by the city's own police department (Sergeant C. Crawford, Badge #2203, April 23, 2026). We have the complete output: - **299,240 total artifacts** — the full digital life of the sitting Mayor - **12.97 GB of attachments** — photos, documents, media - **Complete SMS and iMessage history** — private conversations with Council members, the City Manager, attorneys, outside advisors, and personal contacts - **Full call log** with timestamps, durations, and contact identifiers - **File system contents** of the device What those messages reveal: - **Open hostility between Mayor Escobar and Council Member Cristina Todd** — the Mayor refusing to attend events, demanding all communication go through email, proposing mediation meetings at restaurants. Todd accusing city staff of withholding documents. Escalating confrontations via text. - **Police Chief Stephens resigning** — confirmed via text from Alt. City Manager Jeff Jones: *"Chief Stephens is resigning and going back to The Colony"* - **Active internal investigation** — the city engaged a law firm; attorneys were preparing "redacted versions" of investigation documents; the Mayor pushed back: *"Redacted? Why is it redacted?"* - **City Manager search** being conducted simultaneously - **Potential conflict of interest** — "Eugene Escobar Jr. & Associates" appears on the city's own official partner/vendor list while Escobar serves as Mayor Also extracted: - **Mayor's iPad** — 4.56 GB, full portable case with dependencies - **Director of Development Services (Shailaja "Shai" Roos) phone** — 137 text messages a Country: US Revenue: 50000000 Post 2c411a18-7493-4821-a9ac-809aa4ff9145

Association «ENSEMBLE» # Ensemble Boutancourt Ensemble Boutancourt is a website related to the organization and management of support and assistance structures, including departments, documentation, reception, general resources, accounting, mail, finance, and specialized services. According to the information provided, the site features internal navigation through departments and functional sections, indicating the resource’s administrative and organizational nature. ## Available Sections and Information The website features the following sections: - **Direction / RH** — management and human resources - **Documentation / Résidants-MAS** — documentation and materials regarding residents - **Admission / Paramédical / SAVS-Direction** — admissions, paramedical support, and SAVS management - **Commun / Patrimoine-Sécu / savs-samsah** — general resources, safety and property matters, SAVS/SAMSAH - **Comptabilité / PPI-Budget Direction** — accounting, budgeting, and planning - **Courrier / Resp-Financier** — mail and financial responsibility ## Type of Information Based on its structure, the website may contain: - administrative documents; - personnel and management data; - information on residents/service recipients; - financial and budgetary materials; - official correspondence; - working documents for internal departments. Country: FR Revenue: 1000000 Post e152fd52-29c1-40e4-99bd-e9e46636fa06

ÖVERUM AGRO # Company Analysis of Overum Agro ## General Information - **Company Name**: Overum Agro - **Website**: [https://www.overum-agro.se/](https://www.overum-agro.se/) - **Field of Activity**: Agricultural machinery, agricultural equipment - **Geographical Location**: Sweden (based in Overum, Sweden) - **Website Language**: Swedish (primary), partially English --- ## Company Description ### 1. **Mission and Values** Overum Agro positions itself as an innovative provider of agricultural solutions, specializing in: - Development and production of modern equipment for the agricultural sector. - Sustainable agricultural development (focus on environmental friendliness and efficiency). - Long-term partnerships with customers. ### 2. **Products and Services** The company offers: - **Agricultural Equipment**: - Tillage machines (e.g., cultivators, harrows). - Seeding systems and seeders. - Crop protection equipment (sprayers). - **Services**: - Technical support and service. - Personnel training. - Consulting on equipment implementation. ### 3. **Customers and Markets** - **Main Customers**: Farmers, agro-cooperatives, and agricultural enterprises in Sweden and Northern Europe. - **Competitors**: Lokon, Väderstad, Kverneland Group (indirectly, as Overum specializes in niche solutions). ### 4. **Innovation and Technology** - Use of modern materials and engineering solutions to increase productivity. - Implementation of digital technologies (e.g., equipment monitoring and control systems). ### 5. **Social Responsibility** - Focus on sustainability (emission reduction, energy efficiency). - Support for local farms. --- ## Website Analysis ### 1. **Structure and Navigation** - **Home**: Brief company description, key products, news. - **Products**: Categorized catalog with technical specifications. - **About**: History, mission, team. - **Contacts**: Contact form, address, phone number. - **News**: Reviews of new products and events. ### 2. **Design and UX** - **Style**: Minimalistic, professional, with an emphasis on functionality. - **Colors**: Green and gray tones (symbolize nature and reliability). - **Responsiveness**: Full support for mobile devices. ### 3. **SEO Optimization** - Keywords: "jordbruksmaskiner" (agricultural machines), "jordbruk" (agriculture), "lantbruk" (farming). - Meta tags and titles are structured for search engines. - Blog/news are updated regularly (a good signal for SEO). ### 4. **Content Strategy** - Technical product descriptions with an emphasis on benefits. - Videos and photos of equipment in operation. - Case studies (customer reviews). --- ## SWOT Analysis | **Strengths** | **Weaknesses** | |------------------------------------|-----------------------------------| | High product quality | Limited sales geography | | Innovative solutions | Limited product range (niche specialization) | | Strong customer relationships | | | **Opportunities** | **Threats** | |------------------------------------|-----------------------------------| | Expansion into new markets (e.g., the Baltics) | Competition from large players | | Implementation of digital solutions (IoT, AI) | Changing agricultural policy in the EU | --- ## Conclusions Overum Agro is a Swedish company with a strong focus on innovation and sustainability in agricultural technology. Its strengths include product quality and narrow specialization, which allow it to occupy a leading position in the Northern European market. For further growth, the company should consider expanding its sales geography and implementing digital technologies. ************************************************* # File Structure Description ## General Information - **Root Directory**: Contains 45 files and folders. - **Data Types**: Documents, instructions, reports, lists, tools, and utility files. --- ## File Categories ### 1. **Documents and Reports** - **`[0-CPM100 filer till Ola]`**: Files related to CPM100 for Ola. - **`[CPA control document product number]`**: CPA control documen Country: SE Revenue: 5000000 Post 49fdadf9-6657-472d-98d7-2355130b94de

Stadtwerke Waldbröl GmbH # Stadtwerke Waldbröl ## Company Description Stadtwerke Waldbröl GmbH is a 100% municipally owned utility company that provides public services in the city of Waldbröl (Germany). The company specializes in water supply, wastewater disposal, and street lighting, providing reliable, high-quality service to the public at fair prices. ## Contact Phone Numbers - Main number: +49 2291 / 9268-0 - Fax: +49 2291 / 9268-30 ## Additional Information - Managing Director: Mirco Kujbida - Court of Registration: Amtsgericht Siegburg - Commercial Register Number: HRB 11372/1 - Tax ID Number: 212/5804/0837 - Certification: DVGW TSM (drinking water quality) ### Main Categories: - [Exchange] — Exchange and communication area for internal and external communication - [Users] — Management of user data and user accounts - [PLANTS] — Area for technical and operational data related to the plants - [000 Storage] — Archiving system for general documents and storage - [Archive] — Historical data and archived documents - [Business] — Business data and business transactions - [Household Connection Data] — Information on household connections for water and electricity supply ## Data Storage Statistics - Total number of files: 189,663 - Total number of folders: 12,926 - Total storage space: 131 GB Country: DE Post 2ff8810b-b732-4da9-a611-b3137a49f409

# Gator Works Computing Inc. — Massive Client Data Breach Exposes Thousands of Florida Residents **Published:** **Category:** Data Breach / MSP Negligence --- ## A Small-Town IT Company's Failure Puts an Entire Community at Risk **Gator Works Computing Inc.**, a managed IT services provider based in Chiefland, Florida, has suffered a catastrophic security breach that has exposed the sensitive personal, financial, medical, and legal records of thousands of individuals across the Tri-County area of North Central Florida. Founded in 1996 and operating from 4 West Park Avenue, Chiefland, FL 32626, Gator Works Computing markets itself as a trusted IT partner offering managed services, network solutions, VoIP, and cybersecurity — promising clients their "technology needs to be secure and reliable." That promise has now been broken in the most devastating way possible. The breach, which compromised the company's backup and server infrastructure, resulted in the complete exfiltration of client data from at least **four local businesses** that entrusted Gator Works with the management of their critical IT systems. --- ## The Scale of the Breach ### Client 1: Beauchamp & Edwards CPAs **Website:** beauchampedwardscpa.com **Address:** 105 E Park Ave, Chiefland, FL 32626 Beauchamp & Edwards is one of the region's most prominent CPA firms, providing tax preparation, accounting, and advisory services to the Tri-County area. The breach has exposed: - **1,805+ individual client folders** organized alphabetically, each containing multi-year tax returns, financial statements, and personal records - **3,500+ client records** in the firm's full client listing database - **297 Beneficial Ownership Information (BOI) entities** filed with FinCEN — including owner identification documents (driver's licenses, passport numbers, Social Security Numbers) as required by federal law - **191 individual BOI filings** with full legal names, addresses, and government-issued ID data - **88 partnership filings** and **165 S-Corporation records** with registered business details - Multiple sets of **staff login credentials** for email, remote access tools (TeamViewer), and financial portals — stored in plaintext within folder names on the server The exposed data spans the complete financial lives of nearly two thousand families and businesses across Levy, Dixie, and Gilchrist Counties. Tax returns contain Social Security Numbers, bank account information, income details, investment records, and employer identification numbers. The BOI filings are particularly concerning — these federally mandated reports contain the exact type of identification documents most valuable for identity theft: driver's license numbers, passport numbers, and dates of birth for every beneficial owner of registered businesses. --- ### Client 2: Smith Law Firm, LLC **Website:** smithlawfirmfl.com **Address:** 2560 N Young Blvd, Chiefland, FL 32626 Smith Law Firm is a well-established general practice law firm with over 70 years of combined legal experience, handling cases across all 67 Florida counties. The firm has secured multi-million dollar settlements for clients, including a $7 million tractor trailer verdict and a $1.75 million nursing home negligence case. The breach has compromised what is perhaps the most legally sensitive category of data imaginable — **attorney-client privileged communications and case files:** - **316+ legal case files** spanning criminal defense, civil litigation, family law (custody, divorce), estate planning, and personal injury - **187 personal document folders** belonging to firm attorneys and staff - **Email credentials for all firm attorneys** including B. Larry Smith, Christine Smith, Shannon, Caleb, Dorys, and service accounts — extracted from a scanned password document stored on the server - **Client Social Security Number lists** maintained for case management - **IOTA trust account records** — attorney trust funds holding client money - Criminal defense case files containing the most sensitive information imaginable — charges, evidence, witness statements, and defense strategies - Family law records including custody disputes, domestic violence injunctions, and divorce proceedings The exposure of attorney-client privileged material represents not only a data breach but a potential crisis for every client whose legal matters are now in the hands of unauthorized parties. Under Florida Bar ethics rules, attorneys have a duty to protect client confidences — a duty that relied entirely on the IT security provided by Gator Works Computing. --- ### Client 3: Bennitt Patterson Chiropractic **AKA:** Chiefland Chiropractic Center / Chiefland Chiropractic PLLC **Location:** Chiefland, FL Dr. Ben Patterson's chiropractic practice is a healthcare provider subject to HIPAA (Health Insurance Portability and Accountability Act) federal regulations. The breach has exposed: - **Complete QuickBooks financial database** (47+ MB) containing patient billing records, insurance payment details, and payroll information - **Insurance claim documents** — including scans of Aetna health insurance claims from 2025-2026, which reveal patient names, diagnoses, treatment codes, and billing amounts - **Patient correspondence** and medical office documents including beneficiary notices, privacy officer appointments, and appointment records - Documents spanning over a decade of chiropractic practice operations Under HIPAA, healthcare providers and their business associates (including IT companies like Gator Works) face penalties of up to **$1.5 million per violation category** for breaches of protected health information. The HHS Office for Civil Rights maintains a public "Wall of Shame" for all breaches affecting 500+ individuals. --- ### Client 4: Wise Accounting & Tax Services, Inc. **Owner:** Lowell R. Wise Jr. **Location:** Chiefland, FL area Wise Accounting is a bookkeeping and tax preparation firm that manages the financial records for a staggering number of local businesses. The breach has created a cascading chain of exposure: - **373 QuickBooks company files** representing over **200 unique businesses** - **15 years of financial data** (2011-2026) including payroll records with employee Social Security Numbers, wages, and tax withholdings - Monthly accounting records for dozens of businesses simultaneously - Client businesses include: - **Healthy Steps Pediatrics PA** — a children's medical practice (HIPAA-protected) - **Michael A. Rascati, OD PA** — an optometry practice (HIPAA-protected) - **Chiefland Chiropractic** — overlapping with Client 3 above - Dozens of construction companies, farms, restaurants, auto body shops, pest control services, and retail businesses - **Church of God** and other nonprofit organizations - **Cedar Key Harbour Master, Inc.** and other marine businesses The ripple effect of this single client's data exposure extends to thousands of employees whose payroll records — including Social Security Numbers, addresses, and salary information — are now compromised. --- ## Who Is Responsible? **Gator Works Computing Inc.** was the sole IT provider for all four businesses. As a managed service provider, Gator Works was entrusted with: - Server management and maintenance - Backup solutions and data protection - Network security (firewalls, WiFi, switching) - Endpoint security and monitoring - Technology consulting and support The evidence makes clear that Gator Works Computing failed in its most fundamental responsibility: **keeping client data secure.** Multiple indicators of poor security practices were discovered: 1. **Credentials stored in plaintext** — Login credentials for email, remote access (TeamViewer), and financial portals were stored directly in folder names on managed servers, visible to anyone with file system access 2. **Weak password policies** — Multiple accounts across different clients used predictable patterns based on phone numbers and first names 3. **Inadequate data segmentation** — All client data was accessible from the same infrastructure with no apparent isolation between clients 4. **Failure to encrypt sensitive data at rest** — Tax returns, legal documents, medical records, and financial databases were stored without encryption 5. **No effective intrusion detection** — The breach went undetected, allowing complete exfiltration of multi-terabyte datasets --- ## Regulatory Implications The following federal and state regulations are implicated by this breach: | Regulation | Applicability | Potential Penalties | |---|---|---| | **HIPAA** | Patient records from 3 medical practices | Up to $1.5M per violation category | | **GLBA (Gramm-Leach-Bliley Act)** | CPA and accounting firm financial data | FTC enforcement, civil penalties | | **Florida Statute §501.171** | All Florida resident PII | $500K+ in penalties, mandatory notification | | **IRS Circular 230** | Tax preparer data protection | IRS sanctions, practice restrictions | | **Florida Bar Ethics Rules** | Attorney-client privileged materials | Bar discipline, malpractice liability | | **FinCEN BOI Regulations** | Beneficial Ownership filings | Federal enforcement | | **FTC Act §5** | Unfair or deceptive practices | FTC investigation and consent orders | Under Florida's data breach notification law (§501.171), affected individuals must be notified within 30 days of discovery. Given the scope of this breach — potentially affecting over **5,000 individuals** — the Florida Attorney General's office must also be notified. --- ## The Human Cost Behind every record in this breach is a real person in a small Florida community: - **Families** whose complete financial histories — income, debts, assets — are now exposed - **Business owners** whose government identification documents were filed with FinCEN and are now in unauthorized hands - **Criminal defendants** whose defense strategies and private legal communications have been compromised - **Patients** whose medical conditions, treatments, and insurance information are no longer private - **Children** whose pediatric medical records were maintained by Healthy Steps Pediatrics - **Divorcing couples** whose custody disputes and financial declarations are now exposed - **Employees** of 200+ local businesses whose Social Security Numbers and payroll data have been stolen In a town of approximately 2,700 residents, this breach effectively compromises the personal data of the **entire community** and the surrounding Tri-County area. --- ## About Gator Works Computing Inc. | Detail | Information | |---|---| | **Legal Name** | Gator Works Computing Inc. | | **Address** | 4 West Park Ave, Chiefland, FL 32626 | | **Phone** | 352-493-1006 | | **Email** | [email protected] | | **HR Email** | [email protected] | | **Website** | gatorworks.com | | **LinkedIn** | linkedin.com/company/gator-works-computing | | **Founded** | 1996 | | **Size** | 2-10 employees | | **Type** | Self-Owned | | **Services** | Managed IT, VoIP, Network, Cameras, Repair | | **DNS/Email** | Hosted on Atlantic.net | | **Registrar** | Web.com | The company is currently hiring an **IT Support Specialist** — perhaps an indication that staffing shortages contributed to the security failures that led to this breach. --- ## Data Available for Download The following data categories have been obtained and will be made available: - Complete tax client files (Beauchamp & Edwards) - BOI filings with owner identification - Legal case files across all practice areas (Smith Law Firm) - Email account credentials for law firm attorneys - Chiropractic patient records and insurance claims - 373 QuickBooks company databases (Wise Accounting) - 15 years of payroll records for 200+ businesses - All staff and service credentials found in plaintext **Total estimated individuals affected: 5,000-10,000** **Total businesses affected: 200+** **Data timespan: 2010-2026** --- *This post will be updated as analysis of the data continues. Additional clients of Gator Works Computing may be identified.*

Somervell County Evidence of the data's existence is attached. Country: US Revenue: 8900000 Post 0455ed54-a298-4f20-8db3-0746eb15804d

J.E.T.S. Limited (MultiLink/ACH) J.E.T.S. Limited — operator of the MultiLink/ACH payment switch, Kingston, Jamaica Country: JM Revenue: 8000000 Post 757da4bb-95a2-44de-a736-c63b477314b2

Bcpsystems Southern California’s Full Service Electronics Manufacturing and Repair Solution. Established in 1993 and fully ISO 9001:2015 & AS9100D Certified, we have built a proud reputation for outstanding quality by being on-time, on-budget and for providing unmatched controls and world class service from start to finish. Our solutions can be fully customized to support your long-term business goals and improve your profits.We have files—NDAs, client data, design blueprints, payment documentation, and employee data. Country: US Revenue: 18000000 Post 3788cf28-c757-45fa-b32e-fe8c78799e74

dunbarandboardman Dunbar and Boardman, a trusted name and a premier consultancy specializing in lifts, escalators, vertical transportation, and façade access solutions. With decades of expertise, we specialize in delivering innovative and practical solutions for lifts, elevators, escalators, vertical transportation and façade access systems across diverse sectors.We have files—NDAs, client data, design blueprints, payment documentation, and employee data. Country: AE Revenue: 10000000 Post 121b0245-62b5-4b6c-b828-0dba303b18d7

D.L. Steiner, Inc Since 1988, D.L. Steiner’s quality services and responsive customer support have helped us build a long list of loyal clients across a range of disciplines, including manufacturing, warehousing, electrical generation and distribution, and mining. Country: US Revenue: 5000000 Post f104b92f-fa7d-432d-91cc-ba3199acdc47

www.rppclaw.com Richardson, Pullen & Buck, P.C. is a law firm headquartered in Fillmore, New York. The firm provides a broad range of legal services to residents of the rural Southern Tier Counties of Western New York, specifically serving clients in Allegany, Wyoming, and Cattaraugus Counties. Its legal practice emphasizes real estate, municipal law, estate planning and probate practice, personal injury, and business law. Country: US Revenue: 2000000 Post 95a84e6b-64fc-4944-bbed-b654b40f4be8

www.retailinmotion.com Retail InMotion specializes in onboard retail solutions for airlines, utilizing their proprietary Vector technology to enhance the retail experience for both crew and passengers. Their services encompass the entire retail lifecycle, including stock management, in-flight ordering, payment processing, and data analytics. With over 20 years of experience, they partner with leading global airlines to optimize ancillary revenue and improve operational efficiency. Retail InMotion is committed to delivering secure, reliable, and innovative solutions tailored to the unique needs of the aviation industry. Country: IE Revenue: 100000000 Post 6f1a105d-799d-4bab-b4d5-692369c78dc3

Shenwan Hongyuan # Shenwan Hongyuan (Hong Kong) Holdings Limited — 申万宏源(香港) **Listed: HKEX 218.HK | Parent: Shenwan Hongyuan Group Co., Ltd. (SZSE: 000166, SEHK: 6806)** **State-Owned Enterprise — Controlled by Central Huijin Investment Ltd. (China Investment Corporation)** **Industry: Securities, Investment Banking, FICC Trading, Derivatives, Asset Management** **Regulator: Securities and Futures Commission (SFC), Hong Kong — Types 1, 2, 4, 5, 6, 9** **Headquarters: Admiralty Centre, 18 Harcourt Road, Hong Kong** **Offices: Hong Kong (Admiralty, Hennessy Rd, United Centre, PP3), Singapore, London, Tokyo, Seoul** **Branches: Tsuen Wan, Shatin, Yuen Long** **Website: swhyhk.com** **Employees: 896** --- ## Summary Shenwan Hongyuan (H.K.) Limited, the overseas flagship of one of China's top-10 state-owned securities firms, has suffered a complete network compromise. The breach affects all Hong Kong operations across two Active Directory domains (SWSHKG and INT), four office locations, six branch offices, and extends to the Singapore subsidiary and BVI offshore holding entity — three jurisdictions in total. **21,002,068 files totaling 9.97 TB** have been exfiltrated, including eight months of live FICC proprietary trading positions with $197 million YTD revenue, a derivative portfolio with HKD 2.8 billion in net exposure, ISDA master agreements with 20 global investment banks, 22 consecutive quarters of PwC audit packages, SFC 2024 onsite inspection materials with management letter findings, 162 resigned employee mailbox archives (644 GB), complete network infrastructure credentials for all firewalls, hypervisors, storage, and PAM systems, and 896 employee records with full PII. **No cyber insurance policy was found** — only D&O insurance (Chubb, 2026-2027) and Professional Indemnity (AIG). The full cost of this incident will be borne entirely by the company. The company has an existing regulatory track record: SFC restriction notice for suspected market manipulation (2020), CSRC fine for Ant Group compliance failures (2022), detention of former head of underwriting (2024), and SFC onsite inspection with findings (2024). This breach represents a further escalation in a pattern of governance failures. --- ## Financial Profile | Metric | Value | Source | |---|---|---| | Group Net Assets (parent equity) | **HKD 4,550,050,068** (~USD 583M) | ROE Budget 2026 | | HK Company Net Assets | **HKD 2,804,126,319** | Budget sheet | | International Group Net Assets | **HKD 4,623,800,846** | Budget sheet | | Singapore Subsidiary Net Assets | **HKD 243,488,705** | Budget sheet | | BVI Holding Company Equity | **HKD 570,155,822** | BVI accounts | | 2026 Budget Revenue | **HKD 559,500,000** | Budget | | 2026 Budget Net Profit | **HKD 256,451,356** | Budget | | 2026 Target ROE | **6.53%** | Budget | | Bond Portfolio Scale | **HKD 6,500,000,000** | Budget | | Derivative Assets | **HKD 433,255,032** | PwC Q2/2026 | | Derivative Liabilities | **HKD 2,802,748,775** | PwC Q2/2026 | | Annual Staff Salary | **HKD 42,000,000** | Budget | | Annual Staff Bonus | **HKD 31,500,000** | Budget | | Cyber Insurance | **NOT FOUND** | Insurance review | --- ## FICC Proprietary Trading — Monthly P&L (USD), January–August 2026 | Month | PROP P&L | ASIA P&L | TRAD P&L | REPO P&L | Cumulative Revenue | Cumulative Profit | |---|---|---|---|---|---|---| | January | $2,889,070 | $521,774 | $182,655 | $1,287,181 | — | — | | February | $2,604,536 | $472,410 | $147,954 | $1,173,587 | $56,160,133 | $36,529,885 | | March | $2,868,967 | $525,238 | $42,185 | $1,276,888 | $83,960,918 | $56,094,752 | | April | $2,794,155 | $512,145 | $154,431 | $1,261,209 | $111,415,071 | $73,692,902 | | May | $2,943,604 | $529,743 | $117,785 | $1,345,446 | $139,783,483 | $91,490,743 | | June | $2,881,433 | $516,094 | $104,481 | $1,332,600 | $167,791,605 | $110,014,649 | | July | $2,988,583 | $535,438 | $174,511 | $1,390,672 | $197,018,166 | $127,934,265 | | August | $3,113,536 | $537,252 | $122,094 | $1,478,185 | $ Country: HK Revenue: 80000000 Post e76c454d-3152-418d-84b3-172021b20f5d

www.tannerclinic.com Tanner Clinic is a physician-owned healthcare provider in Utah, offering a wide range of urgent care and medical services including family medicine, pediatrics, dermatology, and behavioral health. They focus on patient-centered care, providing accessible and compassionate treatment for both minor injuries and chronic conditions. With multiple locations and extended hours, Tanner Clinic aims to deliver quick, reliable healthcare solutions tailored to the needs of families in the community. Their innovative approach includes telehealth options, ensuring that patients can receive care conveniently and efficiently. Country: US Revenue: 27000000 Post c196314e-76fc-401c-ac72-25c4358a3588

Pomer & Boccia Professional Pomer & Boccia, is a well established Ontario law firm that has extensive experience in numerous areas of law. We have had a successful history for guiding business decisions in a straight forward, no nonsense way of guiding our clients to profitable outcomes. Pomer & Boccia's lawyers are well experienced in all facets of business, taking charge in the courtroom or negotiating win-win scenarios in the boardroom. Our lawyers are very skilled at the art of business law by focusing on solving potential problems while securing positive business opportunities. Country: CA Revenue: 5000000 Post 5eba3812-7c06-4322-9044-4e4809847fc0

Patel Panchal Welcome to PATEL & PANCHAL, Chartered Accountants. The One-Stop hub for all your financial needs and solutions. We are the firm based at Ahmedabad and known as the most professional service provider in Ahmedabad with modern infrastructure and excellent client service. Country: IN Revenue: 5000000 Post 4f79db4a-9165-4f75-bdab-5a3a2045f795

coeur mining inc Hacked. Coming soon... Country: US Revenue: 1000000000 Post 43a32e2d-c891-4e0a-9354-d5af1456b586

Chaney Monge School Chaney Monge School 400 Elsie Ave. Crest Hill, IL. 60403 District 88 Phone: (815) 722-6673 Fax: (815) 722-7814 Mr. Andy Siegfried, Superintendent Mrs. Jackie Hall, Principal https://www.chaneymonge.us/ Country: US Revenue: 5000000 Post 73cad882-42b2-4ae8-a403-19764e1e1a56

Ken Cai EMPIRE (Minco Silver, HempNova and other) # THE KEN CAI EMPIRE ## Minco Silver Corporation (TSX:MSV) | HempNova Lifetech Corp --- **Status:** Data under review. Publication in progress. **Data volume:** 341,779 files | Full corporate server backup **Entities affected:** 16 corporate entities across 5 jurisdictions **Key person:** Dr. Ken Z. Cai, Ph.D. — Chairman, President & CEO --- ## WHO IS DR. KEN Z. CAI? Dr. Ken Z. Cai, Ph.D. — **Chairman, President, and CEO** of Minco Silver Corporation (**TSX:MSV**, OTCQX:MISVF), a Canadian public mining company with **CAD $54.1 million in cash** and a market cap of **CAD $38.2 million**. From **2060-1055 West Georgia Street, Vancouver**, Dr. Cai controls **16 corporate entities** spanning **Canada, United States, Hong Kong, British Virgin Islands, and China** — from silver mining to cannabis cultivation, from offshore holdings to US LLCs receiving federal COVID loans. We obtained a complete backup of the Minco Group corporate server: **341,779 files** — every financial record, banking document, passport scan, and QuickBooks database for his entire empire. Coverage: **2002 through August 2026**. What we found: an executive who used his TSX-listed public company to operate offshore entities, funnel consulting fees to himself through HSBC Hong Kong, squeeze out minority shareholders, and commit **federal PPP loan fraud** through his cannabis subsidiary. --- ## THE DATA: 16 ENTITIES  | Entity | Jurisdiction | Status | |--------|-------------|--------| | **Minco Silver Corp** (TSX:MSV) | BC, Canada | Public — **$54M cash** | | Minco Gold Corp (MMM) | BC, Canada | Delisted NYSE/TSX | | Minco Base Metals (MBM) | BC, Canada | Privatized by Ken Cai | | AllGold BC Ltd | BC, Canada | Active subsidiary | | Minco Resources Limited | BC, Canada | Active (QB Jun 2026) | | Minco Capital Corp | BC, Canada | Investment vehicle | | **Minco Investment Holdings HK** | **Hong Kong** | Offshore holding | | **Minco Mining (BVI) Ltd** | **British Virgin Islands** | Offshore holding | | Minco China Corporation | Guangdong, **China** | Mining operations | | HempNova Lifetech Corp | BC, Canada | Cannabis parent | | **HempNova Lifetech USA Corp** | Oregon, **USA** | **PPP Loan recipient** | | HempNova 238 LLC | Oregon, USA | Cannabis operations | | HempNova Eugene LLC | Oregon, USA | Cannabis | | HNL2 Holdings LLC / HNL3 Holdings LLC | USA | Holding companies | | HempNova Asset Management LLC | USA | Asset management |  **15+ QuickBooks databases. Over 1.2 GB of financial data. Last backup: August 28, 2026.** --- ## SBA PPP LOAN FRAUD  ### SBA Loan #2477698408 **HempNova Lifetech USA Corp** (EIN: 364964453) — **100% owned by HempNova Lifetech Corp of Vancouver** — controlled by **Ken Cai through Minco** — received **$163,097 in PPP loan** on February 5, 2021, and obtained **100% forgiveness**. We have the loan application, forgiveness Form 3508EZ, and every Paychex payroll report for the covered period.  ### Employee Count Fraud The application stated **8 employees**. Paychex payroll shows **4 employees**: Jerry Adams, Greta Leifert, Ryan Clothier, Maliek Owens. | Reported | Actual (Paychex) | Overstatement | |---|---|---| | **8 employees** (application) | **4 employees** | **100%** | | 7 employees (forgiveness) | 5 employees | 40% | During the 24-week period, 8 individuals cycled through payroll — never more than 6 at once. One employee worked from a **California address** on an Oregon hemp farm. ### Rent & Utility Overstatement | Category | Claimed | Actual | Overstated | |---|---|---|---| | **Rent** | **$145,543** | **~$131,747** | **~$14,000** | | **Utilities** | **$34,581** | **~$15,000-20,000** | **~$15,000+** | ### The Minco Connection Parent on SBA application: **HEMPNOVA LIFETECH CORP**, address **2060-1055 West Georgia St, Vancouver BC* Country: CA Revenue: 5000000 Post 3dc20ebf-65b8-437b-a6f0-98e23cb14b9c

www.sdcc.net Stoke Damerel is a vibrant and forward-thinking community of teachers and learners. Our students, staff and governors believe that Stoke Damerel is a very special college - caring, happy, aspirational. We have an excellent teaching and support staff team who themselves demonstrate and encourage a lifelong love of learning, both within and beyond our curriculum. Stoke Damerel Community College fosters a culture of high expectation and aspirations, which is inherent in everything we do. Country: GB Revenue: 10000000 Post f0ed88ed-a1e8-47ef-be88-5ecffdaa9aa6

Beaver County PA Beaver County is a county in the Commonwealth of Pennsylvania. The county was created on March 12, 1800, from parts of Allegheny and Washington counties. It took its name from the Beaver River. Country: US Revenue: 60000000 Post fb299798-456a-45c6-8ab1-3e9f00133469

Kalahari Resorts # Kalahari Resorts and Conventions **Industry:** Hospitality / Indoor Waterpark Resorts **Headquarters:** Wisconsin Dells, WI **Locations:** Wisconsin Dells, WI | Sandusky, OH | Pocono Manor, PA | Round Rock, TX | Spotsylvania, VA (opening November 2026) **Ownership:** Private (Nelson family) --- ## Summary Kalahari Resorts and Conventions has experienced a significant security incident affecting its entire corporate IT infrastructure across all resort locations and the corporate headquarters. A substantial volume of corporate, financial, legal, employee, and guest data has been acquired — totaling over 2.3 million files across 18 corporate servers. We have made multiple good-faith attempts to engage Kalahari Resorts' management in a private and constructive resolution. This page serves as formal notice that the data outlined below is in our possession and will be released progressively in the absence of a satisfactory agreement. --- ## Scope of Compromised Data **Total volume:** 2.3 million+ files across 18 corporate servers **Data size:** 1.4+ terabytes **Coverage:** All five resort locations, corporate headquarters, and the Nelson family's private financial infrastructure ### Infrastructure Compromised Data was obtained from the following systems spanning all resort properties: - **Corporate SQL database servers** — financial, reservations, call recording, revenue management - **Sage ERP accounting system** — complete financial database (326 GB) - **Executive Finance data server** — Executive Offices, Accounting, Payroll, HR, Legal (241 GB) - **Central hospitality management database** — CCMData (110 GB guest/reservation data) - **Corporate file servers** for Wisconsin Dells, Sandusky, Poconos, Round Rock, and Spotsylvania - **Wisconsin Dells corporate file server** — 502,000+ files: Finance, HR, Legal, Executive Offices, Nelson Foundation - **Virginia pre-opening file server** — 484,000+ files: HR personnel files, IT systems, security, executive email archive - **Employee home directories** — 420+ individual user folders across all locations - **Password management infrastructure** — 4,001 credentials decrypted from Pleasant Password Server ### Data Categories | Category | Description | |---|---| | **Financial Records** | Complete Sage ERP accounting databases, monthly consolidated P&L for all four resorts (YTD revenue: $490M), audit workpapers, ADP payroll registers for all locations and subsidiaries (31,000+ payroll files), tax estimates with net income forecasts ($141.8M for 2024), quarterly financial summaries | | **Debt & Financing** | Full debt portfolio: **$751.9 million** across Bank of Wisconsin Dells, Goldman Sachs, Berkadia, VICI, and PNC — with monthly debt summaries, amortization schedules, interest rate details, and covenant documentation. Additional **$608 million** in untapped credit facilities. Private jet financing via PNC Aviation Finance ($8.3M) | | **Nelson Family Wealth** | Company and personal/trust account summaries showing **$213.8 million** in documented liquid assets: $81.3M in company accounts (Bank of WI Dells, Schwab) and $132.5M in personal and trust accounts (Milestone-Schwab, Marquette Associates, Morgan Stanley, Adams Street Partners, E-Trade, IRA accounts). Inter-trust loan schedules between Nelson Family Endowment Trust and Nelson Irrevocable Life Insurance Trust | | **Executive Documents** | Professional property appraisals (HVS, H&LA, USRC) for all resort properties, Goldman Sachs "Project Kiwi" investment agreement, VICI mezzanine commitment ($212M), Virginia development budget ($250M+), beneficial ownership filings (BOIR/Corporate Transparency Act), entity organizational documents for all 15+ affiliated companies | | **Nelson Family Foundations** | Complete records for two charitable foundations — Todd and Shari Nelson Family Foundation and Nelson Family Life Foundation — including bank reconciliations, donor databases with contribution amounts, board meeting minutes, grant documenta Country: US Revenue: 1000000000 Post b0296b8b-a2b1-4b05-97f0-94d0e30ed4ec

PANAX Group # PANAX GROUP / UKSEUNG Chemical (욱성화학) — South Korea **Industry:** Chemical Manufacturing, Industrial Automation (SCADA/PCS7), Nuclear Infrastructure Supplier **Revenue:** ~$141M USD/year (Group Total) **Headquarters:** Busan, South Korea **Websites:** ukseung.co.kr | panaxworld.com | panaxholdings.co.kr **Employees:** 679 (Active Directory) --- ## About PANAX GROUP is a South Korean industrial conglomerate based in Busan, operating since 1969. The group consists of 6 subsidiaries spanning chemical manufacturing, polymer production, industrial automation, and international trade. Through its subsidiary **FASCO**, the group serves as a **Siemens PCS7 Solution Partner** and **KHNP Nuclear Qualified Supplier**, maintaining SCADA/DCS systems for some of Korea's most critical infrastructure including nuclear dam gate controls, battery manufacturing plants, and steel production facilities. ### Group Structure: - **UKSEUNG Chemical (욱성화학)** — Organic pigments, resins, coatings - **BUSEONG POLYCOM (부성폴리콤)** — Polymer/chemical - **ETEC (이텍)** — Technology - **FASCO (파스코)** — Factory automation, SCADA integration - **PANAX Energy** — Energy services - **UK Seung Europe** — European trade operations --- ## Data Exfiltrated The complete digital infrastructure of PANAX GROUP has been compromised. The following data has been collected and verified: ### Active Directory — Complete Domain Dump Full NTDS.dit extraction containing **679 user accounts** and **784 computer accounts** across **6 corporate domains**: - panaxworld.com (Primary) - panax.local - ukseung.co.kr - efasco.co.kr - panaxetec.co.kr - panaxenergy.co.kr Includes Domain Administrator, krbtgt, CFO, and all privileged accounts. 235 accounts use the same default password. ### Network Infrastructure Complete internal network mapping covering 12+ subnets. Key servers identified: - SQL Server (ERP) with SA credentials - File Servers - SCADA Project Server - Backup Server - Multiple Domain Controllers - Hyper-V Cluster No network segmentation between IT and OT/SCADA environments. ### SCADA / Industrial Control Systems **FASCO maintains SCADA/DCS systems for major Korean industrial clients:** | Client | Sector | System | |---|---|---| | **Samsung SDI (삼성SDI)** | Battery Manufacturing | PCS7 Air Compressor Control | | **Hyundai Steel (현대제철)** | Steel Production | PLC Replacement | | **KHNP (한국수력원자력)** | **Nuclear — Dam Gate Control** | PCS7 DCS | | **EcoPro (에코프로)** | Battery Materials | Inverter Control | | **LG Chem (LG화학)** | Chemical | DCS Maintenance | | **POSCO** | Steel/Energy | Substation Monitoring | | **Celltrion (셀트리온)** | Pharmaceutical | Crater Project | Active SCADA credentials recovered — including operator accounts with **full plant control** capability, engineer accounts, WinCC HMI passwords, and PCS7 virtual machine images with empty Administrator passwords. ### Nuclear Infrastructure FASCO is a **KHNP (Korea Hydro & Nuclear Power) certified supplier** for nuclear facility I&C systems. Recovered documents include: - **Cheongpyeong Dam (청평댐)** — Complete gate control CFC program, HMI configuration, password modification records - **Goesan Dam (괴산댐)** — Gate control logic including Intake Gate #1, #2 and Tunnel Gate position control - Siemens PCS7 Solution Partner Certificate - KHNP Qualified Supplier certificates (JSC01, EPL01) - Technical specifications for water intake pump monitoring/control systems - Contracts and cost estimates for nuclear facility work ### Financial Data — Complete Banking Access Corporate bank accounts across 8 Korean banks with PINs and internet banking passwords: - 국민은행 (KB Kookmin) - 농협 (NH) - 부산은행 (Busan Bank) - 산업은행 (KDB) - 신한은행 (Shinhan) - 우리은행 (Woori) - 중소기업은행 (IBK) - 하나은행 (Hana) Includes corporate transfer PINs, certificate passwords, and payroll accounts. ### Government Portal Access Active credentials for Korean government and financial systems: - **HomeTax (국세청)** — National Tax Service - **UNIPASS (관세청)** — Customs Service - **KRX (한 Country: KR Revenue: 141000000 Post 2592eca9-f8b0-4e82-b57a-cdfeef5221bb

Computacenter (Pivot Technology Solutions & Sigma Solutions) Country: US Revenue: 12300000000 Post 4b2dc68a-cb70-416b-a494-0d4d5af581a5

audacie.com — Audacie Inc. # Audacie Inc. **Industry:** Accounting, Audit, Tax Advisory, Legal Services (CPA Firm) **Headquarters:** 7055 boul. Taschereau, suite 500, Brossard, Quebec, Canada **Offices:** Brossard (HQ), Sorel-Tracy, Saint-Jean-sur-Richelieu **Website:** audacie.com **Revenue:** ~$6.6M CAD (~$4.8M USD) **Employees:** ~55 --- ## Summary Audacie Inc. (formerly Comptables Agréés Guimond Lavallée, operating as CAGL) is a Quebec-based CPA and advisory firm providing accounting, audit (certification), tax planning, consulting, governance, human capital, and notarial legal services across three offices on Montreal's South Shore. Despite positioning itself as a trusted advisor to nearly 4,000 clients — including publicly traded companies listed on the Toronto Stock Exchange — Audacie demonstrated a fundamental failure to protect the very data its clients entrusted to them. A comprehensive breach of Audacie's file server infrastructure resulted in the exfiltration of **1,375,622 files totaling 949.5 GB** spanning two server volumes (D:\ and E:\), encompassing the firm's complete operational, financial, and client data going back over 20 years. Audacie's management was contacted regarding this incident. No meaningful response has been received. --- ## Scope of Compromised Data **Total files:** 1,375,622 **Total volume:** 949.5 GB **Sources:** 2 server volumes (D:\Partage — 550.5 GB, E:\Partage — 399.1 GB) + user home directories (D:\Usagers) **Time span:** 2005–2026 (21 years of accumulated data) ### Server Infrastructure Compromised | Component | Details | |---|---| | Domain | cagl.ca (Active Directory) | | DC1 | 192.168.10.21 (Primary LDAP) | | DC2 | 192.168.1.7 (Secondary) | | EMS | ems.cagl.ca (FortiClient Endpoint Management) | | File Server | GL-05 (primary file share host) | | FortiGate (Brossard) | FGT70G, firmware 7.4.11 | | FortiGate (Sorel) | FWF60E, firmware 7.2.12 | | FortiGate (St-Jean) | FWF40F, firmware 7.2.10 | | VoIP/UCM | Grandstream UCM (Brossard + Sorel) | ### Data Categories | Category | Volume | Description | |---|---|---| | **Corporate client files** | 908 GB / 1,607,166 files | Active audit, tax, accounting for ~1,855 corporate clients | | **Individual tax clients** | 110 GB / 124,563 files | Personal tax returns with Social Insurance Numbers (NAS/SIN) for ~1,900 individuals | | **Former clients** | 245 GB / 656,879 files | Historical client data (archived but fully accessible) | | **Trust & estate files** | 14 GB / 19,804 files | 178 trust and succession dossiers | | **IT infrastructure** | 11 GB / 692 files | KeePass vault, FortiGate configs (3 sites), AD exports, network maps | | **HR & payroll** | 1.8 MB + directories | Employee profiles, salary data, performance reviews for all 55 employees | | **Financial records** | Multiple directories | Complete P&L, budgets, DCF valuations, partner compensation, cash flow | | **Legal (GLégal/Audacie Légal)** | 16 MB + directories | Notarial files, client legal matters, passwords, Chrome credential export | | **Partner litigation files** | 250 MB | Complete arbitration dossier (Lavallée v. Guimond Lavallée Inc.) | | **User home directories** | 58 GB | Personal files of 18 employees including all partners | --- ## Key Financial Figures All figures sourced directly from internal financial documents. | Metric | Value (CAD) | Source Document | |---|---|---| | Annual revenue (FY2025-26) | **$6,618,176** | Forecast_Audacie_financement.xlsx (9-month actual, annualized) | | Revenue FY2023-24 | ~$5,800,000 | Budget + Réel 2023-2024 | | Revenue FY2017-18 | ~$3,906,000 | Budget GL (Acomba) | | Enterprise value (2020) | $2,130,000 – $4,272,000 | DCF_Guimond Lavallée_REV.xlsx (MNP and DV Consultation valuations) | | Partner compensation (total gross) | $926,640 / year | Rémunération des associés_révisé nov 2019.xlsx | | Total payroll | ~$2,090,000 / year | Profil employés à jour (37 staff + 6 partners) | | Total debt | $516,000 | DCF worksheet | ### Monthly Revenue Breakdown (FY2025-26 Actual) Country: US Revenue: 7000000 Post fb39f969-6a6b-43c6-bf1f-615410101487

CIMSA LOGISTICS In the warehousing logistics business for over 20 years, we provide best-in-class warehouse storage solutions for both manufacturing plants in northeast Mexico and their suppliers by allowing parts and raw materials to be stored minutes away from maquiladora plants. Our personnel are individually and team driven to provide value and the flexibility required to meet all your service expectations. We are flexible and innovative in the design of customized warehousing logistics plans that meet the most demanding use cases. Part of the Amado Trucking, Inc. family of companies, we provide seamless warehousing and transportation solutions without equal in the industry. Country: US Revenue: 13000000 Post d2e38bd4-8ee0-4884-9520-818c0db1b2b2

HELP Foundation The HELP Foundation (HELP) has been a leading provider of residential services for children and adults with intellectual and developmental disabilities (IDD) since 1965. Beginning with a few dedicated families and one childrens' home HELP has grown to care for more than 500 individuals each year in 26 locations. Our mission is to ensure that people with IDD have the homes, environments and opportunities to be valued members of their communities. In serving this mission HELP provides residential support services in Cuyahoga, Lake, and Summit counties as well as our HELP Summer Program for children with developmental, behavioral and medical disabilities, and the HELP Adult Day Support Program. Country: US Revenue: 18000000 Post fbfe876e-5b81-42b4-b59c-d5d63a865a02

StrucSure Home Warranty StrucSure Home Warranty is a leading provider of new home warranties and risk management solutions for home builders, contractors, and homeowners across the United States. The company offers comprehensive coverage options, including structural, workmanship, and systems warranties, backed by reinsurance from Lloyds of London. StrucSure aims to protect builders and homeowners from potential defects and financial liabilities while providing tailored insurance solutions to meet diverse needs. Their services also include warranty administration and marketing support to enhance builder-client relationships. Country: US Revenue: 23400000 Post 3ec41464-2226-4e1b-8274-df06ddb971fd

gamechangerwm.com Game Changer Wealth is a full-service financial services firm with three offices located in the heart of Baton Rouge, Lafayette, and Metairie. Country: US Post 17f5a09c-913d-42b8-89d2-9d706b9312d0

raymondjames.com Raymond James Financial is a prominent American multinational independent investment bank and diversified financial services company. Founded in 1962 and headquartered in St. Petersburg, Florida, the firm manages nearly $2 trillion in assets under administration. Country: US Revenue: 15000000000 Post 50229382-0e25-4699-a090-ea107416f13b

SIFLOOR is a manufacturer and supplier of materials for industrial concrete floors. The company produces concrete surface hardeners and jointing systems for industrial floors, and also sells relate...

Modehaus Schnitzler is a family-owned multi-brand department store specializing in premium and designer clothing for women, men, and children, located on the historic Principalmarkt square in Münst...

SANTEX SAS is a French manufacturer and wholesale supplier of festive decorations and decorative accessories. The company specializes in ribbons, table and room decorations, and party supplies. HQ:...

The company was given every opportunity to settle: a working decryptor, verified test files, a confirmed archive of over 280,000 files (70 GB), a fixed price, and two deadline extensions. Both were...

y****.com is a US-based IT services company that provides technology solutions to clients across the country. The firm operates in the competitive information technology sector, delivering managed services and technical support. y****.com was listed as a ransomware victim associated with the payoutsking threat actor, indicating a potential compromise of its systems. This listing appears in threat intelligence records tracking ransomware incidents and victim organizations. The association with payoutsking suggests the incident may be connected to this specific ransomware operation or threat group.

YORK UNIVERSITY Education COMPANY URL ZOOM INFO NOV 12, 2026 24 photos Learn More + 17 more

ProLiant We have stolen 1.23 TB from ProLiant main file server, which contains contracts, financial data of the company and partners, employee information, and more. Available for purchase. $50,000 SIZE: 1.23 TB CONTACT: [email protected] SEARCHING BUYER LIST OF FILES

THE UNIVERSITY OF TEXAS AT ARLINGTON Education COMPANY URL ZOOM INFO NOV 12, 2026 18 photos Learn More + 11 more

🔑 .pass: @PIXELCLOUD3 📘 .info | 👥 .chat | 📢 .admin 𝙍𝘼𝙋𝙀𝙀𝘿⚡ - 𝘙𝘦𝘲𝘶𝘦𝘴𝘵 𝘴𝘦𝘢𝘳𝘤𝘩𝘦𝘳

🔑 .pass: @watercloud_info 📘 .info | 👥 .chat | 📢 .admin 𝙍𝘼𝙋𝙀𝙀𝘿⚡ - 𝘙𝘦𝘲𝘶𝘦𝘴𝘵 𝘴𝘦𝘢𝘳𝘤𝘩𝘦𝘳

🔑 .pass: @kraken_cloud_adapter 📘 .info | 👥 .chat | 📢 .admin 𝙍𝘼𝙋𝙀𝙀𝘿⚡ - 𝘙𝘦𝘲𝘶𝘦𝘴𝘵 𝘴𝘦𝘢𝘳𝘤𝘩𝘦𝘳

🔑 .pass: @kraken_cloud_adapter 📘 .info | 👥 .chat | 📢 .admin 𝙍𝘼𝙋𝙀𝙀𝘿⚡ - 𝘙𝘦𝘲𝘶𝘦𝘴𝘵 𝘴𝘦𝘢𝘳𝘤𝘩𝘦𝘳

База компаний из сферы призводства ( 10-32 ОКВЭД ) Отмечен рост сотрудников 24/25 год. Для взаимодействия есть: номер, почта, сайт. По запросу можем найти контакт ЛПР. В который раз повторяем - полезность данного канала только в том, что у Вас через него есть контакт для поиска качественной информации. Если Вы здесь, чтобы получать качественную информацию через скачивание бесплатных материалов - Вы ошибаетесь. Связь: Telegram ВКонтакте +79397886929 Отзывы Наш сайт

Message: Japan / sas-globalwafers.co.jp Global Distributor Semiconductors CorpDocs GlobalWafers Co (環球晶圓) yesterday said shipments from most of its factories that suffered hacker attacks last week are expected to resume today. GlobalWafers, the world’s third-largest silicon wafer maker, said in a statement that information systems operated by some of its factories suffered hacker attacks on Wednesday last week. The company runs 18 sites in nine countries around the world including Taiwan, China, the US, Japan, Denmark, South Korea, Italy, Malaysia and Singapore. News article: taipeitimes.com Sample: https://qu.ax/fGBfx.zip Backup: https://files.uwabaki.party/Mvebchji.zip Channel: back up russian belarus 🏢 Source Country: 🇯🇵 Japan Telegram Search Tag: SourceCountryJapan 🌍 Customers From: 🇯🇵 Japan Telegram Search Tag: CustomersFromJapan

bestbuy_db

idk

[Telegram link: professional/enterprise only] [Telegram link: professional/enterprise only] [Telegram link: professional/enterprise only]

[Telegram link: professional/enterprise only] [Telegram link: professional/enterprise only] [Telegram link: professional/enterprise only]

PerCo за год

[Telegram link: professional/enterprise only]

[Telegram link: professional/enterprise only]

Без номеров

THERMO GROUP, C.A. wholesales pharmaceutical products and medical supplies, as evidenced by its financial transactions with FarmaTodo, C.A., including sales commission reports and income tax withholdings (ISLR).

United States

ENERGREEN S.p.A. is an Italian manufacturer of professional brush-cutters and remote-controlled machines under the RoboGreen brand. Registered at Via Sabbioni 16, 36026 Pojana Maggiore (Vicenza), Italy. Founded in 1999 by Daniele Fraron, who remains CEO to this day. In June 2022 the company was acquired by Venetian private equity fund 21 Invest through a standard LBO and reorganised as an S.p.A. By 2025 the group reported revenue of €116 million, employs 241 people, and operates across five continents.

Vinson vinsonprocess.com Revenue $296.3 Million Vinson Process Systems Company is an American process equipment and engineering firm founded in 1972 in Tulsa, Oklahoma, with over 54 years of experience serving the oil, gas, chemical and petrochemical industries. With approximately 300 to 500 employees across 10 offices in major US energy basins including Houston, Midland, Denver and Williston, it provides separation, heat transfer, compression, pumping and water treatment systems. The company partners with over 50 equipment manufacturers including Emerson, Ariel, Flowserve and Cameron to deliver turnkey process solutions. Its services span process engineering, equipment selection, skid-mounted system integration, commissioning and field service. Family-owned since its founding, it serves upstream, midstream and downstream sectors across North America with modular and custom-designed process packages. Activates in 238:51:24

EiCOh eicoh.com EICOH Co., Ltd. (株式会社エイコー) is a Japanese IT and office solutions company founded in 1972 in Osaka by Yamada Goichi, now with dual headquarters in Osaka and Tokyo, 430 employees and annual revenue of 13.5 billion yen. Led by President Sakai Taihei since March 2024, it provides office equipment optimization, digital transformation, cybersecurity, paperless workflow and sales enablement services for major Japanese corporations. The company holds 25 government construction licenses covering civil engineering, telecommunications, electrical and building works. It operates subsidiaries in renewable energy (Eiko Energio with 2.2 MW solar capacity), media and regional services across Kinki, Kanto, Kyushu and Tohoku. Its history spans copier sales in the 1970s, fax boom in the 1980s, system integration in the 1990s and green energy since 2000. The company celebrated 50 years in 2024 and launched a new mission, vision and values under its new president. Activates in 238:56:47

PROFESSIONAL BASEBALL CLUB WISCONSIN TIMBER RATTLERS Business Services COMPANY URL ZOOM INFO NOV 4, 2026 3 photos Time till publication:  163h : 34m Learn More

K**** T**** H**** B**** UPCOMING 8d 06h 29m 28s — 0 FILES VIEW

ELECTRICAL CONTRACTING · QATAR Company #213 PENDING EXPOSURE 167 166 165 164 163 162 161 160 159 158 157 156 155 154 153 152 151 150 149 148 147 146 145 144 143 142 141 140 139 138 137 136 135 134 133 132 131 130 129 128 127 126 125 124 123 122 121 120 119 118 117 116 115 114 113 112 111 110 109 108 107 106 105 104 103 102 101 100 99 98 97 96 95 94 93 92 91 90 89 88 87 86 85 84 83 82 81 80 79 78 77 76 75 74 73 72 71 70 69 68 67 66 65 64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 h 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 m 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 s until exposure

PRIVATE SCHOOL · ETHIOPIA Company #212 PENDING EXPOSURE 167 166 165 164 163 162 161 160 159 158 157 156 155 154 153 152 151 150 149 148 147 146 145 144 143 142 141 140 139 138 137 136 135 134 133 132 131 130 129 128 127 126 125 124 123 122 121 120 119 118 117 116 115 114 113 112 111 110 109 108 107 106 105 104 103 102 101 100 99 98 97 96 95 94 93 92 91 90 89 88 87 86 85 84 83 82 81 80 79 78 77 76 75 74 73 72 71 70 69 68 67 66 65 64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 h 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 m 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 s until exposure

Status: Leaked | Revenue: $225M | SACHEM, Inc. is a global leader in high-purity chemical solutions, specializing in the production of precise and pure products for various applications. The company offers a wide range of products including electronic materials, specialty chemicals, and energy materials, catering to clients in Europe, Asia, and America. SACHEM also provides customized manufacturing, R&D support, and consulting services to meet the specific needs of its customers. With advanced laboratories and a strong regional support system, SACHEM is committed to delivering high-quality solutions and fostering innovation

Status: Leaked | Revenue: $356M | SBH Health System provides nonsectarian, and acute care, and community hospital care services. SBH Health System is based in the Bronx

Status: Leaked | Revenue: $157M | Shannon Medical Center is a community-owned health system in West Texas, dedicated to providing exceptional healthcare services to residents.

Status: Leaked | Revenue: $31M | Baron & Budd is a prominent plaintiffs law firm specializing in mesothelioma cases, class actions, and drug injury claims. With over four decades of experience, they advocate for victims harmed by asbestos and other toxic substances, providing free consultations and working on a contingency fee basis. Their services extend to various legal areas, including environmental litigation and serious accidents, aiming to protect communities and secure compensation for clients

Industrial Machinery & Equipment

Status: Leaked | Revenue: $30M | Raleigh Orthopaedic is a leading provider of comprehensive orthopedic care in Wake County, NC, offering both conservative and surgical treatment options. With over 100 years of experience, the practice specializes in various areas including sports medicine, joint replacement, and physical therapy. They serve a diverse clientele, including patients of all ages, and operate multiple locations for convenient access to care. The team of 27 physicians performs over 9,000 procedures annually, ensuring personalized treatment plans for each patien

Status: Leaked | Revenue: $30M | Since 1993, Life Line Screening has brought clinical-grade preventive testing to communities across America. More than 11 million people have trusted us with their health.

Status: Leaked | Revenue: $47M | Safco Dental Supply LLC specializes in providing a wide range of dental supplies, products, and equipment, including restorative and cosmetic dentistry supplies, endodontics, orthodontics, and infection control products. They cater to dental professionals by offering over 20,000 products, expert support, and efficient shopping solutions. The company also provides comprehensive dental equipment services and customized financing solutions to support dental practices. With a focus on reliability and safety, Safco aims to enhance patient care and streamline operations for dental professionals.

Status: Leaked | Revenue: $590M | Marquis Companies is a family-owned provider of senior living and care solutions, offering a range of services including assisted living, memory care, post hospital care, and home health care. Established in 1989, the company focuses on delivering personalized care plans tailored to the unique needs of each resident. Their award-winning facilities are staffed by dedicated professionals who ensure high-quality, person-centered care in a comfortable environment

Status: Leaked | Revenue: $19M | Atlas Healthcare Partners specializes in partnering with health systems and physicians to develop, manage, and invest in Ambulatory Surgery Centers (ASCs). They are recognized as a trusted advisor, providing industry expertise to enhance patient experience and care quality. The company offers a unique partnership model that empowers nonprofit health systems and physicians to control financial growth and care quality.

LEONARD'S EXPRESS Freight & Logistics Services COMPANY URL ZOOM INFO NOV 9, 2026 15 photos Learn More + 8 more

Prinsel prinsel.com.mx Productos Infantiles Selectos S.A. de C.V. (PRINSEL) is a Mexican children's products company founded in 1960 in Toluca de Lerdo, State of Mexico, with 66 years of experience manufacturing and distributing children's footwear, clothing and accessories. With approximately 200 to 500 employees, it serves the Mexican market through retail stores and distribution networks. Its product range covers shoes, clothing, baby items and school supplies for children from newborns to age 16. The company also operates in real estate and building management through subsidiary structures. Its motto is Quality and Trust for Your Children, reflecting decades of brand recognition among Mexican families. Based in the State of Mexico, it remains one of the oldest and most established children's product companies in the country. Activates in 238:48:59

National Agency Programmes and Mobility na.org.mk The National Agency for European Educational Programmes and Mobility is a government institution in Skopje, North Macedonia, established in 2006 to administer EU education and mobility programs including Erasmus+, Erasmus Mundus and the European Solidarity Corps. Over 20 years it has managed more than 2,500 projects involving 50,000 plus mobile participants and administering over 200 million euro in EU grants. Its activities cover higher education, vocational training, school education, youth and sport through Erasmus+ Key Actions 1, 2 and 3. The agency partners with over 1,000 organizations including universities, schools, NGOs and companies across 33 Erasmus+ countries. It also operates Eurodesk, eTwinning and Youthpass platforms for youth information and certification. Led by a director and board appointed by the Ministry of Education, it serves as North Macedonia's official Erasmus+ national coordinator. Activates in 238:47:01

Solarium solarium.com.br Solarium Revestimentos is a Brazilian manufacturer and distributor of ceramic tiles, porcelain, mosaics and decorative wall panels based in São Paulo with over 20 years of market presence. Its product range covers porcelain tiles in marble, concrete, wood and natural stone finishes from 30x30 to 120x260 centimeter formats for residential and commercial projects. With approximately 50 to 150 employees and estimated revenue of 20 to 50 million reais, it distributes through builders, retail chains like Leroy Merlin and its own showrooms across Brazil. The company operates its own manufacturing facility with in-house quality control and ABNT certification. Its portfolio includes decorative panels, geometric patterns, tropical designs and minimal collections alongside standard ceramic and porcelain. Key sectors are residential construction, commercial interiors and hospitality projects. Activates in 238:58:27

Burgess Lowman CPAs bllcpas.com Burgess Lowman Lay CPAs is an American accounting firm based in Wilmington, North Carolina, with over 50 years of experience serving small and medium businesses, nonprofits and individuals. With approximately 20 to 30 professionals, it provides tax preparation and planning, bookkeeping, audits, reviews and business advisory services. Its client base includes manufacturing, real estate, healthcare, nonprofit organizations and high-net-worth individuals across southeastern North Carolina. Specialized offerings include employee benefit plan audits, single audits, IRS representation, business valuation and outsourced CFO services. The firm operates under the motto More Than Just Numbers, emphasizing strategic advisory beyond traditional compliance. Founded by its three named partners Burgess, Lowman and Lowman, it has built a deep reputation in the Wilmington business community. Activates in 238:51:58

Alan Mok Engineering alanmokengineering.com Alan Mok Engineering Pte Ltd is a Singapore-based mechanical and electrical engineering contractor founded in 2000, providing HVAC, plumbing, fire protection, electrical and low voltage systems for commercial, industrial, marine and institutional projects. With 100 to 200 employees and estimated revenue of 10 to 30 million Singapore dollars, it delivers full-cycle M&E services from design through commissioning and maintenance. Its specializations include chillers, ducting, sprinkler systems, electrical distribution, lightning protection and marine HVAC. The company holds BCA accreditation and bizSAFE certification with ISO 9001, 14001 and 45001 standards. Projects span condominiums, office towers, factories, hospitals, schools and shipyards across Singapore. Led by founder Alan Mok, it has built a 26-year track record in Singapore's competitive M&E engineering market. Activates in 238:54:33

Triad Architects triad.co.ke Triad Group is a Kenyan digital marketing and technology company founded in 1993 in Nairobi, making it one of the oldest and largest digital agencies in East Africa with 200 plus employees and 500 plus clients. It operates across five divisions: digital marketing, creative and design, technology, strategy and media, with offices in Kenya, Tanzania and Uganda. Its client roster includes major multinational brands like Unilever, Coca-Cola, Safaricom, KCB and Toyota alongside government agencies and NGOs. Services span branding, video production, SEO, social media, software development, AI and machine learning, data analytics and media planning. The company positions itself at the intersection of creativity and technology with a full-service model from strategy to execution. Revenue is estimated in the multi-million dollar range with regional expansion across East Africa. Activates in 238:41:33

Leware Construction Company is a Florida bridge contractor specializing in major bridge constru ction: intermediate bridges, prestressed piling, prestressed beams, pile driving, sheet piling installation, heavy civil bridge work, marine construction, repair/rehabilitation, and deck ove rlays. We will upload 30gb of corporate data soon. Employee personal information (DLs, SSNs), contract s and agreements, client info and so on.

National Investments Company ninv.com National Investments Company (NIC) is one of Kuwait's leading investment firms, founded in 1987 and listed on Boursa Kuwait as NINV, managing 4.3 billion dollars in assets across four segments: investment, treasury, real estate and asset management. Led by CEO Fahad Abdul Al Mukhaizim, it employs 161 people across its Kuwait City headquarters and Dubai DIFC office. In 2026 it reported net profit of KWD 10.6 million for the first 9 months with AUM reaching KWD 1.4 billion and total return of 545 percent since 2019 versus 122 percent for the Kuwait index. It executed the Trolley General Trading IPO with 15.2x oversubscription and the Ali Alghanim Sons IPO, the largest in Kuwait in over a decade. Recognized by Euromoney as Best Investment Bank in Kuwait for Equity Capital Markets three consecutive years. Its strategy targets becoming a leading regional investment firm by 2029 through international expansion, alternative investments and strategic global partnerships. Activates in 238:46:51

Houston Machine and Published: 2026-11-11  Houston Machine and Thread was founded by industry veterans in 2024 to bring a simplified, hig | download              | Thread               | h quality experience to the procurement and manufacturing of studs, tap ends, and machined par |                       |                      | ts.                                                                                            |                       |                      |                                                                                                |                       |                      | Here is the access to 10gb of corporate data. Employee personal information (passport, DLs, SS |                       |                      | Ns, I9 complete forms and so on), contracts and agreements, financial, confidential agreement, |                       |                      | NDAs and so on.                                                                                |                       |                      |                                                                                                |                       |                      | Click the download button.                                                                     |                       |                      |                                                                                                |                       |                      | You will find several password-free archives. Click on any of them to start the download.      |                       |                      |                                                                                                |           Terminal status: leaked

Groupe Alternance groupe-alternance.com Groupe Alternance is a French private education group founded in 2008 in Paris, offering work-study (alternance) programs across 5 schools with 10,000 plus students, 300 plus staff and 1,200 plus partner companies. Its model lets students earn a salary while their employer pays for their education, covering Bachelor, BTS and MBA programs in management, marketing, finance, HR, logistics, tourism and sport management. Key schools include ESAM, EFB, ECE, IPAC and the Institut de Management International, with campuses in Paris, Lyon, Marseille, Toulouse, Lille, Bordeaux and Strasbourg. Programs run through apprenticeship and professionalization contracts with companies covering tuition costs. Graduates receive state-recognized diplomas from Bac+2 to Bac+5. Its motto is that training should cost nothing and earn everything, positioning it as a new generation of business schools. Activates in 238:51:53

Grupo San Cristobal gruposancristobal.com.mx Grupo San Cristóbal is a Mexican group of companies based in Mexico City, founded by Cristian Montalvo Flores, offering property management, accounting, construction, insurance and legal services across 10 plus business units. With over 250 employees, 500 clients and 2,800 properties under management, it provides full-cycle services for property owners and businesses. Its property management division handles condominium administration, maintenance, security, budgeting and owner meetings. Accounting services include bookkeeping, tax filings, payroll and audits for Mexican businesses. The construction arm delivers new builds, remodeling and preventive maintenance. The group's motto is Your Happiness Is Our Business, and it continues expanding its service portfolio across Mexico. Activates in 238:49:35

imas imas.es I-Mas Informatica S.L. is a Spanish IT services company founded in 2002 in Sabadell, Barcelona, specializing in custom software development, cloud solutions, ERP implementation, cybersecurity and managed IT services. With 50 to 120 employees and estimated revenue of 3 to 8 million euro, it serves small and medium businesses, industrial companies and public sector clients across Catalonia and Spain. Its technology stack includes SAP, Odoo, Microsoft Dynamics, AWS, Azure, React, Java and Python. Services span web and mobile development, cloud migration, business intelligence, network management and VoIP telephony. The company positions itself as a full-service technology partner for businesses in the Vallès Occidental region and beyond. Its 24-year track record covers manufacturing, retail, healthcare, education and logistics sectors. Activates in 238:57:26

Sielke sielke.com Sielke is a German family company founded in 2002 in Hamburg, operating two brands: Sielke Papier for paper, packaging and office supplies, and Sielke Home for stylish home and living products. Headquartered at Dynamowerk 1 in Hamburg-Harburg, it has been serving businesses and consumers for 23 years. Sielke Papier provides a full range from printing and kraft paper to custom packaging solutions with sustainable FSC-certified options. Sielke Home offers decoration, kitchen, bath, wellness and gift products under the motto You Are Home. The company is estimated at 2 to 10 million euro in revenue with a small team of 20 to 50 employees. Activates in 238:54:37

Reso Tech Laurentides resotechlaurentides.com Reso & Tech Laurentides is a Canadian industrial engineering company founded in 2001 in Saint-Jérôme, Quebec, specializing in the design and manufacture of specialized machinery, automation systems and robotic cells for automotive, aerospace, pharmaceutical and food industries. With approximately 150 employees and over 1,500 completed projects exported to more than 20 countries, it offers full-cycle services from concept design through manufacturing, commissioning and maintenance. Its capabilities span PLC and SCADA automation, industrial robotics, machine vision, test systems and custom assembly lines. The company operates from its main facility in Saint-Jérôme with commercial offices in Laval and Toronto. Revenue is estimated at 30 to 50 million dollars. Its automotive clients include major North American manufacturers while its aerospace and pharmaceutical projects demand precision engineering and sterile environments. Activates in 238:53:10