-
Elliott Tax Service
November 4, 2025
•
[ ransomware, finance ]
Elliott Tax Service was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-11-04. Sector: Financial Services. Country: United States of America. Website: elliotttaxservice.com. Elliott Tax Service is a local firm in San Mateo specializing in
income tax preparation and advice, boasting 27 years of experienc
e.
We will upload 82gb corporate documents soon. Client personal doc
uments scans, employee personal information and other HR informat
ion. Clients financials and other files, NDA, credit card details
, payment details, confidentiality agreements, legal and court do
cuments, police reports, and so on.
-
MS Metal Solutions
September 10, 2025
MS Metal Solutions was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-09-10. Sector: Manufacturing. Country: Denmark. Website: msmetalsolutions.com. MS Metal Solutions offers a wide range of manufacturing capabilit
ies including cutting, welding, and powder coating to cater to di
verse industries such as automotive, agriculture, and office furn
iture.
We will upload corporate documents soon. Complete information abo
ut employees (w-9 forms containing DOB, SSN, DL, passport, addres
s, email, phone personal docs scans, credit card details), HR f
iles, financials, internal confidential files, NDA, confidentiali
ty agreements, etc.
-
Prova
November 4, 2025
•
[ ransomware, technology ]
Prova was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-04. Sector: Professional Services. Country: France. Website: www.prova.fr.
-
Mango's Tropical Cafe
November 4, 2025
•
[ ransomware, retail ]
Mango's Tropical Cafe was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-04. Sector: Hospitality. Country: United States of America. Website: www.mangos.com.
-
Property Finder / PropSpace
November 4, 2025
•
[ ransomware, technology ]
Property Finder / PropSpace was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2025-11-04. Sector: Professional Services. Country: United Arab Emirates. Website: propertyfinder.ae. Samples on Friday/
-
thevisapro.com (Yibirin Law Group)
August 4, 2025
•
[ ransomware, leak, finance ]
thevisapro.com (Yibirin Law Group) was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2025-08-04. Sector: Professional Services. Country: United States of America. Website: thevisapro.com. all client cases, personal data
-
I****r
November 4, 2025
I****r was listed as a victim on the leak site of the payoutsking ransomware group; the attack is estimated to have taken place on 2025-11-04. Country: United States of America. Website: i****.com. Data size claimed by the group: 272GB.
-
American PowerNet
October 28, 2025
•
[ ransomware, energy ]
American PowerNet was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2025-10-28. Sector: Energy & Utilities. Country: United States of America. Website: www.americanpowernet.com. United States
-
Sellars Absorbent Materials
October 28, 2025
•
[ ransomware, manufacturing ]
Sellars Absorbent Materials was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2025-10-28. Sector: Manufacturing. Country: United States of America. Website: www.sellarscompany.com. United States
-
ConvExx
October 28, 2025
ConvExx was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2025-10-28. Country: United States of America. Website: www.convexx.com. United States
-
Durvet
November 5, 2025
Durvet was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-05. Sector: Manufacturing. Country: United States of America. Website: www.durvet.com.
-
Enem Nostrum Remedies Pvt. Ltd
November 5, 2025
Enem Nostrum Remedies Pvt. Ltd was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2025-11-05. Sector: Healthcare. Country: India. Website: enemnostrum.com. Data size claimed by the group: 1.8TB. Enem Nostrum Remedies Pvt. Ltd
-
Habib Bank
November 5, 2025
Habib Bank was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-05. Sector: Financial Services. Country: Pakistan. Website: www.habibbank.com.
-
Integra SAP
October 20, 2025
•
[ ransomware, technology, finance ]
Integra SAP was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2025-10-20. Sector: Technology. Country: India. Website: integrasap.com. Integra SAP helps businesses solve tough financial challenges. They work with companies to boost cash flow, increase sales performance, and get real-time business insights. Their team helps business owners track finances better, find ways to make more money, and understand exactly what's happening in their company right now
-
SERAPHITA GmbH
October 20, 2025
•
[ ransomware, finance, technology ]
SERAPHITA GmbH was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2025-10-20. Sector: Professional Services. Country: Germany. Website: seraphita.ch. Tax Return February 2025
Good preparation will save time and save time for a transplant. Would you like
to prepare the following documents:
- latest tax return
- last final assessment order
- Salary certificate (including additional earnings)
- Balance sheets and income statement for self-employment
- Certificate from the Unemployment Insurance Fund (daily allowance)
- Reference pensions and pensions (AHV/IV, pension benefits,
lifetime pensions, etc.)
- Certificates of disability compensation (military, sick leave, accidents or unemployment benefits)
- Annual report including VAT on Interest loans and expenses (bank, postal, etc.)
- Catalog of securities of custodian banks, as well as reports on the purchase and
sale of securities (including invoices). Dividend loans)
- Receipts for payment of interest on the debt (receipts are required)
- Rental income or cost of ownership-Disposal
- Supporting documents on the conversion and maintenance of the property
- A certificate of any extraordinary contributions to
Pension Fund
- Certificate of deposits Column 3 a (supporting documents required)
- Supporting documents on travel expenses for work / meals outside the home
- Supporting documents on professional expenses (work tools, technical literature, etc.)
-
José Guma S.A.
October 16, 2025
•
[ ransomware, manufacturing, retail ]
Jos Guma S.A. was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2025-10-16. Sector: Agriculture and Food Production. Country: Spain. Website: joseguma.com. Jos Guma S.A.
Occupation: production of household chemicals and hygiene products (soap, cleaning products) + contract manufacturing for third-party brands.
Location: Colonia Caroya, Cordoba Province, Argentina.
Legal address / factory / site: Lot 1, Malabrigo (Lot 1, Barrio Malabrigo, Cordoba) part of the company's infrastructure.
Structure: one of the heads/President is Jorge Alfredo Gleria.
Membership in sustainable initiatives: for example, they are a member of the RSPO (Organization for Sustainable Palm Oil Production).
-
Coilplus
October 6, 2025
Coilplus was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-10-06. Sector: Manufacturing. Country: United States of America. Website: coilplus.com. Coilplus is part of the MetalOne Group, MetalOne is the largest i
ntegrated steel company in the world.
We will upload 14gb of corporate documents soon. Detailed employe
e information (complete I-9 forms, SSN, DL, passports, birth/deat
h certs and so on), financials, internal confidentiality agreemen
ts, NDA, etc.
-
SAIGON INDUSTRIAL SERVICE
November 5, 2025
SAIGON INDUSTRIAL SERVICE was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2025-11-05. Sector: Manufacturing. Country: Vietnam. Website: saigonservice.vn. Since Saigon Industrial Service's establishment in 2012, we have more than 10 years of experience in supplying, installing, processing, maintaining and repairing valves, pumps and other equipment in the oil and gas industry and electricity for numerous partners, both domestic (Petro Vietnam, BSR, PVGas, PTSC M&C, EVNGENCO2 TPC Can Tho, EVNGENCO3 TPC Phu My, etc.) and international (Ansaldo Energia, Clyde Bergeman, Petroseal, Enertork, Alco valve, VESL, MSD, VIAR, Firsa, Goodwin, PBV, BFE, DHV Valve, etc.)
-
Maine Course Hospitality Group
November 5, 2025
•
[ ransomware, leak ]
Maine Course Hospitality Group was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-05. Sector: Hospitality. Country: United States of America. Website: mchg.com.
-
mcintoshlabs.com
November 5, 2025
•
[ ransomware, technology, manufacturing ]
mcintoshlabs.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2025-11-05. Sector: Technology. Country: United States of America. Website: mcintoshlabs.com. McIntosh Laboratory is an iconic American company, founded in 1949 and headquartered in Binghamton, New York. It specializes in high-end,