-
PT Kalimantan Prima Persada
November 6, 2025
•
[ ransomware, energy, leak ]
PT Kalimantan Prima Persada was listed as a victim on the leak site of the medusa ransomware group; the attack is estimated to have taken place on 2025-11-06. Sector: Energy & Utilities. Country: Indonesia. Website: pamapersada.com. Ransom demand: 100000. PT Kalimantan Prima Persada (KPP) is a subsidiary of PT Pamapersada Nusantara (PAMA), a leading mining company in Asia. 99,99% shares composition of KPP owned by PT Pamapersada Nusantara and 0.01% by PT United Tractors Pandu Engineering. KPP was freshly born to realize a mining developer concept by establishing a new company to broaden market, offer services engaged in coal mining, started from exploration to sales and to service the booming, small and medium coal mining industry in Kalimantan. Ever since year 2003, KPP has established itself as PAMA'S NEXT GENERATION. The main operation is located in South Kalimantan and East Kalimantan. KPP are proud to contribute to the job market, create business opportunities for local entrepreneurs, as well as the implementation of various CSR programs. The improvement of Human Resources, the correct application of technology, professional management systems and the commitment towards safety at work, and nature preservation will always be the priorities. KPP aims to provide the best result for the stakeholders. In the future, KPP will become a prominent company as well as a trustworthy and reliable partner in the coal mining industry.
company is headquartered in Jl. Rawa Gelam I No. 9, Kawasan Industri Pulogadung, Jakarta Timur 13930, DKI Jakarta, Indonesia.
1,872 Employees
-
Oscars Group
November 5, 2025
•
[ ransomware, retail ]
Oscars Group was listed as a victim on the leak site of the medusa ransomware group; the attack is estimated to have taken place on 2025-11-05. Sector: Hospitality. Country: Australia. Website: oscarsgroup.com.au. Ransom demand: 100000. Oscars Group is a prominent hospitality collective in New South Wales, founded in 1986 by the Gravanis brothers. The group manages an extensive portfolio of over 35 venues, including pubs, hotels, accommodation, and events centers, catering to a diverse clientele. Their offerings span various segments such as gaming, retail liquor, and residential developments. With a focus on creativity and entertainment, Oscars Group aims to deliver exceptional experiences to guests across its venues.
company is headquartered in Level 6, Bayside Tower, 376 Bay Street, Brighton-Le-Sands NSW 2216, Australia.
<25 Employees
-
LaRosa’s Pizzeria
November 5, 2025
LaRosas Pizzeria was listed as a victim on the leak site of the medusa ransomware group; the attack is estimated to have taken place on 2025-11-05. Sector: Hospitality. Country: United States of America. Ransom demand: 100000. LaRosas Pizzeria is a family-owned pizza restaurant chain founded in 1954 by Donald Buddy LaRosa in Cincinnati, Ohio. Known for its signature thin-crust pizzas made with Aunt Denas original sauce recipe, the company has become a regional favorite across Ohio, Kentucky, and Indiana. LaRosas offers a wide variety of Italian-inspired dishes including pasta, hoagies, and salads. The brand emphasizes family traditions, community values, and quality ingredients. Still operated by the LaRosa family, it continues to represent the spirit of local hospitality and authentic Italian-American cuisine after more than 70 years in business.
company is headquartered in 2334 Boudinot Avenue, Cincinnati, OH 45238, United States.
-
Clackamas Community College
October 29, 2025
•
[ ransomware, education ]
Clackamas Community College was listed as a victim on the leak site of the medusa ransomware group; the attack is estimated to have taken place on 2025-10-29. Sector: Education. Country: United States of America. Ransom demand: 300000. Clackamas Community College offers a variety of academic programs including associate degrees, certificates, and customized training for various career pathways. The college is committed to supporting a diverse student population, including veterans, English learners, and adult learners seeking education and skill development. With over 100 programs and a focus on community engagement, CCC provides resources such as financial aid, counseling, and student clubs. Their mission is to empower individuals to achieve their educational and career goals while celebrating equity and inclusion.
company is headquartered in 19600 Molalla Avenue, Oregon City, Oregon 97045, United States.
936 Employees. The total amount of data leakage is 1.21 TB
-
Simon Property Group
October 28, 2025
•
[ ransomware, finance, retail ]
Simon Property Group was listed as a victim on the leak site of the medusa ransomware group; the attack is estimated to have taken place on 2025-10-28. Sector: Financial Services. Country: United States of America. Website: simon.com. Ransom demand: 1200000. Simon Property Group is a leading real estate investment trust (REIT) based in Indianapolis, Indiana. Founded in 1993, it owns, develops, and manages premier shopping malls, outlets, and lifestyle centers across the United States and internationally. The companys well-known properties include Premium Outlets and The Mills centers. Led by CEO David E. Simon, it focuses on creating high-quality retail and entertainment destinations that attract millions of visitors each year. Despite challenges from online retail, Simon Property Group continues to innovate by combining shopping, dining, and mixed-use spaces, maintaining its position as a global leader in retail real estate.
company is headquartered in 225 West Washington Street, Indianapolis, Indiana 46204, USA.
3,000 employees
-
Marine Turbine Technologies
November 7, 2025
•
[ ransomware, manufacturing ]
Marine Turbine Technologies was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-07. Sector: Manufacturing. Country: United States of America. Website: www.marineturbine.com.
-
Shollenberger Januzzi & Wolfe
November 7, 2025
Shollenberger Januzzi & Wolfe was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-07. Sector: Professional Services. Country: United States of America. Website: www.sholljanlaw.com.
-
DCS TECHNOLOGIES INC.
November 7, 2025
•
[ ransomware, technology ]
DCS TECHNOLOGIES INC. was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2025-11-07. Sector: Technology. Country: United States of America. Website: dcstech.ca. DCS Technology Inc. is providing complete IT Solutions since 2004. They are specialized in Point of Sale systems, Website Designing, Technical Support, and Computer Networking Solutions. With 17 years of experience, DCS serving over 5000 businesses in North America.
-
GB Mail
November 7, 2025
•
[ ransomware, leak ]
GB Mail was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2025-11-07. Sector: Professional Services. Country: United Kingdom of Great Britain and Northern Ireland. Website: gb-mail.co.uk. GB Mail is a privately owned and leading mailing house located centrally in the home counties. With a strong ethos of delivering mail with no fuss, on time and in full, the company boasts a dedicated and knowledgeable team passionate about all aspects of print and mail. Their services include storage & fulfilment, postal solutions, print personalisation, database cleansing, international mail, direct mail, and subscription mail.
-
Mold In Graphic Systems
August 30, 2025
•
[ ransomware, manufacturing, leak ]
Mold In Graphic Systems was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-08-30. Sector: Manufacturing. Country: United States of America. Website: moldingraphics.com. Mold In Graphic Systems specializes in providing permanent labeli
ng solutions for plastic durable goods using their unique Polymer
Fusion Labels.
We will upload 15gb of corporate documents soon. Employee informa
tion (Driver licenses, credit cards scans, medical information an
d so on), projects information, internal confidential files, agre
ements and contracts, NDAs, etc.
-
Scouts Canada
November 8, 2025
•
[ ransomware, government ]
Scouts Canada was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-08. Sector: Government & Defense. Country: Canada. Website: www.scouts.ca.
-
SHRM New Mexico
November 8, 2025
•
[ ransomware, leak, education ]
SHRM New Mexico was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-08. Sector: Education. Country: United States of America. Website: www.shrmnm.org.
-
Advanced Delivery Services
November 8, 2025
Advanced Delivery Services was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-08. Sector: Transportation. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.advanceddeliveryservices.co.uk.
-
Pocatello Ready Mix
November 7, 2025
•
[ ransomware, manufacturing ]
Pocatello Ready Mix was listed as a victim on the leak site of the securotrop ransomware group; the attack is estimated to have taken place on 2025-11-07. Sector: Manufacturing. Country: United States of America. Website: horrocksreadymix.com. Data size claimed by the group: 274 GB. Status: AWAITING
Size: 274 GB
-
Wasserverband Wulkatal
November 8, 2025
Wasserverband Wulkatal was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-08. Sector: Government & Defense. Country: Austria. Website: www.wv-wulkatal.at.
-
Saturday Spotlight
November 8, 2025
Saturday Spotlight was listed as a victim on the leak site of the handala ransomware group; the attack is estimated to have taken place on 2025-11-08. As per our unbreakable tradition, every Saturday, the world awaits the chilling revelation from Handala RedWanted. This week, we pull back the mask on eight more Zionist criminals, names that strike terror in the hearts of those who believe they can commit atrocities from the shadows. Among our revelations are chief architects of the infamous
-
Ponzini S.p.A.
November 8, 2025
•
[ ransomware, manufacturing, leak ]
Ponzini S.p.A. was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2025-11-08. Sector: Manufacturing. Country: Italy. Website: ponzini.com.cn. Founded in 1862, Ponzini S.p.A. is a global leader in personal care product manufacturing. With over 160 years of history, the company has evolved to offer innovative and sustainable solutions in cosmetics and oral hygiene. Ponzini emphasizes quality, technology, creativity, sustainability, flexibility and health and safety.
-
JC Auto Accident Law Firm
November 8, 2025
•
[ ransomware, leak ]
JC Auto Accident Law Firm was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-08. Sector: Professional Services. Country: United States of America. Website: jclaw.lawyer.
-
Gadge USA
November 8, 2025
•
[ ransomware, retail ]
Gadge USA was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-08. Sector: Retail & E-Commerce. Country: United States of America. Website: www.gadgeusa.com.
-
Dublin Medical Center
November 9, 2025
•
[ ransomware, healthcare ]
Dublin Medical Center was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-09. Sector: Healthcare. Country: Ireland. Website: www.dublinmedicalcenter.com.