-
Ringmor
November 1, 2025
•
[ ransomware, technology ]
Ringmor was listed as a victim on the leak site of the beast ransomware group; the attack is estimated to have taken place on 2025-11-01. Sector: Technology. Country: United States of America. Website: www.ringmor.com. Data size claimed by the group: 60GB. CallMor offers virtual phone system services aimed at businesses looking for unlimited communication options with no hidden fees. Their plans are designed to simplify connectivity for teams and clients alike and include 24/7 customer support. With offices in Orange County, San Diego, and Los Angeles, they prioritize customer satisfaction and provide competitive pricing in the telecommunications market. CallMor is known for its professional service and effectiveness in improving communication and sales results for its clients
-
Atrium Living Centers
November 8, 2025
•
[ ransomware, healthcare ]
Atrium Living Centers was listed as a victim on the leak site of the medusa ransomware group; the attack is estimated to have taken place on 2025-11-08. Sector: Healthcare. Country: United States of America. Website: atriumlivingcenters.com. Ransom demand: 500000. Atrium Living Centers is a 100% employee-owned company providing skilled nursing, rehabilitation, and long-term care services. The organization is dedicated to delivering compassionate, high-quality healthcare to residents while promoting dignity, respect, and community involvement. With a strong focus on personalized treatment, Atrium Living Centers offers both short-term post-acute rehabilitation and long-term nursing care. Their mission is to be a light in the lives of our residents and families, ensuring comfort and well-being in a supportive environment. The company operates multiple care centers across several U.S. states, including Ohio, Michigan, Kentucky, and Wisconsin.
company is headquartered in Atrium Living Centers headquarters is located at 2550 Corporate Exchange Drive, Suite 200, Columbus, Ohio 43231, United States.
2,000 Employees
-
Instituto Nacional de Oftalmologia, Peru
November 9, 2025
•
[ ransomware, healthcare, government ]
Instituto Nacional de Oftalmologia, Peru was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2025-11-09. Sector: Healthcare. Country: Peru. Website: ino.gob.pe. Data size claimed by the group: 30 GB. Instituto Nacional de Oftalmologia, Peru
-
Eastern Cape Department of Human Settlements, South Africa
November 9, 2025
•
[ ransomware, government ]
Eastern Cape Department of Human Settlements, South Africa was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2025-11-09. Sector: Government & Defense. Country: South Africa. Website: ecdhs.gov.za. Data size claimed by the group: 20 GB. Eastern Cape Department of Human Settlements, South Africa
-
Fidelity Pension Managers, Nigeria
November 9, 2025
•
[ ransomware, finance ]
Fidelity Pension Managers, Nigeria was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2025-11-09. Sector: Financial Services. Country: Nigeria. Website: fidelitypensionmanagers.com. Data size claimed by the group: 5 GB. Fidelity Pension Managers, Nigeria
-
Servicios del Valle del Fuerte, Mexico
November 9, 2025
•
[ ransomware, manufacturing ]
Servicios del Valle del Fuerte, Mexico was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2025-11-09. Sector: Agriculture and Food Production. Country: Mexico. Website: sevafusa.mx. Data size claimed by the group: 1 GB. Servicios del Valle del Fuerte, Mexico
-
!
November 9, 2025
! was listed as a victim on the leak site of the stormous ransomware group; the attack is estimated to have taken place on 2025-11-09. VPN access to the companys internal network is provided
-
ikad.com.au - A 5-Month Staycation in the Defense Supply Chain
November 1, 2025
•
[ ransomware, government, manufacturing ]
ikad.com.au - A 5-Month Staycation in the Defense Supply Chain was listed as a victim on the leak site of the J ransomware group; the attack is estimated to have taken place on 2025-11-01. Sector: Government & Defense. Country: Australia. Website: ikad.com.au.
-
Propertyfinder / PropSpace CRM
November 10, 2025
•
[ ransomware, technology, leak ]
Propertyfinder / PropSpace CRM was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2025-11-10. Sector: Technology. Country: United Arab Emirates. Website: propertyfinder.ae. We have more than 2 TB which includes
- Full Propertyfinder leads DB (10 M + records)
- Full Property listings DB
- All PropSpace CRM client data
...
-
CapitalPlus Exchange
November 9, 2025
CapitalPlus Exchange was listed as a victim on the leak site of the sinobi ransomware group; the attack is estimated to have taken place on 2025-11-09. Sector: Financial Services. Country: United States of America. Website: www.capitalplusexchange.com. CapitalPlus Exchange (CapPlus) supports financial institutions in emerging economies by enhancing their strategic and operational capacities, offering training and innovative financing solutions for small and medium enterprises (SMEs). Through initiatives like the Education Markets Impact Initiative (EMII) and FIRST+, CapPlus helps to unlock education finance markets and catalyze job creation in sectors such as agriculture by improving access to finance. CapPlus partners with local institutions to tailor financial services, focusing on underserved demographics such as women and youth. With nearly two decades of experience, CapPlus aims to reduce poverty by expanding financial services for small businesses.
-
Seward County, KS
November 9, 2025
•
[ ransomware, government ]
Seward County, KS was listed as a victim on the leak site of the sinobi ransomware group; the attack is estimated to have taken place on 2025-11-09. Sector: Government & Defense. Country: United States of America. Website: sewardcountyks.org. Seward County is a county located in Kansas. This county was formed on March 20, 1873 and the county seat is Liberal.
-
LMHT Associates
November 10, 2025
•
[ ransomware, technology ]
LMHT Associates was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2025-11-10. Country: United States of America. Website: lmht.com. LMHT Associates
-
[EVIDENCE PACK 2]ASKUL
October 19, 2025
•
[ ransomware, retail, technology ]
[EVIDENCE PACK 2]ASKUL was listed as a victim on the leak site of the ransomhouse ransomware group; the attack is estimated to have taken place on 2025-10-19. Sector: Retail & E-Commerce. Country: Japan. Website: www.askul.co.jp. ASKUL Corporation, founded in 1963 and headquartered in Tokyo, is a leading Japanese e-commerce company serving both businesses (B2B) and consumers (B2C). It offers office supplies, daily goods, medical products, and logistics services through platforms such as ASKUL, SOLOEL ARENA, and LOHACO. The company operates its own distribution centers, ensuring fast delivery and efficient supply chain management. ASKUL also provides additional services like printing, office design, and digital business solutions. The company emphasizes sustainability, digital transformation, and recycling initiatives.
-
Weintraub Traub Tracy & Virk Cra's LLP
November 10, 2025
•
[ ransomware, leak, finance ]
Weintraub Traub Tracy & Virk Cra's LLP was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2025-11-10. Sector: Professional Services. Country: United States of America. Website: tax1040.com. We have data from Piaty Mller-Mezin Schoeller Rechtsanwlte GmbH, payment and tax records, employee and client documents, as well as projects and developments, and personal correspondence with clients.
-
MARCK Industries
October 23, 2025
•
[ ransomware, manufacturing ]
MARCK Industries was listed as a victim on the leak site of the ransomhouse ransomware group; the attack is estimated to have taken place on 2025-10-23. Sector: Manufacturing. Country: United States of America. Website: www.marck.net. GMARCK Industries believe that the services we provide make a difference: In Your Company - From your first 360 Waste Audit to implementing and maintaining your customized recycling program, we help you reach your sustainability goals while helping you increase efficiencies and reduce costs. In Our Community - Recycling keeps reusable products out of the landfill, while boosting the local economy with sustainable jobs.
-
Ami Bearings
October 11, 2025
•
[ ransomware, manufacturing, leak ]
Ami Bearings was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-10-11. Sector: Manufacturing. Country: United States of America. Website: amibearings.com. AMI Bearings, Inc. is a premier manufacturer of mounted ball bear
ings that caters to the North American market.
We will upload 15gb of corporate documents soon. Employee informa
tion, clients information, lots of projects information, agreemen
ts and contracts, NDAs, etc.
-
Mciver Engineering & Controls
November 10, 2025
•
[ ransomware, manufacturing ]
Mciver Engineering & Controls was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-10. Sector: Manufacturing. Country: United States of America. Website: www.mcivereng.com.
-
OMS
November 10, 2025
•
[ ransomware, manufacturing ]
OMS was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-10. Sector: Manufacturing. Country: Slovakia. Website: www.omslighting.com.
-
Land Title Guaranty
October 29, 2025
•
[ ransomware, finance ]
Land Title Guaranty was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2025-10-29. Sector: Financial Services. Country: United States of America. Website: www.landtitleweb.com. United States
-
Darvin Furniture
October 25, 2025
Darvin Furniture was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2025-10-25. Sector: Retail & E-Commerce. Country: United States of America. Website: www.darvin.com. United States