-
Irwin Car
November 3, 2025
•
[ ransomware, manufacturing ]
Irwin Car was listed as a victim on the leak site of the payoutsking ransomware group; the attack is estimated to have taken place on 2025-11-03. Sector: Manufacturing. Country: United States of America. Website: irwincar.com. Data size claimed by the group: 272GB. [AI generated] Irwin Car and Equipment is a manufacturing company specialized in the production of heavy-duty material handling equipment. They create custom mining cars, conveyor cars, tunneling cars and more. It aids various industries, including mining and tunneling, in improving their efficiency and safety. The company is based in the USA and is recognized for its innovative and durable equipment.
-
Fulgar S.p.A.
October 31, 2025
Fulgar S.p.A. was listed as a victim on the leak site of the ransomhouse ransomware group; the attack is estimated to have taken place on 2025-10-31. Sector: Manufacturing. Country: Italy. Website: www.fulgar.com. Fulgar S.p.A. is an international leader in the production of polyamide yarns and covered elastomers, known for its commitment to quality, innovation, and sustainability. The company offers a range of innovative textile solutions, including eco-friendly and biodegradable fibers, catering to the global textile and technical markets. Fulgar's products, such as Q-CYCLE and AMNI SOUL ECO, emphasize environmental responsibility while maintaining high performance standards.
-
Wiraswasta Gemilang
November 12, 2025
•
[ ransomware, energy, leak ]
Wiraswasta Gemilang was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2025-11-12. Sector: Energy & Utilities. Country: Indonesia. Website: wgi.co.id. PT Wiraswasta Gemilang Indonesia (WGI) is the first and largest private lubricant plant in Indonesia, specializing in re-refinery and blending services.
To your attention a small portion of screenshots.
-
AsahiKASEI MICRODEVICES
November 12, 2025
AsahiKASEI MICRODEVICES was listed as a victim on the leak site of the crypto24 ransomware group; the attack is estimated to have taken place on 2025-11-12. Sector: Technology. Country: United States of America. Website: akm.com. ...
-
ctfc.cat
November 12, 2025
•
[ ransomware, leak, technology ]
ctfc.cat was listed as a victim on the leak site of the devman ransomware group; the attack is estimated to have taken place on 2025-11-12. Sector: Other. Country: Spain. Website: ctfc.cat. Ransom: 248000
30gb of files exfiltrated
-
Treetop Companies
November 11, 2025
Treetop Companies was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-11-11. Sector: Financial Services. Country: United States of America. Website: treetopcompanies.com. Treetop Companies is a real estate investment firm founded in 200
5 by Azi Mandel and Adam Mermelstein.
We will upload almost 100gb of corporate documents soon. Lots of
confidential files, clients personal documents (passports, driver
s licenses, financials), other internal client information, NDA,
etc.
-
galileo.it
September 12, 2025
galileo.it was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2025-09-12. Sector: Financial Services. Country: Italy. Website: galileo.it. Galileo is a global payments platform that powers fintech, financial services, and investment firms by removing the complexity of payments. We're a proven financial technology platform, an innovation engine and a leader in card issuing, payments and digital banking. Galileo was founded in 2000 and is headquartered in Utah.
-
forensicmed.com
November 12, 2025
•
[ ransomware, healthcare, government ]
forensicmed.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2025-11-12. Sector: Healthcare. Country: United States of America. Website: forensicmed.com. Forensic Medical is a comprehensive forensic pathology company headquartered in Nashville, Tennessee, which provides medical examiner, death investigation, medical autopsy services, expert forensic testimony and forensic management services to government agencies and private individuals.
-
bridge-housing-corp
November 12, 2025
•
[ ransomware, government, leak ]
bridge-housing-corp was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2025-11-12. Sector: Government & Defense. Country: United States of America. Website: bridgehousing.org. Founded in 1983 BRIDGE Housing is a non-profit that works towards securing affordable housing. The organization is headquartered in San Francisco, California.
We have over 150 GB of confidential information, and the management of this organization has completely ignored us. Remember, the publication of your data is entirely their fault.
-
Grupo Via Argentina
September 5, 2025
•
[ ransomware, manufacturing ]
Grupo Via Argentina was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2025-09-05. Sector: Transportation. Country: Argentina. Website: grupovia.com. Grupo Va hosts events focusing on architecture, interior design, real estate, hospitality, and construction. Its activities connect professionals from these sectors with networking opportunities and debates on contemporary trends. The company serves a diverse clientele, including architects, designers, and industry stakeholders across major cities in Spain and Portugal. Through its offerings, Grupo Va aims to foster collaboration and innovation within the built environment.
-
Vennerhus Weine AG
October 20, 2025
•
[ ransomware, retail ]
Vennerhus Weine AG was listed as a victim on the leak site of the ransomhouse ransomware group; the attack is estimated to have taken place on 2025-10-20. Sector: Retail & E-Commerce. Country: Switzerland. Website: www.vennerhus.ch. Vennerhus Weine AG is a Swiss wine company based in Grosshchstetten, Canton of Bern. Founded in 1994, the company specializes in the import, trade, and distribution of high-quality wines. In addition to wine sales, Vennerhus offers professional wine tastings, courses, and events designed for both private clients and corporate customers.
-
Soleol
October 9, 2025
•
[ ransomware, energy, technology ]
Soleol was listed as a victim on the leak site of the ransomhouse ransomware group; the attack is estimated to have taken place on 2025-10-09. Sector: Energy & Utilities. Country: Switzerland. Website: www.soleol.ch. Soleol is an Algerian renewable energy company that designs and installs solar equipment for homes, businesses, and local governments. Their unique products are built using biomimetic technology, which means they copy natural designs to create environmentally friendly solar solutions.
-
Znojma Czechia
September 22, 2025
•
[ ransomware, government ]
Znojma Czechia was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2025-09-22. Sector: Government & Defense. Country: Czechia. Website: znojmo.cz. Subject of activity
Main activity
comprehensive administration in the area of housing owned by the city of Znojmo
ensuring matters in the interest of the city in the management of housing stock and other real estate owned by the city of Znojmo
administration of the physical education and sports department, operation of sports facilities
security of matters in the area of personal culture, public toilets
maintain and manage the property of the city of Znojmo.
-
latamlex (gyg.local)
November 12, 2025
•
[ ransomware, finance ]
latamlex (gyg.local) was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2025-11-12. Sector: Professional Services. Country: Costa Rica. Website: latamlex.com. Latamlex is a regional law firm with a team of over 100 attorneys and more than 20 years of experience, recognized for its expertise in various legal areas including arbitration, corporate law, and intellectual property. The firm caters to local entrepreneurs looking to expand internationally as well as multinational corporations seeking to establish or grow their operations in Central America. With offices across five countries, Latamlex combines international vision with local knowledge to effectively serve its diverse clientele. The firm's commitment to excellence has earned it numerous accolades from prestigious legal publications.
-
KohaFoods Hawaii
November 12, 2025
•
[ ransomware, retail ]
KohaFoods Hawaii was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2025-11-12. Sector: Agriculture and Food Production. Country: United States of America. Website: kohaspecialtyfoods.com. Koha Foods is a Honolulu-based distributor and wholesaler specializing in Asian food products. The company boasts a diverse selection of over 2,500 items including seafood, condiments, and Korean dishes, catering primarily to local Oahu businesses such as restaurants and supermarkets. Having served Hawaii since 1970, Koha Foods emphasizes quality and connection with the community through its offerings. In addition to distribution, they manufacture their own signature Korean food items using authentic recipes and high-quality ingredients.
-
*******.com
November 12, 2025
•
[ ransomware, leak ]
*******.com was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2025-11-12. Website: 25swr3rgce7elyedjmmhdw4ourgtxc72mj2cynsrqz6wwitestfpiiyd.onion. http://25swr3rgce7elyedjmmhdw4ourgtxc72mj2cynsrqz6wwitestfpiiyd.onion/
-
doversd.org
November 12, 2025
•
[ ransomware, education ]
doversd.org was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2025-11-12. Sector: Education. Country: United States of America. Website: doversd.org. Dover City Schools is a public K-12 school district located in Dover, Ohio, serving approximately 2,650 students across multiple schools.
-
iconinternational.com
November 12, 2025
iconinternational.com was listed as a victim on the leak site of the chaos ransomware group; the attack is estimated to have taken place on 2025-11-12. Sector: Financial Services. Country: United States of America. Website: www.iconinternational.com. Data size claimed by the group: 600 GB. ICON International, Inc. is a corporate barter firm that offers innovative solutions and strategic thinking to help brands grow and create economic value.
-
Persians - Cortinas - Todos - Alfombrass
November 13, 2025
Persians - Cortinas - Todos - Alfombrass was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2025-11-13. Sector: Retail & E-Commerce. Country: Argentina. Website: canetcam.com. Descubra las Mejores Cortinas y Persianas en Costa Rica con Persianas Canet
En Canet somos expertos en cortinas y persianas en Costa Rica, ofrecemos soluciones de primera para el recubrimiento de ventanas y superficies.
Nuestros asesores especializados le ayudarn a seleccionar la opcin ideal que se ajuste a sus necesidades y estilo, garantizando la eleccin perfecta en cortinas y persianas.
-
M&BM, Inc
November 13, 2025
•
[ ransomware, leak ]
M&BM, Inc was listed as a victim on the leak site of the blackshrantac ransomware group; the attack is estimated to have taken place on 2025-11-13. Sector: Other. Country: Bulgaria. Website: mdm-bg.com.
