-
Community Unit School District 201
November 10, 2025
Community Unit School District 201 was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2025-11-10. Sector: Education. Country: United States of America. Website: cusd201.org. Community Unit School District 200 is dedicated to inspiring, educating, challenging, and supporting all students to achieve their highest potential in learning and personal development. The district offers various educational programs and services aimed at fostering student growth and excellence. Their intended clients include students, parents, and the community, with a focus on providing a supportive environment for all. The district is committed to innovation and technology in education, as well as special education services.
-
Easterseals Arc of Northeast Indiana
September 5, 2025
•
[ ransomware, healthcare, government ]
Easterseals Arc of Northeast Indiana was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2025-09-05. Sector: Government & Defense. Country: United States of America. Website: eastersealsnei.org. Easterseals Northeast Indiana provides life-changing services and programs for individuals with disabilities, their families, and the wider community. Their offerings include youth and adult services, employment readiness programs, wellness coordination, and recreational activities designed to empower participants. The organization operates across multiple locations in northeast Indiana, including Fort Wayne, Columbia City, and Angola, and is committed to meeting the unique needs of each individual. Through compassionate staff and various service initiatives, they aim to create inclusive environments and enhance the quality of life for their clients.
-
AGFA
November 10, 2025
AGFA was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2025-11-10. Sector: Technology. Country: Belgium. Website: agfa.com. [AI generated] AGFA, short for AktienGesellschaft fr Anilin-Fabrikation, is a multinational company that develops, manufactures, and distributes analogue and digital imaging systems and IT solutions. The company's history traces back to 1867 in Berlin, Germany. The company operates in four divisions: health care, graphic systems, materials, and glass. Products include systems for radiology, cardiology, hospital and clinical care, printing and publishing industries.
-
SIAD
November 10, 2025
SIAD was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2025-11-10. Sector: Manufacturing. Country: Italy. Website: siad.com. [AI generated] SIAD is a leading international group operating in the production and sale of industrial and medical gases, engineering, healthcare, and training services. Founded in 1927 in Italy, the company develops, produces, and supplies a range of gases including oxygen, nitrogen, argon, carbon dioxide and hydrogen. SIAD also offers medical gases for healthcare industries, gas equipment, and systems for gas production and treatment.
-
www.modcomedia.com
November 11, 2025
www.modcomedia.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2025-11-11. Sector: Technology. Country: United States of America. Website: www.modcomedia.com. 5GB of confidential data, 400GB of total data, contracts with Rockstar, Siemens, and other popular brands.
-
Sarulla Operation
November 11, 2025
•
[ ransomware, energy, financial ]
Sarulla Operation was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2025-11-11. Sector: Energy & Utilities. Country: Indonesia. Website: sarullaoperations.com. Administration
Financial operations
Budgets and account balances
User information
Confidential information
Over 1,000 passports
Payment instructions and other accounting documents
Contract discussions and final contracts
and others
-
Hongji Metal
November 11, 2025
Hongji Metal was listed as a victim on the leak site of the sinobi ransomware group; the attack is estimated to have taken place on 2025-11-11. Sector: Manufacturing. Country: China. Website: hongjimetal.com. Hongji Metal is a professional industrial manufacturing company with corporate headquarters located in Shanghai, China. Founded in Jan 2000, Hongji is committed to producing diversified metal components, assembled products, services and solutions for the Home Security, Automotive, Consumer goods, Home Electronics industries and more. We provide customers with a one-stop solution to your manufacturing requirements andare devoted to a continuous improvement philosophy byutilizing advanced technological methodologies and unsurpassed quality control systems.
-
Middlesex Endodontics
November 9, 2025
Middlesex Endodontics was listed as a victim on the leak site of the sinobi ransomware group; the attack is estimated to have taken place on 2025-11-09. Sector: Healthcare. Country: United States of America. Website: www.middlesexendodontics.com. Middlesex Endodontics is conveniently located in Burlington and Winchester, MA. Our experienced team of endodontists and staff is dedicated to providing the highest level of professional care for our patients. Besides routine endodontics (root canals), our services also include: Pediatric endodontics, Post removal and retreatment, Endodontic surgery, and Implants. EXPERIENCE For over 40 years our practice has worked together with area dentists to provide the best overall dental care. Supporting our 5 endodontists is an experienced staff --many members of which have been with us for over 15 years, with several over or approaching the 25 year mark. We do not believe any patient should have to wait with pain and discomfort. We offer same day emergency appointments and we also like to accommodate busy schedules with expanded hours for scheduled appointments including evenings and Saturdays.
-
Vascara, Vietnam
November 11, 2025
•
[ ransomware, retail ]
Vascara, Vietnam was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2025-11-11. Sector: Retail & E-Commerce. Country: Vietnam. Website: vascara.com. Data size claimed by the group: 30 GB. Vascara, Vietnam
-
Paul Hildebrandt
November 11, 2025
•
[ ransomware, manufacturing ]
Paul Hildebrandt was listed as a victim on the leak site of the sarcoma ransomware group; the attack is estimated to have taken place on 2025-11-11. Sector: Manufacturing. Country: Germany. Website: hildebrandt.de. Paul Hildebrandt
Paul Hildebrandt AG is a leading packaging company offering over 50,000 products, including environmentally friendly options. With 300 employees across 14 locations in Germany, Austria, and Denmark, they provide tailored packaging solutions for a variety of industries. The company emphasizes sustainability and efficient packaging processes as part of their commitment to client solutions. Their diverse product range includes films, boxes, adhesive tapes, and various packaging materials.Geo: Germany - Leak size: 1,4 TB Archive - Contains: Files, SQL, Exchange
-
himmelstein.com
November 11, 2025
himmelstein.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2025-11-11. Sector: Manufacturing. Country: United States of America. Website: himmelstein.com. S. Himmelstein & Company is a U.S.-based specialist manufacturer founded in 1960, headquartered in Hoffman Estates, Illinois. The company focuses
-
Polidano Group
October 30, 2025
Polidano Group was listed as a victim on the leak site of the ransomhouse ransomware group; the attack is estimated to have taken place on 2025-10-30. Sector: Professional Services. Country: Malta. Website: www.polidano-group.com. Polidano Group is a leading construction company in Malta, specializing in a wide range of infrastructure projects including transport, social, and lifestyle developments. They also manufacture construction materials such as asphalt, concrete, and bricks, catering to industrial and commercial clients.
-
omniumint
November 11, 2025
omniumint was listed as a victim on the leak site of the devman ransomware group; the attack is estimated to have taken place on 2025-11-11. Sector: Technology. Country: United States of America. Website: omniumint.com. Ransom: 1.2million
1.2 tb
and one very interesting email
-
Doctor Alliance – Streamlined Document and Billing Management for Healthcare Providers
November 6, 2025
Doctor Alliance Streamlined Document and Billing Management for Healthcare Providers was listed as a victim on the leak site of the kazu ransomware group; the attack is estimated to have taken place on 2025-11-06. Sector: Healthcare. Country: United States of America. Website: doctoralliance.com. Ransom demand: $200 000. Data size claimed by the group: 353 GB. Doctor Alliance (doctoralliance.com) is a U.S.-based healthcare technology platform that helps physicians and medical agencies manage documents, referrals, and billing in one secure online system. Headquartered in Dallas, Texas, it offers services such as electronic document signing, coordination with agencies, and billing support for programs like CPO, CCM, and TCM. The platform integrates with systems like Axxess Home Health to streamline workflow and reduce paperwork, promoting faster document turnaround and improved billing efficiency -- contact me to protect your files !!
-
Defensoría del Pueblo de Colombia – Protection and Promotion of Human Rights
November 8, 2025
•
[ ransomware, government ]
Defensora del Pueblo de Colombia Protection and Promotion of Human Rights was listed as a victim on the leak site of the kazu ransomware group; the attack is estimated to have taken place on 2025-11-08. Sector: Government & Defense. Country: Colombia. Website: www.defensoria.gov.co. Ransom demand: $100 000. Data size claimed by the group: 466.2 GB. The official online portal of the Defensora del Pueblo de Colombia, a constitutional and autonomous institution responsible for promoting, protecting, and defending human rights across the country. It serves as a public platform where citizens can access information about their rights, file complaints, seek legal guidance, and learn about the institutions oversight and advocacy efforts. The Defensora operates independently from other branches of government and plays a key role in ensuring that state entities respect and uphold fundamental rights, especially for vulnerable populations
-
National Civil Service Commission of Colombia
November 10, 2025
•
[ ransomware, government ]
National Civil Service Commission of Colombia was listed as a victim on the leak site of the kazu ransomware group; the attack is estimated to have taken place on 2025-11-10. Sector: Government & Defense. Country: Colombia. Website: cnsc.gov.co. Ransom demand: $300 000. Data size claimed by the group: 2.9 TB. The official portal of the Comisin Nacional del Servicio Civil (CNSC), Colombias National Civil Service Commission. This government body is responsible for overseeing the recruitment, selection, and management of public servants in the country. It ensures that hiring for government positions is fair, transparent, and based on merit. The site provides essential information about job openings in the public sector, application processes, and the regulations that govern public service employment in Colombia. It serves as a key resource for individuals seeking to apply for civil service positions or learn about public sector employment in Colombia
-
Brian-Kyles Construction
November 11, 2025
•
[ ransomware, manufacturing ]
Brian-Kyles Construction was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-11. Sector: Manufacturing. Country: United States of America. Website: www.briankyles.com.
-
Octomeca Oy
October 19, 2025
•
[ ransomware, manufacturing, technology ]
Octomeca Oy was listed as a victim on the leak site of the ransomhouse ransomware group; the attack is estimated to have taken place on 2025-10-19. Sector: Manufacturing. Country: Finland. Website: www.octomeca.fi. Octomeca is Finnish technology company, founded in 1989. We are specialized in designing and manufacturing of premium class stretch film wrapping machines.
-
Public Safety Mutual Benefit Fund
November 4, 2025
•
[ ransomware, government, finance ]
Public Safety Mutual Benefit Fund was listed as a victim on the leak site of the ransomhouse ransomware group; the attack is estimated to have taken place on 2025-11-04. Sector: Government & Defense. Country: Philippines. Website: www.psmbfi.com.ph. The Public Safety Mutual Benefit Fund, Inc. (PSMBFI) is a non-stock, non-profit mutual benefit fund association dedicated to providing life insurance protection and financial assistance to its members, including personnel from various public safety agencies in the Philippines. Its services include various insurance plans, loans, and benefits tailored specifically for public safety practitioners, both uniformed and civilian. PSMBFI ensures timely releases of cash advances to beneficiaries for funeral expenses and processes full claims efficiently.
-
Rhodes Young Black &Duncan RYBD
October 5, 2025
•
[ ransomware, finance, healthcare ]
Rhodes Young Black &Duncan RYBD was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-10-05. Sector: Professional Services. Country: United States of America. Website: rybd.com. Rhodes, Young, Black & Duncan is a CPA consulting firm based in D
uluth, offering comprehensive tax, accounting, and business consu
lting services.
We will upload corporate documents soon. Lots of clients personal
documents (scanned passports, drivers licenses, SSNs, medical in
formation), HR files, financials, agreements and contracts, proje
cts, a few military related files, etc.