Ransomware Group intelligence
N0n
ActiveTrack N0n with 132 published victims and 1 known leak locations in a single intelligence view.
BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Overview
N0n is tracked by Breach House as a ransomware group with 132 published victims.
United States is currently the most targeted country in this dataset.
1 known leak locations are currently associated with this group.
Leak Status Distribution
132
- Leaked 93 70.5%
- Pending 39 29.5%
- Deleted 0 0.0%
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (1)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Up checked 3h ago | nongzecboljwv3yfndkggsybsglfrkffw7bvk2zemuteoxe6etpusnad.onion |
Top Activity Sectors (14)
Typical Attacks (8)
▼MITRE ATT&CK does not currently catalogue N0n, so this is our assessment of the techniques it uses, drawn from public reporting. The techniques themselves, and every "what that means" definition below, come from MITRE ATT&CK v20.0. Confidence: medium. Treat it as orientation, not attribution.
-
T1059.001 PowerShell Execution
What they do: N0n executes malicious payloads through PowerShell scripts to stage ransomware components.
What that means: Adversaries may abuse PowerShell commands and scripts for execution.
-
T1685 Disable or Modify Tools Defense Impairment
What they do: N0n disables security tools by terminating antivirus processes and modifying Windows Defender settings.
What that means: Adversaries may disable, degrade, or tamper with security tools or applications (e.g., endpoint detection and response (EDR) tools, intrusion detection systems (IDS), antivirus, logging agents, sensors, etc.) to impair or reduce visibility of defensive capabilities.
-
T1070.004 File Deletion Stealth
What they do: N0n deletes Volume Shadow Copies and backup directories via vssadmin commands to prevent recovery.
What that means: Adversaries may delete files left behind by the actions of their intrusion activity.
-
T1083 File and Directory Discovery Discovery
What they do: N0n uses file and directory discovery via PowerShell to enumerate critical data paths before encryption.
What that means: Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system.
-
T1021.002 SMB/Windows Admin Shares Lateral Movement
What they do: N0n moves laterally through SMB shares using stolen credentials to access additional networked systems.
What that means: Adversaries may use Valid Accounts to interact with a remote network share using Server Message Block (SMB).
-
T1486 Data Encrypted for Impact Impact
What they do: N0n encrypts victim files using AES-256 encryption with custom ransomware binaries targeting business documents.
What that means: Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources.
-
T1490 Inhibit System Recovery Impact
What they do: N0n inhibits system recovery by corrupting restore points and disabling backup service processes.
What that means: Adversaries may delete or remove built-in data and turn off services designed to aid in the recovery of a corrupted system to prevent recovery.
-
T1491.001 Internal Defacement Impact
What they do: N0n performs internal defacement by replacing victim web content with ransom notices on accessible servers.
What that means: An adversary may deface systems internal to an organization in an attempt to intimidate or mislead users, thus discrediting the integrity of the systems.
Victims (132)
Search, filter and paginate the victim timeline for N0n. Showing 1–100 of 132.
| Type | Target | Discovered | Country | Business Category | Intel Link | Leak status |
|---|---|---|---|---|---|---|
| Ransomware | Digital Triumph id36002 View details | Philippines | IT | pending | ||
|
TELECOMMUNICATIONS SERVICES · MALAYSIA Digital Triumph NOT PAID — EXPOSED 95 94 93 92 91 90 89 88 87 86 85 84 83 82 81 80 79 78 77 76 75 74 73 72 71 70 69 68 67 66 65 64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 h 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 m 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 s until leak Details |
||||||
| Ransomware | Minutes Quick Services id35955 View details | United States | Services | leaked | ||
|
RETAIL AND FACILITY SERVICES · UNITED ARAB EMIRATES Minutes Quick Services NOT PAID — EXPOSED 95 94 93 92 91 90 89 88 87 86 85 84 83 82 81 80 79 78 77 76 75 74 73 72 71 70 69 68 67 66 65 64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 h 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 m 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 s until leak Details |
||||||
| Ransomware | Ingelectus Innovative Electrical Solutions S.L. id35792 View details | Spain | Manufacturing / Engineering | leaked | ||
|
SMART GRID ENGINEERING FIRM · SPAIN Ingelectus Innovative Electrical Solutions S.L. NOT PAID — EXPOSED 95 94 93 92 91 90 89 88 87 86 85 84 83 82 81 80 79 78 77 76 75 74 73 72 71 70 69 68 67 66 65 64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 h 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 m 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 s until leak Details |
||||||
| Ransomware | Keidel Supply Company Incorporated id35546 View details | United States | Manufacturing / Engineering | leaked | ||
|
PLUMBING AND KITCHEN PRODUCTS DISTRIBUTION · CINCINNATI, OHIO, UNITED STATES Keidel Supply Company Incorporated NOT PAID — EXPOSED 95 94 93 92 91 90 89 88 87 86 85 84 83 82 81 80 79 78 77 76 75 74 73 72 71 70 69 68 67 66 65 64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 h 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 m 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 s until leak Details |
||||||
| Ransomware | Mach Law APC (San Diego family law and divorce practice) id35547 View details | United States | Finance / Legal / Insurance | leaked | ||
|
LEGAL SERVICES - FAMILY LAW (US) · CALIFORNIA, USA Mach Law APC (San Diego family law and divorce practice) NOT PAID — EXPOSED 95 94 93 92 91 90 89 88 87 86 85 84 83 82 81 80 79 78 77 76 75 74 73 72 71 70 69 68 67 66 65 64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 h 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 m 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 s until leak Details |
||||||
| Ransomware | Pure Grow Diamonds Inc. id35548 View details | — | Manufacturing / Engineering | leaked | ||
|
DIAMOND AND LAB GROWN DIAMOND TRADING · NEW YORK, NEW YORK, UNITED STATES Pure Grow Diamonds Inc. NOT PAID — EXPOSED 95 94 93 92 91 90 89 88 87 86 85 84 83 82 81 80 79 78 77 76 75 74 73 72 71 70 69 68 67 66 65 64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 h 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 m 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 s until leak Details |
||||||
| Ransomware | Technoleads Services Inc. id35549 View details | United States | Services | leaked | ||
|
MEDIA PRODUCTION (AUDIO DESCRIPTION AND ACCESSIBILITY MEDIA) · MONTREAL, QUEBEC, CANADA Technoleads Services Inc. NOT PAID — EXPOSED 95 94 93 92 91 90 89 88 87 86 85 84 83 82 81 80 79 78 77 76 75 74 73 72 71 70 69 68 67 66 65 64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 h 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 m 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 s until leak Details |
||||||
| Ransomware | TOPLIVO AD id35550 View details | Israel | Services | leaked | ||
|
FUEL TRADING AND CONSTRUCTION MATERIALS · BULGARIA TOPLIVO AD NOT PAID — EXPOSED 95 94 93 92 91 90 89 88 87 86 85 84 83 82 81 80 79 78 77 76 75 74 73 72 71 70 69 68 67 66 65 64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 h 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 m 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 s until leak Details |
||||||
| Ransomware | Andrews Advisory Group LLC id35545 View details | United States | Finance / Legal / Insurance | leaked | ||
|
FINANCIAL ADVISORY & RESTRUCTURING (US) · CHICAGO, ILLINOIS, USA Andrews Advisory Group LLC NOT PAID — EXPOSED 95 94 93 92 91 90 89 88 87 86 85 84 83 82 81 80 79 78 77 76 75 74 73 72 71 70 69 68 67 66 65 64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 h 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 m 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 s until leak Details |
||||||
| Ransomware | Arthritis Center of Riverside id35513 View details | United States | Healthcare / Pharma | leaked | ||
|
RHEUMATOLOGY MEDICAL PRACTICE · RIVERSIDE, CALIFORNIA, UNITED STATES Arthritis Center of Riverside NOT PAID — EXPOSED 95 94 93 92 91 90 89 88 87 86 85 84 83 82 81 80 79 78 77 76 75 74 73 72 71 70 69 68 67 66 65 64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 h 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 m 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 s until leak Details |
||||||
| Ransomware | Adirondack Networks, Inc. id35514 View details | United States | IT | leaked | ||
|
NETWORK AND IT SERVICES · NEW YORK, UNITED STATES Adirondack Networks, Inc. NOT PAID — EXPOSED 95 94 93 92 91 90 89 88 87 86 85 84 83 82 81 80 79 78 77 76 75 74 73 72 71 70 69 68 67 66 65 64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 h 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 m 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 s until leak Details |
||||||
| Ransomware | Asisken Asistencia Médica S.A. id35515 View details | Peru | Healthcare / Pharma | pending | ||
|
HEALTH INSURANCE ADMINISTRATION · GUAYAQUIL, ECUADOR Asisken Asistencia Médica S.A. NOT PAID — EXPOSED 95 94 93 92 91 90 89 88 87 86 85 84 83 82 81 80 79 78 77 76 75 74 73 72 71 70 69 68 67 66 65 64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 h 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 m 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 s until leak Details |
||||||
| Ransomware | GPIC Projectos Con Instalacoes Lda id35516 View details | Portugal | Construction / Real Estate | leaked | ||
|
ENGINEERING DESIGN AND INSTALLATIONS · PORTUGAL GPIC Projectos Con Instalacoes Lda NOT PAID — EXPOSED 95 94 93 92 91 90 89 88 87 86 85 84 83 82 81 80 79 78 77 76 75 74 73 72 71 70 69 68 67 66 65 64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 h 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 m 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 s until leak Details |
||||||
| Ransomware | Texcar Inc. id35517 View details | — | null | leaked | ||
|
WHOLESALE DISTRIBUTION · DALLAS, TEXAS, UNITED STATES Texcar Inc. NOT PAID — EXPOSED 95 94 93 92 91 90 89 88 87 86 85 84 83 82 81 80 79 78 77 76 75 74 73 72 71 70 69 68 67 66 65 64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 h 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 m 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 s until leak Details |
||||||
| Ransomware | Horn of Africa Regional Environment Centre and Network id35451 View details | Kenya | NGOs / Associations | leaked | ||
|
ENVIRONMENTAL NGO · ETHIOPIA Horn of Africa Regional Environment Centre and Network NOT PAID — EXPOSED 95 94 93 92 91 90 89 88 87 86 85 84 83 82 81 80 79 78 77 76 75 74 73 72 71 70 69 68 67 66 65 64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 h 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 m 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 s until leak Details |
||||||
| Ransomware | SunTechnics Fabrisolar AG id35448 View details | Switzerland | Manufacturing / Engineering | leaked | ||
|
SOLAR ENERGY COMPANY · SWITZERLAND SunTechnics Fabrisolar AG NOT PAID — EXPOSED 95 94 93 92 91 90 89 88 87 86 85 84 83 82 81 80 79 78 77 76 75 74 73 72 71 70 69 68 67 66 65 64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 h 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 m 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 s until leak Details |
||||||
| Ransomware | PROTEX Confection id35449 View details | Tunisia | Agriculture / Food | pending | ||
|
TEXTILE MANUFACTURING · TUNISIA PROTEX Confection NOT PAID — EXPOSED 95 94 93 92 91 90 89 88 87 86 85 84 83 82 81 80 79 78 77 76 75 74 73 72 71 70 69 68 67 66 65 64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 h 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 m 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 s until leak Details |
||||||
| Ransomware | Performance Ford Inc id35425 View details | United States | Manufacturing / Engineering | leaked | ||
|
AUTOMOTIVE RETAIL · UNITED STATES Performance Ford Inc NOT PAID — EXPOSED 95 94 93 92 91 90 89 88 87 86 85 84 83 82 81 80 79 78 77 76 75 74 73 72 71 70 69 68 67 66 65 64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 h 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 m 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 s until leak Details |
||||||
| Ransomware | Heritage Senior Living id35407 View details | United States | Healthcare / Pharma | pending | ||
|
HEALTHCARE SUPPORT SERVICES · UNITED STATES Heritage Senior Living NOT PAID — EXPOSED 95 94 93 92 91 90 89 88 87 86 85 84 83 82 81 80 79 78 77 76 75 74 73 72 71 70 69 68 67 66 65 64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 h 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 m 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 s until leak Details |
||||||
| Ransomware | Hanjin Information Systems & Telecommunication Co., Ltd. id35392 View details | Korea, Republic of | Telecommunications | leaked | ||
|
IT SERVICES · SOUTH KOREA Hanjin Information Systems & Telecommunication Co., Ltd. NOT PAID — EXPOSED 95 94 93 92 91 90 89 88 87 86 85 84 83 82 81 80 79 78 77 76 75 74 73 72 71 70 69 68 67 66 65 64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 h 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 m 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 s until leak Details |
||||||
| Ransomware | TheHomeMag NorCal id35374 View details | United States | Retail / E-commerce | leaked | ||
|
home services advertising · US TheHomeMag NorCal NOT PAID — EXPOSED 868584838281807978777675747372717069686766656463626160595857565554535251504948474645444342414039383736353433323130292827262524232221201918171615141312111009080706050403020100h41403938373635343332313029282726252423222120191817161514131211100908070605040302010059585756555453525150494847464544434241m19181716151413121110090807060504030201005958575655545352515049484746454443424140393837363534333231302928272625242322212019s until leak Details |
||||||
| Ransomware | TheHomeMag NorCal id35367 View details | United States | Retail / E-commerce | leaked | ||
|
HOME SERVICES ADVERTISING · US TheHomeMag NorCal NOT PAID — EXPOSED 95 94 93 92 91 90 89 88 87 86 85 84 83 82 81 80 79 78 77 76 75 74 73 72 71 70 69 68 67 66 65 64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 h 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 m 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 s until leak Details |
||||||
| Ransomware | Xylanpicks id35365 View details | United States | Retail / E-commerce | pending | ||
|
online sports betting analytics · United States Xylanpicks NOT PAID — EXPOSED 93929190898887868584838281807978777675747372717069686766656463626160595857565554535251504948474645444342414039383736353433323130292827262524232221201918171615141312111009080706050403020100h50494847464544434241403938373635343332313029282726252423222120191817161514131211100908070605040302010059585756555453525150m51504948474645444342414039383736353433323130292827262524232221201918171615141312111009080706050403020100595857565554535251s until leak Details |
||||||
| Ransomware | Xylanpicks id35361 View details | United States | Retail / E-commerce | pending | ||
|
ONLINE SPORTS BETTING ANALYTICS · UNITED STATES Xylanpicks NOT PAID — EXPOSED 95 94 93 92 91 90 89 88 87 86 85 84 83 82 81 80 79 78 77 76 75 74 73 72 71 70 69 68 67 66 65 64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 h 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 m 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 s until leak Details |
||||||
| Ransomware | 51Ridge (Newark NJ hosting/IT) id35338 View details | United States | IT | leaked | ||
|
IT SERVICES · USA 51Ridge (Newark NJ hosting/IT) NOT PAID — EXPOSED 86 85 84 83 82 81 80 79 78 77 76 75 74 73 72 71 70 69 68 67 66 65 64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 h 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 m 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 s until leak Details |
||||||
| Ransomware | Vormittag Associates Inc id35252 View details | United States | Services | leaked | ||
|
ERP SOFTWARE AND HOSTING COMPANY · USA Vormittag Associates Inc NOT PAID — EXPOSED 92 91 90 89 88 87 86 85 84 83 82 81 80 79 78 77 76 75 74 73 72 71 70 69 68 67 66 65 64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 h 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 m 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 s until leak Details |
||||||
| Ransomware | Froggys Fog id35248 View details | United States | Other | leaked | ||
|
SPECIAL-EFFECTS FOG FLUID MANUFACTURER AND DISTRIBUTOR (ORDER MANAGEMENT AND SHIPPING OPERATIONS) · TENNESSEE, USA Froggys Fog NOT PAID — EXPOSED 89 88 87 86 85 84 83 82 81 80 79 78 77 76 75 74 73 72 71 70 69 68 67 66 65 64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 h 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 m 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 s until leak Details |
||||||
| Ransomware | Hotel DuPont id35227 View details | United States | Hospitality / Food & Beverage / Tourism | pending | ||
|
HOSPITALITY · UNITED STATES Hotel DuPont NOT PAID — EXPOSED 84 83 82 81 80 79 78 77 76 75 74 73 72 71 70 69 68 67 66 65 64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 h 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 m 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 s until leak Details |
||||||
| Ransomware | Kingwood Endoscopy id35228 View details | United States | Healthcare / Pharma | leaked | ||
|
HEALTHCARE - AMBULATORY SURGERY CENTER (US) · TEXAS, US Kingwood Endoscopy NOT PAID — EXPOSED 84 83 82 81 80 79 78 77 76 75 74 73 72 71 70 69 68 67 66 65 64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 h 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 m 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 s until leak Details |
||||||
| Ransomware | The Akeeli Group id35197 View details | United States | null | leaked | ||
|
INVESTIGATIONS AND DUE DILIGENCE · USA The Akeeli Group NOT PAID — EXPOSED 78 77 76 75 74 73 72 71 70 69 68 67 66 65 64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 h 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 m 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 s until leak Details |
||||||
| Ransomware | Finzly Corp id35164 View details | United States | null | leaked | ||
|
fintech payments · US | Network configuration and access secrets for payment infrastructure; Cloud environment topology and access keys | [NOT PAID — EXPOSED] |
||||||
| Ransomware | SMIC US Company (Sunnyvale, CA — US arm of Semiconductor Manufacturing International Corporation) id35109 View details | United States | Manufacturing / Engineering | leaked | ||
|
SEMICONDUCTOR MANUFACTURING · CALIFORNIA, USA SMIC US Company (Sunnyvale, CA — US arm of Semiconductor Manufacturing International Corporation) NOT PAID — EXPOSED 87 86 85 84 83 82 81 80 79 78 77 76 75 74 73 72 71 70 69 68 67 66 65 64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 h 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 m 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 s until leak Details |
||||||
| Ransomware | Amagi Media Labs id35103 View details | United States | IT | pending | ||
|
media technology / broadcast playout · United States Amagi Media Labs NOT PAID — EXPOSED 929190898887868584838281807978777675747372717069686766656463626160595857565554535251504948474645444342414039383736353433323130292827262524232221201918171615141312111009080706050403020100h49484746454443424140393837363534333231302928272625242322212019181716151413121110090807060504030201005958575655545352515049m33323130292827262524232221201918171615141312111009080706050403020100595857565554535251504948474645444342414039383736353433s until leak Details |
||||||
| Ransomware | Telecom Egypt id35088 View details | Egypt | Services | pending | ||
|
COMPUTER TRAINING ACADEMY · EGYPT Telecom Egypt NOT PAID — EXPOSED 64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 h 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 m 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 s until leak Details |
||||||
| Ransomware | All Business Technologies (Fox Hill bookkeeping and tax practice) id35089 View details | — | Finance / Legal / Insurance | leaked | ||
|
ACCOUNTING & TAX PREPARATION (US) · MASSACHUSETTS, USA All Business Technologies (Fox Hill bookkeeping and tax practice) NOT PAID — EXPOSED 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 h 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 m 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 s until leak Details |
||||||
| Ransomware | SMIC US Company (Sunnyvale, CA — US arm of Semiconductor Manufacturing International Corpo... id35087 View details | United States | Manufacturing / Engineering | pending | ||
|
Semiconductor manufacturing · California, USA | Corporate business records and working files from the company's file servers; Employee and payroll related records; Financial and accounting documents | [NOT PAID — EXPOSED] |
||||||
| Ransomware | Solid Trading B.V. id34986 View details | Netherlands | Finance / Legal / Insurance | leaked | ||
|
FX liquidity and trading technology · Netherlands Solid Trading B.V. NOT PAID — EXPOSED 9190898887868584838281807978777675747372717069686766656463626160595857565554535251504948474645444342414039383736353433323130292827262524232221201918171615141312111009080706050403020100h25242322212019181716151413121110090807060504030201005958575655545352515049484746454443424140393837363534333231302928272625m12111009080706050403020100595857565554535251504948474645444342414039383736353433323130292827262524232221201918171615141312s until leak Details |
||||||
| Ransomware | ECO USA id34987 View details | United States | Other | leaked | ||
|
manufacturing · USA ECO USA NOT PAID — EXPOSED 9190898887868584838281807978777675747372717069686766656463626160595857565554535251504948474645444342414039383736353433323130292827262524232221201918171615141312111009080706050403020100h36353433323130292827262524232221201918171615141312111009080706050403020100595857565554535251504948474645444342414039383736m34333231302928272625242322212019181716151413121110090807060504030201005958575655545352515049484746454443424140393837363534s until leak Details |
||||||
| Ransomware | SQA Services Inc id34988 View details | United States | Services | leaked | ||
|
software quality assurance (Wolters Kluwer/CCH Axcess test lab) · California, USA SQA Services Inc NOT PAID — EXPOSED 898887868584838281807978777675747372717069686766656463626160595857565554535251504948474645444342414039383736353433323130292827262524232221201918171615141312111009080706050403020100h45444342414039383736353433323130292827262524232221201918171615141312111009080706050403020100595857565554535251504948474645m36353433323130292827262524232221201918171615141312111009080706050403020100595857565554535251504948474645444342414039383736s until leak Details |
||||||
| Ransomware | Prafesta Ind. e Com. de Embalagens Ltda id34722 View details | Brazil | Manufacturing / Engineering | leaked | ||
|
PACKAGING MANUFACTURING (EXTRUSION) · BRAZIL Prafesta Ind. e Com. de Embalagens Ltda NOT PAID — EXPOSED 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 h 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 m 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 s until leak Details |
||||||
| Ransomware | Xinos Construction Corp and its accounting group id34640 View details | Greece | Construction / Real Estate | leaked | ||
|
CONSTRUCTION AND ACCOUNTING (US) · NEW YORK, USA Xinos Construction Corp and its accounting group NOT PAID — EXPOSED 13 12 11 10 09 08 07 06 05 04 03 02 01 00 h 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 m 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 s until leak Details |
||||||
| Ransomware | BladeTech Inc id34641 View details | United States | IT | leaked | ||
|
DENTAL LABORATORY (CAD/CAM MANUFACTURING) · MISSOURI, USA BladeTech Inc NOT PAID — EXPOSED 12 11 10 09 08 07 06 05 04 03 02 01 00 h 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 m 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 s until leak Details |
||||||
| Ransomware | EnVision Eye Care id34617 View details | United States | Healthcare / Pharma | leaked | ||
|
HEALTHCARE - OPHTHALMOLOGY (US) · MISSISSIPPI, USA EnVision Eye Care NOT PAID — EXPOSED 09 08 07 06 05 04 03 02 01 00 h 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 m 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 s until leak Details |
||||||
| Ransomware | Evolution Spine / All Labs id34526 View details | — | Manufacturing / Engineering | leaked | ||
|
MEDICAL DEVICE MANUFACTURING (US) · TEXAS, USA Evolution Spine / All Labs NOT PAID — LEAKED time expired deadline 2026-10-15 22:26 UTC Download leak (.zip) Download leak (.torrent) |
||||||
| Ransomware | Company #70 id34507 View details | Egypt | Other | pending | ||
|
FX LIQUIDITY AND TRADING TECHNOLOGY · NETHERLANDS Company #70 PENDING EXPOSURE 08 07 06 05 04 03 02 01 00 h 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 m 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 s until exposure |
||||||
| Ransomware | Company #73 id34508 View details | — | Other | pending | ||
|
COMPUTER TRAINING ACADEMY · EGYPT Company #73 PENDING EXPOSURE 01 00 h 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 m 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 s until exposure |
||||||
| Ransomware | Company #69 id33874 View details | — | — | pending | ||
|
Software / fundraising services · California, USA | [PENDING EXPOSURE] |
||||||
| Ransomware | Company #68 id33872 View details | United States | — | pending | ||
|
manufacturing · USA | [PENDING EXPOSURE] |
||||||
| Ransomware | Company #67 id33870 View details | Netherlands | — | pending | ||
|
FX liquidity and trading technology · Netherlands | [PENDING EXPOSURE] |
||||||
| Ransomware | Company #66 id33871 View details | — | — | pending | ||
|
software quality assurance (Wolters Kluwer/CCH Axcess test l · California, USA | [PENDING EXPOSURE] |
||||||
| Ransomware | Interior Technologies id33869 View details | — | — | leaked | ||
|
smart building & surveillance integration (US) · California, USA | The complete gateway configuration of a smart building and surveillance integration company: every client site, device, user and credential; Client site surveillance feeds: dark until settlement; Administrator access to the company's own management infrastructure: reset by us | [NOT PAID — EXPOSED] |
||||||
| Ransomware | Trieschmann Dumala Architectural Group id33859 View details | — | — | pending | ||
|
architecture & design (US) · Florida, USA | The complete business email archive of the firm's principal: client correspondence, financial records and project communications spanning the firm's history; Working files and project documents from the firm's central storage | [NOT PAID — EXPOSED] |
||||||
| Ransomware | Company #65 id33847 View details | Brazil | — | pending | ||
|
packaging manufacturing (extrusion) · Brazil | [PENDING EXPOSURE] |
||||||
| Ransomware | Company #63 id33816 View details | — | — | pending | ||
|
construction and accounting (US) · New York, USA | [PENDING EXPOSURE] |
||||||
| Ransomware | Company #64 id33817 View details | — | — | pending | ||
|
dental laboratory (CAD/CAM) · Missouri, USA | [PENDING EXPOSURE] |
||||||
| Ransomware | Hunter Neurology id33818 View details | — | — | leaked | ||
|
Healthcare - Neurology (AU) · New South Wales, Australia | Patient records of an Australian neurology practice: 15,252 patient images and scans, 11,819 patient letters and reports, 439 laboratory results and 839 patient records system files; Four complete weekly backups of the practice medical records system; Protected health information including patient names, dates of birth and clinical data | [NOT PAID — EXPOSED] |
||||||
| Ransomware | MarieBelle New York id33801 View details | United States | — | leaked | ||
|
confectionery & telehealth (US) · New York, USA | Complete QuickBooks company file of a New York confectionery and luxury foods company: every transaction, customer, vendor and payroll record; Complete inventory database with product, cost and supplier data; Telehealth platform files and clinical system records from hospital partner infrastructure | [NOT PAID — EXPOSED] |
||||||
| Ransomware | PG Group (Pure Options) id33802 View details | — | — | leaked | ||
|
cannabis operator (US) · Lansing, Michigan, USA | Complete directory database of a Michigan cannabis operator: password data for all 577 accounts; Working password corpus for dozens of staff and administrator accounts; Financial and contract backups: payroll reports, general ledgers, signed operating and lease agreements; Complete inventory of the shared data volume | [NOT PAID — EXPOSED] |
||||||
| Ransomware | GlobalNet LCL (port agency operations) id33746 View details | Indonesia | — | leaked | ||
|
Port agency / logistics · Indonesia | Container gate movement and damage management records | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
||||||
| Ransomware | Santos Brasil (port operations) id33747 View details | Brazil | — | leaked | ||
|
Port terminal operations · Brazil | Terminal operating system database scripts and operational records | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
||||||
| Ransomware | Asyaport (container terminal operations) id33748 View details | Türkiye | — | leaked | ||
|
Port terminal operations · Turkey | Dangerous-goods operational records and internal database scripts | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
||||||
| Ransomware | Ocean Network Express (container shipping) id33749 View details | Singapore | — | leaked | ||
|
Container shipping · Singapore | Internal staff directories, operational voyage and fuel-consumption records, and financial-adjacent planning material | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
||||||
| Ransomware | MGNP (port terminal operations) id33750 View details | Korea, Republic of | — | leaked | ||
|
Port terminal operations · South Korea | Commercial invoice records and billing system material | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
||||||
| Ransomware | Portonave (container terminal operations) id33751 View details | Brazil | — | leaked | ||
|
Port terminal operations · Brazil | Terminal operating system database material and operational EDI archives | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
||||||
| Ransomware | Polaris Shipping (dry bulk shipping) id33752 View details | Korea, Republic of | — | leaked | ||
|
Dry bulk shipping · South Korea | Internal financial records (sales vouchers) and vessel operational reports | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
||||||
| Ransomware | ZPMC (port machinery and terminal engineering) id33753 View details | China | — | leaked | ||
|
Port machinery / engineering · China | Operational EDI archives and cargo loading records | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
||||||
| Ransomware | Tsuneishi / Kambara Kisen (shipbuilding and ship management) id33754 View details | Japan | — | leaked | ||
|
Shipbuilding / ship management · Japan | Operational EDI archives and commercial contract records | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
||||||
| Ransomware | Yusen Logistics Hong Kong (3PL logistics) id33755 View details | Hong Kong | — | leaked | ||
|
3PL logistics · Hong Kong | Commercial tariff documentation | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
||||||
| Ransomware | Premier Alliance (shipping network operations) id33756 View details | Netherlands | — | leaked | ||
|
Shipping / terminal services · Netherlands | Terminal network documentation and operational EDI archives | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
||||||
| Ransomware | CULines (container shipping) id33757 View details | China | — | leaked | ||
|
Container shipping · China | Operational EDI message archives (booking and container manifest records) | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
||||||
| Ransomware | BNCT Busan New Container Terminal id33758 View details | Korea, Republic of | — | leaked | ||
|
Port terminal operations · South Korea | Operational EDI archives and internal database scripts | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
||||||
| Ransomware | T.S. Lines (intra-Asia container shipping) id33759 View details | Taiwan, Province of China | — | leaked | ||
|
Container shipping · Taiwan | Operational EDI message archives (container manifests, gate movement and booking records), internal systems master data, and internal credential material | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
||||||
| Ransomware | HPC Hamburg Port Consulting (port operations) id33760 View details | Germany | — | leaked | ||
|
Port consulting / terminal operations · Germany | Operational EDI archives and cargo/bill-of-lading records | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
||||||
| Ransomware | Apical Group (commodity processing and logistics) id33761 View details | Singapore | — | leaked | ||
|
Commodity processing / logistics · Singapore | Cargo discharge and terminal throughput records | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
||||||
| Ransomware | Superterminais (port terminal operations) id33762 View details | Brazil | — | leaked | ||
|
Port terminal operations · Brazil | Operational EDI archives and interface operational records | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
||||||
| Ransomware | NEOM Ports (industrial port operations) id33763 View details | Saudi Arabia | — | leaked | ||
|
Industrial port operations · Saudi Arabia | Commercial tariff documentation and invoicing records | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
||||||
| Ransomware | GCS Kuwait (port community system operations) id33764 View details | Kuwait | — | leaked | ||
|
Port community IT · Kuwait | Container movement records and operational EDI archives | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
||||||
| Ransomware | GNCNet / DGT Busan (port community IT) id33765 View details | Korea, Republic of | — | leaked | ||
|
Port IT services · South Korea | Billing service records and operational EDI sample material | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
||||||
| Ransomware | Samudera (coastal shipping operations) id33766 View details | Indonesia | — | leaked | ||
|
Coastal shipping · Indonesia | Charter party records and dangerous-goods operational documentation | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
||||||
| Ransomware | Dongkuk Steel (steel manufacturing) id33767 View details | Korea, Republic of | — | leaked | ||
|
Steel manufacturing · South Korea | Internal financial systems material (invoice and settlement records) | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
||||||
| Ransomware | NCT Kandla (container terminal operations) id33768 View details | India | — | leaked | ||
|
Port terminal operations · India | Operational EDI correspondence and internal systems logs | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
||||||
| Ransomware | TTI Algeciras (container terminal operations) id33769 View details | Spain | — | leaked | ||
|
Port terminal operations · Spain | Operational EDI message archives and internal terminal systems documentation | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
||||||
| Ransomware | Saehan Marine (ship agency operations) id33770 View details | Korea, Republic of | — | leaked | ||
|
Ship agency · South Korea | Port disbursement account records and banking correspondence templates | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
||||||
| Ransomware | April Asia (port agency operations) id33771 View details | Indonesia | — | leaked | ||
|
Port agency / logistics · Indonesia | Container gate movement and damage management records | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
||||||
| Ransomware | Dong-A Tanker (oil tanker operations) id33772 View details | Korea, Republic of | — | leaked | ||
|
Oil tanker shipping · South Korea | Internal financial records (demurrage/despatch and performance data) | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
||||||
| Ransomware | EUSU Logistics (logistics operations) id33773 View details | Korea, Republic of | — | leaked | ||
|
Logistics · South Korea | Internal infrastructure configuration and assessment records | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
||||||
| Ransomware | BMT IQ (marine surveying and inspection) id33729 View details | United Kingdom | — | leaked | ||
|
Marine surveying · United Kingdom | Commercial e-invoice records and equipment interchange receipts | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
||||||
| Ransomware | BKH ICD (inland container depot operations) id33730 View details | Korea, Republic of | — | leaked | ||
|
Inland container depot · South Korea | Commercial invoice records and systems release documentation | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
||||||
| Ransomware | Korea Ferry (ferry operations) id33731 View details | Korea, Republic of | — | leaked | ||
|
Ferry / RoRo shipping · South Korea | Internal staff account records with plaintext credentials and financial receipt records | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
||||||
| Ransomware | T2S (terminal systems operations) id33732 View details | Brazil | — | leaked | ||
|
Port terminal operations · Brazil | Terminal systems gap-analysis documentation and internal database material | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
||||||
| Ransomware | Samjoo Maritime (ship management) id33733 View details | Korea, Republic of | — | leaked | ||
|
Ship management · South Korea | Internal financial records (expense applications and bunker cost calculations) | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
||||||
| Ransomware | Camellia Line (ferry and RoRo operations) id33734 View details | Japan | — | leaked | ||
|
Ferry / RoRo shipping · Japan | Freight settlement and payment records | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
||||||
| Ransomware | Eurogate Tanger (container terminal operations) id33735 View details | Morocco | — | leaked | ||
|
Port terminal operations · Morocco | Terminal commercial operation configuration records and systems release documentation | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
||||||
| Ransomware | ILCS Pelindo (port logistics operations) id33736 View details | Indonesia | — | leaked | ||
|
Port logistics · Indonesia | Operational EDI archives (container manifests) | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
||||||
| Ransomware | Pusan Newport Company (container terminal operations) id33737 View details | Korea, Republic of | — | leaked | ||
|
Port terminal operations · South Korea | Terminal operating system deployment and configuration records and operational container documentation | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
||||||
| Ransomware | Nam Dinh Vu Port (container terminal operations) id33738 View details | Viet Nam | — | leaked | ||
|
Port terminal operations / maritime logistics · Vietnam | The full EDI message archive of the terminal's operations server: vessel schedules, container manifests (BAPLIE), gate movement records (CODECO), booking messages (COPARN) covering multiple international shipping lines; Internal system configuration files of the operations server | [NOT PAID — EXPOSED: files publish 2026-10-19 13:19 UTC] |
||||||
| Ransomware | Company #24 id33715 View details | — | — | pending | ||
|
smart building & surveillance integration · California, USA | [PENDING EXPOSURE: data publishes 2026-10-14 18:00 UTC] |
||||||
| Ransomware | Company #23 id33709 View details | — | — | pending | ||
|
smart building & surveillance integration · California, USA | [PENDING EXPOSURE: data publishes 2026-10-14 18:00 UTC] |
||||||
| Ransomware | Company #22 id33710 View details | — | — | pending | ||
|
architecture & design · Florida, USA | [PENDING EXPOSURE: data publishes 2026-10-14 12:00 UTC] |
||||||
| Ransomware | Company #21 id33711 View details | — | — | pending | ||
|
neurology practice · New South Wales, Australia | [PENDING EXPOSURE: data publishes 2026-10-13 12:37 UTC] |
||||||