-
Keystone Fabricating
November 18, 2025
Keystone Fabricating was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2025-11-18. Sector: Manufacturing. Country: United States of America. Website: www.keystonefabricating.com. United States
-
Katch Kan
November 18, 2025
•
[ ransomware, manufacturing ]
Katch Kan was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2025-11-18. Sector: Manufacturing. Country: Canada. Website: www.katchkan.com. Canada
-
F-W-S Countertops
November 22, 2025
F-W-S Countertops was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2025-11-22. Sector: Manufacturing. Country: United States of America. Website: f-w-s.net. F-W-S COUNTERTOPS specializes in the design, fabrication, and installation of premium countertops, including Quartzite, Granite, Sintered Stone, Man-Made Quartz, and Wood Butcher Block. The company serves residential, commercial, and institutional clients in Southern Illinois and the tri-state area. With a focus on quality craftsmanship and a wide range of customizable products, they offer unique solutions for various projects such as kitchen and vanity countertops, wall backsplashes, and outdoor kitchens. Their showroom features full slabs and samples along with kitchen and vanity sinks in multiple styles and materials
-
Barr Trucking Inc.
November 22, 2025
•
[ ransomware, manufacturing ]
Barr Trucking Inc. was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2025-11-22. Sector: Transportation. Country: United States of America. Website: barrcos.com. Barr Trucking was formed in 1981 by William Mark Barr and his Father William DeWitt Barr in Pinckneyville, IL. At the time, Barr Trucking consisted of two water delivery trucks and one dump truck utilized to deliver residential rock. In 1983 Mark acquired his fathers share of the company with visions of expanding into new markets. The next year Mark purchased the companys first semi, a 1975 R Model Mack. With an expanding fleet and company growth, a new facility was in order. In 1989, Barr Trucking purchased a large work shop and storage yard west of Pinckneyville, IL where the company operates today.
-
Healthcare & More
November 22, 2025
•
[ ransomware, healthcare, finance ]
Healthcare & More was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2025-11-22. Sector: Healthcare. Country: United States of America. Website: healthcareandmoore.com. Healthcare & Moore, led by independent insurance broker Myra 'Lynn' Moore, specializes in a comprehensive range of insurance products including Medicare plans, health insurance, life insurance, annuities, and dental coverage. The company is dedicated to providing exceptional service and assisting clients, particularly seniors, in navigating their healthcare insurance options. By offering free consultations and personalized guidance, they aim to ensure clients make informed choices about their insurance needs. With access to over 6,225 products from 305 organizations, Healthcare & Moore is committed to finding the best coverage for their clients specific situations.
-
Fueling Solutions Inc.
November 22, 2025
•
[ ransomware, energy, government ]
Fueling Solutions Inc. was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2025-11-22. Sector: Energy & Utilities. Country: United States of America. Website: fueling-solutions.com. Fueling Solutions, Inc. specializes in providing commercial, industrial, and mission-critical fueling systems across over 30 countries on four continents. The company offers a range of services including sales, service, and installation for convenience store point-of-sale systems, fuel dispensers, and monitoring systems. They are also involved in complex industrial fueling systems and mission-critical environments such as data centers and government systems. Established in 1986, they have completed thousands of projects, catering to various sectors including convenience stores, bulk plants, and local government fueling systems.
-
Nugent Supply
November 22, 2025
Nugent Supply was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2025-11-22. Sector: Professional Services. Country: United States of America. Website: nugentsupply.com. Nugent Supply Company is a Women Business Enterprise (WBE) and a member of the Specialty Tools and Fasteners Distributors Association (STAFDA) based in Loveland, Colorado. They specialize in the distribution of construction supplies such as nuts, bolts, fasteners, and strut, offering delivery directly to job sites across Colorado and Wyoming. Established in 1994, they prioritize customer service and provide next day delivery through dedicated drivers. Their showroom invites clients to visit and engage with their extensive catalog of products and services.
-
Summit Construction Supply
November 22, 2025
•
[ ransomware, retail, manufacturing ]
Summit Construction Supply was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2025-11-22. Sector: Retail & E-Commerce. Country: United States of America. Website: summitconstructionsupply.com. Summit Construction Supply is a leading commercial construction product supplier based in Loveland, Colorado, specializing in providing a wide range of construction materials to mechanical, electrical, drywall, and carpentry contractors. Established in 2015, the company prides itself on extensive product knowledge and exceptional customer service, offering next-day deliveries and on-site inventory management support. With over 8,000 items stocked and access to more than 200 manufacturers, they are committed to meeting the specific needs of their clients throughout Northern Colorado and Wyoming. The company also offers consulting services to assist clients with material applications and product selections for their projects.
-
Parsirang
November 22, 2025
•
[ ransomware, manufacturing ]
Parsirang was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2025-11-22. Sector: Agriculture and Food Production. Country: Iran. Website: parsirang.com. Parsirang is a large Iranian agro-industrial company focused on egg production, but also involved in feed, olive farming, and compost fertilizer. They run a sizable operation in Fars Province and have significant capacity and certifications.
-
Bodega San Huberto
November 22, 2025
•
[ ransomware, retail ]
Bodega San Huberto was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2025-11-22. Sector: Agriculture and Food Production. Country: Argentina. Website: bodegassanhuberto.com.ar. Bodega | San Huberto offers a welcoming environment for all, catering to both Spanish and English-speaking clients. The company focuses on creating a friendly atmosphere for visitors. Although specific products and services are not mentioned, the name suggests a potential emphasis on food and beverages. Their intended clientele likely includes local residents and tourists seeking a culturally enriching experience
-
Nuclebrás Equipamentos Pesados
March 13, 2025
•
[ ransomware, manufacturing, government ]
Nuclebrs Equipamentos Pesados was listed as a victim on the leak site of the worldleaks ransomware group; the attack is estimated to have taken place on 2025-03-13. Sector: Manufacturing. Country: Brazil. Website: www.nuclep.gov.br. [AI generated] "Nuclebrs Equipamentos Pesados S.A. (NUCLEP) is a Brazilian state-owned company under the Ministry of Science, Technology, Innovation, and Communications. Founded in 1975, NUCLEP is responsible for developing and manufacturing heavy equipment, especially for nuclear power plants. Besides serving the nuclear sector, it also provides solutions for offshore oil platforms and submarine construction, acting as a key player in the Brazilian technological and industrial development."
-
Nissan Capital
November 23, 2025
•
[ ransomware, finance ]
Nissan Capital was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-23. Sector: Financial Services. Country: Japan. Website: www.nissancapital.com.
-
Outback Pharmacies
November 19, 2025
•
[ ransomware, healthcare ]
Outback Pharmacies was listed as a victim on the leak site of the beast ransomware group; the attack is estimated to have taken place on 2025-11-19. Sector: Healthcare. Country: Australia. Website: www.outbackpharmacies.com.au. Data size claimed by the group: 150GB. Outback Pharmacies operates five locations in Broken Hill, providing a wide range of health services including prescriptions, sleep apnoea management, vaccinations, and weekly medicine packing. With over 30 years of experience, they focus on enhancing the health and wellbeing of the local community through partnerships with health organizations and investment in staff training. Their services cater to individuals seeking reliable pharmaceutical care and convenient medication management solutions. Outback Pharmacies is committed to delivering exceptional service and expert advice to their clients
-
National Institute of Materials Physics
November 23, 2025
National Institute of Materials Physics was listed as a victim on the leak site of the nova ransomware group; the attack is estimated to have taken place on 2025-11-23. Sector: Education. Country: Romania. Website: icsi.ro. Romania
Scientific Institute in Bucharest.
He is engaged in fundamental and applied research and development, in particular in the field of solid state physics and materials research.
-
Capp Shupak
November 23, 2025
•
[ ransomware, leak ]
Capp Shupak was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-23. Sector: Professional Services. Country: Canada. Website: www.cappshupak.com.
-
Berts Electric
November 23, 2025
•
[ ransomware, manufacturing ]
Berts Electric was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-23. Sector: Manufacturing. Country: Canada. Website: www.bertselectric.net.
-
The Hunnicutt Law Group
November 23, 2025
•
[ ransomware, leak ]
The Hunnicutt Law Group was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-23. Sector: Professional Services. Country: United States of America. Website: www.hunnicuttlaw.com.
-
Cayuga Milk Ingredients
November 23, 2025
•
[ ransomware, manufacturing ]
Cayuga Milk Ingredients was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-23. Sector: Agriculture and Food Production. Country: United States of America. Website: www.cmingredients.com.
-
Coral Clubes - Mexico
November 23, 2025
•
[ ransomware, leak, retail ]
Coral Clubes - Mexico was listed as a victim on the leak site of the tengu ransomware group; the attack is estimated to have taken place on 2025-11-23. Sector: Hospitality. Country: Mexico. Website: fimexgroup.com. Coral Clubes - Mexico The Fimex Group offers a collection of luxury leisure and sports clubs, with a special focus on golf clubs and integrated resorts. Founded as a specialist in the leisure and sports sector, the group is dedicated to providing exceptional experiences for its members through world-class facilities. The group is committed to the highest standards of quality, service, and customer satisfaction.
-
Cal-Comp Electronics Public
November 23, 2025
•
[ ransomware, technology, manufacturing ]
Cal-Comp Electronics Public was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-23. Sector: Technology. Country: Mexico. Website: www.cal-comp.com.mx.