Ransomware Group intelligence
Payoutsking
ActiveTrack Payoutsking with 158 published victims and 1 known leak locations in a single intelligence view.
BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Overview
Payoutsking is tracked by Breach House as a ransomware group with 158 published victims.
United States is currently the most targeted country in this dataset.
1 known leak locations are currently associated with this group.
Leak Status Distribution
158
- Leaked 110 69.6%
- Pending 47 29.7%
- Deleted 1 0.6%
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (1)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Up checked 3h ago | payoutsgn7cy6uliwevdqspncjpfxpmzgirwl2au65la7rfs5x3qnbqd.onion |
Top Activity Sectors (16)
- Not identified 28
- Manufacturing / Engineering 27
- IT 11
- Healthcare / Pharma 10
- Construction / Real Estate 10
- Communication / Marketing 9
- Retail / E-commerce 7
- Education 4
- Agriculture / Food 4
- Hospitality / Food & Beverage / Tourism 4
- Services 3
- Transportation / Travel / Logistics 3
- Energy 3
- null 2
- Telecommunications 2
- Finance / Legal / Insurance 2
Typical Attacks (8)
▼MITRE ATT&CK does not currently catalogue Payoutsking, so this is our assessment of the techniques it uses, drawn from public reporting. The techniques themselves, and every "what that means" definition below, come from MITRE ATT&CK v19.2. Confidence: medium. Treat it as orientation, not attribution.
-
T1059.001 PowerShell Execution
What they do: payoutsking uses PowerShell scripts to execute malicious commands and deploy ransomware payloads across compromised systems.
What that means: Adversaries may abuse PowerShell commands and scripts for execution.
-
What they do: payoutsking persists by adding malicious entries to Windows Registry Run Keys to ensure recurring execution.
What that means: Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key.
-
T1685 Disable or Modify Tools Defense Impairment
What they do: payoutsking disables antivirus tools and security monitoring by terminating security processes and modifying system configurations.
What that means: Adversaries may disable, degrade, or tamper with security tools or applications (e.g., endpoint detection and response (EDR) tools, intrusion detection systems (IDS), antivirus, logging agents, sensors, etc.) to impair or reduce visibility of defensive capabilities.
-
T1070.004 File Deletion Stealth
What they do: payoutsking deletes Volume Shadow Copies and backup directories using built-in Windows utilities to prevent recovery.
What that means: Adversaries may delete files left behind by the actions of their intrusion activity.
-
T1018 Remote System Discovery Discovery
What they do: payoutsking moves laterally via SMB shares and mapped drives to access additional servers within the victim network.
What that means: Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system.
-
T1135 Network Share Discovery Discovery
What they do: payoutsking scans network shares to discover victim file structures and identify high-value targets for encryption.
What that means: Adversaries may look for folders and drives shared on remote systems as a means of identifying sources of information to gather as a precursor for Collection and to identify potential systems of interest for Lateral Movement.
-
T1041 Exfiltration Over C2 Channel Exfiltration
What they do: payoutsking exfiltrates stolen data through encrypted C2 channels before deploying ransomware to enable double extortion.
What that means: Adversaries may steal data by exfiltrating it over an existing command and control channel.
-
T1486 Data Encrypted for Impact Impact
What they do: payoutsking encrypts victim files using a custom ransomware engine, targeting business documents and backups for maximum disruption.
What that means: Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources.
Ransom Notes (1)
▼The note this group leaves on a compromised machine. Click a filename to read it.
readme_locker.txt
The files on the company's network have been encrypted, and significant amount of confidential data has been downloaded from it. To recover your files to the initial state and prevent disclosure of your sensitive information contact us as soon as possible via the TOX chat platform. - Download a TOX messaging client(https://tox.chat); - Create an account; - Add the following contact ID for futher negotiations: 74FB30F3FCC73D6B1BCE403238D082426F43D95F42CA25DF20CB278D91E8754B151651ED12DD In case you don't get in touch within 7 days, the exfiltrated data will be disclosed on our website: https://payoutsgn7cy6uliwevdqspncjpfxpmzgirwl2au65la7rfs5x3qnbqd.onion
Ransom-note text from RansomLook, licensed CC BY 4.0.
Victims (158)
Search, filter and paginate the victim timeline for Payoutsking. Showing 1–100 of 158.
| Type | Target | Discovered | Country | Business Category | Intel Link | Leak status |
|---|---|---|---|---|---|---|
| Ransomware | Gateway Community id34706 View details | United States | Communication / Marketing | leaked | ||
|
Gateway Community Published: 2025-06-27 Status: Disclosed Data size: 890GB Views: 143764 Website: https://gatewaycommunity.com/ Country: USA Revenue: $39M Employees: 0 About company: Addiction treatment rehab. Massive leak of patients' information! Thousands of PII and medical records, identity documents. Full info! |
||||||
| Ransomware | Crenshaw Community Hospital id34701 View details | United States | Healthcare / Pharma | leaked | ||
|
Crenshaw Community Hospital Published: 2025-06-27 Status: Disclosed Data size: 53GB Views: 142636 Website: https://crenshawcommunityhospital.com/ Country: USA Revenue: $22M Employees: 200 About company: Crenshaw Community Hospital, located in Luverne, Alabama, is a full service, 65-bed licensed acute care hospital with 24-hour emergency care. The hospital employs over 200 dedicated full-time and part-time staff members to provide care to the citizens of Crenshaw County. The hospital offers a range of diagnostic, therapeutic, emergency, and surgical services. |
||||||
| Ransomware | Institute of Culinary Education id34703 View details | United States | Education | leaked | ||
|
Institute of Culinary Education Published: 2025-06-27 Status: Disclosed Data size: 1.5TB Views: 142598 Website: https://ice.edu/ Country: USA Revenue: $50M Employees: 500 About company: The Institute of Culinary Education (ICE) is one of the largest and most diverse culinary schools in the world with campuses in New York and Los Angeles. ICE also offers continuing education for culinary professionals and is home to one of the world's largest recreational cooking, baking and beverage programs. |
||||||
| Ransomware | CR Architecture + Design id34704 View details | United States | Construction / Real Estate | leaked | ||
|
CR Architecture + Design Published: 2025-06-27 Status: Disclosed Data size: 2TB Views: 142814 Website: https://cr-architects.com/ Country: USA Revenue: $33M Employees: 200 About company: CR architecture + design specializes in creating diverse architectural solutions for retail, hospitality, public safety, mixed-use, education, and commercial sectors. CR Architects is dedicated to transforming spaces and solving practical problems with exceptional design. They focus on building communities by meticulously translating client visions into tangible designs while ensuring technical accuracy and creativity. |
||||||
| Ransomware | Arch-Con Corporation id34705 View details | United States | Construction / Real Estate | leaked | ||
|
Arch-Con Corporation Published: 2025-06-27 Status: Disclosed Data size: 2.7TB Views: 143243 Website: https://arch-con.com/ Country: USA Revenue: $270M Employees: 200 About company: Arch-Con Corporation is a general contractor specializing in commercial construction, offering services across various sectors including healthcare, hospitality, industrial, multifamily, office, retail, and corporate interiors. With a strong portfolio that includes over 120 industrial projects and nearly 200 healthcare projects, Arch-Con aims to anticipate challenges and deliver high-quality results. |
||||||
| Ransomware | Belmont Engineered Plastics id34702 View details | United States | Manufacturing / Engineering | leaked | ||
|
Belmont Engineered Plastics Published: 2025-06-27 Status: Disclosed Data size: 850GB Views: 142099 Website: https://beplastics.com/ Country: USA Revenue: $15M Employees: 200 About company: Belmont Engineered Plastics specializes in high-quality injection molding services, offering an end-to-end service model from engineering through to distribution all within one facility. With a world-class manufacturing facility equipped with 35 injection molding presses, the company is equipped to handle various production demands efficiently. |
||||||
| Ransomware | LTL id34696 View details | Spain | Other | leaked | ||
|
LTL Published: 2025-06-27 Status: Disclosed Data size: 916GB Views: 141065 Website: https://ltlevante.com/ Country: ES Revenue: $14M Employees: 0 About company: With over 30 years’ experience in analytical tests on food, water, sludge, waste and soil as well as everything related to water treatment, LTL works with all certifications required in each field. This ensures the accuracy and reliability of the results obtained and the highest standard of work is performed for customers. |
||||||
| Ransomware | Rhea Vendors Group SpA id34697 View details | Italy | Communication / Marketing | leaked | ||
|
Rhea Vendors Group SpA Published: 2025-06-27 Status: Disclosed Data size: 1.7TB Views: 141093 Website: https://rheavendors.com/ Country: IT Revenue: $27M Employees: 500 About company: Rhea Vendors Group is one of the largest producers of customized coffee machines in the world. With headquarters and manufacturing based in the province of Varese and 9 foreign branches, Rhea is proud of having spread coffee culture to over 100 countries around the world. |
||||||
| Ransomware | Silent Gliss Italia id34698 View details | Italy | Communication / Marketing | leaked | ||
|
Silent Gliss Italia Published: 2025-06-27 Status: Disclosed Data size: 414GB Views: 141580 Website: https://silentgliss.it/ Country: IT Revenue: $25M Employees: 200 About company: Silent Gliss is the world's leading supplier of high-end interior shading systems. Known for innovative and sustainable solutions, exceptional design, and superior quality, Silent Gliss design and manufacture some of the quietest, smoothest-moving custom systems in the world. |
||||||
| Ransomware | EvoluPharm id34699 View details | France | Healthcare / Pharma | leaked | ||
|
EvoluPharm Published: 2025-06-27 Status: Disclosed Data size: 858GB Views: 141616 Website: https://evolupharm.fr/ Country: FR Revenue: $71M Employees: 500 About company: EvoluPharm is a pharmaceutical laboratory founded in 1986. All of the laboratory's pharmacy and parapharmacy products are positioned in the hygiene, health, and beauty markets, including some of the most affordable products on the market. The laboratory offers a wide range of branded products, from baby products to dietary supplements and aromatherapy. |
||||||
| Ransomware | Bariatrix Nutrition id34700 View details | Canada | Healthcare / Pharma | leaked | ||
|
Bariatrix Nutrition Published: 2025-06-27 Status: Disclosed Data size: 204GB Views: 141850 Website: https://bariatrix.com/ Country: CA Revenue: $38M Employees: 200 About company: Throughout the years, Bariatrix has been a leading developer of high protein foods and remained on the cutting edge of high protein food manufacturing for athletes, medical weight loss, and everyday consumers. |
||||||
| Ransomware | Medialab id34695 View details | United States | Communication / Marketing | leaked | ||
|
Medialab Published: 2025-07-15 Status: Disclosed Data size: 4GB Views: 143063 Website: https://medialab3dsolutions.com/ Country: USA Revenue: $11M Employees: 200 About company: MediaLab 3D Solutions develops end-to-end digital imagery and visualizations for the residential building and consumer product industries. The company's clients include Whirlpool, Lennar, American Standard, KitchenAid, ClosetMaid, Jenn-Air, Stanley Black & Decker, and Basco. |
||||||
| Ransomware | Irwin Car id34694 View details | United States | Manufacturing / Engineering | leaked | ||
|
Irwin Car Published: 2025-11-04 Status: Disclosed Data size: 272GB Views: 82088 Website: https://irwincar.com/ Country: USA Revenue: $22M Employees: 200 About company: Irwin Car and Equipment engineers and manufactures custom heavy-duty material handling equipment for a wide array of industries and applications. Irwin Car’s Industrial Sales Group and its business units serve the metals, automotive, aerospace and heavy manufacturing industries with custom transfer cars, transporters and trailers. Commentaries: Database backups, corporate correspondence, contracts, financial data\payrolls, production documents, drawings, employees personal data. |
||||||
| Ransomware | Accord Carton id34693 View details | United States | Communication / Marketing | leaked | ||
|
Accord Carton Published: 2025-11-14 Status: Disclosed Data size: 1.5TB Views: 68237 Website: https://accordcarton.com/ Country: USA Revenue: $38M Employees: 200 About company: Accord Carton is a leading manufacturer of quality custom folding cartons. Accord serves global and regional consumer packaged goods companies throughout North America. Commentaries: Financial documents, payrolls, invoices, contracts\NDAs, employees personal data, production documents, drawings, corporate correspondence. |
||||||
| Ransomware | Del Monte Foods id34692 View details | United States | Agriculture / Food | leaked | ||
|
Del Monte Foods Published: 2026-02-18 Status: Disclosed Data size: 1.2TB Views: 35133 Website: https://delmontefoods.com/ Country: USA Revenue: $2.1B Employees: 7000 About company: Del Monte Foods, is a North American food production and distribution company. The Company offers snacks, packaged fruits, vegetables, soups, sauces, and other canned food products. Data description: Confidential, Employees' PII (Personally Identifiable Information), Legal, Litigations, complaints, Correspondence, Financial, R&D, Contracts, Agreements, NDA, |
||||||
| Ransomware | UFP Technologies id34691 View details | United States | Manufacturing / Engineering | leaked | ||
|
UFP Technologies Published: 2026-02-18 Status: Disclosed Data size: 620GB Views: 28244 Website: https://ufpt.com/ Country: USA Revenue: $598M Employees: 4000 About company: UFP Technologies is a medical designer and manufacturer of custom devices, sub-assemblies, components and packaging utilizing foams, films, and plastics. Data description: Military, Employees' PII (Personally Identifiable Information), Correspondence, Financial, Engineering, QA, |
||||||
| Ransomware | P****y id34686 View details | United States | null | pending | ||
|
P****y Published: 2026-10-13 Status: Declared Data size: 1.8TB Views: 0 Country: USA Revenue: $391M Employees: ** Leak countdown: 5d 06:17 |
||||||
| Ransomware | Morrow Meadows Corporation id34690 View details | United States | Other | pending | ||
|
Morrow Meadows Corporation Published: 2026-09-23 Status: Proof Data size: 6.8TB Views: 868 Website: https://morrow-meadows.com/ Country: USA Revenue: $730M Employees: 2000 About company: Morrow Meadows Corporation is a full-service electrical and technology contractor providing single-source construction, engineering, and maintenance across California and the Pacific Northwest. Data description: Employees' PII (Personally Identifiable Information), Correspondence, Financial, Projects, Engineering, Contracts, Agreements, NDA, Leak countdown: 4d 06:17 |
||||||
| Ransomware | Merrill Iron & Steel id33652 View details | United States | — | leaked | ||
|
[AI generated] N/A |
||||||
| Ransomware | Watermark Retirement Communities id33653 View details | United States | — | leaked | ||
|
[AI generated] Watermark Retirement Communities is a U.S.-based senior living company that develops, manages, and operates retirement communities offering independent living, assisted living, memory care, and skilled nursing services. Headquartered in Tucson, Arizona, it operates numerous communities across the United States. The company belongs to the senior care and hospitality-adjacent real estate industry, focusing on resident-centered lifestyle programming and care. |
||||||
| Ransomware | M****C id33438 View details | United States | — | — | pending | |
|
m****.com is a US-based entity cataloged within the threat-intelligence index under the listing type ransomware victim. Its sector and operational offerings are contextualized within the intelligence record to support analytical correlation and threat-mapping workflows. The entity is explicitly associated with the threat actor payoutsking in this listing. No incident specifics, breach confirmations, data details, or financial claims are included per strict reporting guidelines. This description provides neutral, authoritative context for catalog users reviewing compromised entities and their linked threat actors. |
||||||
| Ransomware | M****n id33185 View details | United States | IT | — | pending | |
|
M****n is a ransomware victim entity operating within the United States IT sector. The entity represents a compromised organization or infrastructure asset cataloged within the threat-intelligence index under its designated listing type. Its association with the threat actor payoutsking contextualizes its inclusion within active cyber threat monitoring frameworks. This entry provides neutral reference data for analysts tracking ransomware incidents across technology sectors and geographic regions. M****n was listed as a ransomware victim associated with payoutsking. |
||||||
| Ransomware | Proliance Surgeons id32415 View details | United States | Healthcare / Pharma | leaked | ||
|
[AI generated] Proliance Surgeons is a large physician-owned surgical group based in the United States, primarily operating in Washington State. The organization brings together hundreds of independent surgeons across dozens of specialties, including orthopedics, general surgery, and sports medicine. It operates numerous clinics and surgical centers throughout the Pacific Northwest, providing outpatient and inpatient surgical care to patients across the region. |
||||||
| Ransomware | H.W. Lochner id32247 View details | United States | IT | leaked | ||
|
[AI generated] H.W. Lochner is a US-based civil engineering and infrastructure consulting firm. Founded in 1944 and headquartered in Chicago, Illinois, the company specializes in transportation planning, highway design, bridge engineering, environmental services, and construction management. It primarily serves state and local government clients across the United States, supporting public infrastructure projects including roads, transit systems, and related civil works. |
||||||
| Ransomware | W****s id32216 View details | United States | — | — | pending | |
|
w****.com is a United States-based entity operating within a specific commercial sector, cataloged in the threat-intelligence index under the classification of ransomware victim. The entity's operational profile and public information are documented within cybersecurity intelligence frameworks to support threat actor analysis and incident response tracking. This listing reflects an association with the threat actor payoutsking, indicating a ransomware-related context tied to the entity's geographic and sectoral positioning. The description maintains neutrality regarding specific incident details, avoiding speculation on data impacts or recovery status while providing authoritative catalog context for security professionals and researchers monitoring evolving cyber threats. |
||||||
| Ransomware | H****r id31250 View details | United States | null | leaked | ||
|
H****r is a company operating in the hospitality and food beverage sector in the US, offering various services to its customers. The company is part of the tourism industry, providing accommodations and dining experiences. H****r was listed as a ransomware victim associated with payoutsking. |
||||||
| Ransomware | H****r id33895 View details | United States | null | — | pending | |
|
H****r is cataloged as a ransomware victim entity originating from the United States. The entity operates within an unspecified sector, with no further operational or technical details provided in available records. As part of the threat-intelligence index, H****r is associated with threat actor payoutsking, reflecting its classification within cybersecurity incident documentation. This entry serves to document the relationship between the victim entity and the identified threat actor for analytical and reporting purposes. The listing neutrally confirms H****r was listed as a ransomware victim associated with payoutsking. |
||||||
| Ransomware | T****r id30838 View details | United States | Retail / E-commerce | — | pending | |
|
T****r is a retail and e-commerce company based in the US, offering various products and services to its customers. The company operates in the retail sector, providing a range of offerings to its clients. T****r was listed as a ransomware victim associated with payoutsking. |
||||||
| Ransomware | Casta Diva Group id30554 View details | Italy | Hospitality / Food & Beverage / Tourism | leaked | ||
|
[AI generated] Casta Diva Group is an Italian communications and entertainment company headquartered in Milan, Italy. It operates in the media, events, and live entertainment industry, offering services including event production, branded entertainment, digital communication, and audiovisual content creation. The group serves corporate clients and institutions, managing large-scale events, product launches, and integrated communication campaigns across Italy and international markets. |
||||||
| Ransomware | Welldyne id30350 View details | United States | Healthcare / Pharma | deleted | ||
|
[AI generated] Welldyne is a pharmacy benefit management (PBM) company based in the United States. It provides prescription drug management services to health plans, employers, and government programs. The company focuses on improving medication adherence and controlling prescription costs through its pharmacy network, mail-order pharmacy services, and data-driven clinical programs. Welldyne operates primarily across the US healthcare sector. |
||||||
| Ransomware | C****p id30351 View details | Italy | IT | leaked | ||
|
c****.com is an Italian company operating in the IT sector, providing various services and solutions. The company is based in Italy and caters to the local market with its offerings. c****.com was listed as a ransomware victim associated with payoutsking |
||||||
| Ransomware | W****e id30106 View details | United States | Retail / E-commerce | — | pending | |
|
W****.com operates in the retail and e-commerce sector, offering various products and services to customers in the United States. As an e-commerce company, it provides online shopping experiences, allowing customers to browse and purchase products remotely. W****.com was listed as a ransomware victim associated with payoutsking |
||||||
| Ransomware | C****h id30107 View details | United States | IT | — | pending | |
|
c****.com is an IT company based in the United States, providing various IT services. The company operates in the IT sector, offering services to clients across the country. c****.com was listed as a ransomware victim associated with payoutsking |
||||||
| Ransomware | NTN Bearing Corporation of America id29115 View details | United States | Manufacturing / Engineering | leaked | ||
|
[AI generated] NTN Bearing Corporation of America is a US-based subsidiary of Japan's NTN Corporation, operating in the industrial manufacturing sector. The company produces and distributes precision bearings, driveshafts, and related mechanical components used in automotive, aerospace, and industrial machinery applications. Headquartered in Mount Prospect, Illinois, it serves customers across North America with engineering support and distribution services. |
||||||
| Ransomware | Caunton Engineering id28424 View details | United Kingdom | Manufacturing / Engineering | leaked | ||
|
[AI generated] Caunton Engineering is a UK-based structural steelwork contractor and fabricator headquartered in Nottinghamshire, England. The company specialises in the design, fabrication, and erection of structural steelwork for commercial, industrial, and infrastructure projects. Operating within the construction and engineering sector, Caunton serves clients across the United Kingdom and has built a reputation for delivering large-scale steel frame structures. |
||||||
| Ransomware | V. FRAAS id28425 View details | Germany | Manufacturing / Engineering | leaked | ||
|
[AI generated] V. Fraas is a German textile manufacturer specializing in scarves, shawls, blankets, and accessories. Founded in 1880 and headquartered in Helmbrechts, Bavaria, Germany, the company is known for producing high-quality woven and knitted textiles. It operates in the fashion and home textile industry, serving both retail and wholesale markets globally. V. Fraas is recognized for its craftsmanship and broad range of seasonal accessories. |
||||||
| Ransomware | Bespoke Home Interior Design Group id28426 View details | United Kingdom | Construction / Real Estate | leaked | ||
|
[AI generated] N/A |
||||||
| Ransomware | Vortex Companies id28427 View details | United States | Construction / Real Estate | leaked | ||
|
[AI generated] Vortex Companies is a US-based infrastructure rehabilitation firm specializing in trenchless technology solutions for underground pipe and sewer systems. Operating in the water and wastewater industry, the company provides services including pipe lining, manhole rehabilitation, and structural repair. It serves municipalities and utilities across North America, helping extend the life of aging infrastructure without extensive excavation. |
||||||
| Ransomware | Telia Norge AS id28428 View details | Norway | Telecommunications | leaked | ||
|
[AI generated] Telia Norge AS is a Norwegian telecommunications company and a subsidiary of the Swedish Telia Company group. Operating in Norway, it provides mobile and fixed-line services, broadband internet, and TV solutions to both consumer and business customers. The company is a major player in the Norwegian telecom market, competing with providers like Telenor and Ice, and operates infrastructure supporting voice, data, and digital services across the country. |
||||||
| Ransomware | Prater Engineering Associates id28429 View details | United States | Manufacturing / Engineering | leaked | ||
|
[AI generated] N/A |
||||||
| Ransomware | ESENTIA Energy Systems id28430 View details | Mexico | Energy | leaked | ||
|
[AI generated] N/A |
||||||
| Ransomware | Del Monte Foods id28431 View details | United States | Agriculture / Food | leaked | ||
|
[AI generated] Del Monte Foods is a leading American food company headquartered in Walnut Creek, California. It operates in the packaged food industry, producing and distributing canned fruits, vegetables, tomatoes, and broths under well-known consumer brands. The company supplies products to retail grocery chains, foodservice operators, and industrial customers across the United States and international markets. |
||||||
| Ransomware | I****G id28432 View details | United States | IT | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | O****C id28433 View details | United States | IT | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | UFP Technologies id28434 View details | United States | Manufacturing / Engineering | leaked | ||
|
[AI generated] UFP Technologies is a US-based company specializing in the design and manufacturing of highly engineered custom packaging, components, and specialty products. Operating in the advanced materials and manufacturing industry, it serves sectors including medical, automotive, aerospace, and consumer goods. The company uses materials such as foam, plastics, and composites to create protective and functional solutions for its clients. |
||||||
| Ransomware | G****s id28435 View details | United States | Retail / E-commerce | leaked | ||
|
No additional victim description available. |
||||||
| Ransomware | E****b id28436 View details | United States | Energy | leaked | ||
|
No additional victim description available. |
||||||
| Ransomware | Aero-Coating id28437 View details | Germany | Manufacturing / Engineering | leaked | ||
|
[AI generated] N/A |
||||||
| Ransomware | Peachtree Group id28438 View details | United States | Finance / Legal / Insurance | leaked | ||
|
[AI generated] Peachtree Group is a US-based hospitality-focused investment and management firm headquartered in Atlanta, Georgia. The company operates across real estate private equity, credit, and hotel management, specializing in acquiring, developing, and managing hotel properties. It serves institutional and private investors and is active across the United States hospitality and commercial real estate sectors. |
||||||
| Ransomware | Ash & Lacy Holdings id28439 View details | United Kingdom | Manufacturing / Engineering | leaked | ||
|
[AI generated] Ash & Lacy Holdings is a UK-based manufacturing company specialising in building envelope products and construction systems. It produces metal framing, rainscreen cladding, and roofing solutions primarily for the construction industry. Operating from the West Midlands, England, the company serves commercial and residential sectors, supplying architects, contractors, and specifiers with structural and aesthetic building components. |
||||||
| Ransomware | Maderas del Alto Urgel id28440 View details | Spain | Construction / Real Estate | leaked | ||
|
[AI generated] N/A |
||||||
| Ransomware | Eyemart Express id28441 View details | United States | Retail / E-commerce | leaked | ||
|
[AI generated] Eyemart Express is a United States-based retail optical chain specializing in prescription eyeglasses and contact lenses. Founded in 1990 and headquartered in Farmers Branch, Texas, the company operates hundreds of stores across the country. It offers eye exams, frames, and lenses with an emphasis on fast turnaround times. Eyemart Express competes in the optical retail industry alongside brands like LensCrafters and Visionworks. |
||||||
| Ransomware | Sofinter S.p.a id28442 View details | Italy | Manufacturing / Engineering | leaked | ||
|
[AI generated] Sofinter S.p.A. is an Italian industrial company specializing in the design and manufacturing of heat recovery systems, boilers, and thermal energy equipment. Operating in the energy and power generation sector, it serves industries including oil and gas, petrochemical, and power plants. Headquartered in Italy, Sofinter provides engineering solutions focused on steam generation and waste heat recovery, supporting both domestic and international markets. |
||||||
| Ransomware | Grant Production Testing Services id28443 View details | Canada | Healthcare / Pharma | leaked | ||
|
[AI generated] Grant Production Testing Services is an oilfield services company specializing in well testing, flow measurement, and production testing solutions for the oil and gas industry. The company provides temporary and permanent testing equipment, data acquisition, and technical expertise to support operators during exploration and production activities. It operates primarily in Canada, serving clients across the upstream energy sector. |
||||||
| Ransomware | Kichler Lighting id28444 View details | United States | Manufacturing / Engineering | leaked | ||
|
[AI generated] Kichler Lighting is an American company headquartered in Garland, Texas, specializing in the design and distribution of decorative lighting fixtures, ceiling fans, and landscape lighting products. Founded in 1938, it operates within the residential and commercial lighting industry, offering a wide range of indoor and outdoor lighting solutions. Kichler sells its products through wholesale distributors and retail partners across the United States and internationally. |
||||||
| Ransomware | Powell Electronics id28445 View details | United States | Manufacturing / Engineering | leaked | ||
|
[AI generated] Powell Electronics is a US-based authorized distributor of electronic components and assemblies. Founded in 1946 and headquartered in Camp Hill, Pennsylvania, the company serves aerospace, defense, industrial, and commercial markets. It supplies connectors, cables, electromechanical components, and custom assemblies from leading manufacturers, offering supply chain solutions, engineering support, and value-added services to customers across North America. |
||||||
| Ransomware | Central National Gottesman id28446 View details | United States | Manufacturing / Engineering | leaked | ||
|
[AI generated] Central National Gottesman is a privately held global pulp and paper merchant headquartered in Purchase, New York, USA. Founded in 1886, the company distributes printing and writing papers, packaging materials, pulp, and tissue products. It operates across multiple continents, serving publishers, printers, and converters. It is one of the largest independent paper distribution companies in the world. |
||||||
| Ransomware | Florida East Coast Railway id28447 View details | United States | Retail / E-commerce | leaked | ||
|
[AI generated] Florida East Coast Railway is a regional freight railroad operating in the United States, primarily serving the state of Florida. Founded in the 1890s by Henry Flagler, it runs approximately 351 miles of track along Florida's eastern corridor from Jacksonville to Miami. The company transports intermodal containers, vehicles, and various commodities, playing a key role in Florida's freight logistics and supply chain infrastructure. |
||||||
| Ransomware | Blanchard id28448 View details | United States | Education | leaked | ||
|
[AI generated] Blanchard is a US-based professional development and leadership training company founded by Ken Blanchard, co-author of "The One Minute Manager." Operating in the corporate training and consulting industry, it offers leadership development programs, coaching services, and organizational effectiveness solutions to businesses worldwide. Headquartered in Escondido, California, the company serves clients across various sectors globally. |
||||||
| Ransomware | Grace Design Studios id28449 View details | United States | Manufacturing / Engineering | leaked | ||
|
[AI generated] N/A |
||||||
| Ransomware | TESSCO id28450 View details | United States | Telecommunications | leaked | ||
|
[AI generated] TESSCO Technologies is a United States-based company operating in the wireless technology distribution industry. Founded in 1982 and headquartered in Hunt Valley, Maryland, TESSCO serves as a value-added distributor and solutions provider for wireless networking products, infrastructure equipment, and mobile devices. The company supplies carriers, contractors, system integrators, and government agencies with products from leading manufacturers across the telecommunications sector. |
||||||
| Ransomware | Englewood Lab id28451 View details | United States | Manufacturing / Engineering | leaked | ||
|
[AI generated] Englewood Lab is a contract development and manufacturing organization (CDMO) based in the United States, operating out of Englewood, New Jersey. The company specializes in the development and manufacturing of topical, sterile, and liquid pharmaceutical products. It serves clients in the pharmaceutical and personal care industries, offering formulation development, stability testing, and regulatory support services. |
||||||
| Ransomware | Lc Industries id28452 View details | United States | Manufacturing / Engineering | leaked | ||
|
[AI generated] LC Industries is a nonprofit organization based in the United States that provides employment and training opportunities for people who are blind or visually impaired. Operating primarily in North Carolina, it manufactures and supplies a range of products including military and government goods, fulfilling contracts through the AbilityOne Program, which connects nonprofit agencies with federal procurement opportunities. |
||||||
| Ransomware | SCS Engineers id28453 View details | United States | Manufacturing / Engineering | leaked | ||
|
[AI generated] SCS Engineers is a United States-based environmental consulting and engineering firm. Founded in 1970, the company specializes in solid waste management, landfill design and operations, environmental remediation, and sustainability services. It serves municipal, industrial, and government clients across the country, offering technical solutions related to waste infrastructure, gas collection systems, and environmental compliance. |
||||||
| Ransomware | Epcon Communities id28454 View details | United States | Construction / Real Estate | leaked | ||
|
[AI generated] Epcon Communities is a US-based homebuilding and franchise company founded in 1986 and headquartered in Dublin, Ohio. It specializes in developing and selling single-story, low-maintenance homes primarily targeting active adults aged 55 and older. Operating in the residential real estate and construction industry, Epcon also franchises its community development model to builders across the United States. |
||||||
| Ransomware | Data Exchange Corporation id28455 View details | United States | Communication / Marketing | leaked | ||
|
[AI generated] N/A |
||||||
| Ransomware | SunSource id28456 View details | United States | Manufacturing / Engineering | leaked | ||
|
[AI generated] SunSource is a US-based industrial distribution company specializing in the supply of fluid power, fluid process, and motion control components and systems. It serves a wide range of industries including manufacturing, agriculture, and construction. The company provides products such as hydraulics, pneumatics, and related technical services, helping businesses maintain and optimize their industrial equipment and operations. |
||||||
| Ransomware | A****y id28457 View details | United States | IT | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | H****o id28458 View details | United States | IT | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | F****p id28459 View details | United States | Transportation / Travel / Logistics | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | S****p id28460 View details | United States | Manufacturing / Engineering | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | H****l id28461 View details | United States | Manufacturing / Engineering | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | N****a id28462 View details | United States | Hospitality / Food & Beverage / Tourism | leaked | ||
|
No additional victim description available. |
||||||
| Ransomware | Klüber Elektroanlagenbau id25525 View details | Germany | Other | leaked | ||
|
[AI generated] N/A |
||||||
| Ransomware | Vereinigte-stadtwerke id25524 View details | Germany | Energy | leaked | ||
|
[AI generated] Vereinigte Stadtwerke is a German utility company that supplies electricity, natural gas, and water to its customers. Apart from these, the company also offers telecommunication services including Internet and fixed network. It primarily serves residents and businesses in the Northern Germany region. The company was founded in 2012 as a merger of several municipal utilities to increase efficiency and service quality. |
||||||
| Ransomware | Peugeot Motocycles id25523 View details | France | Manufacturing / Engineering | leaked | ||
|
[AI generated] Peugeot Motocycles is a French company that manufactures a wide range of scooters and small motorcycles. It is one of the oldest motorcycle manufacturers in the world, having started production in 1898. Over the years, the company has become renowned for its innovative designs and high-performance bikes. It's currently owned by Indian multinational conglomerate Mahindra & Mahindra. |
||||||
| Ransomware | JJ White id25522 View details | United States | Healthcare / Pharma | leaked | ||
|
[AI generated] JJ White is a multi-divisional construction company based in Philadelphia, Pennsylvania. It specializes in general, mechanical and industrial construction with additional services in HVAC maintenance and service, fire protection, and rigging projects. The company operates across the United States working with industries such as healthcare, pharmaceutical, petrochemical, and manufacturing. |
||||||
| Ransomware | Soapeople id25521 View details | Belgium | Services | leaked | ||
|
[AI generated] Soapeople is a consulting company that specializes in SAP and salesforce implementation to drive digital transformation. They are an accredited SAP and Salesforce partner. With a team of experts, they provide solutions to businesses in areas like ERP, CRM, Analytics, Cloud infrastructure, and more. Their solutions are focused on improving business performance and efficiency. |
||||||
| Ransomware | Visionwheel id25520 View details | United States | Communication / Marketing | leaked | ||
|
[AI generated] Visionwheel is a prominent manufacturing company that produces high-quality, aesthetically-designed alloy wheels for various vehicles such as cars, light trucks, and SUVs. The company offers a wide range of styles, finishes, and sizes, catering to diverse customer requirements. Visionwheel ensures a rigorous testing process to maintain robust safety standards. It also continually innovates in design to stay abreast in the competitive auto industry. |
||||||
| Ransomware | Sanko Gosei Technology id25519 View details | United Kingdom | IT | leaked | ||
|
[AI generated] Sanko Gosei Technology is a Japanese company specializing in development, design, and manufacturing of plastic components. They serve various sectors, including automotive, electrical, & consumer products. Their expertise includes Injection moulding, design assistance, & tool production. Meanwhile, it has international operations, with facilities in Europe, Asia, & America. |
||||||
| Ransomware | Chemirol id25518 View details | Poland | Agriculture / Food | leaked | ||
|
[AI generated] Chemirol is a Polish company acknowledged in the agricultural market for offering a wide variety of services including purchase of agricultural produce, supply of fertilizers, and fuel. It also engages in grain trading, milling, oil industry and provides financial consulting to farmers. The company has been operating since 1992 with the purpose of supporting the growth and advancement of Polish agriculture. |
||||||
| Ransomware | Rameder id25517 View details | Germany | Hospitality / Food & Beverage / Tourism | leaked | ||
|
[AI generated] Rameder is a German company that specializes in the sale of towbars and transport solutions. Founded in 1996, it offers a broad variety of towing equipment and accessories, removable and fixed towbars, electrical sets, bike carriers, roof boxes, and roof racks. Noted for its online business model, Rameder operates in several European countries. |
||||||
| Ransomware | Bär Cargolift id25516 View details | Germany | Transportation / Travel / Logistics | leaked | ||
|
[AI generated] Bär Cargolift is a leading European manufacturer of hydraulic tail lifts, often utilized in trucks and commercial vehicles. Founded in 1981 in Heilbronn, Germany, it provides a wide range of products, from standard liftgates to retractable lifts, designed for different vehicle types and load capacities. Bär Cargolift is recognized for its innovation, quality, and safety in producing transport solutions. They also offer value-added services like training, repair, and maintenance. |
||||||
| Ransomware | A****s id25515 View details | United Kingdom | Other | leaked | ||
|
No additional victim description available. |
||||||
| Ransomware | A****g id25514 View details | Germany | Other | leaked | ||
|
No additional victim description available. |
||||||
| Ransomware | L****p id25513 View details | United States | Other | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | V****S id25512 View details | Germany | Other | leaked | ||
|
No additional victim description available. |
||||||
| Ransomware | B****p id25511 View details | United Kingdom | Other | leaked | ||
|
No additional victim description available. |
||||||
| Ransomware | C****g id25510 View details | United Kingdom | Other | leaked | ||
|
No additional victim description available. |
||||||
| Ransomware | M****l id25509 View details | Spain | Other | leaked | ||
|
No additional victim description available. |
||||||
| Ransomware | Accord Carton id24209 View details | United States | Communication / Marketing | leaked | ||
|
[AI generated] Accord Carton is a family-owned company that specializes in designing and manufacturing high-quality folding cartons. Founded in 1940, the company is based in Alsip, Illinois. Accord Carton utilizes advanced printing and finishing technologies to produce innovative packaging design solutions. Their services are widely used across industries, including food and beverage, healthcare, and beauty products. |
||||||
| Ransomware | Accord Carton id32890 View details | United States | Communication / Marketing | pending | ||
|
[AI generated] Accord Carton is a family-owned company that specializes in designing and manufacturing high-quality folding cartons. Founded in 1940, the company is based in Alsip, Illinois. Accord Carton utilizes advanced printing and finishing technologies to produce innovative packaging design solutions. Their services are widely used across industries, including food and beverage, healthcare, and beauty products. |
||||||
| Ransomware | S****e id24204 View details | Belgium | Other | leaked | ||
|
No additional victim description available. |
||||||
| Ransomware | V****l id24203 View details | United States | Other | leaked | ||
|
No additional victim description available. |
||||||
| Ransomware | Klüber Elektroanlagenbau GmbH id24184 View details | Germany | Manufacturing / Engineering | leaked | ||
|
[AI generated] "Klüber Elektroanlagenbau GmbH" is a German electrical installation company. They are experts in implementing and maintaining electrical systems for buildings and industrial operations. The company's services include planning and installation of electrical systems, creation of digital planning documents, and comprehensive electrical maintenance. |
||||||
| Ransomware | Klüber Elektroanlagenbau GmbH id32891 View details | Germany | Manufacturing / Engineering | pending | ||
|
[AI generated] "Klüber Elektroanlagenbau GmbH" is a German electrical installation company. They are experts in implementing and maintaining electrical systems for buildings and industrial operations. The company's services include planning and installation of electrical systems, creation of digital planning documents, and comprehensive electrical maintenance. |
||||||
| Ransomware | Klüber Lubrication id24180 View details | Germany | Manufacturing / Engineering | leaked | ||
|
[AI generated] Klüber Lubrication is a German-based company specializing in the development, production, and distribution of high-quality lubricants for a wide array of industries. These range from automotive and rail to wind energy and food & beverages. With a longstanding history, Klüber Lubrication is well-known for its innovative, efficient, and environmentally-friendly specialties that cater to specific customer requirements. Its services also include comprehensive consultation and support. |
||||||
| Ransomware | Klüber Lubrication id32893 View details | Germany | Manufacturing / Engineering | pending | ||
|
[AI generated] Klüber Lubrication is a German-based company specializing in the development, production, and distribution of high-quality lubricants for a wide array of industries. These range from automotive and rail to wind energy and food & beverages. With a longstanding history, Klüber Lubrication is well-known for its innovative, efficient, and environmentally-friendly specialties that cater to specific customer requirements. Its services also include comprehensive consultation and support. |
||||||
| Ransomware | Lithographix id24179 View details | United States | Communication / Marketing | leaked | ||
|
[AI generated] Lithographix is a printing company based in Hawthorne, California, specializing in offering high-quality printing solutions. They provide services including large format printing, direct mail, digital printing, commercial printing, and binding services. They cater to a range of industries such as advertising, publishing, retail, and more. Established in 1975, Lithographix is known for delivering comprehensive, innovative, and eco-friendly printing solutions. |
||||||
| Ransomware | Lithographix id32894 View details | United States | Communication / Marketing | pending | ||
|
[AI generated] Lithographix is a printing company based in Hawthorne, California, specializing in offering high-quality printing solutions. They provide services including large format printing, direct mail, digital printing, commercial printing, and binding services. They cater to a range of industries such as advertising, publishing, retail, and more. Established in 1975, Lithographix is known for delivering comprehensive, innovative, and eco-friendly printing solutions. |
||||||