Ransomware Group intelligence
Akira
ActiveTrack Akira with 1703 published victims and 2 known leak locations in a single intelligence view.
BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Overview
Akira is tracked by Breach House as a ransomware group with 1703 published victims.
United States is currently the most targeted country in this dataset.
2 known leak locations are currently associated with this group.
Leak Status Distribution
1617
- Leaked 48 3.0%
- Pending 1569 97.0%
- Deleted 0 0.0%
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (2)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 2 | Onion service | Up checked 4h ago | akiralkzxzq2dsrzsrvbr2xgbbu2wgsmxryd4csgfameg52n7efvr2id.onion |
| Leak location 1 | Onion service | Up checked 4h ago | akiral2iz6a7qgd3ayp3l6yub7xx2uep76idk3u2kollpj5z3z636bad.onion |
Top Activity Sectors (18)
- Finance / Legal / Insurance 427
- Communication / Marketing 320
- Manufacturing / Engineering 172
- Services 130
- Construction / Real Estate 106
- Not identified 75
- IT 66
- Healthcare / Pharma 66
- Energy 40
- Transportation / Travel / Logistics 33
- Hospitality / Food & Beverage / Tourism 33
- Agriculture / Food 32
- Retail / E-commerce 29
- Telecommunications 28
- Education 25
- Public Sector 16
- NGOs / Associations 5
- null 1
Typical Attacks (29)
▼How Akira typically operates, as attributed by MITRE ATT&CK v19.2. Attributed via Akira, Akira, Akira _v2.
-
What they do: Akira uses valid account information to remotely access victim networks, such as VPN credentials.
What that means: Adversaries may obtain and abuse credentials of existing accounts as a means of gaining Initial Access, Persistence, Privilege Escalation, or Defense Evasion.
-
What they do: Akira uses compromised VPN accounts for initial access to victim networks.
What that means: Adversaries may leverage external-facing remote services to initially access and/or persist within a network.
-
T1047 Windows Management Instrumentation Execution
What they do: Akira will leverage COM objects accessed through WMI during execution to evade detection.
What that means: Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads.
-
T1059.001 PowerShell Execution
What they do: Akira has used PowerShell scripts for credential harvesting and privilege escalation.
What that means: Adversaries may abuse PowerShell commands and scripts for execution.
-
T1059.003 Windows Command Shell Execution
What they do: Akira executes from the Windows command line and can take various arguments for execution.
What that means: Adversaries may abuse the Windows command shell for execution.
-
T1106 Native API Execution
What they do: Akira executes native Windows functions such as GetFileAttributesW and `GetSystemInfo`.
What that means: Adversaries may interact with the native OS application programming interface (API) to execute behaviors.
-
What they do: Akira _v2 can create a child process for encryption.
What that means: Adversaries may create or modify system-level processes to repeatedly execute malicious payloads as part of persistence.
-
T1027.001 Binary Padding Stealth
What they do: Akira has used binary padding to obfuscate payloads.
What that means: Adversaries may use binary padding to add junk data and change the on-disk representation of malware.
-
T1036.005 Match Legitimate Resource Name or Location Stealth
What they do: Akira has used legitimate names and locations for files to evade defenses.
What that means: Adversaries may match or approximate the name or location of legitimate files, Registry keys, or other resources when naming/placing them.
-
T1480 Execution Guardrails Stealth
What they do: Akira _v2 will fail to execute if the targeted `/vmfs/volumes/` path does not exist or is not defined.
What that means: Adversaries may use execution guardrails to constrain execution or actions based on adversary supplied and environment specific conditions that are expected to be present on the target.
-
T1685 Disable or Modify Tools Defense Impairment
What they do: Akira has disabled or modified security tools for defense evasion.
What that means: Adversaries may disable, degrade, or tamper with security tools or applications (e.g., endpoint detection and response (EDR) tools, intrusion detection systems (IDS), antivirus, logging agents, sensors, etc.) to impair or reduce visibility of defensive capabilities.
-
T1558 Steal or Forge Kerberos Tickets Credential Access
What they do: Akira have used scripts to dump Kerberos authentication credentials.
What that means: Adversaries may attempt to subvert Kerberos authentication by stealing or forging Kerberos tickets to enable Pass the Ticket.
-
T1018 Remote System Discovery Discovery
What they do: Akira uses software such as Advanced IP Scanner and MASSCAN to identify remote hosts within victim networks.
What that means: Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system.
-
T1057 Process Discovery Discovery
What they do: Akira verifies the deletion of volume shadow copies by checking for the existence of the process ID related to the process created to delete these items.
What that means: Adversaries may attempt to get information about running processes on a system.
-
T1082 System Information Discovery Discovery
What they do: Akira uses the GetSystemInfo Windows function to determine the number of processors on a victim machine.
What that means: An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture.
-
T1083 File and Directory Discovery Discovery
What they do: Akira examines files prior to encryption to determine if they meet requirements for encryption and can be encrypted by the ransomware.
What that means: Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system.
-
T1135 Network Share Discovery Discovery
What they do: Akira can identify remote file shares for encryption.
What that means: Adversaries may look for folders and drives shared on remote systems as a means of identifying sources of information to gather as a precursor for Collection and to identify potential systems of interest for Lateral Movement.
-
T1482 Domain Trust Discovery Discovery
What they do: Akira uses the built-in Nltest utility or tools such as AdFind to enumerate Active Directory trusts in victim environments.
What that means: Adversaries may attempt to gather information on domain trust relationships that may be used to identify lateral movement opportunities in Windows multi-domain/forest environments.
-
T1654 Log Enumeration Discovery
What they do: Akira _v2 can enumerate the trace, debug, error, info, and warning logs on targeted systems.
What that means: Adversaries may enumerate system and service logs to find useful data.
-
T1021.001 Remote Desktop Protocol Lateral Movement
What they do: Akira has used RDP for lateral movement.
What that means: Adversaries may use Valid Accounts to log into a computer using the Remote Desktop Protocol (RDP).
-
T1213.002 Sharepoint Collection
What they do: Akira has accessed and downloaded information stored in SharePoint instances as part of data gathering and exfiltration activity.
What that means: Adversaries may leverage the SharePoint repository as a source to mine valuable information.
-
T1560.001 Archive via Utility Collection
What they do: Akira uses utilities such as WinRAR to archive data prior to exfiltration.
What that means: Adversaries may use utilities to compress and/or encrypt collected data prior to exfiltration.
-
T1219 Remote Access Tools Command and Control
What they do: Akira uses legitimate utilities such as AnyDesk and PuTTy for maintaining remote access to victim environments.
What that means: An adversary may use legitimate remote access tools to establish an interactive command and control channel within a network.
-
T1567.002 Exfiltration to Cloud Storage Exfiltration
What they do: Akira will exfiltrate victim data using applications such as Rclone.
What that means: Adversaries may exfiltrate data to a cloud storage service rather than over their primary command and control channel.
-
T1486 Data Encrypted for Impact Impact
What they do: Akira encrypts files in victim environments as part of ransomware operations.
What that means: Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources.
-
T1489 Service Stop Impact
What they do: Akira _v2 can stop running virtual machines.
What that means: Adversaries may stop or disable services on a system to render those services unavailable to legitimate users.
-
T1490 Inhibit System Recovery Impact
What they do: Akira will delete system volume shadow copies via PowerShell commands.
What that means: Adversaries may delete or remove built-in data and turn off services designed to aid in the recovery of a corrupted system to prevent recovery.
-
T1531 Account Access Removal Impact
What they do: Akira deletes administrator accounts in victim networks prior to encryption.
What that means: Adversaries may interrupt availability of system and network resources by inhibiting access to accounts utilized by legitimate users.
-
T1657 Financial Theft Impact
What they do: Akira engages in double-extortion ransomware, exfiltrating files then encrypting them, in order to prompt victims to pay a ransom.
What that means: Adversaries may steal monetary resources from targets through extortion, social engineering, technical theft, or other methods aimed at their own financial gain at the expense of the availability of these resources for victims.
Tools Observed (41)
▼Software Akira has been seen using, grouped by what it is used for. Legitimate administration tools appear here because these actors routinely abuse them — presence in this list is not itself malicious.
Credential theft
DonPAPI
LaZagne
Mimikatz
Defense evasion
PowerTool
Zemana Anti-Rootkit driver
Zemana Anti-Rootkit
Discovery
Advanced IP Scanner
Masscan
ReconFTW
SharpHound
SoftPerfect NetScan
Discovery & enumeration
Advanced IP Scanner
Bloodhound
ldapdomaindump
Masscan
ReconFTW
SharpHound
SharpShares
SoftPerfect NetScan
Exfiltration
FileZilla
MEGA
RClone
Temp[.]sh
WinSCP
Networking & tunnelling
Cloudflared
OpenSSH
Ngrok
OffSec
Impacket
Offensive security tooling
CrackMapExec
Impacket
NetExec
RMM Tools
AnyDesk
MobaXterm
Radmin
RustDesk
Remote monitoring & management
AnyDesk
MeshAgent
MobaXterm
Radmin
RustDesk
TeamViewer
Tool data from Ransomware Tool Matrix by BushidoUK, licensed CC BY 4.0. Grouped by purpose and matched to this group by Breach House.
Crypto Wallets (15)
▼
$3,991,216
Received (USD)
24
Payments
15
Known wallets
$997,459
Largest single payment
2023-07-13 → 2024-09-17
Payment window
bitcoin · 15
| Address | Chain | Received (USD) | Payments |
|---|---|---|---|
bc1qr0pqfghr9cksfc5arr2rak3lt2y50v03pc76nh |
bitcoin | $997,461 | 2 |
bc1qfdzu6uv2nek524pe7lz4w0mxtt9898vfaegdaj |
bitcoin | $482,181 | 1 |
bc1q0dx45y82r5rt36sm38jv0k4dexwc4nj9z4ryw7 |
bitcoin | $446,073 | 2 |
bc1q9wnp6k7xxdqkdv4fa5ceyhv08espuskhu8ghq2 |
bitcoin | $351,883 | 1 |
bc1qknumj4326runqxfr58kg0s7v7gu9y5v5t9uv6h |
bitcoin | $298,537 | 2 |
bc1qr0txunr259we37wer7w6et33qyq0n6hv83pw24 |
bitcoin | $252,389 | 1 |
bc1q0lwpz2yufw3x9as6f679lwk8jx43g44683x5mc |
bitcoin | $229,395 | 4 |
bc1qhzd63mz9mfucak7yzfn65p6rcsgztnsqr3dak8 |
bitcoin | $150,205 | 1 |
bc1qqrsd02sqthm8gej8lfesgpx82saw7q2g5pjtah |
bitcoin | $149,891 | 1 |
bc1q4my6vqq8cg689drf9jccqudjclv67sz4cudkyd |
bitcoin | $139,534 | 1 |
bc1qpwwtck0zhzrj56fxeayz6wz5546nlp607qzpvh |
bitcoin | $109,655 | 2 |
bc1qghj85gz0dkr9jeucana3z4xu50ujtllj50rvj0 |
bitcoin | $106,115 | 2 |
+3 more wallets not shown (the 12 largest by amount received are listed).
Crowdsourced payment data from Ransomwhere, licensed CC BY 4.0. Figures are what has been reported and attributed to this family, not a confirmed total. Cite as: Cable, Jack. (2024). Ransomwhere: A Crowdsourced Ransomware Payment Dataset (1.1.0) [Data set]. Zenodo. https://doi.org/10.5281/zenodo.6512122
Ransom Notes (3)
▼The note this group leaves on a compromised machine. Click a filename to read it.
akira_readme_3.txt
Hi friends, Whatever who you are and what your title is, if you're reading this it means the internal infrastructure of your company is fully or partially dead, all your backups - virtual, physical - everything that we managed to reach - are completely removed. Moreover, we have taken a great amount of your corporate data prior to encryption. ATTENTION! Strictly prohibited: - Deleting files with .arika extension; - Replacing or renaming .arika and .akira files; - Using third party software to recover your systems. If you violate these rules, we cannot guarantee a successful recovery. Well, for now let's keep all the tears and resentment to ourselves and try to build a constructive dialogue. We're fully aware of what damage we caused by locking your internal sources. At the moment, you have to know: 1. Dealing with us you will save A LOT due to we are not interested in ruining you financially. We will study in depth your finance, bank & income statements, your savings, investments etc. and present our reasonable demand to you. If you have an active cyber insurance, let us know and we will guide you how to properly use it. Also, dragging out the negotiation process will lead to failing of the deal. 2. Paying us you save your TIME, MONEY, EFFORTS and be back on track within 24 hours approximately. Our decryptor works properly on any files or systems, so you will be able to check it by requesting a test decryption service from the beginning of our conversation. If you decide to recover on your own, keep in mind that you can permanently lose access to some files or accidentally corrupt them - in this case we won't be able to help. 3. The security report or the exclusive first-hand information that you will receive upon reaching an agreement is of great value, since NO full audit of your network will show you the vulnerabilities that we've managed to detect and use in order to get into, identify backup solutions and download your data. 4. As for your data, if we fail to agree, we will try to sell personal information/trade secrets/databases/source codes - generally speaking, everything that has a value on the darkmarket - to multiple threat actors at once. Then all of this will be published in our blog - akiral2iz6a7qgd3ayp3l6yub7xx2uep76idk3u2kollpj5z3z636bad[.]onion. 5. We're more than negotiable and will definitely find a way to settle this quickly and reach an agreement which will satisfy both of us. 6. Negotiations with Akira can only be conducted in a chat room, which you can access using the login details provided below or in the notes (a readme.txt file) in your systems. You should ignore any attempts (such as emails/social media messages, phone calls, etc.) to redirect you to another chat or email address (proton.me is often used by unauthorized individuals) on our behalf. 7. Be careful while working with recovery agencies as they often try to use your cyber incident to stuff their pockets. There are many risks for you to lose money and get nothing in return. If you're indeed interested in our assistance and the services we provide you can reach out to us following simple instructions: 1. Install TOR Browser to get access to our chat room - torproject[.]org/download/. 2. Paste this link - https://akiralkzxzq2dsrzsrvbr2xgbbu2wgsmxryd4csgfameg52n7efvr2id.onion/d/[snip] . 3. Use this code - [snip] - to log into our chat. Keep in mind that the faster you will get in touch, the less damage we cause.
akira_readme_2.txt
Hi friends, Whatever who you are and what your title is, if you're reading this it means the internal infrastructure of your company is fully or partially dead, all your backups - virtual, physical - everything that we managed to reach - are completely removed. Moreover, we have taken a great amount of your corporate data prior to encryption. ATTENTION! Strictly prohibited: - Deleting files with .arika extension; - Replacing or renaming .arika and .akira files; - Using third party software to recover your systems. If you violate these rules, we cannot guarantee a successful recovery. Well, for now let's keep all the tears and resentment to ourselves and try to build a constructive dialogue. We're fully aware of what damage we caused by locking your internal sources. At the moment, you have to know: 1. Dealing with us you will save A LOT due to we are not interested in ruining you financially. We will study in depth your finance, bank & income statements, your savings, investments etc. and present our reasonable demand to you. If you have an active cyber insurance, let us know and we will guide you how to properly use it. Also, dragging out the negotiation process will lead to failing of the deal. 2. Paying us you save your TIME, MONEY, EFFORTS and be back on track within 24 hours approximately. Our decryptor works properly on any files or systems, so you will be able to check it by requesting a test decryption service from the beginning of our conversation. If you decide to recover on your own, keep in mind that you can permanently lose access to some files or accidentally corrupt them - in this case we won't be able to help. 3. The security report or the exclusive first-hand information that you will receive upon reaching an agreement is of great value, since NO full audit of your network will show you the vulnerabilities that we've managed to detect and use in order to get into, identify backup solutions and download your data. 4. As for your data, if we fail to agree, we will try to sell personal information/trade secrets/databases/source codes - generally speaking, everything that has a value on the darkmarket - to multiple threat actors at once. Then all of this will be published in our blog - akiral2iz6a7qgd3ayp3l6yub7xx2uep76idk3u2kollpj5z3z636bad[.]onion. 5. We're more than negotiable and will definitely find a way to settle this quickly and reach an agreement which will satisfy both of us. If you're indeed interested in our assistance and the services we provide you can reach out to us following simple instructions: 1. Install TOR Browser to get access to our chat room - torproject[.]org/download/. 2. Paste this link - https://akiralkzxzq2dsrzsrvbr2xgbbu2wgsmxryd4csgfameg52n7efvr2id.onion/d/[snip] . 3. Use this code - [snip] - to log into our chat. Keep in mind that the faster you will get in touch, the less damage we cause.
akira_readme.txt
Hi friends, Whatever who you are and what your title is if you're reading this it means the internal infrastructure of your company is fully or partially dead, all your backups - virtual, physical - everything that we managed to reach - are completely removed. Moreover, we have taken a great amount of your corporate data prior to encryption. Well, for now let's keep all the tears and resentment to ourselves and try to build a constructive dialogue. We're fully aware of what damage we caused by locking your internal sources. At the moment, you have to know: 1. Dealing with us you will save A LOT due to we are not interested in ruining your financially. We will study in depth your finance, bank & income statements, your savings, investments etc. and present our reasonable demand to you. If you have an active cyber insurance, let us know and we will guide you how to properly use it. Also, dragging out the negotiation process will lead to failing of a deal. 2. Paying us you save your TIME, MONEY, EFFORTS and be back on track within 24 hours approximately. Our decryptor works properly on any files or systems, so you will be able to check it by requesting a test decryption service from the beginning of our conversation. If you decide to recover on your own, keep in mind that you can permanently lose access to some files or accidently corrupt them - in this case we won't be able to help. 3. The security report or the exclusive first-hand information that you will receive upon reaching an agreement is of a great value, since NO full audit of your network will show you the vulnerabilities that we've managed to detect and used in order to get into, identify backup solutions and upload your data. 4. As for your data, if we fail to agree, we will try to sell personal information/trade secrets/databases/source codes - generally speaking, everything that has a value on the darkmarket - to multiple threat actors at ones. Then all of this will be published in our blog - https://akiral2iz6a7qgd3ayp3l6yub7xx2uep76idk3u2kollpj5z3z636bad.onion. 5. We're more than negotiable and will definitely find the way to settle this quickly and reach an agreement which will satisfy both of us. If you're indeed interested in our assistance and the services we provide you can reach out to us following simple instructions: 1. Install TOR Browser to get access to our chat room - https://www.torproject.org/download/. 2. Paste this link - https://akiralkzxzq2dsrzsrvbr2xgbbu2wgsmxryd4csgfameg52n7efvr2id.onion. 3. Use this code - [snip] - to log into our chat. Keep in mind that the faster you will get in touch, the less damage we cause.
Ransom-note text from RansomLook, licensed CC BY 4.0.
Victims (1703)
Search, filter and paginate the victim timeline for Akira. Showing 1501–1600 of 1703.
| Type | Target | Discovered | Country | Business Category | Intel Link | Leak status |
|---|---|---|---|---|---|---|
| Ransomware | Quik Pawn Shop id10939 View details | United States | Retail / E-commerce | — | pending | |
|
Founded in 1978, Quik Pawn Shops™ operates in 15 locations in Montgomery, Birmingham, Mobile and Tuscaloosa areas. We obtained 140Gb of files of this organization and make them available for you soon. There is also a BD with complete information of their customers. Millions of lines with DOB, addresses, ssns, financials transactions and stuff like that. |
||||||
| Ransomware | PEER Consultants id10938 View details | United States | Manufacturing / Engineering | — | pending | |
|
PEER, a full-service environmental engineering consulting firm, provides personalized service to our valuable clients, fosters andmaintains long-term partnerships, and hires passionate and diverse team members. 20Gb of data will be uploaded lots of documents with personal information. Passports, SSNs, driver licenses, confidential agreements, NDAs and so on. |
||||||
| Ransomware | Lancaster id10926 View details | United States | Finance / Legal / Insurance | — | pending | |
|
Lancaster is the premier paint sundry distributor, of North America, South America and the Caribbean. We are going to upload theirdata soon. Many accounting and HR documents, contracts and otherbusiness papers. |
||||||
| Ransomware | Desarrollo De Tecnologia y Sistemas Ltda id10925 View details | Chile | Construction / Real Estate | — | pending | |
|
DTS is a Chilean company founded in 1991, leader in the provisionof services, the development of technologies, and systems integration. 20Gb of zippped data will be available for downloading soon. Lots of NDAs, confidential documents, papers with personal information. |
||||||
| Ransomware | BRAM Auto Group id10879 View details | United States | Public Sector | — | pending | |
|
BRAM Auto Group is one of the largest family owned businesses in the Tri-State area with innovative dealerships throughout NY and NJ. 85GB of files are going to be uploaded here soon. Passports, SSNs, driver licenses, clients information and much of operational data. |
||||||
| Ransomware | Asam id10859 View details | Romania | Manufacturing / Engineering | — | pending | |
|
A reliable partner on the market of spare parts and industrial equipment, ASAM Iasi was founded in 1924 as a Maintenance Workshop.Financial data, information of clients and customers, documents with personal information of employees, HR and other business docs will be available soon. |
||||||
| Ransomware | Nekoosa School District id10844 View details | United States | Education | — | pending | |
|
Nekoosa School District is a public school district located in NEKOOSA, WI. Files of this district will be available for downloading soon. Some personal information of staff and students can be found inside. Addresses, phone numbers, scans of documents and so on. |
||||||
| Ransomware | Sanok Rubber CompanySpólka Akcyjna id10805 View details | Poland | Manufacturing / Engineering | — | pending | |
|
Sanok Rubber Company SA is a European manufacturer in the production of rubber, rubber-metal products and combinations of rubber with other materials. Almost 600GB of their files will be available soon. You can find personal documents, accounting information, many confidential files, information about clients and much more. |
||||||
| Ransomware | Distecna id10719 View details | Argentina | Communication / Marketing | — | pending | |
|
Distecna provides wholesale and distribution of technology products. Operation files of the company will be available for downloading soon. Their financials are represented in great detailed. |
||||||
| Ransomware | TeraGo id10716 View details | Canada | Services | — | pending | |
|
TeraGo provides businesses across Canada with secure cloud services, date recovery, and business grade internet. 45Gb of data willbe uploaded soon. You will find there lots of client agreements with personal information. Many files with financial information and everything that a provider can get from its customers. |
||||||
| Ransomware | AVer Information id10699 View details | Taiwan, Province of China | Communication / Marketing | — | pending | |
|
AVer Information is an education, business communication, and wireless presentation technology manufacturer. we are going to upload about 40Gb of their files. There are some HR files with personal information, numerous signed NDAs, confidential agreements, projects information, legal files and so on. |
||||||
| Ransomware | Celeste id10698 View details | France | Telecommunications | — | pending | |
|
Celeste is focused on providing high speed fiber optic network solutions. We are now focused on providing you with the files takenfrom their network. You can find there operational files, lists of clients with information, some personal information and other different files. We will make them accessible soon. |
||||||
| Ransomware | VCS Observation id10673 View details | Netherlands | Healthcare / Pharma | — | pending | |
|
VCS Observation deploys effective video management technology fortheir clients. With an eye for a sustainable way of working. In public and private spaces and in healthcare. We are going to upload every files we obtained from their servers, so maybe you can find yourselves in their data. Lots of operating files, clients data etc. |
||||||
| Ransomware | Borah Goldstein Altschuler Nahins & Goidel id10640 View details | United States | Communication / Marketing | — | pending | |
|
Borah, Goldstein, Altschuler, Nahins & Goidel, P.C. specializes in residential and commercial properties law. All the info we haveon their clients and projects will be uploaded here. Lot's of documents with pieces of personal information could be found in thefiles. |
||||||
| Ransomware | Sefin id10625 View details | Italy | Communication / Marketing | — | pending | |
|
Sefin has many years' experience in substitutive optical archiving projects, being one of the first companies in Italy proposing document dematerialization and taking full responsibility of the whole process of substitutive archiving. Their files will be available soon. You will find different agreements, non-disclosures, personal documents and other interesting files. |
||||||
| Ransomware | Castilleja School id10601 View details | United States | Education | — | pending | |
|
Castilleja School is an independent school for girls in grades six through twelve. We are going to upload about 10GB of data containing various files containing education process and administrative information. Numerous files with information about students. |
||||||
| Ransomware | Get Away Today id10600 View details | United States | Transportation / Travel / Logistics | — | pending | |
|
Get Away Today is an online travel booking service. We've taken afew databases with personal information of their clients. Thousand of lines. We'll make it available soon. |
||||||
| Ransomware | Safe Plating id10599 View details | United States | Communication / Marketing | — | pending | |
|
Leading Precious and Non-Precious metal plating in Southern California with 8 reel to reel lines as well as a rack and barrel lines. Their files will be available for downloading soon. Many project files, nda and other business docs. |
||||||
| Ransomware | Brazilian Business Park id10580 View details | Brazil | Services | — | pending | |
|
With a complete infrastructure condominium, we offer additional business services, always striving to be ahead of customer needs by and always offering new services. One of their services is to spread personal information of customers. We are going to upload ¬20GB of files of various kinds. Accounting, operational files, projects, agreements and confidential ones, and many others. |
||||||
| Ransomware | Valley TeleCom Group id10578 View details | United States | Telecommunications | — | pending | |
|
Valley TeleCom is a leader in state-of-the-art broadband servicesthroughout service exchanges in Arizona and New Mexico with a wide range of products to fit the varied needs of current and future subscribers. We've obtained about 310GB of their files. Lots ofndas, confidential agreements, customers information, operational files and so on. We'll share everything soon. |
||||||
| Ransomware | Lush id10574 View details | United Kingdom | Communication / Marketing | — | pending | |
|
Founded in 1995 and headquartered in Poole, United Kingdom, Lush is a cosmetic store specializing in the retail of bath bombs, hair products, makeup and more. 110 Gb of their files are prepared for uploading. There are a lot of personal documents especially passports. Accounting, finance, tax, projects, clients information and much more could be found in the archives we are going to share. |
||||||
| Ransomware | ANI Networks id10567 View details | United States | Telecommunications | — | pending | |
|
ANI Networks is a leader in the wholesale, carrier-class telecommunications industry. 30GB of data will be uploaded. There will bemany files with personal information (SSN, DOB and so on), nda, confidential agreements and other operational files. |
||||||
| Ransomware | Toronto Zoo id10565 View details | Canada | Communication / Marketing | — | pending | |
|
The Toronto Zoo is a Canadian zoo and involved in saving wildlifeto ensure the rich diversity of nature for future generations. 133GB of data will be published soon. Lots of NDAs and confidential agreements are represented in the data. Some personal files (driver licenses and so on) can be found in the files. |
||||||
| Ransomware | Dirig Sheet Metal id10546 View details | United States | Manufacturing / Engineering | — | pending | |
|
Dirig Sheet Metal provides comprehensive services for industrial customers, from customized evaluations and recommendations to thefull range of resources required to complete industrial projects. 65GB of data will be available for downloading. You can find detailed information of projects with drawings, contracts, confidential agreements, a bit of personal information, financial data and so on. |
||||||
| Ransomware | Cryopak id10531 View details | United States | Healthcare / Pharma | — | pending | |
|
Cryopak, a subsidiary of Integreon Global (formerly known as TCP Reliable), is a cold chain solutions provider for the pharmaceutical, life sciences, biotech, and food industries. We are preparing a few archives with their data for uploading. You can expect itsoon. There will be a lot of passports, driver licenses, NDAs, confidential agreements etc. |
||||||
| Ransomware | Wilhoit Properties id10521 View details | United States | Communication / Marketing | — | pending | |
|
Wilhoit Properties, Inc. founded in 1967 and headquartered in Springfield, Missouri, is a property management company. We will upload their files soon. There are not many HR files but a lot of incident reports where you can find complete personal information with SSN and other data. Besides that there are a lot of projects and financial data. |
||||||
| Ransomware | Milestone Environmental Contracting id10520 View details | Canada | Communication / Marketing | — | pending | |
|
Milestone Environmental Contracting delivers innovative techniques and design, approach projects in an inclusive, cooperative and transparent way and apply methodical quality management processesto get the job done safely and successfully. Projects, clients, contracts etc. We'll give you the access soon. |
||||||
| Ransomware | Hamilton-Madison House id10470 View details | United States | Healthcare / Pharma | — | pending | |
|
The Hamilton-Madison House is a historic 118-year old settlement house/multi service agency addressing the education, health and social needs of immigrant and ethnic minority communities. As you understand there are so many personal files. We will upload about10Gb of their files and you can find so much interesting in there (passports, birth certificates, IDs etc). |
||||||
| Ransomware | Hydratek id10469 View details | Canada | Communication / Marketing | — | pending | |
|
HydraTek provides specialty consulting engineering services for problems involving water hammer in pipe systems. We will make their data available for you soon. Finance, HR, projects, contract and other files will be represented in archives. |
||||||
| Ransomware | DENHAM the Jeanmaker id10450 View details | Netherlands | Finance / Legal / Insurance | — | pending | |
|
The company manufactures and sells men and womens, outerwear, tops, bottoms and accessories. In the 100Gb data archive we are going to upload you will find HR files with personal documents, client information, some confidential files, finance and accounting information. |
||||||
| Ransomware | Becker Logistics id10438 View details | United States | Transportation / Travel / Logistics | — | pending | |
|
Becker Logistics, headquartered in Glendale Heights, Illinois, and established in 1997, is a transportation management company. Wewill upload about 43gb of files with numerous documents containing personal information, HR, customer info, nda documents, contracts, accounting and financials files. |
||||||
| Ransomware | Bestway Sales id10437 View details | United States | Retail / E-commerce | — | pending | |
|
Bestway Sales a leading manufacturer and marketer of agriculturalsprayers, recently announced the introduction of a line of UTV Skid Mounted Sprayers that are designed for rugged use by farmers,ranchers and commercial spraying operations. Operational data, customer information and other files will be available soon. |
||||||
| Ransomware | TGS Transportation id10436 View details | United States | Transportation / Travel / Logistics | — | pending | |
|
TGS Transportation is an international and domestic intermodal drayage provider. We will upload their files soon. There are financial, HR, customers data with contacts and other operational data. |
||||||
| Ransomware | Premium Guard id10435 View details | United States | Communication / Marketing | — | pending | |
|
Premium Guard Inc. (PGI) specializes in designing, manufacturing,and distributing products for automotive, diesel, powersport, and specialty filter markets. 40GB of files with clients and customers data, financial files, projects, orders, contracts will be available for downloading soon. |
||||||
| Ransomware | Blackburn College id10395 View details | United States | Education | — | pending | |
|
Blackburn College is a private college in Carlinville, Illinois. Blackburn is a federally recognized work college with a student-managed work program, enabling students to gain leadership experience as they manage other students. We are going to upload 30GB ofthe college files. There are many operational files inside, HR files with personal docs of students and employees. |
||||||
| Ransomware | Vincentz Network id10394 View details | Germany | Telecommunications | — | pending | |
|
Vincentz Network is in partnership with different industries in the national and international markets. These include geriatric care, the paint industry, the automotive industry, furniture production, painting technology, technical dealers and ambitious woodworkers. We have 70GB of data that will be uploaded here to share with you. You will find there numerous detailed financial and operational documents. We will also upload a few databases with HR and accounting files. |
||||||
| Ransomware | Viridi id10378 View details | United States | Healthcare / Pharma | — | pending | |
|
Viridi Parente designs and builds fail-safe battery systems for industrial, medical, commercial, municipal, and residential building applications. 70 GB of data contain lots of files with accounting, payment, projects information. There are also many nondisclosure documents, NDA and personal documents of employees. Uploading is coming. |
||||||
| Ransomware | Ito Pallpack Gruppen id10377 View details | Norway | Communication / Marketing | — | pending | |
|
Ito Pallpack Gruppen is a business that has delivered industrial solutions for six decades. With our own production department, they have unique opportunities for testing and pre-installation of the deliveries. 30 GB of files will be uploaded soon. Finance, project, contracts and personal information - all this can be foundinside the archive we are going to share with you. |
||||||
| Ransomware | Van Buren Public Schools id10372 View details | United States | Education | — | pending | |
|
The Van Buren Public Schools is a school district headquartered in Belleville, Michigan. A lot of files with information about students and their parents, HR information, accounting and other files. |
||||||
| Ransomware | Heller Industries id10371 View details | United States | Finance / Legal / Insurance | — | pending | |
|
Heller Industries, Inc. provides reflow technology solutions. TheCompany offers curing systems, semi conductors, and reflow equipment for electronic manufacturers and assemblers. Almost 300gb ofdata will be available soon. There are numerous NDAs with names of widely known corporations, personal documents, finance files and so on. |
||||||
| Ransomware | International Electronic Machines Corp id10295 View details | Communication / Marketing | — | pending | ||
|
On this blessed day we are sharing with you that another company is going to celebrate the New Year with their data on our blog. International Electronic Machines develops, produces and markets innovative imaging, optical and other sensor-based systems for safety and security applications for intelligent transportation system applications. 16Gb of data will be uploaded early next year. Many HR files with personal information, IP, project files and so on. |
||||||
| Ransomware | Nissan Australia id10264 View details | Australia | Communication / Marketing | — | pending | |
|
We've obtained 100 GB of Nissan Australia. They seem not to be very interested in the data, so we will upload it for you within afew days. You will find docs with personal information of their employees in the archives and much other interested stuff like NDAs, projects, information about clients and partners etc. By the way, there is a notice on their website regarding investigation about possible personal information leakage, so we will confirm that with the data uploading. |
||||||
| Ransomware | Nexiga id10044 View details | Communication / Marketing | — | pending | ||
|
Nexiga offers a full service geomarketing to optimize marketing and sales with market and geodata, analyzes and geoinformation systems. 30Gb of their files will be uploaded soon. You can find lots of projects documentation, finance and accounting are presentedwidely. A bit of personal docs with addresses, phones etc. |
||||||
| Ransomware | Hyman Hayes Associates id10028 View details | Healthcare / Pharma | — | pending | ||
|
Hyman Hayes Associates is a full service architecture firm specializing in healthcare, laboratory, and general building design. These guys do not need their data so the files of this company willbe available for downloading soon. There are many files with project information, a bit financials and contracts, other operational docs. |
||||||
| Ransomware | SmartWave Technologies id9978 View details | IT | — | pending | ||
|
SmartWave Technologies is a vertically integrated team of engineers, scientists and technicians that provide design-through-manufacturing capability. These guys don't care about their 65 GB of data containing confidential personal information, lots of HR docs,even medical information. Clients, projects and accounting filesare represented as well. We'll provide access to the files soon. |
||||||
| Ransomware | Mitrani Caballero Ojam & Ruiz Moreno - Abogados id9977 View details | Argentina | Finance / Legal / Insurance | — | pending | |
|
Mitrani Caballero Ojam & Ruiz Moreno Abogados is a legal firm that assists the most important companies in Argentina in their critical or most important legal needs. Seems like these lawyers willneed some legal assistance. Expect their data here in a few days. |
||||||
| Ransomware | The Teaching Company, LLC id9976 View details | Finance / Legal / Insurance | — | pending | ||
|
The Teaching Company, doing business as The Great Courses, provides courses on digital versatile disc, audio compact disc, and other formats. 60Gb of data will be uploaded. Clients information, lots of accounting and finance data, courses info and even a holiday video! We will update soon. |
||||||
| Ransomware | MSD Information technology id9961 View details | IT | — | pending | ||
|
MSD is a proven Managed I.T. Solutions provider & Specialized Software Provider. 47 of data will be available here soon. Some of personal information, finance, clients docs are inside. |
||||||
| Ransomware | Goiasa id9960 View details | Communication / Marketing | — | pending | ||
|
Goiasa produces and supplies renewable energy at the lowest cost,with excellence in service and in harmony with the community andthe environment. A lot of information about their projects, sales, HR - 47GB. A few SQLs with more than 26 million lines inside. |
||||||
| Ransomware | Studio MF id9957 View details | Services | — | pending | ||
|
Studio MF provides solutions for continued dedication to the start-up and innovative PMI, supporting the growth and development ofits own business project. We'll share 10Gb of their data soon asthese MFs don't care of it. You can find many files with clientsinformation and other business data. |
||||||
| Ransomware | Tasteful Selections id9890 View details | Agriculture / Food | — | pending | ||
|
Tasteful Selections is a joint venture of RPE, CSS Farms and Plover River Farms Alliance, Inc. They are a vertically integrated grower, shipper, marketer of premium specialty potatoes. 410 Gb of their data will be available here soon. Lots of personal information (SSN and passports. Mostly employees), confidential agreements, clients information and so on. |
||||||
| Ransomware | Compass Group Italia id9875 View details | Italy | Healthcare / Pharma | — | pending | |
|
Compass Group is a company based in Italia. Compass Group offers a wide range of services for companies, schools, hospitals, social and health facilities, business premises, sports and leisure. Data of this Italian giant will be published. There are so many files in the 107Gb of data we've taken from them. Finance, HR, legal, personal and so on. |
||||||
| Ransomware | Aqualectra Holdings id9874 View details | Energy | — | pending | ||
|
Aqualectra is Curacao’s government owned utilities company that produces and distributes water and electricity to over 80.000 households and companies. Data fo this company will be available for downloading soon. Operational, business files, lots of payment files etc. |
||||||
| Ransomware | Midea Carrier id9842 View details | Chile | Communication / Marketing | — | pending | |
|
Midea Carrier is the result of the union of two global market giants: Midea, a leader in the production of household appliances, and Carrier, a leader in air conditioning and founded by the inventor of air conditioning – Willis Carrier. In 2011, the two companies formed a joint venture to produce and distribute products in Brazil, Argentina and Chile, thus becoming the largest manufacturer of air conditioning equipment in Latin America. 40Gb of data will be released soon. You can find there international contract, agreements, legal documents, HR files etc. |
||||||
| Ransomware | Getrix id9839 View details | Italy | Construction / Real Estate | — | pending | |
|
Getrix is the most used real estate management software in Italy.Client information, contracts, real estate and building information. Everything is about 10Gb. The archive will be available soon. |
||||||
| Ransomware | Bern Hotels & Resorts id9834 View details | Panama | Hospitality / Food & Beverage / Tourism | — | pending | |
|
Bern Hotels & Resorts is one of Panama's biggest hotel groups. A dozen GB of operational files with detailed personal information will be released soon. Let us know in comment section if you are interested in passport and payment information. |
||||||
| Ransomware | Iptor id9816 View details | Communication / Marketing | — | pending | ||
|
Iptor provides fully integrated enterprise solutions, with highlyadaptable and robust software backed by world-class support fromdistribution and supply chain experts. 20Gb of data will be uploaded. You can find there many confidential agreements, contracts and other operational files. |
||||||
| Ransomware | Bauwerk Boen Group id9805 View details | Communication / Marketing | — | pending | ||
|
Bauwerk Boen Group is, according to the assessment of the BauwerkBoen management, Europe's leading developer, manufacturer and supplier of parquet flooring in the premium segment as well as the second-largest market participant in wood flooring. 40Gb of theirdata will be available here soon for downloading. Lots of contracts, agreement (including confidential ones), employee files and so on. |
||||||
| Ransomware | Lydall, Inc. id9785 View details | Communication / Marketing | — | pending | ||
|
Lydall is a New York Stock Exchange listed company, headquarteredin Manchester, Connecticut with global manufacturing operations producing specialty engineered products for the thermal/acoustical and filtration/separation markets. We are going to upload a good amount of their projects files with drawing and everything. There are many HR files with detailed information, finance, accounting in there. |
||||||
| Ransomware | Alpura id9783 View details | Mexico | Communication / Marketing | — | pending | |
|
Alpura, the leading milk producer in Mexico, taking care of everydetail and with the most advanced technology, offers you the best dairy products. You can get to know this company! We'll upload almost 20Gb of their data. There are up-to-date files for the last 3 years in the archive. |
||||||
| Ransomware | Servicio Móvil id9780 View details | Communication / Marketing | — | pending | ||
|
At Servicio Móvil is a Spanish national leader in integral logistics services, information management and business processes. 114Gb of their data will be available here. Contracts, project, agreements, clients information and much of financial data is represented in the files. |
||||||
| Ransomware | Teleflora id9779 View details | Canada | Finance / Legal / Insurance | — | pending | |
|
Teleflora is an online flower company headquartered in Los Angeles, California, Teleflora has over 10,000 member florists throughout the U.S. and Canada, with an additional 20,000 affiliated florists outside North America. We'll share a couple of dozens Gbs ofthis company files. Operational, financial docs, some HR files etc. |
||||||
| Ransomware | Legacy Mail Management id9721 View details | Services | — | pending | ||
|
The company categorized under Mailing and Shipping Services. It was established in 2016 and incorporated in IA. The data we got from them will be uploaded here within this week. There are more than 40000 files will be available for downloading and studying. Please wait for updates. |
||||||
| Ransomware | Alspec id9673 View details | Energy | — | pending | ||
|
Alspec offers is a versatile Servery window that is easy to fabricate and install. Almost 20Gb of Alspec's data will be uploaded here as there is no interest in it from them. |
||||||
| Ransomware | Custom Engineering &Fabrication, Inc. id9672 View details | Manufacturing / Engineering | — | pending | ||
|
Custom Engineering & Fabrication is a leading provider of manufacturing solutions to a wide variety of industries, including asphalt, scrap recycling, steel, glass, foam, exterior doors, wood, mineral wool, and paper. These tricky guys lost about 700Gb of their data and don't want it back. Many business docs with personal information there are in the archives. We will share the files here with you soon. |
||||||
| Ransomware | IQ Supply Solutions id9671 View details | Services | — | pending | ||
|
IQ Supply Solutions was founded in November 2017. As a women owned company we have expanded our business by being dedicated to giving our customers the very best service with a focus on detail, dependability and uniqueness. A few Gb of data including personal information will be uploaded soon. The women decided to show their real dedication to their clients. |
||||||
| Ransomware | Metro MPLS id9609 View details | Panama | IT | — | pending | |
|
Metro MPLS is a company created to provide data transport services in the Republic of Panama based on a metropolitan fiber optic network using SDH (Synchronous Digital Hierarchy) and Metro Ethernet technology, enabling them to deliver multiple services to customers. Lots of financial, personal and project info will be available soon. |
||||||
| Ransomware | ATC SA id9605 View details | Communication / Marketing | — | pending | ||
|
ATC is an international software company. For more than 25 years,the company provides innovative solutions for the Central Government, Media, Banking, Distribution, Manufacturing and Services. Their corporate data will be available soon. |
||||||
| Ransomware | SALUS Controls id9469 View details | Manufacturing / Engineering | — | pending | ||
|
SALUS Controls is a company that operates in the Industrial Automation industry. 40 GB of data will be available here soon. Personal documents, operational information, contracts, agreements... There is much to look at. |
||||||
| Ransomware | Battle Motors (CraneCarrier, CCC) id9468 View details | Finance / Legal / Insurance | — | pending | ||
|
Battle Motors is a leader in the vocational truck industry, providing custom, severe-service chassis under Battle Motors Engineered Chassis brands. Their data of 50Gb size will be available for downloading here soon. Operational, business agreements, contracts, accounting data etc are in the archive waiting for uploading. |
||||||
| Ransomware | City Furniture Hire id9466 View details | Public Sector | — | pending | ||
|
City Furniture Hire Limited provides quality rental furniture to meet your individual needs whether it be for events, exhibitions,conferences or your office. Everyone interested in data of the company will have the access soon. Wait for an update. |
||||||
| Ransomware | Autocommerce id9465 View details | Slovenia | Retail / E-commerce | — | pending | |
|
The company Autocommerce, d.o.o. is a company that represents theMercedes-Benz brand on the Slovenian car market. We will organize an exhibition hall with the data we exfiltrated from them for everyone interested soon (about 10Gb DB). Welcome everyone! |
||||||
| Ransomware | Simons Petroleum/Maxum Petroleum/Pilot Thomas Logistics id9462 View details | Energy | — | pending | ||
|
We've obtained about 70Gb data of a group of companies in logistics/energy providing fields named Simons Petroleum, Maxum Petroleum and Pilot Thomas Logistics. Lots of operating files, confidential docs, personal information of employees, NDAs and so on. I'll make an update soon. |
||||||
| Ransomware | Michael Garron Hospital id9444 View details | Canada | Healthcare / Pharma | — | pending | |
|
Nestled in the heart of East Toronto, Michael Garron Hospital (MGH), a division of Toronto East Health Network, is a vibrant community teaching hospital serving one of Canada’s most diverse communities. We have taken 882k files or 775 GB from their network. You will find lots of confidential information very soon. Stay tuned. |
||||||
| Ransomware | BioPower SustainableEnergy Corporation id9426 View details | Energy | — | pending | ||
|
BioPower Sustainable Energy Corporation is a Canadian manufacturer of commercial and residential grade wood pellets. You will be able to download their data here soon. Lots of operation documents, internal correspondence, employee information, vendors and companies data. Everything is about 20GB. |
||||||
| Ransomware | BITZER id9425 View details | Communication / Marketing | — | pending | ||
|
BITZER manufactures reciprocating compressors, screw compressors,scroll compressors, condensing units, heat exchangers and pressure vessels. We are going to upload 40GB of data. Contacts, agreements and other interested docs of a big manufacturer are coming soon. |
||||||
| Ransomware | Patriotisk Selskab id9301 View details | Denmark | Finance / Legal / Insurance | — | pending | |
|
Patriotisk Selskab provides nationwide advice to professional agricultural companies within, among other things, finance, audit, law, livestock, environment and plant breeding. We will upload thedata we have from them soon. You will find European personal documents, confidential agreements and other papers inside. |
||||||
| Ransomware | Freeman Johnson id9269 View details | United Kingdom | Finance / Legal / Insurance | — | pending | |
|
Freeman Johnson Solicitors are based in County Durham and North Yorkshire. They have been providing legal services to the community for more than 150 years. More than 200Gb of the community data will be available for downloading. Working on it. |
||||||
| Ransomware | Stanford University id9241 View details | Education | — | pending | ||
|
Stanford University is one of the world's leading research universities. Stanford is known for its entrepreneurial character, drawn from the legacy of its founders, Jane and Leland Stanford, and its relationship to Silicon Valley. Soon the university will be also known for 430Gb of internal data leaked online. Private information, confidential documents etc. Who is interested - contact us in messages section. |
||||||
| Ransomware | CMC Group id9207 View details | Construction / Real Estate | — | pending | ||
|
CMC Group is a fully integrated real estate development company focused on luxury residential, commercial and retail properties. 270Gb of data will be available. Very detailed clients informationincluding a DB (addresses, phone numbers, passports/ssns scans etc), confidential documents, contracts projects... And enormous number of accounting files are going to be uploaded. |
||||||
| Ransomware | Royal College of Physicians and Surgeonsof Glasgow id9149 View details | United Kingdom | Education | — | pending | |
|
The Royal College of Physicians and Surgeons of Glasgow, is an institute of physicians and surgeons in Glasgow, Scotland. No one from this college is interested to save personal data of students and employees. Sad but true. You will have the opportunity to download the files (800Gb) soon. |
||||||
| Ransomware | Southland IntegratedServices id9148 View details | Services | — | pending | ||
|
Southland Integrated Services provides a variety of health and social services such as primary care, behavioral health, dental services, and more. All the 40Gb we have will be uploaded soon. Medical records, confidential docs, passports may be found in there. |
||||||
| Ransomware | Protector Fire Services id9147 View details | Australia | Communication / Marketing | — | pending | |
|
PROTECTOR FIRE SERVICES PTY LTD is a Western Australian owned andmanaged company, with a team of trained specialist personnel fully committed to the fire and safety requirements of the commercial & industrial sectors. We saw no interest from them in the incident, so the data will be available for everyone. There are some databases as a bonus. |
||||||
| Ransomware | Visionary Integration Professionals id9142 View details | Services | — | pending | ||
|
Visionary Integration Professionals (VIP) is a technology firm providing tech-enabled business solutions, IT managed services, andmanagement consulting. Inside the 80Gb archive we are going to upload you can find lots of passports, ssns, dls and other id and personal employee information. There are also tons of accounting documents, contracts and confidential files. |
||||||
| Ransomware | Inventum Øst id9141 View details | Norway | Other | — | pending | |
|
Inventum Øst AS is a supplier that supplies "Everything for the office" to companies all over Eastern Norway. We will make available 20Gb of this company data soon. May be even some Norwegians could find something interested there about local companies. |
||||||
| Ransomware | QuadraNet Enterprises id9139 View details | Communication / Marketing | — | pending | ||
|
QuadraNet, since 2001, has been a leader in hosting and data center solutions as a telecommunications provider in Los Angeles and the surrounding areas. They don't want their data back so 640Gb will be uploaded here soon. Passports, ssns and everything we loveis inside. |
||||||
| Ransomware | Healix id8991 View details | Healthcare / Pharma | — | pending | ||
|
Healix provides physician office-based infusion services. We obtained 642Gb of this company data and there is a probability that the files will be available here for downloading next week. Complete personal information set with medical records of thousands patients could be found in the data. Medical staff personal info is presented as well, Wait for the update. |
||||||
| Ransomware | Terwilliger Land Survey Engineers id8968 View details | Services | — | pending | ||
|
Terwilliger Land Survey Engineers offer drone, land survey, and engineering services across multiple business sectors. We will share their 25Gb data here as they don't care about it. You can findthere much of projects information, court documents and other files. |
||||||
| Ransomware | Gruskin Group id8956 View details | Construction / Real Estate | — | pending | ||
|
Gruskin Group is an integrated design firm that builds unified brand experiences through architecture, brand development, visual communications, web/interactive, industrial design, interior design, strategic consulting, and sustainable design. They've lost 37 Gb of data and we wanted help them but they refused. As a result,their files (accounting, HR, projects and so on) will be uploaded here and available for downloading. |
||||||
| Ransomware | Vertical Development id8899 View details | IT | — | pending | ||
|
Vertical Development has helped companies design parts catalogs for over 30 years, both in paper and digital formats. Numerous contracts and agreement, NDAs, confidential docs and employee information of the company will be available soon. |
||||||
| Ransomware | Civic San Diego id8876 View details | Communication / Marketing | — | pending | ||
|
CCDC is the public, non-profit corporation created by the City ofSan Diego to staff and implement Downtown redevelopment projectsand programs. Almost 200Gb of files. Confidential documents, personal information etc. Uploading soon. |
||||||
| Ransomware | The Polish AmericanAssociation id8873 View details | Poland | NGOs / Associations | — | pending | |
|
Have you ever been interested in the US-Poland friendship details? The Polish American Association is ready to share it's internallive secrets. 185GB SQL will be available for downloading soon. Who cares of immigrants, right? |
||||||
| Ransomware | CLX Logistics id8747 View details | Transportation / Travel / Logistics | — | pending | ||
|
CLX Logistics, LLC is a global 3PL provider of transportation management systems, managed services, supply chain consulting and intermodal transportation services for a broad base of industry verticals. We almost finished their data transportation and will upload 26GB of their data soon. Tons of business information: clients, personal information, a few confidential docs. We will update. |
||||||
| Ransomware | Glovis America id8676 View details | Finance / Legal / Insurance | — | pending | ||
|
The company offers technical jobs, human resources support roles,safety supervisors and managers, or strategic management and leadership positions. 10 GB of data will be available for downloading here soon. Some projects info, personal employee documents, financial and accounting papers. |
||||||
| Ransomware | Fuji Seal International (US branch) id8674 View details | Communication / Marketing | — | pending | ||
|
Fuji Seal Group provides shrink sleeve labels, self-adhesive labels, spouted pouches and label-application systems. The US branch of the company has been recently breached and the management refuses to negotiate. So we are informing you about the upcoming uploading of 30GB size data here. There are numerous confidential docs, contracts, agreements etc. |
||||||
| Ransomware | American Steel & Aluminum id8619 View details | Manufacturing / Engineering | — | pending | ||
|
American Steel & Aluminum Co., Inc. was founded in 1967 with 3 employees, a small fabrication shop, and some big dreams for the future. Today they have 70 employees and 70Gb of data that will be uploaded here. There is much project information and financial docs. Employee information is also will be available. |
||||||
| Ransomware | Accuride id8600 View details | India | Finance / Legal / Insurance | — | pending | |
|
Accuride, founded in 1986 and headquartered in Evansville, Indiana, manufactures and supplies vehicle components. Almost terabyte of files will be available for you. Of course there will be many interesting ones. For instance, engineering drawings and photo for TESLA, Mirelli and other sound names. Besides that many confidential documents, personal information of employees with private photo and docs, medical information etc. And finally there is muchinfo about clients and their orders and projects with detailed description (drawings, 3D models). Should I note tons of financialand accounting information? Wait for the release. |
||||||
| Ransomware | Energy One id8512 View details | United Kingdom | Energy | — | pending | |
|
Energy One Limited provides various software products and services to wholesale energy, environmental, and carbon trading markets in the Asia-Pacific, the United Kingdom, and Europe. The company will provide you all with its 77GB data where you will find information on their projects with big business names, financial documents, contracts, and HR information as well. |
||||||
| Ransomware | New York & Company id8405 View details | Communication / Marketing | — | pending | ||
|
New York & Company is a leading specialty manufacturer and retailer of women's fashion apparel and accessories providing women with modern, wear to work solutions that are multi-functional at affordable prices. The company's website has a list of its best deals, with more to be added soon. But I wouldn't say it will be one of the best deals for them. They have broken off the dialog, and at this point we have no choice but to post their corporate fileshere for everyone to see. Stand by for the release. |
||||||
| Ransomware | Children's Home of Wyoming Conference id8404 View details | Healthcare / Pharma | — | pending | ||
|
The Children's Home is a family-centered agency with 16 programs,nearly 300 employees and more than 8 locations. CHWC offer six areas of assistance:Behavioral & Emotional Health, Therapeutic Intervention & Clinical Treatment, Leadership & Development, Physical Health & Wellness, Community Outreach & Civic Engagement, Academic Success & Career Readiness.More than 70Gb personal and company documentation data. |
||||||