Ransomware Group intelligence
Incransom
ActiveTrack Incransom with 986 published victims and 7 known leak locations in a single intelligence view.
Overview
Incransom is tracked by Breach House as a ransomware group with 986 published victims.
United States is currently the most targeted country in this dataset.
7 known leak locations are currently associated with this group.
Leak Status Distribution
- Leaked 281 28.5%
- Pending 702 71.2%
- Deleted 3 0.3%
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (7)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 6 | Onion service | Up checked 4h ago | incblog6qu4y4mm4zvw5nrmue6qbwtgjsxpw6b7ixzssu36tsajldoad.onion |
| Leak location 7 | Onion service | Up checked 4h ago | incbacg6bfwtrlzwdbqc55gsfl763s3twdtwhp27dzuik6s6rwdcityd.onion |
| Leak location 2 | Onion service | Down checked 4h ago | incbackrlasjesgpfu5brktfjknbqoahe2hhmqfhasc5fb56mtukn4yd.onion |
| Leak location 5 | Web location | Down checked 4h ago | incapt.su |
| Leak location 1 | Onion service | Down checked 4h ago | incblog7vmuq7rktic73r4ha4j757m3ptym37tyvifzp2roedyyzzxid.onion |
| Leak location 4 | Web location | Down checked 4h ago | incapt.blog |
| Leak location 3 | Web location | Down checked 4h ago | incbackend.top |
Top Activity Sectors (18)
- Communication / Marketing 173
- Healthcare / Pharma 116
- Finance / Legal / Insurance 114
- Services 81
- Manufacturing / Engineering 76
- Education 58
- Not identified 56
- Construction / Real Estate 53
- Public Sector 45
- IT 40
- Retail / E-commerce 32
- Transportation / Travel / Logistics 24
- NGOs / Associations 24
- Energy 22
- Hospitality / Food & Beverage / Tourism 17
- Agriculture / Food 14
- Telecommunications 11
- null 2
Typical Attacks (35)
▼How Incransom typically operates, as attributed by MITRE ATT&CK v20.0. Attributed via INC Ransom, INC Ransomware.
-
T1588.002 Tool Resource Development
What they do: INC Ransom has acquired and used several tools including MegaSync, AnyDesk, esentutl and PsExec.
What that means: Adversaries may buy, steal, or download software tools that can be used during targeting.
-
What they do: INC Ransom has used compromised valid accounts for access to victim environments.
What that means: Adversaries may obtain and abuse credentials of existing accounts as a means of gaining Initial Access, Persistence, Privilege Escalation, or Defense Evasion.
-
T1190 Exploit Public-Facing Application Initial Access
What they do: INC Ransom has exploited known vulnerabilities including CVE-2023-3519 in Citrix NetScaler for initial access.
What that means: Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.
-
T1566 Phishing Initial Access
What they do: INC Ransom has used phishing to gain initial access.
What that means: Adversaries may send phishing messages to gain access to victim systems.
-
T1047 Windows Management Instrumentation Execution
What they do: INC Ransom has used WMIC to deploy ransomware.
What that means: Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads.
-
T1059.003 Windows Command Shell Execution
What they do: INC Ransom has used `cmd.exe` to launch malicious payloads.
What that means: Adversaries may abuse the Windows command shell for execution.
-
T1106 Native API Execution
What they do: INC Ransomware can use the API `DeviceIoControl` to resize the allocated space for and cause the deletion of volume shadow copy snapshots.
What that means: Adversaries may interact with the native OS application programming interface (API) to execute behaviors.
-
T1569.002 Service Execution Execution
What they do: INC Ransom has run a file encryption executable via `Service Control Manager/7045;winupd,%SystemRoot%\winupd.exe,user mode service,demand start,LocalSystem`.
What that means: Adversaries may abuse the Windows service control manager to execute malicious commands or payloads.
-
T1036.005 Match Legitimate Resource Name or Location Stealth
What they do: INC Ransom has named a PsExec executable winupd to mimic a legitimate Windows update file.
What that means: Adversaries may match or approximate the name or location of legitimate files, Registry keys, or other resources when naming/placing them.
-
T1070.004 File Deletion Stealth
What they do: INC Ransom has uninstalled tools from compromised endpoints after use.
What that means: Adversaries may delete files left behind by the actions of their intrusion activity.
-
T1140 Deobfuscate/Decode Files or Information Stealth
What they do: INC Ransomware can run `CryptStringToBinaryA` to decrypt base64 content containing its ransom note.
What that means: Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis.
-
T1685 Disable or Modify Tools Defense Impairment
What they do: INC Ransom can use SystemSettingsAdminFlows.exe, a native Windows utility, to disable Windows Defender.
What that means: Adversaries may disable, degrade, or tamper with security tools or applications (e.g., endpoint detection and response (EDR) tools, intrusion detection systems (IDS), antivirus, logging agents, sensors, etc.) to impair or reduce visibility of defensive capabilities.
-
T1046 Network Service Discovery Discovery
What they do: INC Ransom has used NETSCAN.EXE for internal reconnaissance.
What that means: Adversaries may attempt to get a listing of services running on remote hosts and local network infrastructure devices, including those that may be vulnerable to remote software exploitation.
-
T1049 System Network Connections Discovery Discovery
What they do: INC Ransom has used RDP to test network connections.
What that means: Adversaries may attempt to get a listing of network connections to or from the compromised system they are currently accessing or from remote systems by querying for information over the network.
-
T1057 Process Discovery Discovery
What they do: INC Ransomware can use the Microsoft Win32 Restart Manager to kill processes with a specific handle or that are accessing resources it wants to encrypt.
What that means: Adversaries may attempt to get information about running processes on a system.
-
T1069.002 Domain Groups Discovery
What they do: INC Ransom has enumerated domain groups on targeted hosts.
What that means: Adversaries may attempt to find domain-level groups and permission settings.
-
T1083 File and Directory Discovery Discovery
What they do: INC Ransomware can receive command line arguments to encrypt specific files and directories.
What that means: Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system.
-
T1087.002 Domain Account Discovery
What they do: INC Ransom has scanned for domain admin accounts in compromised environments.
What that means: Adversaries may attempt to get a listing of domain accounts.
-
T1120 Peripheral Device Discovery Discovery
What they do: INC Ransomware can identify external USB and hard drives for encryption and printers to print ransom notes.
What that means: Adversaries may attempt to gather information about attached peripheral devices and components connected to a computer system.
-
T1135 Network Share Discovery Discovery
What they do: INC Ransom has used Internet Explorer to view folders on other systems.
What that means: Adversaries may look for folders and drives shared on remote systems as a means of identifying sources of information to gather as a precursor for Collection and to identify potential systems of interest for Lateral Movement.
-
T1652 Device Driver Discovery Discovery
What they do: INC Ransomware can verify the presence of specific drivers on compromised hosts including Microsoft Print to PDF and Microsoft XPS Document Writer.
What that means: Adversaries may attempt to enumerate local device drivers on a victim host.
-
T1680 Local Storage Discovery Discovery
What they do: INC Ransomware can discover and mount hidden drives to encrypt them.
What that means: Adversaries may enumerate local drives, disks, and/or volumes and their attributes like total or free space and volume serial number.
-
T1021.001 Remote Desktop Protocol Lateral Movement
What they do: INC Ransom has used RDP to move laterally.
What that means: Adversaries may use Valid Accounts to log into a computer using the Remote Desktop Protocol (RDP).
-
T1570 Lateral Tool Transfer Lateral Movement
What they do: INC Ransom has used a rapid succession of copy commands to install a file encryption executable across multiple endpoints within compromised infrastructure.
What that means: Adversaries may transfer tools or other files between systems in a compromised environment.
-
T1074 Data Staged Collection
What they do: INC Ransom has staged data on compromised hosts prior to exfiltration.
What that means: Adversaries may stage collected data in a central location or directory prior to Exfiltration.
-
T1560.001 Archive via Utility Collection
What they do: INC Ransom has used 7-Zip and WinRAR to archive collected data prior to exfiltration.
What that means: Adversaries may use utilities to compress and/or encrypt collected data prior to exfiltration.
-
T1071 Application Layer Protocol Command and Control
What they do: INC Ransom has used valid accounts over RDP to connect to targeted systems.
What that means: Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic.
-
T1105 Ingress Tool Transfer Command and Control
What they do: INC Ransom has downloaded tools to compromised servers including Advanced IP Scanner.
What that means: Adversaries may transfer tools or other files from an external system into a compromised environment.
-
T1219 Remote Access Tools Command and Control
What they do: INC Ransom has used AnyDesk and PuTTY on compromised systems.
What that means: An adversary may use legitimate remote access tools to establish an interactive command and control channel within a network.
-
T1537 Transfer Data to Cloud Account Exfiltration
What they do: INC Ransom has used Megasync to exfiltrate data to the cloud.
What that means: Adversaries may exfiltrate data by transferring the data, including through sharing/syncing and creating backups of cloud environments, to another cloud account they control on the same service.
-
T1486 Data Encrypted for Impact Impact
What they do: INC Ransom has used INC Ransomware to encrypt victim's data.
What that means: Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources.
-
T1489 Service Stop Impact
What they do: INC Ransomware can issue a command to kill a process on compromised hosts.
What that means: Adversaries may stop or disable services on a system to render those services unavailable to legitimate users.
-
T1490 Inhibit System Recovery Impact
What they do: INC Ransomware can delete volume shadow copy backups from victim machines.
What that means: Adversaries may delete or remove built-in data and turn off services designed to aid in the recovery of a corrupted system to prevent recovery.
-
T1491.001 Internal Defacement Impact
What they do: INC Ransomware has the ability to change the background wallpaper image to display the ransom note.
What that means: An adversary may deface systems internal to an organization in an attempt to intimidate or mislead users, thus discrediting the integrity of the systems.
-
T1657 Financial Theft Impact
What they do: INC Ransom has stolen and encrypted victim's data in order to extort payment for keeping it private or decrypting it.
What that means: Adversaries may steal monetary resources from targets through extortion, social engineering, technical theft, or other methods aimed at their own financial gain at the expense of the availability of these resources for victims.
Tools Observed (11)
▼Software Incransom has been seen using, grouped by what it is used for. Legitimate administration tools appear here because these actors routinely abuse them — presence in this list is not itself malicious.
Discovery
Discovery & enumeration
Exfiltration
LOLBAS (living-off-the-land binaries)
Tool data from Ransomware Tool Matrix by BushidoUK, licensed CC BY 4.0. Grouped by purpose and matched to this group by Breach House.
Victims (986)
Search, filter and paginate the victim timeline for Incransom. Showing 401–500 of 986.
| Type | Target | Discovered | Country | Business Category | Intel Link | Leak status |
|---|---|---|---|---|---|---|
| Ransomware | beycelik id24749 View details | Türkiye | Manufacturing / Engineering | leaked | ||
|
Beyçelik Gestamp Otomotiv Sanayi A.Ş. is an international company that designs, develops, and produces metal parts for the automotive supply industry. They focus on creating innovative products to support safer and lighter automotive designs, thereby enhancing human safety, reducing energy consumption, and contributing to environmental protection. The company serves clients in the automotive sector, emphasizing quality and advanced technological solutions. Their commitment to sustainability and ethical practices reflects in their operational policies and community contributions. |
||||||
| Ransomware | rainbowtel.net id24674 View details | United States | Communication / Marketing | leaked | ||
|
Rainbow Communications offers reliable high-speed internet and phone services primarily in Northeast Kansas. They cater to both residential and business clients, providing essential connectivity solutions. We downloaded 200GB of selected information (accounting, HR, customer data, as well as confidential information). |
||||||
| Ransomware | sandiegowarroom.com id24613 View details | United States | Services | pending | ||
|
The Westin San Diego is a hospitality establishment that offers specialized meeting spaces known as War Rooms. These facilities feature executive-style conference seating, advanced technology, and secure environments designed for legal professionals and businesses. The venue provides state-of-the-art amenities to support strategic planning, operational performance, and collaborative events. With dedicated meeting spaces and personalized service, The Westin San Diego creates an optimal environment for professional gatherings, strategy sessions, and business collaborations in the hospitality sector. Employees: 50 Revenue: $5 Million Industry: Hospitality Phone Number: (619) 338-3611 |
||||||
| Ransomware | Foxconn Interconnect Technology Limited (FIT) id24608 View details | Taiwan, Province of China | IT | pending | ||
|
Foxconn Interconnect Technology Limited (FIT) focuses on the development, manufacturing, and marketing of electronic and optoelectronic connectors, antennas, acoustic components, cables, and modules for applications in computers, communication equipment, consumer electronics, automobiles, industrial and green energy field products. With offices and manufacturing sites located in Asia, the Americas, and Europe, FIT is a global leader in the supply of precision components. |
||||||
| Ransomware | hohmartin.org id24607 View details | United States | Communication / Marketing | pending | ||
|
House of Hope of Martin County provides a range of services aimed at supporting individuals and families in need, including food assistance, financial aid, housing support, and educational programs. Their initiatives, such as the Client Choice Pantry and various community resources, serve over 30,000 individuals each month. The organization also offers volunteer opportunities and encourages community involvement through events like charity tournaments. Their mission is to ensure a dignified process for those seeking help while effectively managing donations to support their programs. Employees: 50 Revenue: $5 Million Industry: Non-Profit & Charitable Organizations Phone Number: (772) 286-4673 |
||||||
| Ransomware | YAZAKI Corp id24532 View details | Japan | Communication / Marketing | pending | ||
|
The Yazaki Group is a global company best known for being a leading supplier of automotive wire harnesses, but it also produces other products like environmental systems and instrumentation equipment. The company's focus is on providing quality products and services to its customers, with a global presence that allows for responsive, just-in-time delivery. However, the company has also faced legal issues, including a significant fine for its role in an automotive parts price-fixing scheme. The data size is at 350 GB. WE HAS COLLECTED SUCH DATA AS: - Confidential documents - Clients Data - NDA - Financial data - Operations - Corporate data - HR data (including employee medical records) - Business Agreements - Development - Drawings - Technological production requirements and all documentation for the production of parts for BMW, NISSAN, SCANIA and many other global brands And a lot of other VERY IMPORTANT information! |
||||||
| Ransomware | www.mylawcompany.com id24486 View details | United States | Finance / Legal / Insurance | pending | ||
|
700gb 4,500 cases, personal data, passports, driver's licenses, medical data, medical card |
||||||
| Ransomware | bennett.edu id24466 View details | United States | Education | pending | ||
|
Bennett College is a liberal arts college located in North Carolina, dedicated to empowering women through education. The institution offers a unique microcollege model that emphasizes personal attention and support for students, including high school, veterans, and first-generation college students. With a focus on equity in various fields such as health, education, and the environment, Bennett College prepares its students for successful careers and global citizenship. The college is recognized for its strong retention rates and innovative academic programs, including a Minimester model that enhances learning accessibility. Employees: 200 Revenue: $20.9 Million Industry: Colleges & Universities Phone Number: (336) 517-2100 |
||||||
| Ransomware | bisonfamilymedical.com id24397 View details | Canada | Healthcare / Pharma | pending | ||
|
Bison Family Medical Clinics provides high-quality medical care through family practice and walk-in services across four locations in Winnipeg. Their team offers a diverse range of medical services, including women's health, minor procedures, and low-risk obstetrics. Emphasizing patient convenience, they also provide online booking and secure virtual care options. The clinics prioritize the needs of their patients, ensuring they receive care and respect in a clean and friendly environment. Employees: 10 Revenue: $5 Million Industry: Hospitals & Physicians Clinics Phone Number: (204) 275-1500 |
||||||
| Ransomware | instyle.com.au id24396 View details | Australia | Healthcare / Pharma | pending | ||
|
INSTYLE is a leading supplier of design-driven, commercial-quality textiles and vinyls for interiors, including office, hospitality, healthcare, public building, transport, public space and high-end residential interiors. Established by Michael Fitzsimons in 1987, INSTYLE is well known today for its stylish, contemporary and sophisticated textile collections, which are designed and developed to high technical standards by its inhouse design studio and produced by leading manufacturers in Australia, New Zealand, USA and Europe. INSTYLE offers an extensive collection: including the benchmark LIFE (Low Impact For the Environment) Textiles® collection and High Performance indoor + outdoor Textiles and Vinyls, which are available across a broad range of price levels for use in upholstery, workstation, screen and wall panelling applications. Employees: 50 Revenue: $6.6 Million Industry: Manufacturing-Retail Phone Number: +61 293170222 |
||||||
| Ransomware | www.precipiodx.com id24370 View details | United States | Communication / Marketing | pending | ||
|
150gb |
||||||
| Ransomware | American Pools & Spas id24364 View details | United States | Construction / Real Estate | pending | ||
|
American Pools Spas is a premier pool builder based in Orlando, FL, offering a wide range of services including pool construction, renovation, and repair. We have 500GB of data at our disposal (fiscal data, internal mail,budgets and many other things) |
||||||
| Ransomware | oxfordshop.com.au id24359 View details | Australia | Retail / E-commerce | pending | ||
|
Oxford Shop is an Australian brand specializing in a diverse range of men's and women's clothing, shoes, and accessories available online. Their product offerings include formal wear, casual attire, and an array of stylish accessories designed for both work and leisure. The company emphasizes quality, ethical trading, and modern fashion, catering to clients seeking stylish and functional wardrobe essentials. With a commitment to customer satisfaction, Oxford Shop also offers free shipping on domestic orders over $75 Employees: 100 Revenue: $5 Million Industry: Apparel & Accessories Retail Phone Number: +61 293182211 |
||||||
| Ransomware | millerwoodtradepub.com id24346 View details | United States | Communication / Marketing | leaked | ||
|
Established in 1927, Miller Wood Trade Publications is a leading source of information for the forest products industry, publishing 10 specialized magazines and resources. Their offerings include various marketing directories and handbooks tailored to the lumber market. The company's publications serve both domestic and international clients, connecting suppliers with buyers across the globe. With a focus on the lumber trade, they cater to all segments of this billion-dollar industry |
||||||
| Ransomware | www.enea.com id24342 View details | Sweden | Other | pending | ||
|
79gb |
||||||
| Ransomware | vviewisd.net id24295 View details | United States | Education | leaked | ||
|
Valley View ISD was one of only fifteen districts in the entire state of Texas to receive this rating. We are extremely proud of our students and staff for this great accomplishment. This would not be possible without the collaboration of all our stakeholders. It is no secret that when schools, families, and communities support each other and come together, students achieve at the highest levels. On behalf of our Board of Trustees and staff, thank you for your continued support and commitment to our students. Employees: 800 Revenue: $27.8 Million Industry: Education Phone Number: (416) 783-6181 |
||||||
| Ransomware | PFMI id24265 View details | United States | Finance / Legal / Insurance | pending | ||
|
Audit documents, clients, client data, financial transactions, contracts |
||||||
| Ransomware | FIT id24256 View details | Taiwan, Province of China | Manufacturing / Engineering | pending | ||
|
Foxconn Interconnect Technology Limited (FIT) focuses on the development, manufacturing, and marketing of electronic and optoelectronic connectors, antennas, acoustic components, cables, and modules for applications in computers, communication equipment, consumer electronics, automobiles, industrial and green energy field products. With offices and manufacturing sites located in Asia, the Americas, and Europe, FIT is a global leader in the supply of precision components. |
||||||
| Ransomware | ITL Systemhaus id24236 View details | Germany | Education | pending | ||
|
The company ITL Systemhaus für Datentechnik GmbH was founded in 1991. In the meantime, ITL has over 25 employees at a high level of training and offers a comprehensive range of services as a competent partner "around IT". The business policy is based on a long-term, partner-oriented relationship with the end customer. Milestones in the history of ITL were the move to the new office building in Münchberg with its own training rooms in 2005 and the complete takeover of the dental software DENTIXsoft with over 300 customers nationwide in 2010. |
||||||
| Ransomware | cryopur.com id24206 View details | France | Energy | pending | ||
|
CryoPur is a French company specializing in advanced cryogenic technology for biogas purification and liquefaction. Founded in 2015, the company developed a patented process that converts raw biogas into bio-LNG (liquefied biomethane) and liquid CO₂ of very high purity. Their systems are used in agricultural, industrial, wastewater, and landfill biogas facilities. CryoPur was acquired by FDE (La Française de l’Énergie), which now owns 94% of the company. CryoPur is headquartered in Massy, Île-de-France, France. |
||||||
| Ransomware | Schmidt's id24205 View details | Austria | Services | pending | ||
|
SCHMIDT'S is a specialized market that offers a wide array of products and services for house, garden, crafts, and industry, boasting over 130 years of tradition and quality. They cater to both private and business clients, providing expert advice and tailored solutions from their extensive product range. The company's services include workshop support, delivery, eBusiness solutions, and a strong focus on customer satisfaction and reliability. SCHMIDT'S is dedicated to maintaining long-lasting partnerships and fostering a family-oriented company culture. Over 100GB of data was extracted: contracts, clients, payment data, PII, and bank transfers. |
||||||
| Ransomware | Southern Lion Sdn Bhd id24187 View details | Malaysia | Communication / Marketing | pending | ||
|
SOUTHERN LION, an equal-sharing joint venture between LION CORPORATION, JAPAN and LAM SOON (M) BHD, is a leading and active FMCG marketing company. The company is truly committed to creating and building great brands that will improve and shape the Malaysian lifestyles. |
||||||
| Ransomware | omegatoolcorp.com id24182 View details | Canada | Manufacturing / Engineering | pending | ||
|
Omega Tool Corp. is a global leader in engineering, manufacturing, and production, specializing in advanced plastics tooling solutions for over 40 years. They provide services such as mold making, machining, validation, and production molding, focusing on precision and creative design. Their intended clients include industries such as automotive, heavy truck and agricultural, consumer products, and construction. The company is known for its high-energy culture and commitment to results. Employees: 500 Revenue: $29.2 Million Industry: Industrial Machinery & Equipment Phone Number: +52 4421615885 |
||||||
| Ransomware | onsolve.com id24132 View details | United States | Communication / Marketing | pending | ||
|
OnSolve is a leading critical event management provider that proactively mitigates physical threats, allowing organizations to remain agile when a crisis strikes. Using the most trusted expertise and reliable AI-powered risk intelligence, critical communications and incident management technology, the OnSolve Platform enables enterprises, SMB organizations and all levels of government to detect, anticipate and mitigate physical threats that impact their people, places and property. |
||||||
| Ransomware | Woom GmbH id24127 View details | Austria | Manufacturing / Engineering | pending | ||
|
woom is an international manufacturer of bikes for children and teenagers with its headquarters in Klosterneuburg, outside of Vienna. The company was founded in 2013 by Christian Bezdeka and Marcus Ihlenfeld in a garage in Vienna. After a long and fruitless search for the perfect bike for their children, the two bike-loving fathers decided to take matters into their own hands and design a bike themselves: zooming in on a low weight, timeless designs, high-quality components, and child-specific geometry. In just a few years woom went from little-known brand to market leader, with woom bikes now being sold in 30 countries around the world, including Austria, Germany and Switzerland, the US and Asia. |
||||||
| Ransomware | TBTEAM id24126 View details | United States | Communication / Marketing | pending | ||
|
OnSolve is a leading critical event management provider that proactively mitigates physical threats, allowing organizations to remain agile when a crisis strikes. Using the most trusted expertise and reliable AI-powered risk intelligence, critical communications and incident management technology, the OnSolve Platform enables enterprises, SMB organizations and all levels of government to detect, anticipate and mitigate physical threats that impact their people, places and property. |
||||||
| Ransomware | naffco.com id24009 View details | United Arab Emirates | Communication / Marketing | pending | ||
|
NAFFCO is an international manufacturer and supplier of firefighting, security, and safety products. They also offer training services and emergency responder certification. The company is headquartered in Dubai, in the United Arab Emirates. With a global network spanning over 100 countries, NAFFCO has been recognized as the unparalleled leader in fire safety. The official website of NAFFCO says:" Our success is driven by our "passion to protect"" We do not know for certain how well they protect their clients, but they could not protect themselves. We have 1TB of data at our disposal (fiscal data, internal mail, HR data, budgets, strategic development plans and much more) |
||||||
| Ransomware | reidhurstnagy.com id23998 View details | Canada | Services | pending | ||
|
RHN CPA is a full-service accounting firm that provides diverse accounting services to various clients including businesses, First Nations, not-for-profit organizations, and individuals across the Lower Mainland and Okanagan. The firm is committed to delivering superior accounting and related services that enhance clients' quality of life, while fostering a supportive and flexible environment for its employees. With a focus on accessibility and personalized service, RHN CPA builds strong relationships with clients to support their growth and success. Their offerings include bookkeeping, tax preparation, and financial advisory services tailored to meet the unique needs of their community. |
||||||
| Ransomware | baisyaakov.ca id23978 View details | Canada | Education | leaked | ||
|
Bais Yaakov Elementary School is dedicated to providing exceptional education for girls in the Toronto community. With a long-standing commitment to students and educational excellence, the school contributes significantly to the local community's character. It serves approximately 945 students with a faculty of 115 teachers across 50 classrooms, fostering a strong legacy through its graduates. The school offers various programs including tuition payment options, lunch services, and community events. Employees: 50 Revenue: $5 Million Industry: Education Phone Number: (416) 783-6181 |
||||||
| Ransomware | continuumindia.com id23977 View details | United States | Healthcare / Pharma | pending | ||
|
Continuum India is a contract research organization specializing in drug safety monitoring and regulatory services for the pharmaceutical industry. They offer a range of services including pharmacovigilance, evidence evaluation, and technology solutions, aimed at enhancing patient safety and ensuring regulatory compliance. Their target clients include globally recognized brands in the healthcare sector, for whom they provide integrated, high-performance services across various therapeutic areas. With a commitment to excellence and the use of cutting-edge technology, including AI and automation, they focus on delivering accurate and timely results for their partners. Employees: 250 Revenue: $14 Million Industry: Retail Phone Number: (203) 274-0016 |
||||||
| Ransomware | ripleyacademy.org id23976 View details | United Kingdom | Education | pending | ||
|
The Ripley Academy is an educational institution that focuses on providing high-quality care and education to students in the community. It offers a wide range of subjects and qualifications, including supportive programs for parents and students, and emphasizes ambition, commitment, and pride in its educational approach. With above-average performance in English and Maths, the academy prepares students for remarkable futures, including placements at prestigious universities. The school environment fosters a harmonious atmosphere and a dedication to exceptional educational standards. Employees: 1000 Revenue: $39.5 Million Industry: Education Phone Number: +44 1773746334 |
||||||
| Ransomware | grandeprairie.org id23975 View details | United States | Communication / Marketing | leaked | ||
|
Grande Prairie Public Library offers a variety of services including room reservations, notary public services, exam proctoring, and technology assistance. The library provides resources for all ages, including youth, teens, and adults, with access to eBooks, audiobooks, and educational databases. They also partner with Tutor.com to offer live virtual tutoring services. The intended clients are community members seeking educational resources, technology support, and recreational activities Employees: 50 Revenue: $5 Million Industry: Hospitality Phone Number: (708) 798-5563 |
||||||
| Ransomware | datenlotsen.de id23974 View details | Germany | Education | pending | ||
|
Datenlotsen Informationssysteme GmbH offers universities, colleges and other educational organizations state-of-the-art digital solutions designed specifically to support learning, teaching and research. CampusNet is an integrated, process-driven platform that supports all of the administrative tasks in a higher education organization. Already in use at numerous colleges and universities around Germany, CampusNet has emerged as the market-leading standard when it comes to efficiently managing higher education. Employees: 200 Revenue: $17.2 Million Industry: Business Services Phone Number: +49 402709680 |
||||||
| Ransomware | zadroinc.com id23973 View details | United States | Healthcare / Pharma | pending | ||
|
Zadro Inc. is a California-based beauty, health, and wellness brand with over 37 years of experience in creating innovative products. Specializing in advanced technology and holding more than 40 patents, the company offers a range of items including makeup mirrors, towel warmers, massagers, and aromatherapy products. Its intended clients include individuals seeking to enhance their daily routines and achieve spa-like comfort at home. With a commitment to quality and customer satisfaction, Zadro Inc. has established itself as a trusted brand in the wellness and beauty industry. Employees: 200 Revenue: $11.9 Million Industry: Retail Phone Number: (714) 892-9200 |
||||||
| Ransomware | eakas.com id23906 View details | United States | Manufacturing / Engineering | pending | ||
|
Eakas Corp. specializes in producing both functional and decorative products for the automotive industry, serving as a Tier 1 supplier to manufacturers in the United States. They offer comprehensive services including engineering, injection molding, painting, chrome plating, assembly, and quality testing to ensure consistent product quality. Their product range includes various automotive components such as door handles, bumper fascias, and mirror assemblies. Eakas is committed to customer satisfaction by delivering quality services on time and at competitive prices. Employees: 416 Revenue: $81.3 Million Industry: Manufacturing Phone Number: (815) 223-8811 phone site x236 (cell:870-208-5643) 248-536-2211 815-488-1879 x208 / 815-713-0753 (815) 223-8811 248-536-2211 248-536-2211 x224 (cell:815-830-6497) x218 (cell:815-875-7241) 248-536-2211 815-719-2814 815-713-0753 homePhone: 815-497-2023 5135921045 |
||||||
| Ransomware | Kaan Cronenberg & Partners Law id23889 View details | Austria | Finance / Legal / Insurance | pending | ||
|
Kaan Cronenberg & Partners Law has been providing legal services since 1897, offering representation before courts and authorities, legal counseling, and contract preparation. The firm caters to enterprises of all sizes, ensuring that economic aspects are considered in their legal strategies. Their well-rehearsed team consists of partners, associates, and assistants who work collaboratively to support clients in any legal issue. They aim to be a competent partner for clients navigating their legal paths. |
||||||
| Ransomware | facadeinnovations.com.au id23884 View details | United States | Construction / Real Estate | pending | ||
|
Facade Innovations has been providing specialized facade solutions for new and existing commercial buildings across Sydney, Melbourne, and Canberra since 1997. Their extensive services include facade design documentation, manufacture and installation, overcladding, and resealing. The company has a strong track record, having worked on many landmark buildings and collaborated with leading property owners, builders, architects, and facade consultants. They are recognized for their quality work, winning multiple awards including the MBA NSW 2023 Excellence in Construction Award. Employees: 50 Revenue: $5 Million Industry: Building Materials-Manufacturing Phone Number: +61 294170817 |
||||||
| Ransomware | www.northcroftme.com id23883 View details | Qatar | Other | pending | ||
|
300 GB of data |
||||||
| Ransomware | kellylegal.com.au id23882 View details | Australia | Finance / Legal / Insurance | leaked | ||
|
Kelly Legal is a law firm based in Brisbane and Mackay, offering a wide range of legal services throughout Queensland. Their experienced team provides personalized legal advice in areas such as family law, real estate, injury compensation, and business law. They focus on treating clients as individuals and strive to achieve the best outcomes for their unique circumstances. With a commitment to being there for their clients, Kelly Legal emphasizes a supportive approach in all legal matters. Employees: 50 Revenue: $5 Million Industry: Law Firms & Legal Services Phone Number: +61 749110500 |
||||||
| Ransomware | wafergrind.com id23881 View details | United States | Manufacturing / Engineering | leaked | ||
|
Grinding & Dicing Services Inc (GDSI) provides wafer thinning and dicing services to the IC industry for critical post-fabrication process requirements. GDSI is headquartered in San Jose, California. Employees: 50 Revenue: $5 Million Industry: Manufacturing-Electronics Phone Number: (408) 451-2000 |
||||||
| Ransomware | duboiswood.com id23880 View details | United States | Communication / Marketing | leaked | ||
|
Dubois Wood, located in southern Indiana, has been a domestic producer of high-quality, American-made furniture since 1979. The company caters to several markets by offering superior products at competitive prices, distinguishing itself in the furniture-making industry. Employees: 200 Revenue: $21.6 Million Industry: Retail-Furniture Phone Number: (812) 683-3613 |
||||||
| Ransomware | rosemontexpo.com id23879 View details | United States | Services | leaked | ||
|
Rosemont Exposition Services, Inc. is an Illinois-based company that offers exhibitor show services. These include exhibit rentals, utilities, decorating services, catering, and area information. Formerly known as O'Hare Exposition Services, they primarily function as the full-service general contractor for all trade shows and events held at the Donald E. Stephens Convention Center located in Rosemont, IL. Employees: 500 Revenue: $48.6 Million Industry: Business Services Phone Number: (847) 696-2208 |
||||||
| Ransomware | avrind.com id23877 View details | Israel | Manufacturing / Engineering | leaked | ||
|
AVR Industries is a long-standing, well-established company with many years of experience in the field of machining for the aeronautics industry. Our comprehensive technological solutions help industry leading companies to achieve greater success. Our team always strives for the most accurate, professional and fast production for our customers. They offer a wide range of metalworking services under one roof: Sheet Metal Working | Assemblies Processing | Welding | Metal Finishes | Metal Coatings All are of the highest standard and with ISO and NADCAP certifications. |
||||||
| Ransomware | KohaFoods Hawaii id23824 View details | United States | Agriculture / Food | leaked | ||
|
Koha Foods is a Honolulu-based distributor and wholesaler specializing in Asian food products. The company boasts a diverse selection of over 2,500 items including seafood, condiments, and Korean dishes, catering primarily to local Oahu businesses such as restaurants and supermarkets. Having served Hawaii since 1970, Koha Foods emphasizes quality and connection with the community through its offerings. In addition to distribution, they manufacture their own signature Korean food items using authentic recipes and high-quality ingredients. |
||||||
| Ransomware | latamlex (gyg.local) id23823 View details | Costa Rica | Finance / Legal / Insurance | pending | ||
|
Latamlex is a regional law firm with a team of over 100 attorneys and more than 20 years of experience, recognized for its expertise in various legal areas including arbitration, corporate law, and intellectual property. The firm caters to local entrepreneurs looking to expand internationally as well as multinational corporations seeking to establish or grow their operations in Central America. With offices across five countries, Latamlex combines international vision with local knowledge to effectively serve its diverse clientele. The firm's commitment to excellence has earned it numerous accolades from prestigious legal publications. |
||||||
| Ransomware | Znojma Czechia id23822 View details | Czechia | Public Sector | leaked | ||
|
Subject of activity Main activity comprehensive administration in the area of housing owned by the city of Znojmo ensuring matters in the interest of the city in the management of housing stock and other real estate owned by the city of Znojmo administration of the physical education and sports department, operation of sports facilities security of matters in the area of personal culture, public toilets maintain and manage the property of the city of Znojmo. |
||||||
| Ransomware | Grupo Via Argentina id23819 View details | Argentina | Construction / Real Estate | leaked | ||
|
Grupo Vía hosts events focusing on architecture, interior design, real estate, hospitality, and construction. Its activities connect professionals from these sectors with networking opportunities and debates on contemporary trends. The company serves a diverse clientele, including architects, designers, and industry stakeholders across major cities in Spain and Portugal. Through its offerings, Grupo Vía aims to foster collaboration and innovation within the built environment. |
||||||
| Ransomware | bridge-housing-corp id23818 View details | United States | Construction / Real Estate | leaked | ||
|
Founded in 1983 BRIDGE Housing is a non-profit that works towards securing affordable housing. The organization is headquartered in San Francisco, California. We have over 150 GB of confidential information, and the management of this organization has completely ignored us. Remember, the publication of your data is entirely their fault. |
||||||
| Ransomware | forensicmed.com id23817 View details | United States | Healthcare / Pharma | leaked | ||
|
Forensic Medical is a comprehensive forensic pathology company headquartered in Nashville, Tennessee, which provides medical examiner, death investigation, medical autopsy services, expert forensic testimony and forensic management services to government agencies and private individuals. |
||||||
| Ransomware | galileo.it id23816 View details | Italy | Finance / Legal / Insurance | leaked | ||
|
Galileo is a global payments platform that powers fintech, financial services, and investment firms by removing the complexity of payments. We're a proven financial technology platform, an innovation engine and a leader in card issuing, payments and digital banking. Galileo was founded in 2000 and is headquartered in Utah. |
||||||
| Ransomware | Wiraswasta Gemilang id23812 View details | Indonesia | Retail / E-commerce | leaked | ||
|
PT Wiraswasta Gemilang Indonesia (WGI) is the first and largest private lubricant plant in Indonesia, specializing in re-refinery and blending services. To your attention a small portion of screenshots. |
||||||
| Ransomware | Sarulla Operation id23780 View details | Indonesia | Finance / Legal / Insurance | leaked | ||
|
Administration Financial operations Budgets and account balances User information Confidential information Over 1,000 passports Payment instructions and other accounting documents Contract discussions and final contracts and others |
||||||
| Ransomware | www.modcomedia.com id23779 View details | United States | Communication / Marketing | pending | ||
|
5GB of confidential data, 400GB of total data, contracts with Rockstar, Siemens, and other popular brands. |
||||||
| Ransomware | Easterseals Arc of Northeast Indiana id23776 View details | United States | Communication / Marketing | pending | ||
|
Easterseals Northeast Indiana provides life-changing services and programs for individuals with disabilities, their families, and the wider community. Their offerings include youth and adult services, employment readiness programs, wellness coordination, and recreational activities designed to empower participants. The organization operates across multiple locations in northeast Indiana, including Fort Wayne, Columbia City, and Angola, and is committed to meeting the unique needs of each individual. Through compassionate staff and various service initiatives, they aim to create inclusive environments and enhance the quality of life for their clients. |
||||||
| Ransomware | Community Unit School District 201 id23775 View details | United States | Education | leaked | ||
|
Community Unit School District 200 is dedicated to inspiring, educating, challenging, and supporting all students to achieve their highest potential in learning and personal development. The district offers various educational programs and services aimed at fostering student growth and excellence. Their intended clients include students, parents, and the community, with a focus on providing a supportive environment for all. The district is committed to innovation and technology in education, as well as special education services. |
||||||
| Ransomware | Weintraub Traub Tracy & Virk Cra's LLP id23761 View details | United States | Construction / Real Estate | pending | ||
|
We have data from Piaty Müller-Mezin Schoeller Rechtsanwälte GmbH, payment and tax records, employee and client documents, as well as projects and developments, and personal correspondence with clients. |
||||||
| Ransomware | Ketat Grundstücksverwertungs GmbH id23664 View details | Austria | Construction / Real Estate | pending | ||
|
We have data from Piaty Müller-Mezin Schoeller Rechtsanwälte GmbH, payment and tax records, employee and client documents, as well as projects and developments, and personal correspondence with clients. |
||||||
| Ransomware | prutsch-ra.at id23663 View details | Austria | Communication / Marketing | pending | ||
|
We have data from Piaty Müller-Mezin Schoeller Rechtsanwälte GmbH, payment and tax records, employee and client documents, as well as projects and developments, and personal correspondence with clients. |
||||||
| Ransomware | MusikComputer GmbH id23662 View details | Germany | IT | pending | ||
|
We have data from Piaty Müller-Mezin Schoeller Rechtsanwälte GmbH, payment and tax records, employee and client documents, as well as projects and developments, and personal correspondence with clients. |
||||||
| Ransomware | pmsp.at id23660 View details | Austria | Construction / Real Estate | pending | ||
|
We have Piaty Müller-Mezin Schoeller Rechtsanwälte GmbH company data, payment and tax documentation, employee and client documents, as well as projects and developments. |
||||||
| Ransomware | elektroanlagen id23659 View details | Austria | Construction / Real Estate | pending | ||
|
We have data from Piaty Müller-Mezin Schoeller Rechtsanwälte GmbH, payment and tax records, employee and client documents, as well as projects and developments, and personal correspondence with clients. |
||||||
| Ransomware | zebra.or.at id23658 View details | Austria | Construction / Real Estate | pending | ||
|
We have zebra.or.at company data, payment and tax documentation, employee and client documents, as well as projects and developments. |
||||||
| Ransomware | The Union League of Philadelphia id23623 View details | United States | Communication / Marketing | pending | ||
|
Founded in 1862 as a patriotic society to support the Union and the policies of President Abraham Lincoln, The Union League of Philadelphia laid the philosophical foundation of other Union Leagues across a nation torn by civil war. The League has hosted U.S. presidents, heads of state, industrialists, entertainers and dignitaries from around the globe and has proudly supported the American military in each conflict since the Civil War. The Union League continues to be driven by its founding motto, Amor Patriae Ducit or Love of Country Leads. |
||||||
| Ransomware | sensationalteeth.com id23618 View details | United States | Healthcare / Pharma | pending | ||
|
Oelbaum Kagan Dentistry provides comprehensive dental services in the Bronx and New York City, with offerings including routine care, cosmetic dentistry, restorative procedures, and orthodontics. Led by experienced dentists Dr. Victor Oelbaum and Dr. Victor Kagan, the practice prioritizes patient comfort and satisfaction, employing advanced technology for optimal treatment. They aim to create a welcoming environment for both new and returning patients, promoting extensive dental health care. The team is dedicated to delivering high-quality treatment tailored to the needs of individuals, families, and seniors. Employees: 25 Revenue: $5 Million Industry: Dental Offices Phone Number: (718) 882-7202 |
||||||
| Ransomware | thevisapro.com (Yibirin Law Group) id23598 View details | United States | Finance / Legal / Insurance | pending | ||
|
all client cases, personal data |
||||||
| Ransomware | afton.loc id23571 View details | United States | Communication / Marketing | pending | ||
|
The Aetherius Society is a spiritual organization founded in 1955 by Dr. George King to spread and act upon teachings from advanced extraterrestrial intelligences, known as Cosmic Masters. The society practices King Yoga, focusing on spiritual evolution, cosmic wisdom, and service to humanity in preparation for the New Age. Their teachings cover topics like meditation, karma, reincarnation, UFOs, and spiritual healing. Through the practice of King Yoga, individuals can discover life-changing wisdom, unlock psychic powers, and contribute to raising global consciousness. |
||||||
| Ransomware | Vitalmex id23570 View details | Mexico | Healthcare / Pharma | leaked | ||
|
Vitalmex is a Mexican company dedicated to providing personalized health solutions, along with medical logistics and technical services for medical equipment and instruments. Their mission is to improve patients' quality of life through differentiated and cost-effective solutions. They aim to establish world-class leadership that revolutionizes health systems while emphasizing values such as integrity, humanity, and collaboration. Vitalmex focuses on customer orientation and innovative problem-solving to enhance satisfaction and meet applicable product and service requirements. |
||||||
| Ransomware | REPECHAGE id23561 View details | United States | Healthcare / Pharma | leaked | ||
|
We have over 1 TB of personal data belonging to this organization, and all attempts at peaceful resolution have been completely ignored. Aware that the addresses, phone numbers, and job titles of individual employees, medical records, and complete data on clients and partners have been lost (and will undoubtedly be used for selfish purposes by a huge number of people), they have shown complete indifference—REPECHAGE we want you to know about this before it is too late. |
||||||
| Ransomware | TMF Logistics id23539 View details | Algeria | Transportation / Travel / Logistics | leaked | ||
|
39,308,400,640 bytes |
||||||
| Ransomware | aa-llp.com (aa.law) id23538 View details | United States | Finance / Legal / Insurance | pending | ||
|
All criminal cases, clients' personal documents, medical records, and all confidential files were stolen. |
||||||
| Ransomware | VZW Avalon id23530 View details | Belgium | Other | leaked | ||
|
38554 File(s) 31,312,417,174 bytes |
||||||
| Ransomware | Evolve Mortgage Services id23499 View details | United States | Services | pending | ||
|
Introducing Evolve Mortgage Services, the old company name mrn3.com. We stole more than 20 TB of company data. Including 2TB of databases. This company refused to resolve the issue with us with the security of its customers' data. This company does not care about the safety of its customers. They don't care about leaks and disclosure of your data. We have all the data on all clients of both companies since 2016. SSN numbers, scans of client IDs, home and work addresses, personal, home and work phone numbers, FULL credit history about each client. Personal and confidential PII form information for thousands of citizens of the United States of America. |
||||||
| Ransomware | DILOSA FOOD COMPANIES id23496 View details | El Salvador | Agriculture / Food | pending | ||
|
[email protected] [email protected] [email protected] +(503) 2201-6806 +(503) 2201-6810 +(503) 2201-6800 +(503) 6060-8784 |
||||||
| Ransomware | Alios Finance Group id23454 View details | Tunisia | Finance / Legal / Insurance | leaked | ||
|
Alios Finance Group , is a leading operator in Africa providing specialized financial solutions to Professionals and Individuals. We are operating in 9 Sub-Saharan countries (Burkina-Faso, Cameroon, Ivory Coast, Gabon, Kenya, Mali, Senegal, Tanzania and Zambia). Our Group is also present in North Africa (Algeria and Tunisia) through our main shareholder: Tunisie Leasing Group. 100GB of fresh data (last 3 years) |
||||||
| Ransomware | dwgra.com id23357 View details | Canada | Communication / Marketing | pending | ||
|
D. W. Gould Realty Advisors Inc. (“DWGRA”) is a privately owned, non-commission compensation Canadian brokerage offering. Derek Gould is President and the Broker of Record at D.W. Gould Realty Advisors Inc. He was Vice President at CBRE Limited from 1998 until June 2013 when he decided to open his own boutique brokerage. Mr. Gould works with corporations and individuals requiring brokerage services within the Greater GTA as well as across Ontario from west of London to Kingston and north to Sudbury / North Bay and further North. We have at our disposal fiscal data, internal mail, data of all employees of the company, as well as strategic development plans. |
||||||
| Ransomware | partitio.com id23356 View details | France | Services | leaked | ||
|
About Partitio Partitio specializes in digital technologies aimed at enhancing human interaction within organizations. They provide services in information system management, including private cloud hosting and content management solutions. Their target clients include SMEs, retailers, and accounting professionals, with a focus on improving collaboration and data security. As a trusted partner, Partitio is certified in ISO 27 001 and HDS, ensuring high standards in their offerings |
||||||
| Ransomware | auge.com id23348 View details | United States | Manufacturing / Engineering | leaked | ||
|
Industrias Auge S.A de C.V is a company that specializes in manufacturing and distribution of commercial and specialty alloy fasteners, including machined components. It offers alloy fasteners, machined components, anchoring systems, line pipe, boiler and heat exchanger tubing, casing tubing, platings & coatings, fittings, flanges, and structural material. The company was founded in 1965 and is based in Houston, Texas We have contracts, data of all employees of the company internal mail, drawings and more at our disposal. We will share all this. |
||||||
| Ransomware | Kumwell id23274 View details | Thailand | Energy | pending | ||
|
Kumwell deliver safety to society for life and property with a International Standard for Grounding System, Lightning Protection System, Surge Protection Lightning Detection and Warning System for safety and security in the infrastructure system in various countries such as Electricity sector (Electricity Generation, Solar Power Plant, Wind Power Plant or Transmission, Distribution) Transportation sector (Subway, Electric train, High-speed train, Airport, Port or Expressway) Telecommunications sector (Microwave Station, Radio Station, Television Station, Mobile Phone Station or Data Center) Industrial sector (Petrochemical Plant, Oil Refinery, Steel Factory and Farm) Building (Tower, Complex Building, Stadium, Hospital, School, Home, Castle or Temple) Kumwell focus on establishing brand awareness in business and technology through world trade shows in China, India, Saudi Arabia, United Arab Emirate, Malaysia, Philippines, Vietnam and Indonesia. |
||||||
| Ransomware | summitgolfbrands.com id23191 View details | United States | Communication / Marketing | pending | ||
|
SUMMIT GOLF BRANDS specializes in high-end golf apparel and sportswear, selling products online and through leading country clubs and resorts worldwide. Their portfolio includes brands such as Fairway Greene, Zero Restriction, B. Draddy, and EP New York, with a presence in over 3,000 accounts across more than 25 countries. The company emphasizes quality through vertical integration for decoration and fulfillment, ensuring exceptional service. They cater to various clients including pro shops, corporations, and retailers, focused on delivering innovative and stylish apparel for golf enthusiasts. Employees: 125 Revenue: $27.9 Million Industry: Holding Companies & Conglomerates Phone Number:(212) 302-7255 760-607-7574 501-940-5393 203-722-2472 207-317-1954 203-984-1657 516-776-3298 203-402-9704 917-975-9357 585-967-0609 917-587-2409 540-270-5566 800-926-8010 |
||||||
| Ransomware | Shadrix & Parmer, P.C. id23177 View details | United States | Other | pending | ||
|
Documents, correspondence, payments, clients |
||||||
| Ransomware | baronespecialtysteel.com id23056 View details | United States | Manufacturing / Engineering | leaked | ||
|
Bar One Specialty Steel specializes in providing high-quality specialty steel products tailored for various industrial applications. Their product offerings include a wide range of steel grades and forms designed to meet specific client needs. The company primarily serves clients in the manufacturing, construction, and automotive sectors. With a focus on exceptional customer service and precision engineering, Bar One aims to be a trusted partner in the steel supply chain. Employees: 25 Revenue: $5 Million Industry: Industrial Machinery & Equipment Phone Number:(877) 541-6421 |
||||||
| Ransomware | Balfour Beatty id22985 View details | United States | Construction / Real Estate | pending | ||
|
Balfour Beatty US, founded in 1933 and headquartered in Dallas, Texas, is a commercial construction company that offers services for construction management, general contracting, cost consulting, and design-building. |
||||||
| Ransomware | georgetown-brewing-co id22928 View details | United States | Manufacturing / Engineering | pending | ||
|
Georgetown Brewing Company is an independently owned craft brewery located in Seattle, known for its flagship beer, Mannys Pale Ale. The brewery transitioned from draft-only production to canning select beers and offers pints in its tasting room alongside kegs, growlers, and cans for customers to take home. Their focus remains on brewing high-quality, flavorful beer, with a lively atmosphere that encourages visitors to enjoy their offerings on-site or at local bars. Intended clients include craft beer enthusiasts and patrons looking to experience unique local brews. |
||||||
| Ransomware | NextGen Mold Technologies id22927 View details | Canada | IT | leaked | ||
|
NextGen Mold Technologies specializes in the injection mold industry, providing services such as feasibility studies, design, mold maintenance, engineering changes, and new tooling. The company is committed to delivering quick and effective results while exceeding customer expectations. With significant investment in technology and a dedicated team, NextGen has established a strong reputation for precision and timely delivery. Their intended clients include a range of partners seeking innovative solutions and high-quality service in mold manufacturing. |
||||||
| Ransomware | Benedict Industries id22926 View details | Australia | Construction / Real Estate | leaked | ||
|
Benedict Industries, founded in 1966 and headquartered in Belrose, New South Wales, is a recycling and resource company specializing in civil, construction, landscaping, and recycled products. |
||||||
| Ransomware | https://www.tongapower.to/ id22925 View details | Tonga | Energy | pending | ||
|
TPL was established in July 2008 to act as the concessionaire in Tonga's concession based electricity regulation regime. TPL generates, distributes, and sells to all our commercial and domestic customers in Tongatapu, Vavaú, Haápai and Éua. Tonga Power's core purpose is to, "Reduce Tonga's vulnerability to oil price shocks, and achieve an increase in quality access to modern energy services in an environmentally sustainable manner" via its strategies and Business Plan and to be financially sustainable. As a state owned enterprise TPL continues to deliver the Government of Tonga's vision for the energy sector to, "reduce Tonga's vulnerability to oil price shocks, and achieve an increase in quality access to modern energy services in an environmentally sustainable manner". |
||||||
| Ransomware | Chapter 13 Texas id22883 View details | United States | Communication / Marketing | pending | ||
|
We have over 150GB of private data, ranging from employee data to customer and partner data. The management of planoch13.com has completely ignored us. You have 24 hours before we publish. |
||||||
| Ransomware | WELLSLANDSCAPING.COM id22825 View details | United States | Communication / Marketing | leaked | ||
|
We provide a comprehensive array of services for both commerical and residential properties. In addition to traditional lawn and garden care we offer onsite consultation, landscape design, installation, and maintenance. Wells Landscaping is fully licensed and insured - just another way we show "You are important to us!" Employees: 25 Revenue: $$5 Million Industry: Architecture, Engineering & Design Phone Number:(781) 963-6017 |
||||||
| Ransomware | Cobra Rolamentos e Autopeças id22819 View details | Brazil | Communication / Marketing | pending | ||
|
Cobra Rolamentos e Autopeças é um distribuidor brasileiro de autopeças, motopeças e rolamentos, com forte atuação no mercado de reposição automotiva. Eles distribuem marcas reconhecidas no setor, possuem uma marca própria chamada Cobra Automotiva e operam com mais de 30 unidades de distribuição no Brasi |
||||||
| Ransomware | terex id22818 View details | Canada | Communication / Marketing | pending | ||
|
Terex Environmental Group is a leading Canadian consulting firm providing environmental technical guidance and regulatory liaison. We develop environmental programs with purpose that are technically sound and specifically designed for the energy sector. Our approach to planning and execution of environmental programs is tailored to client requirements and ensures alignment with regulatory frameworks. |
||||||
| Ransomware | hillsidelibrary.org id22814 View details | United States | IT | leaked | ||
|
Hillside Public Library offers a number of options for patrons blind or visually impaired. Our Kurzweil software scans in any typewritten document and reads the document aloud to the patron. We also have 2 types of magnifiers. The first, the software-based Zoomtext, reads any computer-generated documents and files, including web/internet pages. Our other magnifier allows the user to increase the print size on documents and books. Employees: 25 Revenue: $5 Million Industry: Hospitality Phone Number:(973) 923-4413 |
||||||
| Ransomware | stalkerradar.com id22813 View details | United States | Manufacturing / Engineering | leaked | ||
|
Applied Concepts, Inc., d.b.a. Stalker Radar, was founded as a small contract engineering and manufacturing firm in 1975. Since that time, we have grown to be the United States premier manufacturer of police radar and Lidar in the United States. More state police agencies use our speed enforcement equipment than all other radar brands combined. Employees: 142 Revenue: $$25.3 Million Industry: Manufacturing Phone Number:(972) 398-3780 |
||||||
| Ransomware | ocmaine.com id22812 View details | United States | Construction / Real Estate | pending | ||
|
Ouellet Construction is a family-led construction company specializing in commercial construction services in Southern Maine and the broader New England area. They are dedicated to delivering exceptional service through a collaborative and personalized approach that ensures projects remain on time and within budget. Their client base includes various sectors such as healthcare, manufacturing, non-profit, education, retail, and banking. With a focus on establishing enduring relationships, Ouellet Construction emphasizes integrity and consistency in all their projects. Employees: 25 Revenue: $5.3 Million Industry: Commercial & Residential Construction Phone Number:(207) 725-0100 |
||||||
| Ransomware | stockmeier-urethanes.com id22740 View details | Germany | Communication / Marketing | pending | ||
|
STOCKMEIER Urethanes - the solutions we provide our customers are as varied as the possible requirements. As a specialized subsidiary within the STOCKMEIER Group, an organisation rich in tradition, we have been developing and producing polyurethane systems for a wide variety of applications since 1991. We offer products for sports facility floors for indoors and outdoors, adhesives and sealants for the industry, casting resins and potting compounds for the electrical industry and the production of moulded parts as well as polyurethane injection elastomers for resistant coatings. In our own development laboratories we find solutions that meet your requirements. Because of our production facilities in Germany, France and in the USA, we can offer you not only consultation and development, but we can also deliver the right product right to you. Employees: 127 Revenue: $32.7 Million Industry: Chemicals & Related Products Phone Number:+49 5261660680 |
||||||
| Ransomware | suntreeinternalmedicine.com id22712 View details | United States | Healthcare / Pharma | pending | ||
|
Suntree Internal Medicine is a medical center located in the Suntree neighborhood of Melbourne, FL, offering a wide range of healthcare services including preventive care, diagnostic testing, and weight reduction programs. They emphasize personalized, compassionate care and aim to provide swift and efficient visits while maintaining a focus on patient comfort and wellbeing. The center is open seven days a week and provides same-day appointments for convenient access to healthcare. They also offer free in-house antibiotics to expedite recovery for their patients |
||||||
| Ransomware | Climatron id22698 View details | South Africa | Finance / Legal / Insurance | pending | ||
|
HVAC equipment company. Bank payment data, taxes, and technical documentation |
||||||
| Ransomware | callhci.com id22694 View details | United States | Communication / Marketing | pending | ||
|
Heritage Communications is a B2B telecommunications provider based in Little Rock, Arkansas, specializing in high-quality Cloud and On-Prem VoIP services from NEC. They serve businesses throughout Arkansas and West Tennessee, offering scalable and customizable telecommunications solutions tailored to meet specific client needs. With over 30 years of industry experience, they prioritize customer experience and provide exceptional service and support. Their partnership with NEC enables them to deliver advanced technology and reliable communication solutions to their clients. Employees: 25 Revenue: $5.1 Million Industry: Cable & Satellite Phone Number:(501) 819-3100 |
||||||
| Ransomware | icc-nw.net id22693 View details | United States | Manufacturing / Engineering | pending | ||
|
ICC NW specializes in manufacturing custom stainless steel tanks, mixers, and reactors tailored for the food processing, beverage, and pharmaceutical industries. Based in Canby, Oregon, the company boasts a state-of-the-art 50,000 square foot facility that is capable of producing tanks of substantial size and according to various industrial standards. Their product lineup includes various innovative vessels such as smart mix tanks and computerized processing controls, along with patented components like the Sanifoil impeller and Sanibearing steady bearing. ICC NW also provides engineering and automation services, including installation and retrofitting, making them a comprehensive partner for industries in need of efficient processing solutions. Employees: 74 Revenue: $8.2 Million Industry: Industrial Machinery Phone Number:(503) 912-2727 |
||||||
| Ransomware | Cholakyan Chiropractic id22691 View details | United States | Communication / Marketing | pending | ||
|
Here at Cholakyan Chiropractic we have built chiropractic offices, which are very well equipped with state of the art physiotherapy modalities, chiropractic tables, traction units, a high frequency Digital X-ray machine and rehab/therapeutic exercise equipment. In combination with a well trained staff of Chiropractors and Chiropractic Assistants we give each patient a personalized treatment plan and regimen to ensure that we get the best possible results for our patients. |
||||||
| Ransomware | LAMMCO.NET id22690 View details | United States | Manufacturing / Engineering | leaked | ||
|
LAMMCO specializes in industrial furniture and construction specialties. The company focuses on providing high-quality products tailored for various industrial applications. Their intended clients include businesses in need of durable and functional furniture solutions. LAMMCO aims to meet the demands of the construction industry with innovative offerings. Employees: 25 Revenue: $5 Million Industry: Retail Phone Number:(765) 447-7400 CFO: Michael Smith |
||||||