Ransomware Group intelligence

Incransom

Active

Track Incransom with 986 published victims and 7 known leak locations in a single intelligence view.

BREACH HOUSE ALERTS

Want an alert every time a new ransomware post is published?

Choose the feeds and the countries you care about — we email you when they move.

Victims 986 Known published victims in this dataset

First discovered 2023-08-09 Earliest victim discovery date

Last discovered 2026-10-15 Latest victim discovery date

Inactive since 1 days Days since the latest known victim

Top country United States 545 victims

Known locations 7 Leak or negotiation infrastructure tracked

Incransom is tracked by Breach House as a ransomware group with 986 published victims.

United States is currently the most targeted country in this dataset.

7 known leak locations are currently associated with this group.

986

Leaked 281 28.5%
Pending 702 71.2%
Deleted 3 0.3%

Top Countries

Distribution

Label	Type	Availability	Links
Leak location 6	Onion service	Up checked 4h ago	`incblog6qu4y4mm4zvw5nrmue6qbwtgjsxpw6b7ixzssu36tsajldoad.onion`
Leak location 7	Onion service	Up checked 4h ago	`incbacg6bfwtrlzwdbqc55gsfl763s3twdtwhp27dzuik6s6rwdcityd.onion`
Leak location 2	Onion service	Down checked 4h ago	`incbackrlasjesgpfu5brktfjknbqoahe2hhmqfhasc5fb56mtukn4yd.onion`
Leak location 5	Web location	Down checked 4h ago	`incapt.su`
Leak location 1	Onion service	Down checked 4h ago	`incblog7vmuq7rktic73r4ha4j757m3ptym37tyvifzp2roedyyzzxid.onion`
Leak location 4	Web location	Down checked 4h ago	`incapt.blog`
Leak location 3	Web location	Down checked 4h ago	`incbackend.top`

Communication / Marketing 173
Healthcare / Pharma 116
Finance / Legal / Insurance 114
Services 81
Manufacturing / Engineering 76
Education 58
Not identified 56
Construction / Real Estate 53
Public Sector 45
IT 40
Retail / E-commerce 32
Transportation / Travel / Logistics 24
NGOs / Associations 24
Energy 22
Hospitality / Food & Beverage / Tourism 17
Agriculture / Food 14
Telecommunications 11
null 2

Typical Attacks (35)

▼

How Incransom typically operates, as attributed by MITRE ATT&CK v20.0. Attributed via INC Ransom, INC Ransomware.

T1588.002 Tool Resource Development

What they do: INC Ransom has acquired and used several tools including MegaSync, AnyDesk, esentutl and PsExec.

What that means: Adversaries may buy, steal, or download software tools that can be used during targeting.
T1078 Valid Accounts Initial AccessPersistencePrivilege EscalationStealth

What they do: INC Ransom has used compromised valid accounts for access to victim environments.

What that means: Adversaries may obtain and abuse credentials of existing accounts as a means of gaining Initial Access, Persistence, Privilege Escalation, or Defense Evasion.
T1190 Exploit Public-Facing Application Initial Access

What they do: INC Ransom has exploited known vulnerabilities including CVE-2023-3519 in Citrix NetScaler for initial access.

What that means: Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.
T1566 Phishing Initial Access

What they do: INC Ransom has used phishing to gain initial access.

What that means: Adversaries may send phishing messages to gain access to victim systems.
T1047 Windows Management Instrumentation Execution

What they do: INC Ransom has used WMIC to deploy ransomware.

What that means: Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads.
T1059.003 Windows Command Shell Execution

What they do: INC Ransom has used `cmd.exe` to launch malicious payloads.

What that means: Adversaries may abuse the Windows command shell for execution.
T1106 Native API Execution

What they do: INC Ransomware can use the API `DeviceIoControl` to resize the allocated space for and cause the deletion of volume shadow copy snapshots.

What that means: Adversaries may interact with the native OS application programming interface (API) to execute behaviors.
T1569.002 Service Execution Execution

What they do: INC Ransom has run a file encryption executable via `Service Control Manager/7045;winupd,%SystemRoot%\winupd.exe,user mode service,demand start,LocalSystem`.

What that means: Adversaries may abuse the Windows service control manager to execute malicious commands or payloads.
T1036.005 Match Legitimate Resource Name or Location Stealth

What they do: INC Ransom has named a PsExec executable winupd to mimic a legitimate Windows update file.

What that means: Adversaries may match or approximate the name or location of legitimate files, Registry keys, or other resources when naming/placing them.
T1070.004 File Deletion Stealth

What they do: INC Ransom has uninstalled tools from compromised endpoints after use.

What that means: Adversaries may delete files left behind by the actions of their intrusion activity.
T1140 Deobfuscate/Decode Files or Information Stealth

What they do: INC Ransomware can run `CryptStringToBinaryA` to decrypt base64 content containing its ransom note.

What that means: Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis.
T1685 Disable or Modify Tools Defense Impairment

What they do: INC Ransom can use SystemSettingsAdminFlows.exe, a native Windows utility, to disable Windows Defender.

What that means: Adversaries may disable, degrade, or tamper with security tools or applications (e.g., endpoint detection and response (EDR) tools, intrusion detection systems (IDS), antivirus, logging agents, sensors, etc.) to impair or reduce visibility of defensive capabilities.
T1046 Network Service Discovery Discovery

What they do: INC Ransom has used NETSCAN.EXE for internal reconnaissance.

What that means: Adversaries may attempt to get a listing of services running on remote hosts and local network infrastructure devices, including those that may be vulnerable to remote software exploitation.
T1049 System Network Connections Discovery Discovery

What they do: INC Ransom has used RDP to test network connections.

What that means: Adversaries may attempt to get a listing of network connections to or from the compromised system they are currently accessing or from remote systems by querying for information over the network.
T1057 Process Discovery Discovery

What they do: INC Ransomware can use the Microsoft Win32 Restart Manager to kill processes with a specific handle or that are accessing resources it wants to encrypt.

What that means: Adversaries may attempt to get information about running processes on a system.
T1069.002 Domain Groups Discovery

What they do: INC Ransom has enumerated domain groups on targeted hosts.

What that means: Adversaries may attempt to find domain-level groups and permission settings.
T1083 File and Directory Discovery Discovery

What they do: INC Ransomware can receive command line arguments to encrypt specific files and directories.

What that means: Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system.
T1087.002 Domain Account Discovery

What they do: INC Ransom has scanned for domain admin accounts in compromised environments.

What that means: Adversaries may attempt to get a listing of domain accounts.
T1120 Peripheral Device Discovery Discovery

What they do: INC Ransomware can identify external USB and hard drives for encryption and printers to print ransom notes.

What that means: Adversaries may attempt to gather information about attached peripheral devices and components connected to a computer system.
T1135 Network Share Discovery Discovery

What they do: INC Ransom has used Internet Explorer to view folders on other systems.

What that means: Adversaries may look for folders and drives shared on remote systems as a means of identifying sources of information to gather as a precursor for Collection and to identify potential systems of interest for Lateral Movement.
T1652 Device Driver Discovery Discovery

What they do: INC Ransomware can verify the presence of specific drivers on compromised hosts including Microsoft Print to PDF and Microsoft XPS Document Writer.

What that means: Adversaries may attempt to enumerate local device drivers on a victim host.
T1680 Local Storage Discovery Discovery

What they do: INC Ransomware can discover and mount hidden drives to encrypt them.

What that means: Adversaries may enumerate local drives, disks, and/or volumes and their attributes like total or free space and volume serial number.
T1021.001 Remote Desktop Protocol Lateral Movement

What they do: INC Ransom has used RDP to move laterally.

What that means: Adversaries may use Valid Accounts to log into a computer using the Remote Desktop Protocol (RDP).
T1570 Lateral Tool Transfer Lateral Movement

What they do: INC Ransom has used a rapid succession of copy commands to install a file encryption executable across multiple endpoints within compromised infrastructure.

What that means: Adversaries may transfer tools or other files between systems in a compromised environment.
T1074 Data Staged Collection

What they do: INC Ransom has staged data on compromised hosts prior to exfiltration.

What that means: Adversaries may stage collected data in a central location or directory prior to Exfiltration.
T1560.001 Archive via Utility Collection

What they do: INC Ransom has used 7-Zip and WinRAR to archive collected data prior to exfiltration.

What that means: Adversaries may use utilities to compress and/or encrypt collected data prior to exfiltration.
T1071 Application Layer Protocol Command and Control

What they do: INC Ransom has used valid accounts over RDP to connect to targeted systems.

What that means: Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic.
T1105 Ingress Tool Transfer Command and Control

What they do: INC Ransom has downloaded tools to compromised servers including Advanced IP Scanner.

What that means: Adversaries may transfer tools or other files from an external system into a compromised environment.
T1219 Remote Access Tools Command and Control

What they do: INC Ransom has used AnyDesk and PuTTY on compromised systems.

What that means: An adversary may use legitimate remote access tools to establish an interactive command and control channel within a network.
T1537 Transfer Data to Cloud Account Exfiltration

What they do: INC Ransom has used Megasync to exfiltrate data to the cloud.

What that means: Adversaries may exfiltrate data by transferring the data, including through sharing/syncing and creating backups of cloud environments, to another cloud account they control on the same service.
T1486 Data Encrypted for Impact Impact

What they do: INC Ransom has used INC Ransomware to encrypt victim's data.

What that means: Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources.
T1489 Service Stop Impact

What they do: INC Ransomware can issue a command to kill a process on compromised hosts.

What that means: Adversaries may stop or disable services on a system to render those services unavailable to legitimate users.
T1490 Inhibit System Recovery Impact

What they do: INC Ransomware can delete volume shadow copy backups from victim machines.

What that means: Adversaries may delete or remove built-in data and turn off services designed to aid in the recovery of a corrupted system to prevent recovery.
T1491.001 Internal Defacement Impact

What they do: INC Ransomware has the ability to change the background wallpaper image to display the ransom note.

What that means: An adversary may deface systems internal to an organization in an attempt to intimidate or mislead users, thus discrediting the integrity of the systems.
T1657 Financial Theft Impact

What they do: INC Ransom has stolen and encrypted victim's data in order to extort payment for keeping it private or decrypting it.

What that means: Adversaries may steal monetary resources from targets through extortion, social engineering, technical theft, or other methods aimed at their own financial gain at the expense of the availability of these resources for victims.

Tools Observed (11)

▼

Software Incransom has been seen using, grouped by what it is used for. Legitimate administration tools appear here because these actors routinely abuse them — presence in this list is not itself malicious.

Discovery

AdFind Advanced IP Scanner

Discovery & enumeration

AdFind Advanced IP Scanner

Exfiltration

BackBlaze MEGA Restic RClone s5cmd

LOLBAS (living-off-the-land binaries)

Finger PsExec

Tool data from Ransomware Tool Matrix by BushidoUK, licensed CC BY 4.0. Grouped by purpose and matched to this group by Breach House.

Victims (986)

Search, filter and paginate the victim timeline for Incransom. Showing 601–700 of 986.

Type	Target	Discovered	Country	Business Category	Leak status
Ransomware	csaas.com id21288 View details	2025-07-22	United States	Services	pending
CSaaS offers custom hosted software solutions and managed IT services, focusing on delivering quality Net-Native technology solutions tailored to individual clients. With nearly 30 years of experience, they provide support for businesses with complex IT needs through managed IT services, remote backups, and more. Their offerings include software solutions for event management, CRM, data tracking, and telecom services. As a Microsoft Silver Independent Software Vendor, CSaaS prides itself on developing custom applications and innovative IT solutions that help businesses operate faster and more securely. Employees: 25 Revenue:$5 Million Industry:Software Phone Number:(864) 248-4957 ID 21288
Ransomware	nboat.com id21286 View details	2025-07-22	United States	Finance / Legal / Insurance	leaked
Established in 1984, the National Boat Owners Association (NBOA) aims to accommodate all aspects of the boating lifestyle. They offer towing memberships with industry benefits as well as discounted boating safety products and specialty items on their online ship's store LifejacketsPlus.com. In addition to its membership base, NBOA is one of the largest marine insurance agencies in the country (NBOA Marine Insurance), providing every one of its customers with A+ rated coverage and affordable premiums. Employees: 27 Revenue:$9.6 Million Industry:Insurance Phone Number:(941) 360-6777 ID 21286
Ransomware	dtxstudio.com id21285 View details	2025-07-22	United States	Communication / Marketing	pending
DTX Studio is a company that provides software for dental professionals that keeps imaging data together for diagnostics, treatments, and follow-ups. They are based in Brea, California. Employees: 324 Revenue:17.8 Million Industry:Software ID 21285
Ransomware	heartlineoklahoma.org id21284 View details	2025-07-22	United States	Healthcare / Pharma	pending
HeartLine OK provides a comprehensive resource platform designed to help individuals find various services, programs, and facilities related to health and wellness. They offer access to an extensive library of articles and interactive tools covering topics such as mental health, substance use, and chronic diseases. Their intended clients include community members seeking assistance with health, housing, employment, and other essential services. HeartLine OK aims to empower users by facilitating access to critical care coordination and support resources. Employees: 26 Revenue:$5 Million Industry:Organizations Downloaded: 20GB ID 21284
Ransomware	scaffoldsolutions.com id21280 View details	2025-07-21	United States	Services	pending
Scaffold Solutions Inc. is a premier provider of commercial and industrial scaffolding products, renowned for its high level of service, expertise, and reliability. The company offers a diverse range of scaffolding solutions, including frame scaffolds, Cuplok systems, shoring, platforms, trash chutes, stair towers, and pedestrian canopies. Their services extend to safety compliance, training, drug testing, and audits, ensuring adherence to industry regulations. Scaffold Solutions primarily caters to clients in the commercial and industrial sectors, seeking reliable scaffolding solutions. Employees: 66 Revenue:$9.2 Million Industry:Manufacturing Downloaded: 19GB Phone Number:(707) 561-7712 ID 21280
Ransomware	erniesinceresco.com id21243 View details	2025-07-18	United States	Retail / E-commerce	pending
We offer a wide selection of furniture, mattresses, flooring, appliances and electronics from the most popular brands. Come and visit us today! See our exclusive selection on Ashley, Smith Brothers,England, Flexsteel, Sealy, Tempur-pedic, Beautyrest, Serta, Liberty, La-Z-Boy, Hunter Douglas Window Fashions, LEES, Karastan, Whirlpool, GE, Samsung, Sony, Kinetico water systems and much more! © 2017 Ernie's Store Inc. All Right Reserved. Website powered & designed by Tailbase. Prices, configurations, promotions, and in-store availability may change without notice. All product photos are for illustrative purposes only. Photos displayed on website may contain optional items that are not included in the default configuration for that system. Actual Furniture may vary in design. Employees: 88 Industry: Retail Downloaded: +30GB Phone Number:(402) 665-3151 ID 21243
Ransomware	Wingpoh_SG id21217 View details	2025-07-17	Singapore	Communication / Marketing	leaked
WING POH HARDWARE PTE LTD is a leading distributor of high-quality industrial, automotive, and garden tools in Singapore, offering products from renowned international brands. With 30 years of industry experience, the company serves a diverse clientele looking for reliable hand tools and abrasive products. Their extensive product range includes items like air impact wrenches, cordless electric screwdrivers, and various specialized tool accessories. Clients include both professionals and DIY enthusiasts seeking a one-stop solution for their hardware needs. ID 21217
Ransomware	Crompton Lamps, UK id21216 View details	2025-07-17	United Kingdom	Communication / Marketing	leaked
Crompton Lamps is one of the oldest lamp businesses in the world, founded in 1878 by the late Colonel Crompton, an entrepreneur with an interest in electricity. He designed and installed some of the earliest recorded electric lighting installations at buildings such as Windsor Castle and Holyrood Palace. In 1927 Colonel Crompton formed a partnership with Frank Parkinson and together they founded Crompton Parkinson which developed into a substantial manufacturing business producing a whole range of industrial electrical products. ID 21216
Ransomware	HTC_Högtryckscenter_Sweden id21215 View details	2025-07-17	Sweden	Communication / Marketing	pending
About us Högtryckscenter has been operating since 1984. Our head office is located in Gothenburg. We have three agencies in Sweden. Goupil electric work vehicles, we have a careful selection of accredited partners throughout Sweden. Our customers are municipalities, housing companies, the Swedish church, private actors and industry. Dynajet high-pressure washers, sales are handled through a careful selection of dealers in Sweden. Customers are in the sanitation industry, municipalities and industry. Glutton electric square / street vacuum cleaner. High pressure centers build and design car washes for all types of vehicles. Fully customized to meet tomorrow's requirements for efficiency and environmental requirements. Furthermore, we present the market's widest range of cleaning machines, high-pressure washers, industrial vacuum cleaners, cleaning tools and chemicals. Translated with DeepL.com (free version) ID 21215
Ransomware	Huize Sint-Augustinus_BE id21214 View details	2025-07-17	Belgium	NGOs / Associations	leaked
Huize Sint-Augustinus, a non-profit organization, has a revenue of $16.3 million. It is located in Belgium. The organization has 45 employees. ID 21214
Ransomware	Vitec id21213 View details	2025-07-17	United States	Education	leaked
VITEC's suite of contact center solutions can help you optimize customer satisfaction, service, training, and improve the overall experience of your center. ID 21213
Ransomware	Сomet-strip-enterprises-ltd id21212 View details	2025-07-17	Canada	Communication / Marketing	leaked
Comet Strip Enterprises Ltd is a leading Canadian national importer specializing in an extensive selection of seasonal items and general merchandise, boasting over 13,000 products. They cater to a diverse range of categories including Christmas, Halloween, footwear, and summer merchandise. The company prides itself on providing excellent customer service and a top-notch product selection. Their intended clients include retailers and consumers looking for quality seasonal and general merchandise. ID 21212
Ransomware	TERENCE C RINGLAND & CO PTY LTD id21211 View details	2025-07-17	Australia	Finance / Legal / Insurance	leaked
Industry: Accounting, Tax Preparation, Bookkeeping, and Payroll Services , Professional, Scientific, and Technical Services , Accounting, auditing, and bookkeeping ID 21211
Ransomware	Secountryvets_AU id21210 View details	2025-07-17	Australia	Healthcare / Pharma	leaked
South East Country Vets provides a wide range of veterinary services for companion animals, equines, and livestock, with a commitment to the health and well-being of all animals. Their team of trained professionals offers preventative health advice and personalized care, treating pets and livestock with the utmost compassion. They cater to clients in and around Esk, Kilcoy, Highfields, and beyond, and also offer specialized health packages for pets and horses. The clinic operates an emergency service and aims to make veterinary care accessible and affordable for their clients. ID 21210
Ransomware	Otjiwarongo Municipality id21158 View details	2025-07-15	Namibia	Public Sector	pending
Otjiwarongo offers stable, efficient and helpful local government, endless potential for investors, both in the industrial and commercial sectors as well as attractive residential areas, excellent schools, and modern medical facilities. Otjiwarongo Municipality works hard to live up to its vision statement, "We Commit to make Otjiwarongo a vibrant Socio-economic Powerhouse". One of the Council's objectives is to ensure growth and development and to create self-sustainability and prosperity in the business sector. Otjiwarongo is ready for further development and offers a profusion of profitable business opportunities, peace and stability, together with a skilled and semi-skilled flexible labour force. Otjiwarongo, the cheetah capital of the world, has maintained its status of stable average economic performance. Businesses enjoy the support of a strong Council, whose prime focus is on local economic development and value-added services and benefits. ID 21158
Ransomware	www.marvimundo.com id21152 View details	2025-07-15	Spain	Other	pending
We downloaded the date of this company back in early May. Enjoy your viewing ID 21152
Ransomware	CF Construction Ltd id21151 View details	2025-07-15	Canada	Construction / Real Estate	pending
A list of files related to various aspects of the company's business will soon be available, including financial documents (Accounting-AP, Credit, Financial, Payroll, Tax), administrative and operational materials (ADMINISTRATION ITEMS, Operations-Management), confidential data (Confidential, Personal, Private), and contractor and vendor documents (Subcontractors, SUPPLIERS). Also included are several non-disclosure agreements (NDAs) with various organizations (CF Construction, MAESTRO TECHNOLOGIES, ACR-Stirling McArthur, Spira, etc.). As well as personal information such as passports, credit cards, etc. ID 21151
Ransomware	www.v4ulogistic.com/ Leaked by www.etornetworks.com id21134 View details	2025-07-14	Canada	Telecommunications	pending
Hacking the company https://www.etornetworks.com/ allowed us to access internal files https://www.v4ulogistic.com/ ID 21134
Ransomware	dwllp.ca/ Leaked by www.etornetworks.com id21133 View details	2025-07-14	Canada	Telecommunications	pending
Hacking the company https://www.etornetworks.com/ allowed us to access internal files https://dwllp.ca/ ID 21133
Ransomware	lstlaw.ca/ Leaked by www.etornetworks.com id21132 View details	2025-07-14	Canada	Telecommunications	pending
Hacking the company https://www.etornetworks.com/ allowed us to access internal files https://www.lstlaw.ca/ ID 21132
Ransomware	Trilinklogistics Inc / Leacked by www.etornetworks.com/ id21131 View details	2025-07-14	Canada	Telecommunications	pending
Hacking the company https://www.etornetworks.com/ allowed us to access internal files https://trilinklogistics.com/ ID 21131
Ransomware	National Institute of Water Resources id21130 View details	2025-07-14	Dominican Republic	Education	leaked
The National Institute of Hydraulic Resources (INDRHI) is the entity responsible for conserving and efficiently using water resources. ID 21130
Ransomware	k12albemarle.org id21107 View details	2025-07-12	United States	Education	pending
Working together as a team, we will end the predictive value of race, class, gender, and special capacities for our childrens success through high quality teaching and learning for all. We seek to build relationships with families and communities to ensure that every student succeeds. We will know every student. Working together as a team, we will end the predictive value of race, class, gender, and special capacities for our childrens success through high quality teaching and learning for all. We seek to build relationships with families and communities to ensure that every student succeeds. We will know every student. Working together as a team, we will end the predictive value of race, class, gender, and special capacities for our childrens success through high quality teaching and learning for all. We seek to build relationships with families and communities to ensure that every student succeeds. Employees: 1,339 Industry: Education Downloaded: 229GB Phone Number:(434) 972-4001 ID 21107
Ransomware	brennytransportation.com id21096 View details	2025-07-10	United States	Transportation / Travel / Logistics	pending
Brenny Transportation, headquartered in Central Minnesota, is a premier transportation and logistics company specializing in the safe and efficient delivery of goods to businesses and individuals across the nation. They offer a wide range of services, including long-haul trucking, last-mile delivery, and logistical solutions tailored to the unique needs of their clients. The company serves various customers, from manufacturers and distributors to retailers and individuals, and is dedicated to providing reliable, timely, and cost-effective transportation services. With a focus on grand champion customer service and a commitment to safety, Brenny Transportation is well-equipped to handle all transportation challenges Employees: 73 Revenue:$18.3 Million Industry: Transportation Downloaded: 45GB Phone Number:(320) 363-6999 ID 21096
Ransomware	tiergesundheitszentrum-koenigslutter.de id21095 View details	2025-07-10	Germany	Healthcare / Pharma	leaked
Your small animal practice for Königslutter and the entire region Welcome to the Königslutter Animal Health Center – your veterinary practice for Königslutter and the entire region. Employees: 24 Revenue:$5 Million Downloaded: 12GB ID 21095
Ransomware	bayviewci.org id21094 View details	2025-07-10	United States	Healthcare / Pharma	pending
The Bayview Hunters Point Foundation empowers the community through various education and health initiatives, focusing on social justice and community health services. Established in 1971, it addresses critical issues such as behavioral health, homelessness, housing, food insecurity, and incarceration reintegration. The foundation primarily serves multicultural disadvantaged individuals and families in San Francisco, promoting healing, empowerment, and justice. With a dedicated approach, the organization aims to provide dignity and fulfillment to its clients and the broader community. Employees: 58 Revenue:$5 Million Industry:Medical Downloaded: 15GB Phone Number:(415) 468-5100 ID 21094
Ransomware	communitycareresources.com id21093 View details	2025-07-10	United States	Communication / Marketing	pending
Community Care Resources (CCR) Wisconsin is a private foster care agency dedicated to providing hope and healing for children in the foster care system. They support families across Wisconsin by educating, training, and licensing foster parents to care for children, including sibling groups, with trauma histories. The agency emphasizes trauma-informed care and offers comprehensive 24/7 support services to foster families. CCR Wisconsin aims to match hundreds of children in need with loving foster homes, ensuring that children from various backgrounds feel safe and loved. Employees: 33 Revenue:$5 Million Industry:Non-Profit Downloaded: 12GB Phone Number:(800) 799-0450 ID 21093
Ransomware	TBC id21077 View details	2025-07-09	Saudi Arabia	Services	pending
TBC is a Governmental project management company, owned fully by PIF, founded to undertake building and maintaining educational buildings, with the highest standards and quality. The company provides an integrated series of services in Operations & Construction, Facility Management, Investment & Asset Management, and Privatization & Vision 2030 Support. ID 21077
Ransomware	Lamberts Business Systems id21076 View details	2025-07-09	New Zealand	Services	pending
WELCOME TO LAMBERTS Established for over 40 years our name says it all. We specialise in business systems and services. We are total computer hardware and network providers, copier and printer suppliers. Our technical service includes Microsoft Certified Systems Engineers and we are an authorised Hewlett Packard and Canon service centre. It is because of the quality of our services that all these companies, and us included, have suffered INC RANSOM. https://www.qds.nz https://itm.co.nz https://www.innesdean.co.nz https://www.genoese.co.nz https://www.atstimber.co.nz https://www.customblinds.co.nz https://kitchens.mastercraft.co.nz https://www.timbersaws.co.nz https://www.lonsdalehospital.co.nz https://www.vautierpharmacy.co.nz https://www.totarahouse.co.nz https://theoc.co.nz http://coural.co.nz https://resonant.co.nz https://www.prenail.co.nz https://www.pearce.co.nz https://opd.co.nz https://www.mcintoshfarmmachinery.co.nz https://theoc.co.nz ID 21076
Ransomware	Majestic id21074 View details	2025-07-09	Philippines	Other	leaked
FULL ID 21074
Ransomware	tsaworld.com id21005 View details	2025-07-07	United States	Communication / Marketing	leaked
TSAworld Inc. specializes in providing a wide range of office equipment and supplies including projectors, printers, copiers, and scanners, as well as their associated parts and maintenance kits. Their products cater to clients seeking technical expertise and quality office solutions. The company also offers resources such as credit applications and an exchange program to enhance customer support. Operating from Peachtree Corners, GA, TSAworld emphasizes customer service and support for all their offerings. Employees: 25 Industry: Retail Downloaded: 25GB Phone Number:(770) 417-2323 ID 21005
Ransomware	jubileejobs.org id21004 View details	2025-07-07	United States	Communication / Marketing	pending
Jubilee Jobs is one of the longest-serving and best non-profit workforce development providers in the Greater Washington Region. Jubilee Jobs programs offers hope for jobseekers all over Washington, DC as they strive to overcome often extensive barriers that result from unemployment, learning disabilities, former incarceration, and alcohol/substance abuse. Some individuals desire to leave behind reliance on public subsidies. Others start with little work experience, large gaps in work history, communication or language barriers, low education or weak job proficiency. Jubilee Jobs sees beyond these circumstances and assists every applicant as they take steps toward a better life. At Jubilee Jobs, we pride ourselves on encouraging every applicant throughout the entire job process. The process begins with initial meetings with job counselors, moves to workshops (interviewing skills, conflict resolution, goal-setting) and ends with the individual obtaining a job. Employees: 32 Revenue:$5 Million Industry: Business Services Downloaded: 10GB Phone Number:(202) 667-8970 ID 21004
Ransomware	cityofgardendale.com id20966 View details	2025-07-04	United States	Public Sector	pending
Gardendale Fire and Rescue is currently providing services to our community with a roster consisting of a fulltime Fire Chief, Fire Marshal and eighteen (18) Fire/Medics. The Department provides all fire, medical ALS [Advance Life Support] and various technical services to our community of approximately 50 square miles. The Department currently operates out of Fire Station #1 located at 1811 Decatur Highway. Fire Department administrators and city officials are working towards the construction of two additional satellite stations in the western and eastern areas of the city to cover the growing number of new subdivisions and businesses we are experiencing. Through the dedication, knowledge and experience within our department staff, we feel we can provide the citizens and patrons of Gardendale with the finest protection, best services, and the highest quality of life possible.Revenue: $5 Million Employees: 91 Industry: Government Downloaded: 45GB Phone Number:(205) 631-8789 ID 20966
Ransomware	C B King Memorial School(branch) id20959 View details	2025-07-04	United States	Education	pending
C.B. King Memorial School, Inc. is a private, nonprofit agency that provides services to persons with developmental delays or disabilities. ID 20959
Ransomware	alereon.com id20932 View details	2025-07-02	United States	Telecommunications	pending
Alereon is a global leader in ultrawideband (UWB) wireless solutions, providing high-speed, short-range wireless technology for various industries. They design and fabricate UWB chipsets and offer a range of products and services, including wireless modules, reference designs, and custom hardware and software development. Their solutions cater to a diverse clientele, including consumer electronics, medical devices, and military applications that require reliable, high-speed wireless communication. Established in 2004, Alereon has built a strong reputation for meeting customers' high-speed wireless needs through innovative and customized solutions===> Revenue: $25.4 Million Employees: 92 Industry: Manufacturing Downloaded: 116gb Phone Number:(512) 345-4200 ID 20932
Ransomware	coruzcitywndata+ id20909 View details	2025-07-01	United States	Public Sector	leaked
Thomasville is a city in Davidson County, North Carolina, United States. The city was once notable for its furniture industry, as were its neighbors High Point and Lexington. We have 250gb data, lots of financial information about all the services in your city ID 20909
Ransomware	The Kingdom of Tonga's Ministry of Health id20852 View details	2025-06-27	Tonga	Healthcare / Pharma	pending
Tonga's health system includes central hospitals, peripheral health centres and communitybased services. Key health challenges include rising rates of NCDs such as diabetes, obesity, heart disease and cancer. Communicable diseases such as tuberculosis, STIs and VPDs persist. ID 20852
Ransomware	Medical Center of Marin id20826 View details	2025-06-25	United States	Healthcare / Pharma	pending
Medical Center of Marin provides quality urgent care in the Bay Area. If you need a doctor, see the health care experts at their medical clinic. Their experienced doctors and staff are committed to providing fast, high-quality care at an affordable price. But they chose to keep their own money over the privacy of their patients' sensitive data. ID 20826
Ransomware	Fund for Reformed Companies (FONPER) id20821 View details	2025-06-25	Dominican Republic	Communication / Marketing	pending
The Fondo Patrimonial de las Empresas Reformadas (FONPER) is an institution of the Dominican State created by virtue of Law number 124-01, enacted on July 24, 2001, whose fundamental mission is to watch over, safeguard and administer the State's shares in the companies that emerged from the reform and transformation process carried out as of 1997 ID 20821
Ransomware	OAK PARK & RIVER FOREST HIGH SCHOOL id20762 View details	2025-06-21	United States	Education	leaked
Welcome to Oak Park and River Forest High School! Oak Park and River Forest High School provides a dynamic, supportive learning environment that cultivates knowledge, skills, and character and strives for equity and excellence for all students. ID 20762
Ransomware	doradosoftware.com id20758 View details	2025-06-21	United States	Telecommunications	pending
Dorado Software specializes in integrated networking solutions, notably offering Cruz SONiC Solutions for enterprise and community networking needs. They provide a range of software and hardware solutions including advanced network performance management, orchestration, automation, and edge management tools. The company targets a variety of clients, including rural broadband providers and organizations seeking comprehensive network automation and IT infrastructure management. Dorado also partners with firms like Dell Technologies to expand their service offerings and enhance client solutions. Contact: Mark Dempsey (Technical Writer) - >homePhone: (916)-989-5707 >mobile: 916-390-4826 Bill Acevedo - >homePhone: 916-536-1206 >mobile: 916-397-0593 Layne Frederiksen (Engineer) - >homePhone: 916.725.1323 >mobile: 916.761.7394 Jim Souders (Vice President) - >mobile: 916.214.6260 Vicki Crozier (Vice President) - >mobile: (916)-833 2052 Ed Kucala (Vice President) - +1.916.673.1100 x1039 ID 20758
Ransomware	https://www.ilesfuneralhomes.com/ id20739 View details	2025-06-19	United States	Other	leaked
ILES FUNERAL HOMES ID 20739
Ransomware	AFECC - Hospital Santa Rita de Cássia id20738 View details	2025-06-19	Brazil	Healthcare / Pharma	leaked
Created in 1970, the Santa Rita de Cassia Hospital is a philanthropic entity recognized throughout the state as a reference in cancer treatment, but which also offers general specialties to provide quality and comfort to the entire population. ID 20738
Ransomware	Morar Construtora e Incorporadora LTDA id20737 View details	2025-06-19	Brazil	Construction / Real Estate	pending
Morar Construtora is one of the 100 largest construction companies in Brazil and a leading firm in Espírito Santo. ID 20737
Ransomware	New Jersey Association on Correction id20723 View details	2025-06-19	United States	NGOs / Associations	pending
The New Jersey Association on Correction (NJACon) has a revenue stream that includes program services, investment income, and potentially other sources. In the fiscal year ending June 2024, program services revenue was $5,510,221 with a 4.8% increase. Investment income and dividends totaled $34,775, experiencing a 17.8% increase. The organization's total revenue for 2024 was reported as $12.6 million, with expenses at $13.1 million. The association also has received over $10.7 million in federal grants. ID 20723
Ransomware	West Texas Oral and Facial Surgery id20716 View details	2025-06-18	United States	Healthcare / Pharma	pending
West Texas Oral Surgery is a local oral surgery practice in Lubbock, staffed by board-certified oral surgeons and expert personnel. The practice offers a variety of services including dental implants, tooth extractions, wisdom teeth removal, corrective jaw surgery, and treatments for sleep apnea and TMJ. Their intended clients are individuals in need of oral surgical procedures, with a focus on compassionate care and patient well-being. The team is dedicated to providing excellent patient care and ensuring a smooth recovery process. ID 20716
Ransomware	Academic Urology & Urogynecology of Arizona id20697 View details	2025-06-17	United States	Communication / Marketing	pending
Academic Urology & Urogynecology of Arizona is a premier urology practice offering compassionate patient care to individuals throughout Arizona. ID 20697
Ransomware	Lamina Dielectrics, United Kingdom id20696 View details	2025-06-17	United Kingdom	Communication / Marketing	pending
Lamina Dielectrics leads the world in the development and manufacture of Spiral Winding, Heat Shrink / Non Shrink Tubes and Endcaps that provide electrical insulation as well as mechanical and chemical protection. Including Mylar Tubing, Polyester Tubing, Nomex Tubing and Kapton Tubing. ID 20696
Ransomware	Sandhill View County School_UK id20695 View details	2025-06-17	United Kingdom	Education	leaked
Sandhill View is at the heart of a community where everyone matters. An Academy for 11- 16 Year olds, we are a member of the 'Aspire North East Multi Academy Trust'. Our school strives to raise achievement and aspiration in all its pupils, so that they develop with confidence and pride in preparation for their future. ID 20695
Ransomware	Durant City id20694 View details	2025-06-17	United States	Public Sector	pending
Durant City Government · Oklahoma, United States Headquarters:300 W Evergreen St Rm 100, Durant, Oklahoma, 74... Phone Number:(580) 931-6600 Website:www.durant.org ================== Despite our reports that 800+ GB of data - may become public, the Management of this city has been totally negligent and indifferent to the fact that now passport data \ addresses \ phone numbers of hundreds of people will fall into the hands of scammers. Durant City has 48 hours, this is your last chance! ID 20694
Ransomware	alleray-labrouste id20616 View details	2025-06-12	France	Healthcare / Pharma	leaked
Clinique Alleray Labrouste is a company that operates in the Medical & Surgical Hospitals industry. It employs 250to499 people and has 10Mto25M of revenue. The company is headquartered in Paris, Ile-de-France, France. ID 20616
Ransomware	Mount Rogers Community Services id20554 View details	2025-06-10	United States	Services	leaked
Mount Rogers Community Services provides Mental Health, Developmental Disability, and Substance Use Services to the people of Bland, Carroll, Grayson, Smyth, and Wythe Counties as well as the City of Galax. ID 20554
Ransomware	waiwhetu-medical-centre id20516 View details	2025-06-07	New Zealand	Healthcare / Pharma	leaked
Waiwhetū Medical Centre operates under the korowai of Te Rūnganganui o Te Āti Awa. The team apply a whānau approach to deliver wrap around support services that aim to identify and meet the needs of whānau living in Te Awa Kairangi. ID 20516
Ransomware	MTTEXPERTISES.COM id20502 View details	2025-06-06	Morocco	Services	leaked
MTT Expertises is a Franco-Moroccan firm specializing in asset valuation and post-incident expertise. Founded in 2004, the company offers services such as insurance capital estimation, risk management, and assistance after incidents. With a multidisciplinary team of over 40 professionals, including engineers, technicians, and financial experts, MTT Expertises operates from offices in Casablanca, Agadir, and Tangier, and maintains a presence in France and other African countries. The firm is accredited by the Moroccan Federation of Insurance and Reinsurance Companies (FMSAR), ensuring quality and reliability in its services. Under the leadership of Director Mohamed Tahiri, MTT Expertises is committed to delivering precise and professional services to meet the diverse needs of its clients. ID 20502
Ransomware	Nunez Dental id20501 View details	2025-06-06	United States	Healthcare / Pharma	leaked
Nunez Dental is a dental practice located in Jackson Heights, NY, dedicated to providing comprehensive dental services and ensuring patient satisfaction. With 37 years of experience, they have successfully served 36,000 patients, supported by a team of 31 skilled staff members. The practice boasts 10 master certifications, reflecting their commitment to high-quality dental care. They are open Monday through Friday and Saturday, offering flexible hours for their intended clientele. ID 20501
Ransomware	Kittery Police Department id20500 View details	2025-06-06	United States	Public Sector	leaked
The mission of the Kittery Police Department is to work in partnership with the community to enforce the law, preserve the peace, and protect the rights, lives and property of all people. ID 20500
Ransomware	iscamen id20453 View details	2025-06-05	Argentina	Agriculture / Food	leaked
ISCAMEN is focused on the proper management of agricultural waste to protect the environment. They provide programs related to phytosanitary protection and offer technical exchanges to address issues like pest control. Their services are aimed at regulating and controlling the entry of agricultural products to safeguard local agriculture. Intended clients include agricultural producers and regulatory agencies in Mendoza ID 20453
Ransomware	cemeteries.local id20437 View details	2025-06-04	Canada	Communication / Marketing	leaked
The Catholic Cemeteries of the Diocese of Hamilton provides burial and cremation services specifically for Catholics and their families, regardless of their family's religious affiliation. These cemeteries serve as sacred places for prayer, reflection, and honoring deceased loved ones, with a focus on maintaining a faithful representation of the community's beliefs. They offer pre-arrangement options for burial plots, cremation niches, and other memorial services without pressure sales tactics. The organization emphasizes compassionate care and respect for traditions within the Catholic faith. ID 20437
Ransomware	Funktel GmbH id20436 View details	2025-06-04	Germany	Communication / Marketing	pending
With its head office in Salzgitter, funktel GmbH is a leading manufacturer of professional security and communication solutions based on DECT and TETRA for industry, public utilities and authorities. funktel GmbH become a victim of the largest data breach. 3.5TB sensitive data will be published soon in our blog. ID 20436
Ransomware	Sandhills Medical Foundation id20406 View details	2025-06-03	United States	Healthcare / Pharma	pending
Sandhills Medical Foundation, Inc. is a Federally qualified community health center (FQHC) that has been providing comprehensive healthcare services since 1977. With locations in Chesterfield, Kershaw, Lancaster, and Sumter Counties, the organization focuses on primary care medicine, mental health, and supportive services such as healthcare navigation for Medicaid and the Affordable Care Act. The foundation aims to address community healthcare needs by delivering quality and cost-effective services to its patients. It also emphasizes preventive care and coordination of care through a patient-centered medical home approach ID 20406
Ransomware	valuestoreit id20384 View details	2025-06-01	United States	Retail / E-commerce	pending
Value Store It Self Storage is a privately owned self storage company based in Miami, Florida. We tender over 1'00,000 sq/ft in Florida, New York, Connecticut and offer a safe and clean place for residential and business customers to store their belongings. All the Value Store It facilities are managed by a professional staff that is trained to meet your needs and expectations. Their knowledge of storage and the local area make them a reliable source for questions regarding storage, truck rentals, moving services packing supplies and communities serviced. Value Store It Self Storage continues to expand in South Florida and is currently adding properties to accommodate new and future customers. ID 20384
Ransomware	Universidad Técnica del Norte Ecuador id20383 View details	2025-06-01	Ecuador	Other	pending
Universidad Técnica del Norte UTN, Ciencia y Técnica al Servicio del Pueblo. ID 20383
Ransomware	mysfa.org id20360 View details	2025-05-30	United States	Services	pending
St. Francis Advocate (SFA) provides individualized support for adults and youth with developmental disabilities, offering services such as residential homes, supported independent living, and programs for youth transitioning to adulthood. Operating since 1984, SFA has deep community roots in Sarnia-Lambton, Chatham-Kent, and Windsor-Essex, emphasizing a family-oriented approach in their care. The organization operates 13 supported group living homes and prioritizes person-directed planning for each participant. SFA is committed to helping individuals live their best lives through compassionate and understanding support ID 20360
Ransomware	Jordan Drug id20336 View details	2025-05-30	United States	Healthcare / Pharma	leaked
Jordan Drug, Inc. currently operates seven independent pharmacies across eastern Kentucky. The Jordan Drug Family Stores include Village Apothecary and Stufflebean Pharmacy in Beattyville, Owsley Prescription Center in Booneville, Wolfe Prescription Center in Campton, Powell Prescription Center in Clay City, Jackson Apothecary in Jackson, and Clinic Pharmacy in Salyersville. Jordan Medical, LLC was established by Luther and Rosemary Smith in September of 2005 to serve patients in central and eastern Kentucky already being served by Jordan Drug, Inc. with respect to their durable medical needs. Jordan Medical’s retail showroom is located at 1075 Hwy 11 North in Beattyville, Kentucky, in the same building as the corporate office of Jordan Drug, Inc ID 20336
Ransomware	oxparkrec.org id20228 View details	2025-05-25	United States	Communication / Marketing	leaked
Oxford Parks and Rec focuses on enhancing community engagement through diverse parks, recreational programs, and events. They offer facilities such as senior activity centers, splash pads, and various township parks. Their services include organized athletics, enrichment programs, summer camps, and special community events. The intended clients are the residents of Oxford Township and families looking for recreational activities ===> Revenue: $5 Million Employees: 25 Industry: Government Data:90GB Phone Number: (248) 628-1720 ID 20228
Ransomware	piercecountylibrary.org id20189 View details	2025-05-22	United States	Public Sector	leaked
The Pierce County Library System includes 20 libraries in Pierce county. The libraries offer families and children free access to 1 million books, CDs and films, and numerous programs to help kids read and do their homework ID 20189
Ransomware	Rivers Academy West London id20165 View details	2025-05-21	United Kingdom	Education	pending
At Rivers Academy we are committed to supporting and challenging all students to fulfil ambitious goals. Indeed the Academy's motto is 'Aspiration Ambition Achievement'. We have the highest expectations in terms of uniform, behaviour and mutual respect. Students at Rivers Academy understand that meeting these very high standards means that they come to the Academy feeling good about themselves and ready to learn. Staff and students here demonstrate an enormous pride in the Academy and we are a happy Academy focussed on supporting and challenging each other to do our very best to achieve our full potential. It is our ambition to ensure that all students at the Academy enjoy the benefits of an exciting and engaging curriculum, excellent teaching and learning, calm and purposeful behaviour in lessons and a creative and interesting range of further opportunities that broaden their experiences. ID 20165
Ransomware	The Vascular Experts id20150 View details	2025-05-20	United States	Healthcare / Pharma	pending
Founded in 2001, by one surgeon, The Vascular Experts has nearly 30 clinical providers and more than 20 Board-certified vascular surgeons. With a commitment to deliver expert vascular medical and surgical care to communities in Connecticut and Rhode Island, it is one of the largest groups of Board-certified vascular surgeons in the country. With state-of-the-art facilities in multiple locations, The Vascular Experts deliver the latest minimally invasive vascular procedures including angioplasty, endovascular surgery, vein ablations and sclerotherapy to treat vascular disease. ID 20150
Ransomware	nissi-beach.com id20092 View details	2025-05-16	Cyprus	Hospitality / Food & Beverage / Tourism	pending
Located in Ayia Napa, the Nissi Beach Resort has garnered a reputation as a true paradise destination that can be enjoyed year-round. ===> Revenue: $10 Million Employees:283 Industry: Hospitality Data:400GB Phone Number: +357 23721021 +357 23 722 900 alion.com ID 20092
Ransomware	alpha-steuer.de id20091 View details	2025-05-16	Germany	Services	pending
Die Zukunft gemeinsam erfolgreich gestalten Bei uns stehen Sie und Ihre persönlichen Ziele im Mittelpunkt unserer ganzheitlichen Beratung. Gemeinsam mit Ihnen entwickeln wir mageschneiderte Strategien, die mehr sind als klassische Steuerberatung. Unser Ziel ist es, Sie mit perfekt abgestimmten Lösungen zu entlasten, damit Sie den Kopf frei haben und optimistisch in eine erfolgreiche Zukunft blicken können. Das nennen wir Mehrwert. Die alpha Steuerberatungsgesellschaft hat sich auf die Beratung von Heilberuflern spezialisiert und betreut mehr als 4.000 rzte, Zahnrzte und Tierrzte. Die alpha ist heute mit uber 200 hochqualifizierten Mitarbeitern, davon 25 Experten für Steuerberatung und Wirtschaftsprüfung, eine der gröten auf Heilberufe spezialisierten Steuerberatungsgesellschaften in Deutschland. Durch regionale Niederlassungen an sieben Standorten ist für jeden Mandanten eine optimale Betreuung und Erreichbarkeit gegeben ===> Revenue: $15 Million Employees: 59 Industry: Business Services Data:400GB Phone Number: +49 604297850 ID 20091
Ransomware	npfy.org id20090 View details	2025-05-16	United States	Education	pending
New Pathways for Youth is dedicated to transforming the lives of youth in Phoenix, AZ, through a comprehensive mentorship program. The organization focuses on providing holistic development, individualized mentoring, and essential resources to empower young people to achieve their goals. With a commitment to closing the opportunity gap, they aim to support students in graduating high school and pursuing post-secondary education. They invite potential mentors to join their mission and make a meaningful impact in the community ===> Revenue: $5 Million Employees: 33 Industry: Organizations Data:70GB Phone Number: (602) 258-1012 ID 20090
Ransomware	finanzconsult-immobilien.de id20089 View details	2025-05-16	Germany	Communication / Marketing	pending
Location, concept, architecture, and profitability – cooperatively combined in a complete package! Successful project development consists of the sum of many surveys and decisions regarding the development of one or more plots of land or their alternative use. In residential areas, this is not limited to the search for suitable plots within the framework of applicable building regulations, but also, and especially, targeted and needs-based planning. This requires a well-established network of information providers, architects, and lawyers. With almost 30 years of site experience in the state capital of Dresden, as well as a large number of completed projects, we have this expertise and can look back on a wide variety of approaches. ===> Revenue: $15 Million Data:20GB Phone Number: 0221 / 94 20 94 30 0351 / 84 07 80 ID 20089
Ransomware	www.davisdavisco.com id20088 View details	2025-05-16	United States	Energy	pending
Davis & Davis Company specializes in providing products and systems for Oil, Natural Gas, and Liquid Measurement. Established in 1941, the company offers technical sales support and a wide range of measurement controls and instrumentation, including flow meters and control valves. Their intended clients include those in the energy sector, specifically targeting companies involved in natural gas and oil production. Davis & Davis is committed to enhancing accuracy and efficiency in measurement technology ===> Revenue: $5 Million Industry: Manufacturing Data:60GB Phone Number: (303) 935-4694 Brian - 307-315-7277 Cheryle - 303-548-3151 Dan - 303-949-7518 Daniel Davis - 435-790-3093 Estevan - 303-667-8390 Greg - 303-898-7699 Jesse - 720-217-1327 Jon - 406-672-9589 Kris Ann - 720-690-6417 Kylee - 720-427-2628 Martin - 720-355-6723 Matt - 303-882-6108 ID 20088
Ransomware	ros.eu id20087 View details	2025-05-16	Germany	IT	pending
TRAPOROL is the specialist and leading provider of idler rollers, motor rollers, expansion elements and accessories for conveying technology systems ===> Revenue: $6.6 Million Employees: 25 Industry: Manufacturing Data:450GB Phone Number: +49 964280200 Employees Phone Number: +49 9642 80 154 +49 9642 80 245 +49 9642 80 258 +49 9642 80 263 +49 9642 80 265 +49 9642 80 161 +49 9642 80 163 +49 9642 80 139 +49 9642 80 240 +49 9642 80 162 Trust: https://www.zoominfo.com/c/iem-fo%CC%88rdertechnik-gmbh/406145742 Website = www.iem.eu Revenue = $6.1 Million Phone Number = +49 9642800 Architecture, Engineering & Design ID 20087
Ransomware	ccrcda.org id20086 View details	2025-05-16	United States	Communication / Marketing	pending
Catholic Charities, a ministry of the Catholic Diocese of Albany, is committed to active witness on behalf of the Scriptural values of mercy and justice. Catholic Charities, recognizing human need at all stages of life, responds to all persons regardless of race, creed, or lifestyle, with special emphasis on the economically poor and the vulnerable. Catholic Charities serves and empowers persons in need, advocates for a just society, calls forth and collaborates with women and men of good will in fulfillment of its mission. Catholic Charities of the Diocese of Albany is one of the largest, private, social service agencies in the region, helping more than 89,000 people each year in the fourteen counties of the Albany Diocese. Our motive is simple: to address basic human need at all stages of life regardless of race, religious belief, ethnicity, or lifestyle with special emphasis on the poor and vulnerable in our society. Catholic Charities offers a wide spectrum of services. ===> Revenue: $5 Million Employees: 66 Industry: Organizations Data:200gb Phone Number: (518) 453-6650 Employees: Mary Keniry (Program Director / LONG TERM CARE OMBUDSMAN PROGRAM) ---> 518-925-0211 Kristine Eagan - (Program Coordinator PT / HIICAP) ---> (518) 579-3344 Lauren Benoit (Program Director / CAREGIVER SUPPORT PROGRAM) ---> 518-817-0059 Marlene Hildenbrandt - (Executive Director / ADMINISTRATION) ---> 518-491-9235 Karen Helms - (Administrative Assistant PT / ADMINISTRATION) ---> (518) 372-5675 Colleen Henry - (Program Secretary / ADMINISTRATION) ---> (518) 372-5668 James Willis - (Senior Accountant / ADMINISTRATION) ---> (518) 579-3348 Jennifer Doherty - (Elder Care Manager/ AGING LIFE SERVICES) ---> 518-545-6631 Amy Carman - (Elder Care Manager/ AGING LIFE SERVICES) ---> 518-275-8700 Cody Jacobson (IT Security Officer) ---> 518-453-6650 Cathy Krom ---> 518-453-6650 Louise Novak (coordinator NUTRITION OUTREACH) ---> 518-312-2770 Noelle Marie - Coordinator (ONG TERM CARE OMBUDSMAN PROGRAM) ---> 518-573-0985 ID 20086
Ransomware	south african airways (flysaa.com) id20031 View details	2025-05-16	South Africa	Transportation / Travel / Logistics	leaked
South African Airways (SAA) is a passenger and freight airline that is owned and operated by the South African government. Saa is a member of the Star Alliance network and is headquartered in Johannesburg, South Africa ID 20031
Ransomware	GARDNER ORTHOPEDICS id20019 View details	2025-05-15	United States	Healthcare / Pharma	leaked
Gardner Orthopedics is an orthopedic practice based in Fort Myers, Florida, offering a wide range of services including orthopedic surgery, regenerative medicine, and rehabilitation. The clinic specializes in treating various conditions related to bones, joints, ligaments, and muscles, with a focus on keeping patients active. Led by board-certified orthopedic surgeon Ronald Gardner, the facility caters to adult patients in need of orthopedic care. The organization aims to provide comprehensive solutions for injuries and ailments affecting the musculoskeletal system. ID 20019
Ransomware	StudioVaiani id19659 View details	2025-05-01	Italy	Finance / Legal / Insurance	pending
Studio Vaiani is an Italian accounting and consulting firm based in Crema, founded in the early 1970s by Ernesto Vaiani. The firm offers a wide range of professional services, including corporate, tax, financial, labor, and contractual consulting. Their expertise encompasses accounting, tax compliance, business planning, financial analysis, and legal auditing. Studio Vaiani serves as a reliable partner for entrepreneurs, providing tailored solutions to meet clients' needs in Italy and internationally. ID 19659
Ransomware	The Saint James Hospital Group id19656 View details	2025-05-01	Malta	Healthcare / Pharma	pending
At Saint James Hospital Group, they have over 25 years of experience in the healthcare sector. It has earned a reputation for excellence and innovation, backed by the latest state-of-the-art technology and staffed by highly-qualified professional personnel. They are the natural choice when seeking private medical treatment, not simply because they have the experience to meet your expectations, but also because they house the very best in modern technology – and the island’s most renowned consultants and health professionals. The Saint James Hospital Group became a victim of the data breach. 250Gb sensitive, medical and personal data will be published soon in our blog. ID 19656
Ransomware	Hpital Glengarry Memorial Hospital (clglen.local) id19626 View details	2025-04-28	Canada	Healthcare / Pharma	pending
Community Living Glengarry is focused on enhancing the lives of individuals with intellectual disabilities through various services, including residential group living, supported independent living, and community participation. ID 19626
Ransomware	arkansasprimarycare.com id19328 View details	2025-04-24	United States	Communication / Marketing	pending
Arkansas Primary Care Clinic PA is a company that operates in the Hospitals & Physicians Clinics industry. It employs 20to49 people and has 5Mto10M of revenue. The company is headquartered in Little Rock, Arkansas. ===> Revenue: $6.8 Million Employees: 30 Industry: Healthcare Data:370gb ... ID 19328
Ransomware	lemi-group id19310 View details	2025-04-23	Italy	Healthcare / Pharma	pending
Lemi Group has been manufacturing equipment for beauty salons, spas, podiatry, and medical use for 34 years. ID 19310
Ransomware	franklin nursing home id19295 View details	2025-04-22	United States	Healthcare / Pharma	leaked
Franklin Nursing Home looks after old people, feeds them, monitors their treatment ID 19295
Ransomware	Koninklijke Ahold Delhaize N.V. id19206 View details	2025-04-16	Netherlands	Communication / Marketing	leaked
The family of Ahold Delhaize serve 72 million customers every week in the United States, Europe and Indonesia. Each brand shares a passion for delivering great food, value and innovations, and for creating inclusive workplaces that provide rewarding professional opportunities. Ahold Delhaize become a victim of the largest data breach. 6TB sensitive data will be published soon in our blog. ID 19206
Ransomware	iblinfo.de id19181 View details	2025-04-16	Germany	Manufacturing / Engineering	leaked
ibL – Ingenieurbüro für Landentwicklung GmbH – based in Halle (Saale) is a consulting and planning engineering firm that operates primarily in rural areas. Our work focuses on planning services for land development using geodata. In selected regions, we act as a suitable agency for determining and reorganizing the ownership of land and buildings based on Section 99 (2) of the Land Consolidation Act and Section 53 of the Agricultural Adjustment Act. ===> Phone Number: 0345 233 410 Revenue: $5 Million Industry: Engineering Employees: 25 Data: 56gb ID 19181
Ransomware	trocaire.edu id19165 View details	2025-04-15	United States	Education	deleted
Founded in 1958 in the Buffalo, NY by the Sisters of Mercy, Trocaire College is a private, career-oriented Catholic college that strives to empower students toward personal enrichment, dignity and self-worth through education. A career-oriented institution, Trocaire offers bachelor's degrees, associate degrees and certificate and workforce development programs in healthcare, business, hospitality and technology. Recognizing the individual needs of a diverse student body, Trocaire College provides life learning and development within a community-based environment, preparing students for service in the universal community. ===> Phone Number: (716) 826-1200 Revenue: $24.6 Million Industry: Education Employees: 217 Data: 310gb ID 19165
Ransomware	Orthopaedic Specialists of Connecticut id19146 View details	2025-04-14	United States	Healthcare / Pharma	leaked
Best Orthopedics, Sports Medicine, Joint Replacement. ID 19146
Ransomware	MENTAL HEALTH id19145 View details	2025-04-14	United States	Healthcare / Pharma	pending
Mental Health Partners Is now Clinica Family Health & Wellness So many factors influence your health and well-being. That’s why "whole-person" or "integrated" healthcare matters. It ties together your physical, oral, and mental health. Clinica Family Health & Wellness is leading the way by treating you as a whole person and providing all the care you need to be healthy and well. Select the buttons below to learn more about our whole-person health services. Welcome to your new health care home! In our hands there are more than 1 terabyte of the company's data. Including all personal cards of patients. Databases. The results of treatment and diagnoses. Databases. Postal correspondence and financial documents. All data will be published in case of refusal of payment. ID 19145
Ransomware	Chickenshed id19110 View details	2025-04-12	United Kingdom	Communication / Marketing	pending
Chickenshed is an inclusive theatre company based in London, founded in 1974. It brings together people of all ages and abilities, including those with physical and mental challenges. Chickenshed produces performances, offers performing arts education, and runs international projects — creating a space where everyone can unlock their potential through creativity. ID 19110
Ransomware	Imagineering Finishing Technologies id19096 View details	2025-04-11	United States	IT	pending
Imagineering Finishing Technologies (IFT) is the industry KnowledgeSource for metal finishing solutions. Through our commitment to the principles of Total Quality Management, IFT provides high-performance surface finishing solutions for a robust range of markets that address the most exacting application requirements. Our focus on quality, accountability, applications expertise and integrity is trusted and relied upon by leading manufacturers and OEMs. IFT facilities are certified to world-class quality and environmental standards, and we are one of the first metal finishing companies in the world to achieve TS-16949, ISO 9001, AS 9100 and Nadcap quality program accreditations, in addition to attaining the ISO 14001 Environmental Management System certification. ID 19096
Ransomware	inspec-international.com id19082 View details	2025-04-10	United States	IT	leaked
INSPEC JAPAN QA SM specializes in high technology and high reliability Quality Assurance, Quality Engineering, Inspections, Audits, Research and Development, and Supply Chain Management support. They operate in Japan and select Far East locations, offering their expertise to clients seeking rigorous quality standards. The company’s mission is encapsulated in their motto 'making it right.' They cater to a diverse range of clients in industries that require top-tier quality assurance and engineering services. ===> Phone Number: (503) 595-6540 Revenue: $16.8 Million Employees: 92 Data:278gb ID 19082
Ransomware	silocaf.com id19073 View details	2025-04-09	United States	Communication / Marketing	pending
Silocaf of New Orleans, Inc. is an experienced coffee processor, translating thorough product knowledge into high standards and superior performance. They utilize the most advanced techniques to weigh, clean and blend coffee according to each client's unique specifications. They have also developed processes which enable them to upgrade an individual coffee's quality by eliminating certain defects. They were founded in New Orleans in 1993. Silocaf of New Orleans is a subsidiary of Pacorini S.r.l. of Trieste, Italy. ===> Phone Number: (504) 896-7800 Revenue: $83.4 Million Employees: 333 Data:178gb Contact: Maurizio Zaves \| President & C.E.O. Silocaf USA, LLC One Coffee Plaza - 5240 Coffee Drive New Orleans-LA 70115-7755 - U.S.A. T +1 504 896 7800 I M +1 504 382 760 I F +1 504 896 7834 E [email protected] ID 19073
Ransomware	chesterfieldtwp.org id19072 View details	2025-04-09	United States	Communication / Marketing	leaked
The Chesterfield Township Library provides meeting rooms so that the library can promote its program of service to the community. The library board of trustees recognizes that the library facilities belong to the community and permits facilities use by established local non-commercial groups and organizations. The policy is subject to change at any time. ===> Phone Number: (504) 896-7800 Revenue: $21.3 Million Employees: 174 Data:49gb ID 19072
Ransomware	finetech.de id19071 View details	2025-04-09	Germany	IT	leaked
Copyright © 2020 Finetech GmbH & Co. KG, All rights reserved. Finetech respects your privacy. We use cookies for a variety of purposes, such as website functionality, improving your experience of our website and building integration with social media. By continuing your visit on our website, you are consenting to our use of cookies. More info With an user account you get ===> Revenue: $25.7 Million Employees: 115 Data:137gb Phone Number: +49 309366810 Managing Director +86-21-58866-1668 Senior IT-Systemadministrator +49 30 936681 592 Senior Konstrukteur DD +49351888566-23 Service Engineer +491717646694 Service Engineer +4916090734566 Service Engineer +4915785005796 ID 19071
Ransomware	ccso2014.local(sheriffs) id19057 View details	2025-04-09	United States	Public Sector	leaked
Cleburne County, Arkansas, population 25,970, is the states 75th and youngest county, formed in 1883 from three existing counties and named for Confederate Army Major General Patrick R. Cleburne. The landscape is rugged and mountainous in the north changing to rolling terrain in the south. Greers Ferry Lake, a reservoir of 40,000 acres, was formed by a hydropower dam of the same name in the early 1960s and created a recreational boom that continues to grow. Tourism is important to the economy, as are cattle and poultry farming and industrial development. The Little Red River provides an excellent fishery for rainbow trout. Fishing, boating, and hunting are important to the county. Cleburne County often hosts fishing tournaments, business meetings, reunions, crafts shows and Saturday night country music. ID 19057
Ransomware	Coop57 id19038 View details	2025-04-08	Spain	Finance / Legal / Insurance	pending
OVER 12,000 IDS AND PASSPORTS OF CITIZENS OF DIFFERENT COUNTRIES WERE TAKEN Coop57 is a financial instrument that is part of the fair and solidarity finance system. Its mission is to provide options to meet the diverse financial needs of citizens and actors in the social economy. To achieve this goal, Coop57 is integrated into a network of microfinance organizations and federations to jointly develop strategies for building a social and solidarity economy and creating alternative models of the economic cycle. ID 19038
Ransomware	Thiekon Constructie id19036 View details	2025-04-08	Netherlands	Manufacturing / Engineering	leaked
Thiekon Constructie BV is a company from Reijen (Netherlands) with more than 40 years of experience in steel structures and zinc coatings. It is the only one in the country with its own hot-dip galvanizing plant, which allows steel processing within a single company. The company performs fabrication and assembly of steel elements (from small parts to complete structures) and provides powder coating service on request. This provides a centralized approach to work using steel, zinc and painting technologies. ID 19036
Ransomware	The Loretto Hospital id18898 View details	2025-04-01	United States	Healthcare / Pharma	pending
Established in 1923, Loretto Hospital serves more than 33,000 patients each year. They provide quality healthcare services including: primary care, geriatric medicine, vision care, behavioral health services, women’s health, podiatric medicine, and dental services. In addition, they are the largest non-governmental employer in the Austin community with more than 600 employees many of whom live in Austin. ID 18898
Ransomware	bahnlog.com id18801 View details	2025-03-29	United States	Transportation / Travel / Logistics	pending
BahnLog is a railway transport company (EVU) and a railway infrastructure company (EIU). The EIU operates public railway infrastructure, public service facilities, and takes over private railway infrastructure. The logistics company has been a partner and service provider for the railway since 2002. The Homburg/Saar track maintenance yard is the only remaining of six former track maintenance yards in Saarland. From here, railway construction sites throughout the Greater Region are served. ===> Phone Number: +49 6841-189 78 60 Revenue: $6 Million Employees: 25 Data:72gb Contact: Bahnlogistik und Service GmbH Tel.: +49 6841-189 78 60 Reiner Schwarz 06841-189 7873 Christina Naumann 06841/1897860 068411897863 Daniel MüllerD-66459 Kirkel Tel: +49 16097479434 Peer Hanson Tel +49 (0) 6841-189 7869 Mobil +49 (0) 172 – 6199 056 Sabrina Linnenbach Tel +49 (0) 6841-189 78 87 Mobil: +491635576604 Jörg Michael Fries 06825 9703703 Fr.Naumann 06841/1897873 Thomas Bergmann 068411897863 buch haltung 06841/18978-64 J.M: Fries [email protected] 06841 1897-867 / -882 N. Sefrin [email protected] 06841 1897-869 /-883 !!!_Data publication in 3 days_!!! ID 18801
Ransomware	importantsteps.com id18800 View details	2025-03-29	United States	Communication / Marketing	pending
Important Steps, Inc. ("Important Steps") provides Early Intervention ("EI") Home-Community & Facility Based Services with utmost regard to highest-quality services to children and their families. Important Steps offers therapy, evaluations and education to children with developmental disabilities including children at risk for developmental, emotional and behavioral disorders. Important Steps guides the families of these children providing them with support and knowledge that enables them to meet their children's needs. Important Steps is qualified to provide bilingual services in Russian, Spanish, Hebrew, Polish as well as other languages for families with English as a second language. The services are provided in those environments which best facilitate the needs, issues and problems of those we serve. ===> Phone Number: (718) 882-2111 Revenue: $17 Million Employees: 81 Industry: Education Data:370gb !!!_Data publication in 3 days_!!! ID 18800

Incransom

Overview

Leak Status Distribution

Top Countries

Known Leak Locations (7)

Top Activity Sectors (18)