-
ZANACO.CO.ZM
November 7, 2025
•
[ ransomware, finance ]
ZANACO.CO.ZM was listed as a victim on the leak site of the clop ransomware group; the attack is estimated to have taken place on 2025-11-07. Sector: Financial Services. Country: Zambia. Website: ZANACO.CO.ZM. [AI generated] Zambia National Commercial Bank Plc (ZANACO) is a major bank in Zambia. Founded in 1969 by the Zambian Government, it was initially designed to promote national interest in the financial industry. Its services range from personal and business banking, digital banking, to investment banking. The bank caters to both individual and corporate clients, striving to contribute to the country's economic development through innovative banking solutions.
-
WASHINGTONPOST.COM
November 7, 2025
•
[ ransomware, technology ]
WASHINGTONPOST.COM was listed as a victim on the leak site of the clop ransomware group; the attack is estimated to have taken place on 2025-11-07. Country: United States of America. Website: WASHINGTONPOST.COM. [AI generated] The WashingtonPost.com is the online edition of The Washington Post, a leading US daily newspaper. This platform provides news, analysis, commentary, and videos on politics, business, world, national and local news, sports, arts, lifestyle, and more. It offers both free and premium (subscription-based) content, and showcases investigative journalism, podcasts, and blogs.
-
Koch & Co, Inc.
November 7, 2025
•
[ ransomware, manufacturing, financial ]
Koch & Co, Inc. was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-11-07. Sector: Manufacturing. Country: United States of America. Website: kochco.com. Koch & Co, Inc., is a wood door and cabinet manufacturing company
.
We will upload 54gb of corporate documents soon. Detailed financi
als and accounting, projects information, contracts, agreements,
lots of HR files, etc.
-
PLP SoCal
October 18, 2025
•
[ ransomware, technology, financial ]
PLP SoCal was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-10-18. Sector: Professional Services. Country: United States of America. Website: plpsocal.com. PLP SoCal is Southern California's premier representative of perf
ormance Architectural Lighting, Decorative Lighting, Lighting Con
trols, Acoustic, EV Charging Stations, Illuminated Handrails & Si
te Furnishing.
We will upload 26gb of corporate documents soon. You will find fu
ll personal information of almost every employee. (Name, DOB, pho
ne, SSN, address, DL, passport, medical information, family membe
rs personal information and so on), financials, internal confiden
tial files, client information, etc.
-
Shands Elbert
October 16, 2025
Shands Elbert was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-10-16. Sector: Professional Services. Country: United States of America. Website: shandselbert.com. Shands, Elbert, Gianoulakis & Giljum, LLP is a law firm based in
St. Louis with over 50 years of experience offering a wide range
of legal services. They provide expertise in areas such as busine
ss law, education law, labor and employment, litigation, and esta
te planning, serving clients including corporations, governmental
entities, educational institutions, individuals, and small busin
esses.
We will upload more than 31gb of corporate documents soon. Anothe
r ones lawyers that don't care of their clients (and family membe
rs) personal information. Name, DOB, phones, addresses, DLs, pass
ports, SSN numbers, numerous medical files. Detailed financials,
lots of confidential files, court hearings, police reports and so
on.
-
Soapy Joe's Car Wash
October 5, 2025
Soapy Joe's Car Wash was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-10-05. Sector: Retail & E-Commerce. Country: United States of America. Website: soapyjoescarwash.com. Voted Best Car Wash in San Diego. Guinness World Record holder.
We will upload more than 40gb of corporate documents soon. We obt
ained personal information of all employees of this company. Phon
es, addresses, DLs, passports, almost 2000 SSN numbers, medical i
nformation. Detailed financials, lots of confidential files, cont
racts and agreements, partners information and so on, NDAs etc.
-
Aptura Group & Central Indiana Hardware
November 7, 2025
Aptura Group & Central Indiana Hardware was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2025-11-07. Sector: Manufacturing. Country: United States of America. Website: apturagroup.com & cih-inc.com. Central Indiana Hardware - Produces custom access systems, space management solutions, and high-performance hardware to optimize the security and functionality of commercial spaces.
APTURA GROUP is a wholly employee-owned company specializing in innovative solutions and services in the door hardware and security systems industry. Working with several leading brands, including Central Indiana Hardware (CIH), APTEK, Security Builders Supply, and HG/Schultz Door, we have built our reputation on precision, efficiency, and exceptional customer service that consistently exceeds expectations.
CIH helps the company work more productively.
-
Klae Construction
November 7, 2025
•
[ ransomware, manufacturing ]
Klae Construction was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-07. Sector: Manufacturing. Country: United States of America. Website: www.klae.com.
-
Village of New Lenox
November 7, 2025
Village of New Lenox was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-07. Sector: Government & Defense. Country: United States of America. Website: www.newlenox.net.
-
PT Kalimantan Prima Persada
November 6, 2025
•
[ ransomware, energy, leak ]
PT Kalimantan Prima Persada was listed as a victim on the leak site of the medusa ransomware group; the attack is estimated to have taken place on 2025-11-06. Sector: Energy & Utilities. Country: Indonesia. Website: pamapersada.com. Ransom demand: 100000. PT Kalimantan Prima Persada (KPP) is a subsidiary of PT Pamapersada Nusantara (PAMA), a leading mining company in Asia. 99,99% shares composition of KPP owned by PT Pamapersada Nusantara and 0.01% by PT United Tractors Pandu Engineering. KPP was freshly born to realize a mining developer concept by establishing a new company to broaden market, offer services engaged in coal mining, started from exploration to sales and to service the booming, small and medium coal mining industry in Kalimantan. Ever since year 2003, KPP has established itself as PAMA'S NEXT GENERATION. The main operation is located in South Kalimantan and East Kalimantan. KPP are proud to contribute to the job market, create business opportunities for local entrepreneurs, as well as the implementation of various CSR programs. The improvement of Human Resources, the correct application of technology, professional management systems and the commitment towards safety at work, and nature preservation will always be the priorities. KPP aims to provide the best result for the stakeholders. In the future, KPP will become a prominent company as well as a trustworthy and reliable partner in the coal mining industry.
company is headquartered in Jl. Rawa Gelam I No. 9, Kawasan Industri Pulogadung, Jakarta Timur 13930, DKI Jakarta, Indonesia.
1,872 Employees
-
Oscars Group
November 5, 2025
•
[ ransomware, retail ]
Oscars Group was listed as a victim on the leak site of the medusa ransomware group; the attack is estimated to have taken place on 2025-11-05. Sector: Hospitality. Country: Australia. Website: oscarsgroup.com.au. Ransom demand: 100000. Oscars Group is a prominent hospitality collective in New South Wales, founded in 1986 by the Gravanis brothers. The group manages an extensive portfolio of over 35 venues, including pubs, hotels, accommodation, and events centers, catering to a diverse clientele. Their offerings span various segments such as gaming, retail liquor, and residential developments. With a focus on creativity and entertainment, Oscars Group aims to deliver exceptional experiences to guests across its venues.
company is headquartered in Level 6, Bayside Tower, 376 Bay Street, Brighton-Le-Sands NSW 2216, Australia.
<25 Employees
-
LaRosa’s Pizzeria
November 5, 2025
LaRosas Pizzeria was listed as a victim on the leak site of the medusa ransomware group; the attack is estimated to have taken place on 2025-11-05. Sector: Hospitality. Country: United States of America. Ransom demand: 100000. LaRosas Pizzeria is a family-owned pizza restaurant chain founded in 1954 by Donald Buddy LaRosa in Cincinnati, Ohio. Known for its signature thin-crust pizzas made with Aunt Denas original sauce recipe, the company has become a regional favorite across Ohio, Kentucky, and Indiana. LaRosas offers a wide variety of Italian-inspired dishes including pasta, hoagies, and salads. The brand emphasizes family traditions, community values, and quality ingredients. Still operated by the LaRosa family, it continues to represent the spirit of local hospitality and authentic Italian-American cuisine after more than 70 years in business.
company is headquartered in 2334 Boudinot Avenue, Cincinnati, OH 45238, United States.
-
Clackamas Community College
October 29, 2025
•
[ ransomware, education ]
Clackamas Community College was listed as a victim on the leak site of the medusa ransomware group; the attack is estimated to have taken place on 2025-10-29. Sector: Education. Country: United States of America. Ransom demand: 300000. Clackamas Community College offers a variety of academic programs including associate degrees, certificates, and customized training for various career pathways. The college is committed to supporting a diverse student population, including veterans, English learners, and adult learners seeking education and skill development. With over 100 programs and a focus on community engagement, CCC provides resources such as financial aid, counseling, and student clubs. Their mission is to empower individuals to achieve their educational and career goals while celebrating equity and inclusion.
company is headquartered in 19600 Molalla Avenue, Oregon City, Oregon 97045, United States.
936 Employees. The total amount of data leakage is 1.21 TB
-
Simon Property Group
October 28, 2025
•
[ ransomware, finance, retail ]
Simon Property Group was listed as a victim on the leak site of the medusa ransomware group; the attack is estimated to have taken place on 2025-10-28. Sector: Financial Services. Country: United States of America. Website: simon.com. Ransom demand: 1200000. Simon Property Group is a leading real estate investment trust (REIT) based in Indianapolis, Indiana. Founded in 1993, it owns, develops, and manages premier shopping malls, outlets, and lifestyle centers across the United States and internationally. The companys well-known properties include Premium Outlets and The Mills centers. Led by CEO David E. Simon, it focuses on creating high-quality retail and entertainment destinations that attract millions of visitors each year. Despite challenges from online retail, Simon Property Group continues to innovate by combining shopping, dining, and mixed-use spaces, maintaining its position as a global leader in retail real estate.
company is headquartered in 225 West Washington Street, Indianapolis, Indiana 46204, USA.
3,000 employees
-
Marine Turbine Technologies
November 7, 2025
•
[ ransomware, manufacturing ]
Marine Turbine Technologies was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-07. Sector: Manufacturing. Country: United States of America. Website: www.marineturbine.com.
-
Shollenberger Januzzi & Wolfe
November 7, 2025
Shollenberger Januzzi & Wolfe was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-07. Sector: Professional Services. Country: United States of America. Website: www.sholljanlaw.com.
-
DCS TECHNOLOGIES INC.
November 7, 2025
•
[ ransomware, technology ]
DCS TECHNOLOGIES INC. was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2025-11-07. Sector: Technology. Country: United States of America. Website: dcstech.ca. DCS Technology Inc. is providing complete IT Solutions since 2004. They are specialized in Point of Sale systems, Website Designing, Technical Support, and Computer Networking Solutions. With 17 years of experience, DCS serving over 5000 businesses in North America.
-
GB Mail
November 7, 2025
•
[ ransomware, leak ]
GB Mail was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2025-11-07. Sector: Professional Services. Country: United Kingdom of Great Britain and Northern Ireland. Website: gb-mail.co.uk. GB Mail is a privately owned and leading mailing house located centrally in the home counties. With a strong ethos of delivering mail with no fuss, on time and in full, the company boasts a dedicated and knowledgeable team passionate about all aspects of print and mail. Their services include storage & fulfilment, postal solutions, print personalisation, database cleansing, international mail, direct mail, and subscription mail.
-
Mold In Graphic Systems
August 30, 2025
•
[ ransomware, manufacturing, leak ]
Mold In Graphic Systems was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-08-30. Sector: Manufacturing. Country: United States of America. Website: moldingraphics.com. Mold In Graphic Systems specializes in providing permanent labeli
ng solutions for plastic durable goods using their unique Polymer
Fusion Labels.
We will upload 15gb of corporate documents soon. Employee informa
tion (Driver licenses, credit cards scans, medical information an
d so on), projects information, internal confidential files, agre
ements and contracts, NDAs, etc.
-
Scouts Canada
November 8, 2025
•
[ ransomware, government ]
Scouts Canada was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-08. Sector: Government & Defense. Country: Canada. Website: www.scouts.ca.