-
Trolec
November 26, 2025
Trolec was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-26. Sector: Energy & Utilities. Country: Canada. Website: www.trolec.com.
-
Arabia Holding
November 26, 2025
•
[ ransomware, financial ]
Arabia Holding was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-26. Sector: Other. Country: Egypt. Website: www.arabia-holding.com.
-
Williams & Sparages
November 26, 2025
•
[ ransomware, financial, technology ]
Williams & Sparages was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-11-26. Sector: Professional Services. Country: United States of America. Website: wsengineers.com. Williams & Sparages is a full-service engineering firm specializi
ng in civil engineering, planning and development, surveying and
mapping, and construction services.
We will upload about 127gb of corporate documents soon. Clients i
nformation, employee personal information, financials, credit car
d details, projects, contacts and agreements, etc.
-
ITL Systemhaus
November 26, 2025
•
[ ransomware, technology, healthcare ]
ITL Systemhaus was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2025-11-26. Sector: Technology. Country: Germany. Website: itl-edv.de. The company ITL Systemhaus fr Datentechnik GmbH was founded in 1991.
In the meantime, ITL has over 25 employees at a high level of training and offers a comprehensive range of services as a competent partner "around IT". The business policy is based on a long-term, partner-oriented relationship with the end customer.
Milestones in the history of ITL were the move to the new office building in Mnchberg with its own training rooms in 2005 and the complete takeover of the dental software DENTIXsoft with over 300 customers nationwide in 2010.
-
Stacey L Tokunaga
November 2, 2025
•
[ ransomware, leak, finance ]
Stacey L Tokunaga was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-11-02. Sector: Professional Services. Country: United States of America. Website: sltlaw.com. The Law Offices of Stacey L. Tokunaga specializes in Workers Comp
ensation Defense law, offering committed and high-quality legal s
ervices to self-insured employers, third party administrators, an
d insured clients.
We will upload 200gb of corporate documents soon. Detailed person
al employee information (DLs, SSNs, passports, addresses, phones
and so on), detailed financials, clients' credit cards, police re
ports, NDAs, etc.
-
Church of the Ascension Anglican
November 26, 2025
•
[ ransomware, hack ]
Church of the Ascension Anglican was listed as a victim on the leak site of the ciphbit ransomware group; the attack is estimated to have taken place on 2025-11-26. Sector: Other. Country: United States of America. Website: ascensionlondon.com. [AI generated] The Church of the Ascension Anglican is a faith-based organization part of the Anglican Communion. They focus on the teachings of Jesus Christ and rely on the Book of Common Prayer for worship. The church is a welcoming and accepting community, offering regular mass, youth programmes, community outreach and service initiatives. Their mission is to grow the body of Christ by ministering to their congregation and their local community.
-
Fineline Architectural Millwork
November 26, 2025
•
[ ransomware, manufacturing ]
Fineline Architectural Millwork was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-11-26. Sector: Manufacturing. Country: United States of America. Website: finelinewood.com. Fineline Woodworks Inc. is full service custom carpentry located
in Orange County in beautiful southern California.
We will upload 100gb of corporate documents soon. Employee person
al information, detailed financials, NDAs, projects, clients
information, agreements and so on.
-
Zoetis
November 6, 2025
•
[ ransomware, healthcare, manufacturing ]
Zoetis was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-11-06. Sector: Healthcare. Country: United States of America. Website: zoetis.com. Zoetis discovers, develops, manufactures, and commercializes anim
al health medicines, vaccines, and diagnostic products in the Uni
ted States and internationally.
We will upload 25gb of corporate documents soon. Lots of internal
documents, clients' data, numerous test and other information.
-
Healthcare Retroactive Audits
November 26, 2025
Healthcare Retroactive Audits was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2025-11-26. Sector: Healthcare. Country: United States of America. Website: healthcareaudits.net. 22171128 medical record files, neatly packaged into 11 archives by hospital. The firm Healthcare Retroactive Audits, which was auditing the data for insurers, not only let the leak happen but also took no steps to stop the files from being published. When we approached NIH Information Security Program to discuss the issue, they said they werent interested in resolving it. Were now open to talks with the affected organizations, insurers and the hospitals whose data were lost. These files are only a portion of the total breach, and were deciding whether to keep the release at this size or expand it.
-
AGS
November 26, 2025
AGS was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2025-11-26. AGS
-
Electricidad Panamericana
November 21, 2025
•
[ ransomware, energy ]
Electricidad Panamericana was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2025-11-21. Sector: Energy & Utilities. Country: Argentina. Website: electricidadpanamericana.com.ar. Data size claimed by the group: 100GB.
-
Meinhardt Malaysia
October 24, 2025
•
[ ransomware, leak, technology ]
Meinhardt Malaysia was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2025-10-24. Sector: Professional Services. Country: Malaysia. Website: meinhardtgroup.com. Data size claimed by the group: 500GB. [AI generated] Meinhardt Malaysia is an engineering consultancy firm that offers a diverse range of professional engineering and project management services. The company was established in 1973 and it's a subsidiary of the Meinhardt Group. Their service spans across multiple industries including Building Engineering, Transportation, Water & Environment, and Urban Development. They have numerous landmark projects in their portfolio including the planning and design of technologically advanced buildings.
-
Clemar Assessoria e Logística em Comércio Internacional
November 21, 2025
Clemar Assessoria e Logstica em Comrcio Internacional was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2025-11-21. Sector: Transportation. Country: Brazil. Website: clemar.net. Data size claimed by the group: 228GB. [AI generated] Clemar Assessoria e Logstica em Comrcio Internacional is a Brazilian company specializing in international trade and logistic services. With extensive experience in the sector, it provides assistance in customs clearance, export and import processes, freight forwarding, and international business consultancy. The company aims to facilitate and simplify foreign trade operations for businesses of all sizes.
-
Transpedrosa
November 21, 2025
•
[ ransomware, hack ]
Transpedrosa was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2025-11-21. Sector: Transportation. Country: Brazil. Website: transpedrosa.com.br. Data size claimed by the group: 335GB. [AI generated] Transpedrosa is a Brazilian company that specializes in the transportation of liquid and gas products. Established in 1969, they handle an array of materials like chemical, petrochemical, and aviation products. They continue to expand their services beyond their initial local focus, becoming a crucial player in the road transport logistic sector within Brazil.
-
Kingsford Group
November 20, 2025
Kingsford Group was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2025-11-20. Sector: Professional Services. Country: Singapore. Website: kingsford.com.sg. Data size claimed by the group: 200GB. [AI generated] Kingsford Group is a company that specializes in property development and investment. It operates globally, with notable activities in the Asia Pacific region. The firm is known for its expertise in identifying lucrative opportunities in the residential, commercial, and hospitality sectors. Its services include project management, marketing and sales, as well as construction management.
-
MITACHI
November 20, 2025
MITACHI was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2025-11-20. Sector: Manufacturing. Country: Japan. Website: mitachi.co.jp. Data size claimed by the group: 20GB. Trade
-
K.M. Packaging
November 20, 2025
•
[ ransomware, manufacturing ]
K.M. Packaging was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2025-11-20. Sector: Manufacturing. Country: Thailand. Website: kmp.co.th. Data size claimed by the group: 82GB. Manufacturing
-
sevci.org
November 26, 2025
•
[ ransomware, healthcare ]
sevci.org was listed as a victim on the leak site of the benzona ransomware group; the attack is estimated to have taken place on 2025-11-26. Sector: Healthcare. Country: Cte dIvoire. Website: sevci.org. Data size claimed by the group: 500 GB. Sant, Espoir et Vie, dans un systme de soin fort
-
dacia-ploiesti.ro
November 26, 2025
•
[ ransomware, manufacturing ]
dacia-ploiesti.ro was listed as a victim on the leak site of the benzona ransomware group; the attack is estimated to have taken place on 2025-11-26. Sector: Manufacturing. Country: Romania. Website: dacia-ploiesti.ro. Ransom demand: $90,000. Data size claimed by the group: 200 GB.
-
mazda-ploiesti.ro
November 26, 2025
•
[ ransomware, manufacturing, leak ]
mazda-ploiesti.ro was listed as a victim on the leak site of the benzona ransomware group; the attack is estimated to have taken place on 2025-11-26. Sector: Manufacturing. Country: Romania. Website: mazda-ploiesti.ro. Ransom demand: $90,000. Data size claimed by the group: 200 GB.