United States
Targets by Group
United States - Targeted Attacks in All period
Posts 10895 total Page 2 / 109
| Type | Target | Source | Discovered | Business Category | Intel Link |
|---|---|---|---|---|---|
| Ransomware | howardlumber.com View Details | settra | Retail / E-commerce | ||
|
Howard Lumber Company and Augusta Sash & Door: Internal Documents of a Building Materials Group ... |
|||||
| Ransomware | zayo.com View Details | settra | Telecommunications | ||
|
Zayo Group A cache of corporate data from telecommunications provider Zayo Group has been discovered... |
|||||
| Ransomware | Gale Credit Union View Details | akira | Finance / Legal / Insurance | ||
|
Gale Credit Union offers a variety of financial products and services including loans, savings and checking accounts, and credit cards. Their intended clients are individuals and businesses residing or working in ten counties in Illinois. We will upload 50gb of corporate data soon. Employee personal information (passport, SSNs, DLs, credit cards and so on), clients and partners information, projects, financials, contracts and agreements and so on. |
|||||
| Ransomware | Cedar County Memorial Hospital View Details | Wallstreet | Healthcare / Pharma | ||
|
Cedar County Memorial Hospital is a community hospital providing emergency, inpatient, outpatient, diagnostic, surgical, and rehabilitation services. |
|||||
| Ransomware | WEMS View Details | akira | IT | ||
|
WEMS Electronics is a full-service turn-key small business specializing in state-of-the-art EMI custom filters, engineering, and manufacturing services. The company offers a completely integ rated approach to the design and fabrication of precision electronic components, assemblies, an d subsystems. We will upload 51gb of corporate data soon. Employee personal information, client information, lots of confidential HR files, projects, financials, projects, contrast and agreements, NDAs an d so on. |
|||||
| Ransomware | zummocorp.com View Details | incransom | IT | ||
|
Zummo is a global incumbent in the design, manufacture and commercialization of automatic fresh fruit juice extraction machines, mainly aimed at the food service and food retail segments. |
|||||
| Ransomware | www.renorefractories.com View Details | incransom | Manufacturing / Engineering | ||
|
RENO Refractories, Inc. specializes in the manufacturing of refractory products and services for various industrial applications, including aluminum, iron and steel, cement and lime, foundries, mini mills, and hydrocarbon processing. With over 35 years of experience, the company is committed to innovation and quality, providing advanced research and development, technical support, and installation services. Their product offerings include a full range of monolithic products and the revolutionary ElectroCast product line. RENO aims to optimize the profits and safety of their clients by delivering superior refractory technology across North America. |
|||||
| Ransomware | esopartnerscpa.com View Details | ZaWoo | Finance / Legal / Insurance | ||
|
ESOP Partners appears to be a specialized professional-services firm focused on Employee Stock Ownership Plans (ESOPs) rather than a general-purpose CPA firm. |
|||||
| Ransomware | Ishbia & Gagleard, P.C. View Details | aurora | Finance / Legal / Insurance | ||
|
[law] Ishbia & Gagleard, P.C. — a boutique law firm in Birmingham, Michigan, founded in 1999 by Jeffrey A. Ishbia and Michael A. Gagleard. The firm practises real estate, corporate, estate planning, personal injury, medical malpractice, and commercial litigation for high-net-worth individuals and closely held entities. The exposed material includes: 360+ client/matter folders — the complete attorney-client privilege corpus: litigation strategy memos, settlement agreements, case assessments, deposition notes, correspondence with opposing counsel. <redacted> <redacted> Full Social Security Numbers for 25+ identified individuals — trust beneficiaries, family members, employees of client businesses, and a scanned Social Security card. Protected Health Information — hospital admission records from Oakwood Hospital, University of Michigan Hospital, and William Beaumont Hospital. Also: 55+ employee files from a sexual health clinic client with SSN searches and scanned SS cards. 100+ client tax returns spanning 2003–2024, each containing SSNs, EINs, and income data. 11 email archive files (PST/OST) containing years of unfiltered attorney correspondence. Personal legal matters of Mat Ishbia — CEO of publicly-traded UWM Holdings Corp. (NYSE: UWMC), the largest wholesale mortgage lender in the United States. |
|||||
| Ransomware | Andover View Details | Wallstreet | null | ||
|
The Town of Andover, Massachusetts, is a municipal government organization that provides public services, administration, community programs, education resources, infrastructure support, and civic information to residents and businesses in Andover. |
|||||
| Ransomware | Globus Medical View Details | Falcon | Healthcare / Pharma | ||
|
Medical devices · NYSE: GMED - Our 2.96 TB extraction includes your entire Microsoft PowerBi which contains over 51,000 records of your customers and more, FDA feedback, 510(k) submissions, PMA approval letters, TGA suspension proposals, product complaint logs, serious adverse event narratives, final CAPA investigation findings, merger diligence decks, integration plans, FTC antitrust review documents, combined P&L statements, deal models, budget spreadsheets, medical board of directors meeting minutes and agendas, executed NDAs, distribution contracts with named partners and medical institutions, patient demographics and history from clinical registries and much more. |
|||||
| Ransomware | DistributionNOW (DNOW Inc.) View Details | Falcon | IT | ||
|
Energy & industrial distribution · NYSE: DNOW - Our 344 GB extraction includes your corporate information, corporate bank statements, vendor payment instructions, detailed payroll records, employee compensation, tax documents, operational secrets, proprietary SCADA gateway backups, PLC logic programs, industrial automation project files, internal audit logs detailing unethical activity investigations, whistleblower reports regarding harassment and discrimination, employee disciplinary records, employee PII, passports, driving licenses, medical drug screen results and much more. |
|||||
| Ransomware | Crystalpharmatech View Details | qilin | Healthcare / Pharma | ||
|
N/A |
|||||
| Ransomware | Glassdoor View Details | thegentlemen | Services | ||
|
glassdoor.com is a U.S. job platform (founded 2007) where employees anonymously review companies — culture, salaries, management. It's owned by Recruit Holdings/Indeed (acquired for $1.2B in 2018; legally merged into Indeed on July 1, 2026). It hosts millions of reviews for ~600,000 companies, plus salary data and job listings. Free for job seekers, monetized via employer branding tools; it also publishes the annual "Best Places to Work" awards. |
|||||
| Ransomware | Northwest Trophy View Details | thegentlemen | Services | ||
|
nwtrophy.com rocketreach.co/northwest-trophy-inc-profile_b59c90e0f9bc4cf5 Northwest Trophy & Awards Inc is a fourth-generation, family-owned awards business operating since 1938, with a showroom in Woodinville, WA (Seattle area). It offers personalized awards and gifts: trophies, medals, plaques, crystal and art-glass awards, acrylics, clocks, drinkware and ceremonial items. All engraving and printing (laser, rotary, full-color) is done in-house, serving sports teams, schools and businesses. It sells both through its showroom and an online Shopify store with standard 5–7 day production; a Seattle location was closed in 2023, leaving Woodinville (and previously Bellevue) to serve customers. |
|||||
| Ransomware | Adkisson Group View Details | thegentlemen | IT | ||
|
adkissondevelopment.com Adkisson Group / Adkisson Development Group is a privately held industrial real estate development and investment firm founded in 2012 and based in Houston, Texas (4809 Westway Park Blvd / 1130 Enclave Pkwy, Houston, TX 77041). It specializes in office/warehouse, manufacturing and distribution properties — development sites of 10–250 acres and buildings from 6,000 to 455,000 sq ft (its largest current project is the 604,096 sq ft Willow Creek Business Park). Services span development, general contracting through its in-house Adkisson GC Partners (tilt-wall construction), design-build, build-to-suit and site planning. Managing partners are co-founders Steve Adkisson (35+ years in the industry) and Arturo Creixell, plus Anthony Sarao, who heads the GC division; the lean team of ~7–20 staff generates roughly $5.9M in annual revenue. |
|||||
| Ransomware | esopartnerscpa View Details | ZaWoo | Finance / Legal / Insurance | ||
|
[Unpublished] |
|||||
| Ransomware | Neogen Corporation View Details | shinyhunters | Healthcare / Pharma | ||
|
This is a final warning to reach out by 1 Sep 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 30 Aug 2026 | Warning: FINAL WARNING |
|||||
| Ransomware | Bandit Industries View Details | qilin | IT | ||
|
N/A |
|||||
| Ransomware | LAPoco Architects View Details | qilin | Manufacturing / Engineering | ||
|
N/A |
|||||
| Ransomware | AUM Construction View Details | qilin | IT | ||
|
N/A |
|||||
| Ransomware | swagelok View Details | iah6477 | Manufacturing / Engineering | ||
|
Size: 881.2 GiB |
|||||
| Ransomware | trc-companies View Details | iah6477 | null | ||
|
Size: 4.2 TiB |
|||||
| Ransomware | BayView Real Estate View Details | ShadowByt3$ | Services | ||
|
Guess your too busy focusing on your clients then changing password and protecting your clients. We breached them through pm.livable.com. You can see screenshots and file tree in the proof section. Also bleepingcomputer we will send you the data so you can confirm it too. Were not bluffing BayView Real Estate guess you guys didn't learn your lesson from the 26 million lawsuit but now you will. The following data was stolen: 1. Corporate Identity and Admin Profiles 6 Individual Administrator Profiles: Complete web profile exports, account configurations, and visible permission mappings for six active employees: - Breanna Tiu - Diana Nguyen - Elise Hou - Jeanne David - Wendy Wu - Zhen Deng 2. High-Density Financial Database Dumping - Building Statement Reports: The core database extraction file (Building-nK37xrmRYcoCMHymv-statements-report.pdf - Sample Distribution Summaries: Multi-property accounting records detailing exactly how utility expenses are balanced and divided across real estate assets (including specialized trackers for 394 Midway Street). 3. Operational Infrastructure & Platform Playbooks - Internal Corporate Handbooks: Step-by-step business guides detailing how money is processed and collected: - Bill & Collect: Manuals for handling payments routed directly through Livable's platform. - Convergent: Frameworks detailing workflows where tenants pay the property group directly. - Software Integration Guides: Training documentation teaching personnel how to map customer data tables between platforms: - AppFolio ID and Charges mapping logs - Yardi system integration guides Complete Video Tutorial Playbooks: Over 100 MB of internal instructional videos teaching how to navigate the portal, manage profiles, and export tenant lists: - 01 PM Portal Intro - 02 How to Setup a Tenant's Account - 03 How to Access the Tenant's Account - 04 How to Access the Allocation Table - 05 Move Out Processing - 06 Export tenant charges and download CSV files - PM Portal Training - Portfolio Overview & Building Profile - PM Portal Training - Resident Profile & Allocation Tables - PM Portal Training - Utility Recovery Proforma, Add a Building, Export Monthly Tenant Charges 4. Tenant Communication Scripts & Branding Graphics - Official Digital Graphics: High-resolution templates used by the company for onboarding and platform access: - Bill & Collect Welcome Email interface maps - Convergent Welcome Email branding templates - Resident Portal dashboard graphical layouts - Physical Outreach Letters: Word and PDF versions of letters sent directly to tenants regarding payments and billing statuses: - Bill & Collect / Convergent / Net Zero Billing Tenant Welcome Letters - Delinquency Template notification forms - Physical Billing Statements and Net Zero Statement layouts 5. Legal Leases & Regional Utility Addenda - 30-Day Notice Templates: Legally binding notification documents used to alter tenant agreements (30 Day Notice_Billing Method Change, Notice of Supplier Change, and Notice of Supplier and Allocation Formula Change). - Geographic Lease Addenda Collections: Specific legal attachments containing the rules and formulas for utility billing across different municipal districts: - California Addenda (including localized frameworks for Hayward and Los Angeles) - National Utility Addenda / US Addenda (including localized parameters for Seattle) - Exhibit B - Submetered Water regulatory documents - Lease Addendum Guide instructional packets Uncompressed size: 216653153 bytes(216.6 MB) compressed size: 78.0MB mirror 1: https://pixeldrain.com/u/pc8VfBLf mirror 2: https://fex.net/s/vydmesb |
|||||
| Ransomware | cutlercapital View Details | lynx | Finance / Legal / Insurance | ||
|
Cutler Capital Management, LLC of Worcester, MA is an investment advisory firm registered with the Securities and Exchange Commission, specializing primarily in investing in convertible securities, community banks and real estate investment trusts to provide growth and income to high-net-worth investors, corporations, family offices, endowments and charitable foundations. Cutler currently manages $300 million in assets. |
|||||
| Ransomware | Oilquip Inc View Details | incransom | Services | ||
|
Oilquip Inc, established in 1960, is a comprehensive fluid power distributor that specializes in hydraulics, pneumatics, oil conditioning, and system integration. The company is dedicated to providing innovative electro-hydraulic and electro-mechanical solutions while exceeding customer expectations. Their services include design and engineering, fluid conditioning, power generation, and repairs and upgrades, catering to a diverse range of clients. Oilquip prides itself on its customer-focused approach, flexibility, and commitment to excellence in all aspects of its operations. |
|||||
| Breaches | 740K USA C Level Email.xlsx View Details | Database World ROC | — | ||
| Breaches | 500K USA B2B With LINKEDIN and email Full.xlsx View Details | Database World ROC | — | ||
| Ransomware | McKesson Corporation View Details | shinyhunters | Healthcare / Pharma | ||
|
Hundreds of millions of records/rows of data was compromised containing very sensitive information spanning from PII to PHI. We urge you to reach out. Read our emails. We will provide a substanial discount. Failure to engage with us will result in the full publication of data taken from you and we very much intend to carry that out if you do not engage with us. This is a final warning to reach out by 1 Sep 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 29 Aug 2026 | Warning: FINAL WARNING |
|||||
| Ransomware | Jack Henry & Associates View Details | shinyhunters | Services | ||
|
This is a final warning to reach out by 1 Sep 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 29 Aug 2026 | Warning: FINAL WARNING |
|||||
| Ransomware | H.W. Lochner View Details | payoutsking | IT | ||
|
[AI generated] H.W. Lochner is a US-based civil engineering and infrastructure consulting firm. Founded in 1944 and headquartered in Chicago, Illinois, the company specializes in transportation planning, highway design, bridge engineering, environmental services, and construction management. It primarily serves state and local government clients across the United States, supporting public infrastructure projects including roads, transit systems, and related civil works. |
|||||
| Ransomware | corematerials.com View Details | chaos | Manufacturing / Engineering | ||
|
Core Materials (corematerials.com) — Countdown to Publication Management at Core Materials has chosen to completely ignore all attempts to establish a constructive dialogue regarding their security breach. Silence will not make this situation go away. Since leadership refuses to engage, we are m… |
|||||
| Ransomware | Newton County School System View Details | qilin | Education | ||
|
N/A |
|||||
| Ransomware | Alumax View Details | akira | Manufacturing / Engineering | ||
|
Alumax Alumínios specializes in the distribution of aluminum and accessories for the constructi on industry, focusing on providing tailored solutions for builders and metalworkers. The compan y prides itself on its partnership with Hydro, a global leader in sustainable aluminum, allowin g them to offer high-quality products that meet the market's demanding needs. We will upload 58gb of corporate data soon. Detailed employee personal information (passports, IDs, and another personal docs scans), client information, projects, financials, confidential f iles, contrast and agreements, NDAs and so on. |
|||||
| Ransomware | BEPeterson View Details | akira | Services | ||
|
BEPeterson is a full-service metal fabricator specializing in custom solutions for vessels, tan ks, and heavy-gauge metal parts since 1935. The company serves a diverse range of industries in cluding defense, medical, energy, and industrial sectors, providing high-quality products throu gh advanced manufacturing techniques. We will upload 20gb of corporate data soon. Employee personal information, client information, projects, financials, NDAs and so on. |
|||||
| Ransomware | ProCare View Details | moneymessage | Healthcare / Pharma | ||
|
[AI generated] N/A ProCare is a relatively common business name used by multiple unrelated companies across different industries and countries. Without additional context such as industry sector, country, or full legal name, it is not possible to identify a specific organization with confidence and provide accurate threat intelligence relevant information. |
|||||
| Ransomware | Infinnium View Details | qilin | IT | ||
|
N/A |
|||||
| Ransomware | Bayview Real Estate WARNING View Details | ShadowByt3$ | Services | ||
|
Check your emails or we will leak the data we are not bluffing we stole 216.6 MB. compromised email: [email protected] compromised site: https://pm.livable.com The following emails below check your emails or spam for proof - [email protected] - [email protected] - [email protected] - [email protected] - [email protected] Your company has till August 29th 2026 to respond back or it gets leaked but can get extended to monday if your company responds back and negotiates. |
|||||
| Ransomware | tnmed.org View Details | lockbit5 | Healthcare / Pharma | ||
|
The Tennessee Medical Association is a nonprofit organization that advocates for physicians in Tenne... |
|||||
| Ransomware | Caduceus Medical Group View Details | anubis | Healthcare / Pharma | ||
|
Predictable but dangerous data exposed in a healthcare company breach. |
|||||
| Ransomware | Our Hospice Of South Central Indiana View Details | Storm | Healthcare / Pharma | ||
|
Our Hospice provides compassionate end-of-life care and dedicated support to patients and their families in South Central Indiana. Their services include hospice care, personal care, palliative care, bereavement care, and specialized programs for veterans and pediatric patients. The organization is committed to ensuring comfort, dignity, and quality of care tailored to individual needs. With a focus on community and compassion, they serve 22 counties, offering 24/7 support to those in need. 2626 E. 17th Street, Columbus, IN 47201 , 51-200 Employees |
|||||
| Ransomware | National Salvage View Details | Storm | Transportation / Travel / Logistics | ||
|
National Salvage is a leading treated wood recycler specializing in wood recycling, rail services, and environmental services. With over 40 years of experience, they offer services such as track demolition, bridge demolition, and asbestos abatement. Their product range includes used railroad ties, recycled rail, utility poles, and railroad tie fuel. The company primarily serves clients in need of sustainable solutions for wood and rail recycling. The company headquarters is located in 6755 S Old State Road 37, Bloomington, IN 47403, United States. 201-500 Employees |
|||||
| Ransomware | W****s View Details | payoutsking | — | ||
|
w****.com is a United States-based entity operating within a specific commercial sector, cataloged in the threat-intelligence index under the classification of ransomware victim. The entity's operational profile and public information are documented within cybersecurity intelligence frameworks to support threat actor analysis and incident response tracking. This listing reflects an association with the threat actor payoutsking, indicating a ransomware-related context tied to the entity's geographic and sectoral positioning. The description maintains neutrality regarding specific incident details, avoiding speculation on data impacts or recovery status while providing authoritative catalog context for security professionals and researchers monitoring evolving cyber threats. |
|||||
| Ransomware | Zion Construction View Details | thegentlemen | Construction / Real Estate | ||
|
zionconstructioninc.com Zion Construction Inc is a reputable general contracting and home building company based in Ephrata, Washington.With over three decades of industry experience, they specialize in custom homes, remodeling, and general construction services.The company is recognized for delivering high-quality residential projects and is highly rated among contractors in the region. |
|||||
| Ransomware | BENCIVIL View Details | incransom | IT | ||
|
Benchmark Civil Engineering Services, Inc. is a civil engineering firm based in Allentown, PA, specializing in civil engineering, traffic studies, forensic engineering, and land surveying. The company serves municipalities and clients in the Lehigh Valley and surrounding areas, providing expert services in traffic and transportation engineering, land development, and construction engineering. With a focus on professionalism and integrity, Benchmark is committed to guiding clients through the design, approval, and construction processes. Their highly trained staff utilizes state-of-the-art technology to ensure project success and compliance with regulations. |
|||||
| Ransomware | Ipro.com(revealdata.com) customer DB + full database backup View Details | emperador | IT | ||
|
Yes, this data has been posted before by ME under a different alias, yes the individual that posted the data on cracked.st is a fraud. I am posting this just for fun. Data contains: Customer identifiers, Contact & Location, Account metadata, Internal System IDS, Client relationships. The full database backup contains everything such as transcripts, cases, though it is from 2023. [Size: 79.5 MB | Sector: Government, Law] |
|||||
| Ransomware | Cetylite View Details | akira | null | ||
|
Cetylite, Inc. specializes in dental and medical products aimed at enhancing patient comfort, s afety, and satisfaction. Their offerings include exclusive specialty products like Cetacaine fo r dental practices and proprietary Rx and disinfection products for the medical field. We will upload 6gb of corporate data soon. Employee personal information (passports, DLs, SSNs, credit cards), client information, detailed financials, confidential files, NDAs and so on. |
|||||
| Ransomware | Seabrook Island View Details | akira | — | ||
|
Seabrook Island and its stunning natural beauty create the perfect setting for luxury homes enj oying oceanfront, riverfront, tidal marsh, golf course, and maritime forest views. We will upload 55gb of corporate data soon. Employee personal information (passports, DLs, SSNs , personal financials), client information, projects, financials, NDAs and so on. |
|||||
| Ransomware | Ruby Seven Studios View Details | incransom | IT | ||
|
Ruby Seven Studios Inc. https://www.rubyseven.com/ Total leak: 114 GB (123,463,823,360 bytes), 133,851 Files, 49,357 Folders. Data: Source code, Games Rules, Game assets, Game math, GDD, IGT, Analytics report Finance doc's, Royalty Reports, Tax invoice, Inventions Agreement - Employee intellectual property assignment, non competition and confidentiality agreement Personal ID/Passport, Share holders list. Data type: Confifential Partners: IGT (International Game Technology), Konami Gaming, Wazdan, Bluberi Gaming, CHAYOWO TECHNOLOGY, Everi & Aristocrat Bally's Corporation, Delaware North Gaming, Pechanga Resort & Casino, Mystic Lake Casino Hotel, Affinity Interactive, Choctaw Casinos & Resorts. Full publication coming soon. |
|||||
| Ransomware | theheartcenterofmemphis.com View Details | lockbit5 | Healthcare / Pharma | ||
|
The Heart Center of Memphis is a leading cardiology practice in the Mid-South, specializing in compr... |
|||||
| Ransomware | Providence Investments View Details | qilin | Finance / Legal / Insurance | ||
|
N/A |
|||||
| Ransomware | Capitol Mechanics View Details | emperador | — | ||
|
Capitol Mechanics , fresh databases, important docs [Size: 120.9 MB | Sector: Finance, Transportation] |
|||||
| Ransomware | Qualisteel View Details | medusalocker | IT | ||
|
Organization with 7568 emails extracted. Domain: qualisteel.com |
|||||
| Ransomware | NEXT LEVEL MEDICAL, LLC View Details | pear | Healthcare / Pharma | ||
|
Affordable urgent care across Texas |
|||||
| Ransomware | proampac View Details | iah6477 | Manufacturing / Engineering | ||
|
Size: 745.3 GiB |
|||||
| Ransomware | mat-holdings-inc View Details | iah6477 | — | ||
|
Size: 148.2 GiB |
|||||
| Ransomware | finodayacapital.com View Details | krybit | Finance / Legal / Insurance | ||
|
Finodaya Capital Private Limited is an Indian tech-enabled Non-Banking Financial Company (NBFC) incorporated on Septembe... |
|||||
| Ransomware | lemonfarm.com View Details | krybit | Agriculture / Food | ||
|
Lemon Farm Co., Ltd. is a leading Thai organic supermarket chain and online platform for organic and healthy food produc... |
|||||
| Ransomware | wmiemporium.com View Details | krybit | Retail / E-commerce | ||
|
WMI Emporium Co., Ltd. is a Thai manufacturer and distributor of metal sheet products established in 2002 as a joint ven... |
|||||
| Ransomware | Gill Rock Drill View Details | akira | Manufacturing / Engineering | ||
|
Gill Rock Drill Company, Inc., located in Lebanon, PA, is a family-owned manufacturer and distr ibutor specializing in drilling equipment and tools for the drilling industry. The company offe rs a range of services including contract drilling, rentals, and technical support, focusing on building strong customer relationships based on integrity and trust. We will upload 5gb of corporate data soon. Employee personal information (passports, DLs, w-9 c omplete forms), client information, financials, payment details, CCs, NDAs and so on. |
|||||
| Ransomware | California Truck Equipment View Details | qilin | Manufacturing / Engineering | ||
|
N/A |
|||||
| Ransomware | Integrex RCM View Details | qilin | Healthcare / Pharma | ||
|
N/A |
|||||
| Ransomware | ATF View Details | qilin | Public Sector | ||
|
N/A |
|||||
| Ransomware | WireCo View Details | qilin | Manufacturing / Engineering | ||
|
N/A |
|||||
| Ransomware | ERPIS LLC View Details | aurora | IT | ||
|
[software] ERPIS LLC (doing business as ShipERP) — a Texas-based SAP integrator whose single product is enterprise shipping management software used by Boeing, Pfizer, NVIDIA, John Deere, Medtronic, and 83 other enterprise customers. The exposed material includes: Complete product source code — all versions (2.0–5.4) of ShipERP's ABAP source, the company's sole revenue-generating asset ($20.6M backlog) <redacted> Live QuickBooks financial database (705 MB) — complete payroll (SSN, bank accounts, salaries), vendor banking details, AR/AP, and general ledger Full customer contract register — exact pricing for all 88 enterprise customers with $20.6M in deferred revenue <redacted> SAP installation media (245 GB) — full HANA, S/4HANA, and kernel distributions <redacted> |
|||||
| Ransomware | MEMSIC View Details | abyss | Manufacturing / Engineering | ||
|
Founded in 1999, MEMSIC is a company that designs, manufactures Flow sensors, Accelerometers, Sensing technology, Inertial systems, Magnetometers, Tilt sensors. MEMSIC is located in Massachusetts. |
|||||
| Ransomware | Hamilton View Details | AiLock | Services | ||
|
Founded in 1953 and headquartered in Reno, Nevada, Hamilton Company is a global provider in the design and manufacture of liquid handling, process measurement, robotics and automated storage solutions, serving customers in academic and private research laboratories, pharmaceutical and clinical diagnostic companies and government institutions. |
|||||
| Breaches | 7 million USA b2b.7z View Details | Database World ROC | — | ||
| Breaches | 1.5 M b2b usaBusiness data.rar View Details | Database World ROC | — | ||
| Ransomware | Central Florida Civil LLC View Details | Orova | Construction / Real Estate | ||
|
Central Florida Civil, a leading name in underground utilities and site development based in the vibrant city of Belleview, Florida. With a strong foundation built on professionalism, we are dedicated to delivering exceptional service. Demolition, Earthwork, Fire Suppression, General Construction Management. |
|||||
| Ransomware | Brazosport College View Details | qilin | Education | ||
|
N/A |
|||||
| Ransomware | mswalker.com View Details | chaos | IT | ||
|
MS Walker (mswalker.com) – Countdown to Publication Management at MS Walker has chosen to completely ignore all attempts to establish a constructive dialogue regarding their security breach. Silence will not make this situation go away. Since leadership refuses to engage, we are moving forward o… |
|||||
| Ransomware | National Kidney Registry View Details | direwolf | Healthcare / Pharma | ||
|
[AI generated] The National Kidney Registry is a nonprofit organization based in the United States that facilitates kidney paired donation programs. It operates within the healthcare and organ transplantation industry, connecting kidney donors and recipients across a national network of transplant centers. Its mission is to improve transplant outcomes, increase the number of living donor transplants, and reduce patient waiting times for compatible kidneys. |
|||||
| Ransomware | Tiseo Paving View Details | Global Secret Group | Services | ||
|
Country: Texas, US | Website: tiseopaving.com | Revenue: $22.6 Million | Industry: Construction, Commercial & Residential Construction | Employees: 50-100 | Properties: 457 GB (83,932 Files, 10,829 Folders) |
|||||
| Ransomware | Johnson City Honda View Details | Global Secret Group | Manufacturing / Engineering | ||
|
Country: Tennessee, United States | Website: johnsoncityhonda.com | Revenue: $6,5 Million | Industry: Automobile Dealers | Employees: 11-50 | Properties: 32.9 GB(34,277 Files, 8,896 Folders) |
|||||
| Ransomware | Lockheed Architectural Solutions, Inc. View Details | Global Secret Group | IT | ||
|
Country: Pascoag, RI 02859, United States | Website: lockheedsolutions.com | Revenue: $31.2 Million | Industry: Manufacturing, Construction, Building Materials | Employees: 100-200 | Properties: 1.3 TB (558,462 Files, 97,835 Folders) |
|||||
| Ransomware | StarBucks Company (StarBucks.com View Details | ShadowByt3$ | Hospitality / Food & Beverage / Tourism | ||
|
StarBucks Company operates under the domain StarBucks.com within the United States, primarily serving the Hospitality, Food & Beverage, and Tourism sectors through services related to coffee retail, customer engagement platforms, and business operations. The entity is formally listed within this threat-intelligence index under the classification of ransomware victim, with the associated threat actor identified as ShadowByt3$. This designation reflects the cybersecurity context in which the organization was documented, emphasizing its sector exposure and the threat actor connection without disclosing unverified incident details. The catalog entry provides neutral, authoritative context for threat researchers and security professionals monitoring ransomware activity across hospitality and tourism industries. |
|||||
| Ransomware | STRUCTURED SETTLEMENT CAPITAL LLC View Details | qilin | Services | ||
|
N/A |
|||||
| Ransomware | Davis & Ferber View Details | akira | Retail / E-commerce | ||
|
Davis & Ferber LLP is a personal injury and malpractice law firm based in New York, specializin g in various legal areas including medical malpractice, motor vehicle accidents, nursing home a buse, and family law. We will upload 60gb of corporate data soon. Detailed personal client information (passports, DL s, addresses, SSNs, death/birth certs, phones and so on for almost a thousand people), confiden tial files, court files, hearings, police reports, NDAs, etc. |
|||||
| Ransomware | Pump Engineering Company View Details | Dark Project | Manufacturing / Engineering | ||
|
About Pump Engineering Company Pump Engineering Company is a full-service distributor and supplier of industrial pumps, parts, and fluid handling systems, serving Southern California since 1946. During the cyberattack, 120,000 files (115 GB) were stolen, including an extensive customer database, insurance documents, confidential financial documents, and a vast number of project drawings. |
|||||
| Ransomware | Dentist in New Britain, CT View Details | Dark Project | Healthcare / Pharma | ||
|
About Dentist in New Britain, CT Dentist in New Britain has spent over a decade caring for families across New Britain—pairing modern technology with the kind of warmth you don't expect from a dental office. As a result of the attack, the following were compromised: the entire customer database, consisting of just over 8,000 files, as well as a small number of records containing Social Security numbers |
|||||
| Ransomware | Cosmon View Details | beast | Manufacturing / Engineering | ||
|
Cosmon develops agentic artificial intelligence software for mechanical engineering workflows, centered on its Nexus product for CAD, CAE, simulation, and PLM tasks. Its website presents the company as a software provider whose platform automates drawing creation, simulation setup, troubleshooting, design validation, and product lifecycle data tasks while integrating directly with major engineering tools. Although the offering is deeply technical and tailored to engineering environments, the core business shown is the development and delivery of proprietary engineering software rather than providing outsourced engineering services or general consulting. https://cosmon.com https://www.zoominfo.com/c/cosmon/5000578320 |
|||||
| Ransomware | SHAHEEN LAW GROUP PLC - Richmond, Virginia, USA View Details | Deadlock | Finance / Legal / Insurance | ||
|
Family law firm, established 1995 by Victor A. Shaheen (†2025 - the General Assembly of Virginia honored him with a resolution; google it, it is touching). Now run by his three sons. 48 employees across four offices: Richmond, Midlothian, Virginia Beach, Newport News. What do they do? They close 150+ real estate transactions EVERY MONTH for some of the largest corporate relocation programs in America. When a Fortune-500 moves an employee to Virginia, this firm holds that employee's Social Security Number, bank wiring details, home address, family identities, and sometimes their medical clearance. They hold everyone's future in a shared folder. We now hold the folder. WHAT WE TOOK 36,788 files · 27GB · 21,789 fully read 67,000+ SSN patterns (their own dedup says 6,017 real people — we will let their customers decide which number to believe) EVIDENCE — SERIES PREVIEW (from their actual files) - S1 DEEDS WITH SOCIAL SECURITY NUMBERS File: "5053815 - Unsigned Deed.docx" (verbatim from their server): "***-**-XXXX B•••• H••• Social Security Number ***-**-XXXX J••••• H••• Social Security Number 10356 Ashburn Road, North Chesterfield, VA 23235" File: "Kelley 5042085 - DEED.docx": "PURCHASER(S): N••••• S••• SELLER'S NAME: S••• E. K•••• SS#: ***-**-XXXX ...including the withholding of twenty percent (20%) of the sales proceeds." ← FIRPTA: foreign sellers. IRS will want this list. We have it. Thousands of these. Every deed folder = a name, a number, an address, a transaction. Their client roster IS the leak. - S3 INSIDE THEIR BANKING & THEIR NETWORK File: "shared_Accounting/Banking/Other Banking/Shaheen DDA Statements SunTrust DDA" (email from SunTrustOnlineCourier to their own staff — headers verbatim): Received: from barracuda.shaheenlaw.com ([10.0.0.6]) by ricdcex1.shaheenlaw.com ... X-ASG-Debug-ID: 1291233029-... for ; Wed, 1 Dec 2010 Why we publish an email HEADER: their internal map is in it. Barracuda at 10.0.0.6. Exchange "ricdcex1". Domain SHAHEENWORLD. We did not forget how to enter. Neither will the next group, when we sell the map. 150 banking statement attachments ride along in this folder. - S5 THE CLIENT LIST, WRITTEN IN FOLDERNAMES They named folders after their customers. Verbatim paths: shared_PENDING_SALE/HENNY/Closed Files/ Wisniewski-Markel, Suzanne_5027384_12263 Eagle ... Merza, Jamal & Adrienne_5027826_811 Woodberry ... Name, file number, STREET ADDRESS — in the path itself. Marketing lists sell for money. This one is annotated with purchase history. Relocation buyers are premium leads. - S2 MEDICAL - S4 LITIGATION Held. 120 medical files exist (their own audit counted them). Litigation: we confirm their December escrow dispute is public (Porchlight Homes v. Almeida & Shaheen, Henrico — google it, BizSense covered it). Virginia residents: §18.2-186.6. Illinois relocations: BIPA. Opposing counsel and journalists: samples on request. Media & researchers: samples on request, we answer fast We keep our word to everyone who pays. We keep it also to everyone who does not. |
|||||
| Ransomware | The Liberty Group View Details | Dark Project | Services | ||
|
About The Liberty Group Companys offerings include local, long distance, and international moving, lab relocation services, and logistics solutions. They cater to a diverse range of clients, providing professional and comprehensive assistance to both residential and commercial customers. Investigators are working to identify the perpetrators and assess the full scope of the damage. A company has suffered a major cyberattack resulting in the theft of approximately 27,000 internal files. The leaked documents include financial records, internal working materials, and personal data of employees. Attackers encrypted the company's systems following the breach, severely disrupting operations |
|||||
| Ransomware | Jones, Little & Co., CPAs, LLP View Details | Dark Project | Retail / E-commerce | ||
|
About Jones, Little & Co., CPAs, LLP Jones, Little & Co., CPAs, LLP is a professional accounting firm that offers a wide range of services including business accounting, tax preparation, and IRS problem resolution. They cater to small businesses, non-profit organizations, and specialized industries such as auto dealers and retailers. At least 100 gigabytes of company data—including financial records, internal files, and employee personal information—were stolen in a cyberattack. Hackers encrypted the firm's systems after exfiltrating the documents, leaving operations paralyzed. |
|||||
| Ransomware | Design-Aire Engineering, INC View Details | Dark Project | Manufacturing / Engineering | ||
|
About Design-Aire Engineering, INC Design-Aire Engineering specializes in mechanical, electrical, plumbing, and energy engineering services. They focus on providing innovative and sustainable solutions for their clients. The company serves a diverse range of clients, including those in the public and private sectors. With a commitment to green engineering practices, they aim to enhance energy efficiency and environmental sustainability. Design-Aire Engineering, INC has suffered a cyberattack on its service systems, resulting in the theft of approximately 377GB of sensitive data. The breached information includes employees' personal data and detailed architectural plans of clients' buildings. |
|||||
| Ransomware | Furnished Quarters View Details | Dark Project | Retail / E-commerce | ||
|
About Furnished Quarters Headquartered in New York City, New York, Furnished Quarters, is to deliver exceptional residential experiences with passion, reliability and integrity always innovating and putting people first. They consider this in everything they do and every guest and client experience they deliver. The company "Furnished Quarters" was the victim of a successful cyberattack, as a result of which the company’s confidential data was stolen. The volume of data stolen amounts to 155 GB. The data stolen included the company’s customer details, as well as documents containing banking and financial information. Currently, around 198,000 files are no longer under the control of "Furnished Quarters". |
|||||
| Ransomware | FFKR Architects View Details | incransom | Manufacturing / Engineering | ||
|
FFKR Architects is a leading architecture and interior design firm based in Utah, with additional offices in Arizona and Idaho. They offer a wide range of services including architecture, landscape architecture, interior design, and environmental graphic design. The firm is known for its design excellence and commitment to environmental leadership, serving various sectors such as healthcare, education, hospitality, and commercial projects. With a team of over 170 professionals, FFKR empowers clients through innovative visualization techniques, ensuring informed decision-making. |
|||||
| Ransomware | Country-Wide Insurance View Details | Booba Project | IT | ||
|
Insurance Stolen data: 92 GB. |
|||||
| Ransomware | Senvibe View Details | Panzer | IT | ||
|
SENVIBE project is to improve and build national educational capacities, cooperation and competences in dealing with environmental and occupational noise and vibration (No&Vib) engineering issues in accordance with ongoing EU integration strategies and the needs identified in Serbia. |
|||||
| Ransomware | City of Mitchell View Details | Storm | Public Sector | ||
|
Mitchell is a city in and the county seat of Davison County, South Dakota, United States. Mitchell is the principal city of the Mitchell Micropolitan Statistical Area, which includes all of Davison and Hanson counties. The company headquarters is located in 612 N Main Street, Mitchell, SD 57301, United States. 51-200 Employees |
|||||
| Ransomware | Hospitality Health ER (Longview) View Details | genesis | — | ||
|
A healthcare organization |
|||||
| Ransomware | CyrusOne, LLC. View Details | shinyhunters | Manufacturing / Engineering | ||
|
Update 23 Aug : We are removing the clients name off this post. They are refusing to pay a $13 million demand. They have 24 hours left to engage with us. We hold 12.9 million Salesforce records along with: Sharepoint: (369.6 GB Compressed / 645 GB Uncompressed) 288,729 Files, 60,513 Folders - More than 182,000 rows of Customer data Extracted from the "Contacts" Salesforce Object. - Over 8,300 Rows of Employee PII (Full Name, Email, Job Title, Phone Number, ect.) - Thousands of executed contracts, MSAs, NDAs, amendments, leases, and SOWs - Extensive physical key inventory logs, verification photos, and contractor Green Badge audits - Large collection of data center drawings, floor plans, electrical one-line diagrams, security system drawings, and site schematics - Full CERM (Critical Environment Reliability Management) process library - Physical and information security policy suite plus governance materials - Regional security scorecards, KPI workbooks, GAM sheets, and signed performance packages - Credential and access-control artifacts (including PasswordList.xlsx, Okta SSC Access lists, active badge reports, and multiple Data Center Access Control forms) This is a final warning to reach out by end of day 24 Aug 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 23 Aug 2026 | Warning: FINAL WARNING PAY OR LEAK |
|||||
| Ransomware | adt.com View Details | lockbit5 | Telecommunications | ||
|
ADT is a security company that offers security systems, cameras, alarms ad home automation services.... |
|||||
| Ransomware | compendiumusa.net View Details | L Group | Other | ||
|
[AI generated] N/A |
|||||
| Ransomware | Clear Align View Details | qilin | IT | ||
|
N/A |
|||||
| Ransomware | PappyJoe: Healthcare Management System View Details | kazu | Retail / E-commerce | ||
|
PappyJoe is an India-based healthcare technology company that provides a cloud-based practice management platform for clinics, hospitals, and healthcare professionals. The platform helps manage appointments, electronic medical records (EMR), billing, prescriptions, patient communication, and administrative tasks in one system |
|||||
| Ransomware | PawlyClinic: Digital Veterinary Care Platform View Details | kazu | Healthcare / Pharma | ||
|
PawlyClinic is a digital veterinary care platform that connects pet owners with licensed veterinarians through online consultations, appointment booking, and in-clinic referrals. It provides a convenient way for users to access veterinary advice, manage pet health records, and receive treatment without always needing to visit a clinic physically. |
|||||
| Ransomware | Trailer Transit Inc View Details | metaencryptor | Transportation / Travel / Logistics | ||
|
Nationwide power-only transport services with 40+ years of experience. Trust Trailer Transit for dependable and accurate trailer transport solutions. Revenue: $22 M |
|||||
| Ransomware | Weber Water Resources View Details | metaencryptor | Services | ||
|
Founded in 1910, Weber Water Resources has been providing the widest range of water resource solutions at the lowest available risk to clients for over a century. Through our superior problem solving ability, Weber Water Resources partners with public and private clients to achieve the most equitable outcome possible on each project. revenue $25 M |
|||||