United States
Targets by Group
Leak Coverage — United States
- Leaked279025%
- Pending825974%
- Deleted380%
- Other indexed sources
- Data breaches510
- Stealer logs0
- Leads12
United States - Targeted Attacks in All period
Posts 11631 total Page 19 / 117
| Type | Target | Source | Discovered | Business Category | Intel Link | Leak status |
|---|---|---|---|---|---|---|
| Ransomware | Nexstar.tv View Details | shinyhunters | Telecommunications | leaked | ||
|
Over 1 million Salesforce records and other internal corporate data containing PII was compromised. This is a final warning to reach out by 14 June 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 11 June 2026 | Warning: FINAL WARNING |
||||||
| Ransomware | Ralph Lauren Corporation View Details | shinyhunters | Retail / E-commerce | leaked | ||
|
Over 220GB of data containing customer PII, purchase/trasnaction info, future unreleased releases from 2027 and onward, and more was compromised. This is a final warning to reach out by 14 June 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 11 June 2026 | Warning: FINAL WARNING |
||||||
| Ransomware | columbiaorthogroup.com View Details | lockbit5 | Healthcare / Pharma | leaked | ||
|
Columbia Orthopaedic Group is a healthcare provider located in mid-Missouri that specializes in the... |
||||||
| Ransomware | hollandbulbfarms.com View Details | lockbit5 | Agriculture / Food | leaked | ||
|
Holland Bulb Farms is an online store specializing in bulbs, rhizomes, and seedlings The downloaded... |
||||||
| Ransomware | sierravistahospital.com View Details | lockbit5 | Healthcare / Pharma | leaked | ||
|
Sierra Vista Hospital is a private behavioral health facility located in Sacramento, California, off... |
||||||
| Ransomware | delano.k12.mn.us View Details | lockbit5 | Education | leaked | ||
|
Delano Public Schools is dedicated to providing systemic growth toward educational excellence for ev... |
||||||
| Ransomware | Miller & Zois View Details | qilin | Finance / Legal / Insurance | pending | ||
|
N/A |
||||||
| Ransomware | Iliff View Details | qilin | IT | pending | ||
|
N/A |
||||||
| Ransomware | Efficient Home View Details | qilin | Construction / Real Estate | pending | ||
|
N/A |
||||||
| Ransomware | Dulany Leahy Curtis & Brophy View Details | qilin | Other | pending | ||
|
N/A |
||||||
| Ransomware | Teserra Outdoors View Details | qilin | Retail / E-commerce | pending | ||
|
N/A |
||||||
| Ransomware | Wright Constable & Skeen View Details | qilin | Finance / Legal / Insurance | pending | ||
|
N/A |
||||||
| Ransomware | Milstein Siegel View Details | qilin | Other | pending | ||
|
N/A |
||||||
| Ransomware | JV Equipment View Details | qilin | Manufacturing / Engineering | pending | ||
|
N/A |
||||||
| Ransomware | SAMES View Details | qilin | Manufacturing / Engineering | pending | ||
|
N/A |
||||||
| Ransomware | C.C. Creations View Details | qilin | Retail / E-commerce | pending | ||
|
N/A |
||||||
| Ransomware | Metro Electric View Details | qilin | Construction / Real Estate | pending | ||
|
N/A |
||||||
| Ransomware | Mundt and Associates View Details | play | Other | leaked | ||
|
United States |
||||||
| Ransomware | Rainbow Distributors USA View Details | play | Retail / E-commerce | leaked | ||
|
United States |
||||||
| Ransomware | First Federal Savings & Loan View Details | worldleaks | Finance / Legal / Insurance | pending | ||
|
[AI generated] First Federal Savings & Loan is a community-based financial institution operating in the United States. It provides traditional banking services including savings and checking accounts, mortgage loans, personal loans, and related financial products. Operating within the retail banking and thrift industry, it primarily serves individual consumers and local communities, functioning under federal or state regulatory oversight typical of American savings institutions. |
||||||
| Ransomware | Centra Sota Cooperative View Details | worldleaks | Agriculture / Food | pending | ||
|
[AI generated] Centra Sota Cooperative is an agricultural cooperative based in the United States, primarily serving farmers in Minnesota. It provides grain marketing, agronomy services, energy products, and feed solutions to its members. The cooperative supports local producers with crop inputs, precision agriculture services, and fuel supply, operating within the broader agricultural and farm services industry typical of Midwest cooperative structures. |
||||||
| Ransomware | K & E Distributing View Details | pear | Retail / E-commerce | leaked | ||
|
[AI generated] N/A |
||||||
| Ransomware | Bayou Electrical Services View Details | pear | Construction / Real Estate | leaked | ||
|
[AI generated] N/A |
||||||
| Ransomware | Sayre Associates View Details | dragonforce | Finance / Legal / Insurance | leaked | ||
|
(Including clients, projects, emails and financial documents) Sayre Associates, Inc. is a civil engineering and land surveying firm based in Sioux Falls, South Dakota, established in 1969. The company offers a range of services including land development planning, parks and recreation facilities design, drainage and erosion control, and construction administration. They focus on delivering high-quality solutions through collaboration and innovation, serving clients in South Dakota, Iowa, and Minnesota. Their talented team of engineers and surveyors is dedicated to improving community efficiency and quality of life. |
||||||
| Breaches | USA-20230125T155912Z-001.zip View Details | Database World ROC | — | leaked | ||
| Ransomware | Mid-Cumberland Human Resource Agency View Details | insomnia | NGOs / Associations | pending | ||
|
MCHRA is a nonprofit promoting self-sufficiency via Meals-on-Wheels, public transit, in-home services, and community corrections. It serves adults needing care, transit users, and long-term care residents, emphasizing inclusivity and translation services. |
||||||
| Ransomware | Auburn Electrical Construction Company View Details | embargo | Construction / Real Estate | leaked | ||
|
Auburn Electrical Construction Company, Inc. is an innovative contracting firm that profitably provides electrical-related services to our customers. Our goal i... - |
||||||
| Ransomware | airespring.com View Details | chaos | Telecommunications | pending | ||
|
Founded in 2001, AireSpring is a Managed Services Provider specializing in Unified Communications, Managed Network, and IT Services, serving thousands of businesses nationwide. AireSpring provides fully managed and connected end-to-end, next-generation solutions for multi-location enterprise custome… |
||||||
| Ransomware | SatCom CX View Details | qilin | Communication / Marketing | leaked | ||
|
N/A |
||||||
| Ransomware | Shipping Association of NY and NJ View Details | qilin | Healthcare / Pharma | pending | ||
|
N/A |
||||||
| Ransomware | GRIP Outreach For Youth View Details | nightspire | NGOs / Associations | pending | ||
|
- Financial & Accounting Records- Sensitive Employee- Youth Participant & Child Protection Records- Governance & Legal Documents |
||||||
| Ransomware | Unique Litho, Inc View Details | nightspire | Manufacturing / Engineering | pending | ||
|
Data is not available now. |
||||||
| Ransomware | Central Arkansas Pediatrics View Details | thegentlemen | Healthcare / Pharma | pending | ||
|
***.edan.io zoominfo.com/c/central-arkansas-pediatrics/1340337263 Central Arkansas Pediatrics is a specialized healthcare provider based in Conway, Arkansas, dedicated to pediatric special needs care. The clinic offers comprehensive services, including developmental preschool programs and therapy support for children across the state. Their digital presence is hosted on edan.io, a streamlined platform used by medical practices to provide accessible online resources for patients |
||||||
| Ransomware | Tress View Details | thegentlemen | Retail / E-commerce | pending | ||
|
***.com zoominfo.com/c/tress-as/430422624 Tress is a leading Scandinavian supplier of sports, play, and leisure equipment, headquartered in Denmark and operating across the Nordic countries. The company specializes in providing high-quality gear and playground solutions for schools, kindergartens, and sports clubs. With decades of industry experience, Tress focuses on creating active and inclusive environments for children and athletes through its comprehensive product range |
||||||
| Ransomware | Trigon America View Details | thegentlemen | Manufacturing / Engineering | pending | ||
|
***.com zoominfo.com/c/trigon-america/560898982 Trigon America is a premier contract manufacturer based in Aurora, Illinois, specializing in precision-machined complex components and assemblies. Founded in 2000, the company serves the highly regulated Medical Device and Aerospace industries, holding both ISO 13485 and AS9100 certifications. With decades of expertise, they focus on delivering world-class manufacturing solutions for intricate instrumentation and critical medical equipment |
||||||
| Ransomware | kelmreuter.com View Details | incransom | Other | pending | ||
|
www.personadental.com Persona Dental offers personalized dental care for families in Sartell, MN, focusing on both general and specialized services such as cosmetic dentistry, dental implants, and solutions for snoring and sleep apnea. The clinic prides itself on creating a comfortable environment and empowering patients to make informed decisions about their dental health. With a friendly and experienced team, they provide comprehensive care under one roof, ensuring convenience for their clients. Persona Dental is dedicated to building confidence and achieving the best smiles for their patients |
||||||
| Ransomware | *B* View Details | genesis | Construction / Real Estate | leaked | ||
|
A trade association |
||||||
| Ransomware | Jeffrey Burr View Details | anubis | Other | pending | ||
|
[www.jeffreyburr.com] |
||||||
| Ransomware | obrieneng.com View Details | incransom | Manufacturing / Engineering | pending | ||
|
contract nda confidential gov\dot\military\va\sam.gov other |
||||||
| Ransomware | Cambridge Mobile TelematicNEW View Details | coinbasecartel | IT | pending | ||
|
[AI generated] Cambridge Mobile Telematics (CMT) is a US-based telematics technology company headquartered in Cambridge, Massachusetts. It develops mobile sensing and data analytics platforms that measure driving behavior to improve road safety and reduce vehicle crashes. Its technology is used by insurers, rideshare companies, and fleets to assess risk and reward safe driving through usage-based insurance and fleet management solutions. |
||||||
| Ransomware | Kriete Truck Centers View Details | securotrop | Transportation / Travel / Logistics | pending | ||
|
Status: AWAITING Size: 221 GB |
||||||
| Ransomware | Oaks Park View Details | akira | Hospitality / Food & Beverage / Tourism | leaked | ||
|
Oaks Amusement Park, located in Portland, Oregon, has been a family-friendly entertainment dest ination since 1905, offering a variety of attractions including rides, a roller rink, and a min i golf course. We will upload 10gb of corporate data soon. Employee information, credit cards, payment details , lots of contracts and agreements, NDAs and so on. |
||||||
| Ransomware | Access Dental View Details | worldleaks | Healthcare / Pharma | pending | ||
|
[AI generated] Access Dental is a dental insurance and managed care company operating in the United States. It provides affordable dental health plans primarily to underserved and low-income populations, including Medicaid and individual plan members. The company works with a network of licensed dentists to deliver preventive and restorative dental services, focusing on improving access to oral healthcare across California and other states. |
||||||
| Ransomware | Krum Public Library View Details | nightspire | Education | pending | ||
|
- Financial Documents- HR Data- Supervisor's Information |
||||||
| Ransomware | Central Florida Cosmetic & Family Dentistry View Details | qilin | Healthcare / Pharma | pending | ||
|
N/A |
||||||
| Ransomware | Jay's Catering View Details | qilin | Hospitality / Food & Beverage / Tourism | leaked | ||
|
N/A |
||||||
| Ransomware | Swim-Mor Pools View Details | qilin | Retail / E-commerce | leaked | ||
|
N/A |
||||||
| Ransomware | United Auto Supply View Details | worldleaks | Retail / E-commerce | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | Urschel Laboratories View Details | play | Manufacturing / Engineering | pending | ||
|
United States |
||||||
| Ransomware | Dallis Law Firm View Details | play | Finance / Legal / Insurance | leaked | ||
|
United States |
||||||
| Ransomware | The Chapel View Details | play | Hospitality / Food & Beverage / Tourism | leaked | ||
|
United States |
||||||
| Ransomware | Corley MFG View Details | play | Manufacturing / Engineering | leaked | ||
|
United States |
||||||
| Ransomware | Northern Ohio Regional Multiple Listing Service View Details | akira | Construction / Real Estate | leaked | ||
|
MLS Now operates on advanced technology to provide members with timely, accurate, and meaningfu l data and services. The company offers hands-on education, extensive online documentation, and a robust support help desk staffed by local professionals. We will upload corporate data soon. Board members information, contracts, NDAs, detailed financ ials, confidential files, and so on. |
||||||
| Ransomware | Brian Jessel BMW View Details | thegentlemen | Retail / E-commerce | pending | ||
|
***.com ***.com/c/brian-jessel-bmw/347467232 Established in 1986, Brian Jessel BMW is one of Canada's premier luxury automotive dealerships, proudly located in Vancouver, British Columbia. Recognized as a top-tier retailer for both new and pre-owned vehicles, the company offers an extensive selection of BMW models alongside expert financing and comprehensive service solutions. With a dedicated team of over 200 professionals, they have built a decades-long legacy of delivering exceptional customer experiences and automotive excellence |
||||||
| Ransomware | Harrell Martin Peace View Details | thegentlemen | Finance / Legal / Insurance | pending | ||
|
***.com ***.com/c/harrell-martin--peace-pa/347464411 Established in 1995, Harrell, Martin & Peace, P.A. is a highly regarded full-service law firm based in Chapin, South Carolina, celebrated for its community-focused approach and deep client relationships. The firm delivers comprehensive legal expertise across diverse practice areas, including real estate, corporate law, estate planning, and family law. Backed by a dedicated team of experienced attorneys, they are committed to providing personalized, strategic, and exceptional legal representation to both individuals and businesses |
||||||
| Ransomware | Suburban Water View Details | thegentlemen | Energy | pending | ||
|
***.com ***.com/c/suburban-water-inc/350908787 Suburban Water, Inc. is a dedicated public water utility based in Basehor, Kansas, committed to delivering safe and reliable drinking water to local residential and commercial communities. Operating as a vital part of the regional infrastructure, the company prioritizes strict water quality standards, sustainable resource management, and exceptional customer service. Through continuous system maintenance and proactive operations, they ensure the long-term health, safety, and well-being of the neighborhoods they proudly serve |
||||||
| Ransomware | Downriver Medical Associates View Details | thegentlemen | Healthcare / Pharma | pending | ||
|
***.com ***.com/c/downriver-medical-associates/357511215 Downriver Medical Associates is a full-service medical office and urgent care center located in Wyandotte, Michigan. Specializing in internal medicine and family practice, they provide comprehensive primary care for patients of all ages. The clinic focuses on holistic healthcare, emphasizing wellness, disease prevention, and improving the overall quality of life for the local community |
||||||
| Ransomware | Edgewood Surgical Hospital View Details | thegentlemen | Healthcare / Pharma | pending | ||
|
***.com ***.com/c/edgewood-surgical-hospital/52612741 Edgewood Surgical Hospital is a state-of-the-art specialty medical facility located in Transfer, Pennsylvania USA. We have your data filles ~500gb SURGICAL CASE REVIEWS 2025-2026 2026 January SURGICAL CASE REVIEW 2026 March Surgical Case ***.docx 2025 JANUARY PEER SURGICAL CASE REVIEW 2025 MARCH SURGICAL CASE REVIEW 2025 MAY SURGICAL CASE REVIEW 2025 JULY SURGICAL CASE REVIEW 2025 SEPTEMBER SURGICAL CASE REVIEW 2025 NOVEMBER SURGICAL CASE REVIEW GOODMAN HP STI pdf Name + sexually transmitted infection (~300+ Anesthesia Records Anesthesia Records) Massive PHI leak — names + medical data of hundreds of patients MRI SCANS / EMPLOYEE HEALTH HISTORY & PHYSICAL (HP) Narcotic outdates + INPATIENT NARCOTIC INVENTORY |
||||||
| Ransomware | Michigan Surgical Center View Details | thegentlemen | Healthcare / Pharma | pending | ||
|
www.***.com https://www.***.com/c/michigan-surgical-center-llc/90769926 Michigan Surgical Center is an outpatient surgical facility specializing in ophthalmic and plastic surgeries, with over 25 years of experience. The center is physician-owned and has received multiple awards for quality care, including recognition as one of America's Best Ambulatory Surgical Centers by Newsweek. Their mission focuses on providing high-quality, patient-centered care with an emphasis on value-based services. They aim to lead in outpatient surgical care through innovative methodologies and a commitment to integrity and respect. 2075 Coolidge Rd, East Lansing, Michigan |
||||||
| Ransomware | CUSTOMSIGN View Details | incransom | Manufacturing / Engineering | deleted | ||
|
About Custom Sign & Engineering Custom Sign & Engineering, Inc. specializes in creating high-quality, custom commercial digital signs and billboards in Evansville, Indiana. The company offers a wide range of products, including LED dimensional letters, monumental signs, and information displays, all designed to meet the specific needs of businesses. The company is committed to providing customer-focused services at competitive prices and with free estimates. It serves clients in three states—Illinois, Indiana, and Kentucky—helping businesses enhance their visibility and brand image through eye-catching signage. Translated with ***.com (free version) |
||||||
| Ransomware | Family Medical Associates of Raleigh View Details | genesis | Other | leaked | ||
|
A healthcare organization |
||||||
| Ransomware | Singing River Health System View Details | anubis | Healthcare / Pharma | leaked | ||
|
New data breach at a large health system provider. |
||||||
| Ransomware | Pyramid View Details | nitrogen | Construction / Real Estate | pending | ||
|
Ownership and management of shopping center. Development and redevelopment of real estate properties. Leasing of space to retail chains, restaurants, and entertainment venues |
||||||
| Ransomware | Cherokee Distributing Co View Details | akira | Transportation / Travel / Logistics | leaked | ||
|
Cherokee Distributing Company offers the leading brands of beer and other nonalcoholic beverage s. In addition to their headquarters in Knoxville, they manage distribution centers in Chattano oga, Cookeville, Kingsport, Pulaski and Tullahoma. We will upload 40gb of corporate data soon. Employee personal docs (passports, DLs, SSNs), cont racts and agreements, partner and client files, detailed financials, projects, NDAs, confidenti al files, etc. |
||||||
| Ransomware | trrac.net View Details | incransom | IT | leaked | ||
|
150gb |
||||||
| Ransomware | Nova Medical Products View Details | qilin | Retail / E-commerce | leaked | ||
|
N/A |
||||||
| Ransomware | Cambridge Mobile TelematicsNEW View Details | coinbasecartel | IT | pending | ||
|
[AI generated] Cambridge Mobile Telematics (CMT) is a US-based technology company headquartered in Cambridge, Massachusetts. It operates in the telematics and insurtech industry, providing mobile sensing and data analytics solutions. CMT specializes in measuring driving behavior using smartphone sensors and AI to help insurers, fleets, and enterprises improve road safety and reduce risk through usage-based insurance and driver safety programs. |
||||||
| Breaches | 2025 ISSUE USA DL SSN SELFIE PART (4).zip View Details | CHAT BZD | — | leaked | ||
| Ransomware | Mortensenlawoffices View Details | kairos | Finance / Legal / Insurance | pending | ||
|
Mortensen Law Offices, PLLC offers legal services, particularly bankruptcy, and provides consultations via Zoom, phone, or in-office for clients in the Phoenix/Mesa and Tucson areas, focusing on clear, empathetic guidance. |
||||||
| Ransomware | Taos Mountain Casino View Details | dragonforce | Hospitality / Food & Beverage / Tourism | pending | ||
|
Taos Mountain Casino is a Native American gaming casino located in Taos, New Mexico. It is owned and operated by the Taos Pueblo, a federally recognized tribe known for its ancient, historic adobe pueblo. |
||||||
| Ransomware | Bradley law firm View Details | incransom | Finance / Legal / Insurance | pending | ||
|
Bradley Law Personal Injury Lawyers is a law firm dedicated to representing clients who have suffered injuries due to accidents, medical malpractice, and other forms of negligence. With over 30 years of experience, they have successfully recovered more than $100 million in settlements and verdicts for their clients across Missouri and Illinois. Their services include free case consultations and a commitment to fight for maximum compensation on behalf of accident victims. The firm is known for its expertise in personal injury law, including vehicle accidents, workplace injuries, and wrongful death cases. |
||||||
| Ransomware | Champaign-Urbana Public Health District View Details | incransom | Public Sector | pending | ||
|
Champaign Urbana Public Health District provides a wide range of health services including dental care, nutrition assistance, mental health support, and food safety inspections. Their programs cater to various demographics, including adolescents, women, infants, and families, focusing on preventive health and education. The district also offers resources for substance abuse treatment, sexual health, and community food initiatives. Their intended clients include residents of Champaign County seeking health services, food assistance, and educational resources. |
||||||
| Ransomware | Hightower Communications View Details | play | Construction / Real Estate | leaked | ||
|
United States |
||||||
| Ransomware | Lake Washington School District View Details | cmdorganization | Education | pending | ||
|
Founded in 1914, Lake Washington School District is the administrative body responsible for planning and managing public education for 33 elementary, 14 middle, and 9 high schools. It serves communities of Kirkland, Redmond and about half of Sammamish. The company is headquartered in Redmond, Washington. |
||||||
| Ransomware | Cavalier Flooring Systems Inc. View Details | genesis | Construction / Real Estate | leaked | ||
|
A flooring and tile contractor |
||||||
| Ransomware | Wentworth View Details | genesis | Other | leaked | ||
|
the DC Metro area's premier design-build firm |
||||||
| Ransomware | Green Resource View Details | genesis | Manufacturing / Engineering | pending | ||
|
A leading distributor of professional fertilizers, chemicals, and seeds for local and lawn grasses |
||||||
| Ransomware | Cedar Street Capital (A part of a Cynvestors Limited Partnership) View Details | genesis | Finance / Legal / Insurance | leaked | ||
|
A private investment entity associated with Cynthia Stiehl |
||||||
| Ransomware | A Roettgers View Details | genesis | Retail / E-commerce | leaked | ||
|
Fuel distributor and gas station operator |
||||||
| Ransomware | Indiana Mills and Manufacturing View Details | termite | IT | pending | ||
|
https://www.imminet.com/ Indiana Mills and Manufacturing 5047 10/10/2026, 12:55:39 AM |
||||||
| Ransomware | UEI College View Details | termite | Education | pending | ||
|
https://www.uei.edu/ UEI College 5162 10/10/2026, 12:51:08 AM |
||||||
| Ransomware | LTI Services and Larick Towing View Details | nova | Transportation / Travel / Logistics | pending | ||
|
ltiservices.com - laricktowing.com - LTI Services is a leading customization and accessory shop specializing in customizations, repairs, and aftermarket parts for the heavy-duty trucking industry. They work with major truck brands such as Peterbilt, Kenworth, Volvo, International, Freightliner, and Western Star, offering a wide range of services including collision repair, custom fabrication, and electrical repairs. The company prides itself on providing quality parts and accessories while collaborating closely with customers to bring their design visions to life. With a focus on transparency and comprehensive service, LTI Services ensures that clients are informed and confident throughout the project process - Larick Towing Inc. is a family-owned and operated business that has been providing vehicle transportation services since 1978. They offer nationwide vehicle transportation, including pick-up and delivery services for transporters, as well as transport to all ship ports and terminals. Their services cater to both individual clients and auto dealers, facilitating vehicle transport to and from auctions and dealer swaps. The company is known for its customer-focused approach and commitment to quality service - Nova provide free decrypt 2 files as proof, we will leak only DBs, not source code because company may recover from leak) 11 days available to reach us or no recover possible, both sites seized. |
||||||
| Ransomware | Lee Law Offices View Details | cmdorganization | Finance / Legal / Insurance | pending | ||
|
Lee Law Offices is a well-established law firm serving clients in North and South Carolina for over 30 years, specializing in personal injury, workers compensation, and social security disability cases. The firm is dedicated to advocating for individuals affected by auto accidents, workplace injuries, and other forms of negligence, ensuring that clients receive the compensation they deserve. With a no-fee guarantee, they focus on representing the best interests of their clients rather than insurance companies or corporations. |
||||||
| Ransomware | Plexsupply Inc View Details | pear | Retail / E-commerce | pending | ||
|
A private wholesale and distribution company offering the highest-quality brand-name products |
||||||
| Ransomware | DentaQuest, LLC. View Details | shinyhunters | Other | leaked | ||
|
The company failed to reach an agreement with us despite our incredible patience, all the chances and offers we made. They don't care. | Size: 234GB+ (compressed) | Updated: 30 May 2026 | SHA256: db3088225c36be26ce2b458fa7a190176d071441e2e0830c0d82143e6323a3e1 |
||||||
| Ransomware | www.labexpress.com View Details | incransom | Healthcare / Pharma | pending | ||
|
LABEXPRESS & GARONIT PHARMA: 200 GB OF SHARED INFRASTRUCTURE We have obtained 200 GB of internal data from a US-based group operating under two legal entities: Labexpress and Garonit Pharma. The materials show a single Active Directory domain (LABEXPRESS1.local), a shared file server, and extensive cross‑company records. This data will be made publicly available in the near future. Active Directory Overview - 65 computers, 142 user accounts, 98 groups, 11 organizational units (OUs). - Domain controllers: DC01 (Server 2019), LABXDC01 (Server 2012 R2). - A single AD domain serves both Labexpress and Garonit Pharma. Notable account: cn: Troy Austin sAMAccountName: Taustin memberOf: QuickBooks, LABEXPRESS, LABEXPRESSUSERS The same person appears in Exchange mailboxes as [email protected]. Weak Passwords and Brute‑Force Indicators - Administrator account: 3,193 failed logon attempts, last successful logon 2026-04-30. - Computer accounts FRONTDESK$, DEV$, LABEL$ – more than 3,000 failures each. - Cleartext password found on FILE01\passwords.txt: Admin: LabExpress2024! - The Domain Admins group includes: Administrator, labadmin, adminiss, Protect, xtratech, LAE009-CT. - Password for user Protect: Password123! - Outdated password templates in the “SBSUsers” OU are still in use. Mail Servers and Exchange - LABSERVER2 runs Windows Server 2003 SP2 with Exchange 2007. - Full mailbox export performed using the built‑in Export-Mailbox cmdlet – no special exploit required. Contents of the Obtained Data (200 GB) We have data from drive E:\, including: 1. Financial & Accounting - QuickBooks Enterprise 2021 installer and data files (QB2021.DSN, QB2021.ND). - Folder: E:\Garonit Documents\Clients 2022\ – hundreds of invoices, COAs, and COCs (e.g., Amtrade International INV# 50268.pdf for ~21M USD, Estee Lauder Inv# 24.pdf). - Folder: E:\Garonit Documents\ACCOUNTS PAYABLES 2022 09 22\ – detailed accounts payable records for 50+ vendors. 2. Quality & Production - Thousands of COA/COC files (e.g., CHG 20% Lot 429012 CoA.pdf, COC CHG 20%, Lot# 705103.docx). - Complete batch records for 2023–2026 (folders Batch Records\2023, 2024, 2025, 2026). - Stability study protocols and raw HPLC data for CHG 0.12% Oral Rinse. 3. ANDA & Regulatory Documentation - Folder “00 Oral Rinse ANDA-Old One” – complete ANDA dossier, including DMF, method validation, stability, and correspondence with the FDA. - Files: ANDA Checklist-Oral Rinse.docx, DMF Assessment in advance.pdf. 4. Vendor & Customer Records - Folder: E:\Garonit Documents\Vendor from 2022 07 19 TO 2022 09 21\Vendor\ – dossiers on each supplier (contracts, invoices, assessments). - Folder: E:\LABEXPRESSDATA\ALL LEI ORDERS\ – customer purchase orders and sales quotations. 5. Human Resources (HR) - Folder: E:\LABEXPRESSDATA\HUMAN RESOURCES\ – employment contracts, W‑9 forms, tax deductions, resignation letters. - Passport scans, Green Card copies, health insurance records for many employees. - Files: Employee Handbook.pdf, PTO Request Form.docx, Time off request form.pdf. 6. Internal Communications & Scans - Directory “C224E BIZHUB SCANNER DUMPS” containing subfolders named after employees (Burcu, Frank, Iliany, Kelvin, Dave, Randy, Sudhir, etc.). - Scans include: Green Cards, IDs, credit card authorization forms, bank letters, and correspondence with the IRS. - Examples: Burcu Green Card.pdf, Rohit Garg X-Ray.pdf, SKM_C250i... (thousands of scanned documents). 7. Tax & Banking Documentation - Correspondence with the IRS, State of New Jersey, Valley National Bank, Citibank. - Files: IRS Notice Lab Express.pdf, Valley Bank Garonit Deceember 2020.pdf, Credit Application, Bank instructions.pdf. Shared Infrastructure – Observed Facts - The same Active Directory domain and file server (drive E:\) store data for both Labexpress and Garonit Pharma. - Cross‑company records reside in the same folders (e.g., “Garonit Documents” and “LABEXPRESSDATA” coexist on the same drive). - User Troy Austin has an AD account (Taustin) and also uses the email address [email protected]. - Purchase orders, invoices, COA/COC files refer to both companies interchangeably. - At the IT level, there is no separation between the two legal entities. The obtained data demonstrates that Labexpress and Garonit Pharma operate on a single, shared IT infrastructure. All files, accounts, mailboxes, and production records are stored on the same systems. A 200 GB archive will be publicly released in the near future. |
||||||
| Ransomware | Shoreline Sightseeing View Details | dragonforce | Construction / Real Estate | pending | ||
|
Shoreline Sightseeing offers guided boat tours and water taxi services in Chicago, focusing on architecture and skyline views. Their popular tours include the Architecture River Tour, Skyline Lake Cruise, and Fireworks Tour, showcasing over 40 landmarks. The company caters to tourists looking for unique perspectives of the city and offers packages like the Chicago CityPASS for additional savings on attractions. Established in 1939, Shoreline operates the largest and most diverse fleet of cruise boats in Chicago |
||||||
| Ransomware | Henry Molded Products Likely to Engage tag. View Details | dragonforce | Public Sector | pending | ||
|
Henry Molded Products specializes in the manufacturing of custom molded pulp fiber products and packaging solutions. The company is recognized for its eco-friendly offerings, which are biodegradable, compostable, and recyclable, catering to a growing demand for sustainable packaging. Their products are designed for various clients, including government, industry, and environmentally conscious consumers. Henry Molded Products is committed to providing cost-effective solutions while leading in technology, design, and engineering in the molded fiber sector. |
||||||
| Ransomware | *M** View Details | genesis | Healthcare / Pharma | leaked | ||
|
A healthcare organization |
||||||
| Ransomware | ******** & Co View Details | genesis | Finance / Legal / Insurance | pending | ||
|
A provider of financial services |
||||||
| Ransomware | PB White & Co View Details | genesis | Finance / Legal / Insurance | pending | ||
|
A provider of financial services |
||||||
| Ransomware | AcademyHealth View Details | bravox | Healthcare / Pharma | pending | ||
|
They research and promote policy and innovations in healthcare. |
||||||
| Ransomware | Capital Family Physicians View Details | cmdorganization | Healthcare / Pharma | pending | ||
|
Capital Family Physicians provides quality healthcare services for families, focusing on comprehensive care for all ages. They offer same-day appointments and a patient portal for convenient access to medical records and billing. The practice emphasizes pediatric services, ensuring that children's health is prioritized. With over 15 years of experience, they are dedicated to supporting patients through every stage of life. |
||||||
| Ransomware | Interstate Roofing View Details | akira | Construction / Real Estate | leaked | ||
|
Interstate Roofing brings its customers the best in quality and service. Since 1988, Interstate has established itself as one of the largest and most trusted exterior-improvement companies i n the Northwest. We will upload 16gb of corporate data soon. Employee personal docs (scanned passports and LDs, 60 SSNs and so on), contracts and agreements, clients info, projects, etc. |
||||||
| Ransomware | Healthtrax Fitness &Wellness View Details | akira | Services | leaked | ||
|
Healthtrax, founded in 1979 and headquartered Glastonbury, CT, offers facilities and programs that integrate fitness, wellness education, traditional medical services and rehabilitation. H ealthtrax forms partnerships with leading health care systems to create a welcoming, centraliz ed place for members of the community to achieve their personal fitness and health goals. Here is the access to 10gb of corporate data. Employee and clients personal information (name, Dl and passport numbers, SSNs), contracts and agreements, personal records, financials, NDA a nd other confidential docs. Click the download button. You will find several password-free archives. Click on any of them to start the download. |
||||||
| Ransomware | Restorative Therapies, Inc. View Details | AiLock | Other | pending | ||
|
Restorative Therapies was established in 2004 as a partnership between researchers, engineers, and patient advocates to develop and promote Advanced Rehabilitation Technologies (ART). |
||||||
| Ransomware | belimed.com View Details | incransom | Finance / Legal / Insurance | pending | ||
|
We are announcing the successful breach of the secure network of Belimed AG, a leading provider of sterilization equipment. Our team has gained full access to the digital assets of their finance department and has exfiltrated the entire dataset. Data Volume: 1.5 Terabytes. In our possession is the complete financial picture of Belimed AG. This isn't just tables or reports; it is the entire nervous system of their business, including: * **SAP (SUP) Databases:** Full dumps containing all operational and financial information. * **Accounting Records:** All transactions, entries, and financial operations spanning many years. * **Client Contracts and Payments:** Detailed information on deals, pricing, and accounts receivable. * **Employee Data:** Salaries, bonuses, and personal financial information. * **Internal Audits and Strategic Planning:** Documents revealing their weaknesses, future plans, and trade secrets. * **Tax Documentation and Banking Details:** All information necessary for a complete understanding of their financial flows. The management of Belimed AG was given the opportunity to resolve this matter privately and without consequence. They chose silence, believing they could ignore us. This was a fatal mistake. By refusing to engage, they have jeopardized not only their own reputation but also the security of their clients, partners, and employees. **This is not a threat. It is an announcement of a coming event.** Exactly one month from the date of this post, the entire 1.5 TB data archive will be published for public access on this resource. Anyone—competitors, journalists, regulators—will be able to download and scrutinize the inner workings of Belimed AG. To the management of Belimed AG: you have made your choice. Now you will serve as an example to all others. Enjoy the consequences. The clock is ticking. |
||||||
| Ransomware | powerhousenow.com View Details | chaos | Other | leaked | ||
|
STATUS: PENDING PUBLICATION | TIME REMAINING: 72 HOURS ENTITY: Powerhouse (powerhousenow.com) THE REALITY OF POWERHOUSE We have been in possession of your internal data for some time. We have attempted to engage with your management to resolve this incident professionally, but their silence speaks… |
||||||
| Ransomware | entransinternational.com View Details | chaos | Other | leaked | ||
|
STATUS: PENDING PUBLICATION | TIME REMAINING: 72 HOURS ENTITY: Entrans International (entransinternational.com) THE REALITY OF ENTRANS INTERNATIONAL We have been in possession of your internal data for some time. Throughout this period, we have attempted to engage with your management, but their si… |
||||||
| Ransomware | Peña & Bromberg View Details | genesis | Finance / Legal / Insurance | leaked | ||
|
A legal firm dedicated to safeguard the rights of its clients |
||||||