-
Centro de Formación San Nicolás
November 4, 2025
•
[ ransomware, education ]
Centro de Formacin San Nicols was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-04. Sector: Education. Country: Mexico. Website: www.cfsannicolas.com.
-
www.heitech.com.my
November 4, 2025
•
[ ransomware, technology ]
www.heitech.com.my was listed as a victim on the leak site of the devman ransomware group; the attack is estimated to have taken place on 2025-11-04. Sector: Technology. Country: Malaysia. Website: www.heitech.com.my. Ransom: 500k
60gb
-
Crown Automotive Sales
October 28, 2025
•
[ ransomware, manufacturing, automotive ]
Crown Automotive Sales was listed as a victim on the leak site of the sinobi ransomware group; the attack is estimated to have taken place on 2025-10-28. Sector: Manufacturing. Country: United States of America. Website: www.crownautomotivesales.com. Crown Automotive Sales Co specializes in providing high-quality replacement parts for Jeep, Chrysler, and Dodge vehicles. With over 8,000 part numbers and a diverse range of applications, the company supplies authorized dealers with essential components for both maintenance and upgrades. Additionally, their RT Off-Road line features performance accessories specifically tailored for Jeep models. The company has been a key player in the automotive parts industry since 1963, serving retailers and dealers exclusively.
-
Rios Espinosa
November 2, 2025
Rios Espinosa was listed as a victim on the leak site of the spacebears ransomware group; the attack is estimated to have taken place on 2025-11-02. Sector: Agriculture and Food Production. Country: Spain. Website: riosespinosa.com. Since 1985, at Ros Espinosa we have been at the forefront of our sector, challenging expectations and setting trends. With offices in Sabinillas, Estepona, Sotogrande, and Seville, our team, comprised of economists, social graduates, lawyers, and registered property managers, combines experience and innovation to offer a unique service tailored to each client.Personal information of employees and clientsFinancial documents https://riosespinosa.com/
-
DOVERN Import
October 21, 2025
DOVERN Import was listed as a victim on the leak site of the spacebears ransomware group; the attack is estimated to have taken place on 2025-10-21. Sector: Retail & E-Commerce. Country: Morocco. Website: dovern-import.com. At DOVERN Import, we are passionate about the art of rare wines and champagnes. Since 2001, we have had the honor of selecting and importing wines and champagnes to Morocco, primarily from the prestigious terroirs of France. Our mission is to showcase unique and often overlooked wineries, while adhering to strict quality standards.We have created an exclusive selection for wine and champagne enthusiasts in Morocco, sourced from the finest wine regions such as the Rhne Valley, Champagne, Burgundy, and Bordeaux. Our commitment to our clients and restaurateurs is reflected in our personalized service, offering them exclusive access to our flagship products.Based in Casablanca, DOVERN Import is the go-to source for those seeking wines and champagnes in Morocco, offering unique and personalized tastings. Our philosophy is founded on authenticity, excellence, and a love of wine.Personal information of employees and clientsFinancial documents https://dovern-import.com/
-
Invacare
November 4, 2025
•
[ ransomware, healthcare, manufacturing ]
Invacare was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2025-11-04. Sector: Healthcare. Country: United States of America. Website: invacare.com. Invacare Invacare, founded in 1885 and headquartered out of Elyria, Ohio, is a manufacturer and distributor of home and long term care medical products. More
-
General Micro Systems
October 29, 2025
•
[ ransomware, technology, manufacturing ]
General Micro Systems was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-10-29. Sector: Technology. Country: United States of America. Website: gms4sbc.com. General Micro Systems (GMS) is the rugged server company. The com
pany is known as the industry expert in highest-density, modular,
compute-intensive, and rugged small form-factor embedded computi
ng systems, servers, and switches.
We will upload corporate documents soon. Detailed project informa
tion, a bit of client information, financials, confidential milit
ary information, NDA, the most interesting thing here is confiden
tial files of Intel corporation concerning Thunderbolt. And they
don't care about such data leaked. We'll upload the files soon.
-
Palacios Marine & Industrial
September 30, 2025
•
[ ransomware, manufacturing ]
Palacios Marine & Industrial was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-09-30. Sector: Manufacturing. Country: United States of America. Website: palaciosmarineindustrial.com. Palacios Marine Industrial (PMI) offers quality contracting and
service solutions while prioritizing environmental health and saf
ety.
We will upload corporate documents soon. Detailed employee inform
ation (passports, driver licenses, medical information, social se
curity number and other scans with personal information), NDA, co
ntracts and agreements, client data, drawings, and other operatio
nal data.
-
Benda Grace Stulz
September 20, 2025
•
[ ransomware, finance, hack ]
Benda Grace Stulz was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-09-20. Sector: Professional Services. Country: United States of America. Website: bgscpas.com. You Are Number One at Benda, Grace, Stulz & Co. operates in the C
ertified Public Accountant business/industry within the Engineeri
ng, Accounting, Research, and Management Services sector. Their m
ost valuable assets - our clients. And this company is ready to s
hare 90gb of their data containing the data of their clients. We
will upload corporate documents soon. Detailed client financials,
a bit of employee personal information, NDA, credit card details
, payment information, confidentiality agreements and so on.
-
Automated Logistics Systems
November 4, 2025
Automated Logistics Systems was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2025-11-04. Sector: Transportation. Country: United States of America. Website: automatedlogistics.com. Automated Logistics Systems
-
St Stephen's International
November 4, 2025
St Stephen's International was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2025-11-04. Sector: Education. Country: Thailand. Website: www.sis.edu. www.sis.edu https://www.zoominfo.com/c/st-stephens-international-school/1293733677 St Stephen's International School offers educational programs at its Bangkok and Khao Yai campuses, catering to a diverse student population. The school provides weekend schooling and various camps for groups, aiming to enhance the educational experience. It is associated with several organizations including Ocean Glass, Ocean Property, and Bandara Group. The institution focuses on fostering an international learning environment for its students.
-
Elliott Tax Service
November 4, 2025
•
[ ransomware, finance ]
Elliott Tax Service was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-11-04. Sector: Financial Services. Country: United States of America. Website: elliotttaxservice.com. Elliott Tax Service is a local firm in San Mateo specializing in
income tax preparation and advice, boasting 27 years of experienc
e.
We will upload 82gb corporate documents soon. Client personal doc
uments scans, employee personal information and other HR informat
ion. Clients financials and other files, NDA, credit card details
, payment details, confidentiality agreements, legal and court do
cuments, police reports, and so on.
-
MS Metal Solutions
September 10, 2025
MS Metal Solutions was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-09-10. Sector: Manufacturing. Country: Denmark. Website: msmetalsolutions.com. MS Metal Solutions offers a wide range of manufacturing capabilit
ies including cutting, welding, and powder coating to cater to di
verse industries such as automotive, agriculture, and office furn
iture.
We will upload corporate documents soon. Complete information abo
ut employees (w-9 forms containing DOB, SSN, DL, passport, addres
s, email, phone personal docs scans, credit card details), HR f
iles, financials, internal confidential files, NDA, confidentiali
ty agreements, etc.
-
Prova
November 4, 2025
•
[ ransomware, technology ]
Prova was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-04. Sector: Professional Services. Country: France. Website: www.prova.fr.
-
Mango's Tropical Cafe
November 4, 2025
•
[ ransomware, retail ]
Mango's Tropical Cafe was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-04. Sector: Hospitality. Country: United States of America. Website: www.mangos.com.
-
Property Finder / PropSpace
November 4, 2025
•
[ ransomware, technology ]
Property Finder / PropSpace was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2025-11-04. Sector: Professional Services. Country: United Arab Emirates. Website: propertyfinder.ae. Samples on Friday/
-
thevisapro.com (Yibirin Law Group)
August 4, 2025
•
[ ransomware, leak, finance ]
thevisapro.com (Yibirin Law Group) was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2025-08-04. Sector: Professional Services. Country: United States of America. Website: thevisapro.com. all client cases, personal data
-
I****r
November 4, 2025
I****r was listed as a victim on the leak site of the payoutsking ransomware group; the attack is estimated to have taken place on 2025-11-04. Country: United States of America. Website: i****.com. Data size claimed by the group: 272GB.
-
American PowerNet
October 28, 2025
•
[ ransomware, energy ]
American PowerNet was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2025-10-28. Sector: Energy & Utilities. Country: United States of America. Website: www.americanpowernet.com. United States
-
Sellars Absorbent Materials
October 28, 2025
•
[ ransomware, manufacturing ]
Sellars Absorbent Materials was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2025-10-28. Sector: Manufacturing. Country: United States of America. Website: www.sellarscompany.com. United States