-
Balkrishna Paper Mills LTD, India
November 15, 2025
•
[ ransomware, manufacturing ]
Balkrishna Paper Mills LTD, India was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2025-11-15. Sector: Manufacturing. Country: India. Website: bpml.in. Data size claimed by the group: 2 GB. Balkrishna Paper Mills LTD, India
-
Marlex Human Capital
November 25, 2025
•
[ ransomware, technology ]
Marlex Human Capital was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2025-11-25. Sector: Professional Services. Country: Poland. Website: marlexhc.pl. Marlex Human Capital
-
MSK
November 25, 2025
MSK was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2025-11-25. Sector: Professional Services. Country: Russian Federation. Established in 1908, Mitchell Silberberg & Knupp (MSK), is a firm that provides services such as Ventu
-
Rempe Construction
November 23, 2025
Rempe Construction was listed as a victim on the leak site of the sinobi ransomware group; the attack is estimated to have taken place on 2025-11-23. Sector: Manufacturing. Country: United States of America. Website: rempe.com. Rempe Construction specializes in construction services, offering expertise to various clients in need of reliable building solutions. With a focus on quality and customer satisfaction, they deliver tailored construction projects. Located in Novato, California, they serve the local community and surrounding areas. Their commitment to excellence positions them as a trusted partner in the construction industry.
-
Mitchell Silberberg & Knupp
May 13, 2025
•
[ ransomware, hack ]
Mitchell Silberberg & Knupp was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2025-05-13. Sector: Professional Services. Country: United States of America. Website: msk.com. Established in 1908, Mitchell Silberberg & Knupp (MSK), is a firm that provides services such as Ventu
-
Standing Chapter 13 Trustee
November 24, 2025
Standing Chapter 13 Trustee was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-11-24. Sector: Financial Services. Country: United States of America. Website: standingtrustee.com. The Standing Chapter 13 Trustee District of Minnesota provides se
rvices related to bankruptcy cases under Chapter 13, assisting de
btors with payment information and case-related resources.
We will upload 44gb of corporate documents soon. Employee and cli
ent personal documents (SSNs, passports, DLs and so on), detailed
financials, internal confidential docs, contracts and agreements
, court documents, etc.
-
V****l
November 25, 2025
V****l was listed as a victim on the leak site of the payoutsking ransomware group; the attack is estimated to have taken place on 2025-11-25. Country: United States of America. Website: v****.com. Data size claimed by the group: 855GB.
-
S****e
November 25, 2025
S****e was listed as a victim on the leak site of the payoutsking ransomware group; the attack is estimated to have taken place on 2025-11-25. Country: Belgium. Website: s****.com. Data size claimed by the group: 1.5TB.
-
Schmidt's
November 25, 2025
•
[ ransomware, retail, financial ]
Schmidt's was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2025-11-25. Sector: Retail & E-Commerce. Country: Austria. Website: schmidts.at. SCHMIDT'S is a specialized market that offers a wide array of products and services for house, garden, crafts, and industry, boasting over 130 years of tradition and quality. They cater to both private and business clients, providing expert advice and tailored solutions from their extensive product range. The company's services include workshop support, delivery, eBusiness solutions, and a strong focus on customer satisfaction and reliability. SCHMIDT'S is dedicated to maintaining long-lasting partnerships and fostering a family-oriented company culture.
Over 100GB of data was extracted: contracts, clients, payment data, PII, and bank transfers.
-
cryopur.com
November 24, 2025
cryopur.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2025-11-24. Sector: Healthcare. Country: France. Website: cryopur.com. CryoPur is a French company specializing in advanced cryogenic technology for biogas purification and liquefaction. Founded in 2015, the company developed a patented process that converts raw biogas into bio-LNG (liquefied biomethane) and liquid CO of very high purity. Their systems are used in agricultural, industrial, wastewater, and landfill biogas facilities. CryoPur was acquired by FDE (La Franaise de lnergie), which now owns 94% of the company. CryoPur is headquartered in Massy, le-de-France, France.
-
amcor
November 25, 2025
amcor was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2025-11-25. Sector: Manufacturing. Country: Australia. Website: amcor.com. Amcor is a global leader in developing and producing packaging solutions for a wide range of products, including food, beverage, medical, and perso...
-
Iberia
November 25, 2025
•
[ ransomware, leak ]
Iberia was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2025-11-25. Sector: Transportation. Country: Spain. [AI generated] Iberia, officially known as Iberia Lneas Areas de Espaa and owned by International Airlines Group, is the flag carrier airline of Spain. The company was founded in 1927 and its headquarters are located in Madrid, Spain. It operates an international network of services from its main base of Madrid-Barajas Airport. Iberia is a member of the Oneworld airline alliance.
-
Accord Carton
October 19, 2025
•
[ ransomware, manufacturing ]
Accord Carton was listed as a victim on the leak site of the payoutsking ransomware group; the attack is estimated to have taken place on 2025-10-19. Sector: Manufacturing. Country: United States of America. Website: accordcarton.com. Data size claimed by the group: 1.5TB. [AI generated] Accord Carton is a family-owned company that specializes in designing and manufacturing high-quality folding cartons. Founded in 1940, the company is based in Alsip, Illinois. Accord Carton utilizes advanced printing and finishing technologies to produce innovative packaging design solutions. Their services are widely used across industries, including food and beverage, healthcare, and beauty products.
-
Rochester Philharmonic Orchestra
November 25, 2025
•
[ ransomware, leak ]
Rochester Philharmonic Orchestra was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-11-25. Sector: Hospitality. Country: United States of America. Website: rpo.org. The Rochester Philharmonic Orchestra (RPO) is a distinguished ins
titution with a 100-year legacy of artistic excellence, offering
a diverse range of concerts and educational programs.
We will upload corporate documents soon. Musicians' personal info
rmation (SSNs, DLs, phones and so on), budget, internal confident
ial docs, NDA, etc.
-
Columbia Medical Practice
November 25, 2025
•
[ ransomware, healthcare ]
Columbia Medical Practice was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-25. Sector: Healthcare. Country: United States of America. Website: www.cmpractice.com.
-
Iberia Airlines
November 25, 2025
Iberia Airlines was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2025-11-25. Sector: Transportation. Country: Spain. Website: iberia.com. [AI generated] Iberia Airlines, officially known as Iberia Lneas Areas de Espaa S.A. Operadora, is the largest and national flag carrier airline of Spain. It was founded in June 1927 and operates an international network of services from its main base in Madrid. Iberia is a part of the International Airlines Group (IAG), along with other airlines like British Airways and Aer Lingus. Its fleet includes various Airbus models.
-
Christofle
November 25, 2025
•
[ ransomware, retail ]
Christofle was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-25. Sector: Retail & E-Commerce. Country: France. Website: www.christofle.com.
-
New England Tractor Trailer Training School
November 25, 2025
•
[ ransomware, education ]
New England Tractor Trailer Training School was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-25. Sector: Education. Country: United States of America. Website: nettts.com.
-
Inspire Communities
November 25, 2025
•
[ ransomware, healthcare ]
Inspire Communities was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-25. Sector: Healthcare. Country: United States of America. Website: inspirecommunities.com.
-
Paal
November 25, 2025
•
[ ransomware, technology ]
Paal was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-25. Sector: Technology. Country: Germany. Website: www.paal.de.