-
S****e
November 25, 2025
S****e was listed as a victim on the leak site of the payoutsking ransomware group; the attack is estimated to have taken place on 2025-11-25. Country: Belgium. Website: s****.com. Data size claimed by the group: 1.5TB.
-
Schmidt's
November 25, 2025
•
[ ransomware, retail, financial ]
Schmidt's was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2025-11-25. Sector: Retail & E-Commerce. Country: Austria. Website: schmidts.at. SCHMIDT'S is a specialized market that offers a wide array of products and services for house, garden, crafts, and industry, boasting over 130 years of tradition and quality. They cater to both private and business clients, providing expert advice and tailored solutions from their extensive product range. The company's services include workshop support, delivery, eBusiness solutions, and a strong focus on customer satisfaction and reliability. SCHMIDT'S is dedicated to maintaining long-lasting partnerships and fostering a family-oriented company culture.
Over 100GB of data was extracted: contracts, clients, payment data, PII, and bank transfers.
-
cryopur.com
November 24, 2025
cryopur.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2025-11-24. Sector: Healthcare. Country: France. Website: cryopur.com. CryoPur is a French company specializing in advanced cryogenic technology for biogas purification and liquefaction. Founded in 2015, the company developed a patented process that converts raw biogas into bio-LNG (liquefied biomethane) and liquid CO of very high purity. Their systems are used in agricultural, industrial, wastewater, and landfill biogas facilities. CryoPur was acquired by FDE (La Franaise de lnergie), which now owns 94% of the company. CryoPur is headquartered in Massy, le-de-France, France.
-
amcor
November 25, 2025
amcor was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2025-11-25. Sector: Manufacturing. Country: Australia. Website: amcor.com. Amcor is a global leader in developing and producing packaging solutions for a wide range of products, including food, beverage, medical, and perso...
-
Iberia
November 25, 2025
•
[ ransomware, leak ]
Iberia was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2025-11-25. Sector: Transportation. Country: Spain. [AI generated] Iberia, officially known as Iberia Lneas Areas de Espaa and owned by International Airlines Group, is the flag carrier airline of Spain. The company was founded in 1927 and its headquarters are located in Madrid, Spain. It operates an international network of services from its main base of Madrid-Barajas Airport. Iberia is a member of the Oneworld airline alliance.
-
Accord Carton
October 19, 2025
•
[ ransomware, manufacturing ]
Accord Carton was listed as a victim on the leak site of the payoutsking ransomware group; the attack is estimated to have taken place on 2025-10-19. Sector: Manufacturing. Country: United States of America. Website: accordcarton.com. Data size claimed by the group: 1.5TB. [AI generated] Accord Carton is a family-owned company that specializes in designing and manufacturing high-quality folding cartons. Founded in 1940, the company is based in Alsip, Illinois. Accord Carton utilizes advanced printing and finishing technologies to produce innovative packaging design solutions. Their services are widely used across industries, including food and beverage, healthcare, and beauty products.
-
Rochester Philharmonic Orchestra
November 25, 2025
•
[ ransomware, leak ]
Rochester Philharmonic Orchestra was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-11-25. Sector: Hospitality. Country: United States of America. Website: rpo.org. The Rochester Philharmonic Orchestra (RPO) is a distinguished ins
titution with a 100-year legacy of artistic excellence, offering
a diverse range of concerts and educational programs.
We will upload corporate documents soon. Musicians' personal info
rmation (SSNs, DLs, phones and so on), budget, internal confident
ial docs, NDA, etc.
-
Columbia Medical Practice
November 25, 2025
•
[ ransomware, healthcare ]
Columbia Medical Practice was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-25. Sector: Healthcare. Country: United States of America. Website: www.cmpractice.com.
-
Iberia Airlines
November 25, 2025
Iberia Airlines was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2025-11-25. Sector: Transportation. Country: Spain. Website: iberia.com. [AI generated] Iberia Airlines, officially known as Iberia Lneas Areas de Espaa S.A. Operadora, is the largest and national flag carrier airline of Spain. It was founded in June 1927 and operates an international network of services from its main base in Madrid. Iberia is a part of the International Airlines Group (IAG), along with other airlines like British Airways and Aer Lingus. Its fleet includes various Airbus models.
-
Christofle
November 25, 2025
•
[ ransomware, retail ]
Christofle was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-25. Sector: Retail & E-Commerce. Country: France. Website: www.christofle.com.
-
New England Tractor Trailer Training School
November 25, 2025
•
[ ransomware, education ]
New England Tractor Trailer Training School was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-25. Sector: Education. Country: United States of America. Website: nettts.com.
-
Inspire Communities
November 25, 2025
•
[ ransomware, healthcare ]
Inspire Communities was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-25. Sector: Healthcare. Country: United States of America. Website: inspirecommunities.com.
-
Paal
November 25, 2025
•
[ ransomware, technology ]
Paal was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-25. Sector: Technology. Country: Germany. Website: www.paal.de.
-
Lake Superior State University
November 25, 2025
•
[ ransomware, education ]
Lake Superior State University was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-25. Sector: Education. Country: United States of America. Website: www.lssu.edu.
-
National Money Mart Company
November 25, 2025
•
[ ransomware, finance ]
National Money Mart Company was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2025-11-25. Sector: Financial Services. Country: Canada. Website: moneymart.ca. [AI generated] National Money Mart Company, commonly known as Money Mart, is a Canadian financial services company which provides payday loans, cheque cashing, tax preparation and money transfer services for underbanked or not-fully-served customers. Headquartered in Victoria, British Columbia, Money Mart operates in multiple locations across Canada. It has facilitated financial solutions for millions of customers since its inception in 1982.
-
Kids & Company
November 14, 2025
•
[ ransomware, retail, education ]
Kids & Company was listed as a victim on the leak site of the sinobi ransomware group; the attack is estimated to have taken place on 2025-11-14. Sector: Retail & E-Commerce. Country: Canada. Website: www.kidsandcompany.com. Kids & Company is a leading provider of high-quality, flexible child care and early education, operating over 150 locations across North America. They offer a range of programs for children aged 6 weeks to 12 years, including infant, toddler, preschool, kindergarten, and school-age care, as well as summer camps and back-up care services. Their unique curriculum emphasizes emergent learning and fosters independence, confidence, and socialization through play and exploration. The company also partners with employers to provide caregiving benefits, addressing work-life conflicts for families.
-
AllerVie Health
November 26, 2025
•
[ ransomware, healthcare ]
AllerVie Health was listed as a victim on the leak site of the anubis ransomware group; the attack is estimated to have taken place on 2025-11-26. Sector: Healthcare. Country: United States of America. Website: allervie.com. Major customer database leak.
-
Workflow Concepts
November 26, 2025
•
[ ransomware, technology ]
Workflow Concepts was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-26. Sector: Professional Services. Country: Australia. Website: workflowconcepts.com.
-
Eastek International
November 26, 2025
•
[ ransomware, manufacturing ]
Eastek International was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-26. Sector: Manufacturing. Country: United States of America. Website: www.eastekinternational.com.
-
Burnham Brown
November 26, 2025
Burnham Brown was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-26. Sector: Professional Services. Country: United States of America. Website: burnhambrown.com.