-
Mciver Engineering & Controls
November 10, 2025
•
[ ransomware, manufacturing ]
Mciver Engineering & Controls was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-10. Sector: Manufacturing. Country: United States of America. Website: www.mcivereng.com.
-
OMS
November 10, 2025
•
[ ransomware, manufacturing ]
OMS was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-10. Sector: Manufacturing. Country: Slovakia. Website: www.omslighting.com.
-
Land Title Guaranty
October 29, 2025
•
[ ransomware, finance ]
Land Title Guaranty was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2025-10-29. Sector: Financial Services. Country: United States of America. Website: www.landtitleweb.com. United States
-
Darvin Furniture
October 25, 2025
Darvin Furniture was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2025-10-25. Sector: Retail & E-Commerce. Country: United States of America. Website: www.darvin.com. United States
-
Ioxo & Stream Computers
October 31, 2025
Ioxo & Stream Computers was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2025-10-31. Sector: Technology. Country: United States of America. Website: www.ioxo.cloud www.streampc.com. United States
-
Kwik Mix Materials
October 31, 2025
•
[ ransomware, manufacturing ]
Kwik Mix Materials was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2025-10-31. Sector: Manufacturing. Country: Canada. Website: www.kwikmix.com. Canada
-
Jean-Georges
March 6, 2024
•
[ ransomware, leak ]
Jean-Georges was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2024-03-06. Sector: Hospitality. Country: United States of America. Website: www.jean-georges.com. United States
-
Garvin Promotion Group
November 6, 2025
•
[ ransomware, leak ]
Garvin Promotion Group was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2025-11-06. Sector: Professional Services. Country: United States of America. Website: www.garvinpromo.com. United States
-
Yaesu
November 10, 2025
•
[ ransomware, technology ]
Yaesu was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-10. Sector: Technology. Country: Japan. Website: www.yaesu.com.
-
Heart South Cardiovascular Group
November 10, 2025
•
[ ransomware, healthcare, hack ]
Heart South Cardiovascular Group was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2025-11-10. Sector: Healthcare. Country: United States of America. Website: heartsouthpc.com. Heart South Cardiovascular Group Heart South is a leading provider of comprehensive cardiac and vascular care in Central Alabama. More
-
ielplumbing.com
November 10, 2025
ielplumbing.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2025-11-10. Sector: Other. Country: Canada. Website: ielplumbing.com. I.E. Plumbing Services is a privately-held plumbing contractor based in Southern California, operating from two locations in the Riverside /
-
Community Unit School District 201
November 10, 2025
Community Unit School District 201 was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2025-11-10. Sector: Education. Country: United States of America. Website: cusd201.org. Community Unit School District 200 is dedicated to inspiring, educating, challenging, and supporting all students to achieve their highest potential in learning and personal development. The district offers various educational programs and services aimed at fostering student growth and excellence. Their intended clients include students, parents, and the community, with a focus on providing a supportive environment for all. The district is committed to innovation and technology in education, as well as special education services.
-
Easterseals Arc of Northeast Indiana
September 5, 2025
•
[ ransomware, healthcare, government ]
Easterseals Arc of Northeast Indiana was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2025-09-05. Sector: Government & Defense. Country: United States of America. Website: eastersealsnei.org. Easterseals Northeast Indiana provides life-changing services and programs for individuals with disabilities, their families, and the wider community. Their offerings include youth and adult services, employment readiness programs, wellness coordination, and recreational activities designed to empower participants. The organization operates across multiple locations in northeast Indiana, including Fort Wayne, Columbia City, and Angola, and is committed to meeting the unique needs of each individual. Through compassionate staff and various service initiatives, they aim to create inclusive environments and enhance the quality of life for their clients.
-
AGFA
November 10, 2025
AGFA was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2025-11-10. Sector: Technology. Country: Belgium. Website: agfa.com. [AI generated] AGFA, short for AktienGesellschaft fr Anilin-Fabrikation, is a multinational company that develops, manufactures, and distributes analogue and digital imaging systems and IT solutions. The company's history traces back to 1867 in Berlin, Germany. The company operates in four divisions: health care, graphic systems, materials, and glass. Products include systems for radiology, cardiology, hospital and clinical care, printing and publishing industries.
-
SIAD
November 10, 2025
SIAD was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2025-11-10. Sector: Manufacturing. Country: Italy. Website: siad.com. [AI generated] SIAD is a leading international group operating in the production and sale of industrial and medical gases, engineering, healthcare, and training services. Founded in 1927 in Italy, the company develops, produces, and supplies a range of gases including oxygen, nitrogen, argon, carbon dioxide and hydrogen. SIAD also offers medical gases for healthcare industries, gas equipment, and systems for gas production and treatment.
-
www.modcomedia.com
November 11, 2025
www.modcomedia.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2025-11-11. Sector: Technology. Country: United States of America. Website: www.modcomedia.com. 5GB of confidential data, 400GB of total data, contracts with Rockstar, Siemens, and other popular brands.
-
Sarulla Operation
November 11, 2025
•
[ ransomware, energy, financial ]
Sarulla Operation was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2025-11-11. Sector: Energy & Utilities. Country: Indonesia. Website: sarullaoperations.com. Administration
Financial operations
Budgets and account balances
User information
Confidential information
Over 1,000 passports
Payment instructions and other accounting documents
Contract discussions and final contracts
and others
-
Hongji Metal
November 11, 2025
Hongji Metal was listed as a victim on the leak site of the sinobi ransomware group; the attack is estimated to have taken place on 2025-11-11. Sector: Manufacturing. Country: China. Website: hongjimetal.com. Hongji Metal is a professional industrial manufacturing company with corporate headquarters located in Shanghai, China. Founded in Jan 2000, Hongji is committed to producing diversified metal components, assembled products, services and solutions for the Home Security, Automotive, Consumer goods, Home Electronics industries and more. We provide customers with a one-stop solution to your manufacturing requirements andare devoted to a continuous improvement philosophy byutilizing advanced technological methodologies and unsurpassed quality control systems.
-
Middlesex Endodontics
November 9, 2025
Middlesex Endodontics was listed as a victim on the leak site of the sinobi ransomware group; the attack is estimated to have taken place on 2025-11-09. Sector: Healthcare. Country: United States of America. Website: www.middlesexendodontics.com. Middlesex Endodontics is conveniently located in Burlington and Winchester, MA. Our experienced team of endodontists and staff is dedicated to providing the highest level of professional care for our patients. Besides routine endodontics (root canals), our services also include: Pediatric endodontics, Post removal and retreatment, Endodontic surgery, and Implants. EXPERIENCE For over 40 years our practice has worked together with area dentists to provide the best overall dental care. Supporting our 5 endodontists is an experienced staff --many members of which have been with us for over 15 years, with several over or approaching the 25 year mark. We do not believe any patient should have to wait with pain and discomfort. We offer same day emergency appointments and we also like to accommodate busy schedules with expanded hours for scheduled appointments including evenings and Saturdays.
-
Vascara, Vietnam
November 11, 2025
•
[ ransomware, retail ]
Vascara, Vietnam was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2025-11-11. Sector: Retail & E-Commerce. Country: Vietnam. Website: vascara.com. Data size claimed by the group: 30 GB. Vascara, Vietnam
