-
Hopital La Rabta
December 11, 2025
Hopital La Rabta was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-12-11. Sector: Healthcare. Country: Tunisia. Website: www.chularabta.tn.
-
Ortho Mattress
December 26, 2025
•
[ ransomware, retail ]
Ortho Mattress was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-12-26. Sector: Retail & E-Commerce. Country: United States of America. Website: www.orthomattress.com.
-
Georgia Dermatology & Skin Cancer Center
December 26, 2025
•
[ ransomware, healthcare ]
Georgia Dermatology & Skin Cancer Center was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-12-26. Sector: Healthcare. Country: United States of America. Website: www.gaderm.com.
-
Hometech Window
December 26, 2025
Hometech Window was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-12-26. Sector: Manufacturing. Country: United States of America. Website: www.hometechwindow.com.
-
GITSolutions
December 27, 2025
•
[ ransomware, technology ]
GITSolutions was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-12-27. Sector: Technology. Country: Spain. Website: gitsolutions.es.
-
VALLEREDONDO
December 27, 2025
•
[ ransomware, hack, retail ]
VALLEREDONDO was listed as a victim on the leak site of the morpheus ransomware group; the attack is estimated to have taken place on 2025-12-27. Sector: Agriculture and Food Production. Country: Spain. Website: valleredondo.com.mx. **Website**: valleredondo.com.mx
**Revenue**: $50 Million
Family owned, founded in 1964 by Don Luis Ferruccio Cetto, right in the center of Mxico, in Aguascalientes.
With more than 60 years special
-
Centro Médico Palafox
December 27, 2025
•
[ ransomware, healthcare ]
Centro Mdico Palafox was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2025-12-27. Sector: Healthcare. Country: Mexico. Website: www.centromedicopalafox.es. At Palafox Medical Center, we offer comprehensive healthcare services through a wide range of medical specialties. Our center boasts a broad spectrum of services and professionals, ensuring the complete well-being of you and your loved ones.
-
Caramel
December 27, 2025
Caramel was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2025-12-27. Sector: Retail & E-Commerce. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.caramel-shop.co.uk. Founded in 1999 and headquartered in London, England, Caramel is a company that manufactures and sells apparel items.
-
BMW Guatemala
December 27, 2025
•
[ ransomware, manufacturing ]
BMW Guatemala was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2025-12-27. Sector: Manufacturing. Country: Guatemala. Website: www.bmw.com.gt. BMW Guatemala is a company that operates in the Automobile Dealers industry. It employs 250to499 people and has 10Mto25M of revenue. The company is headquartered in Guatemala City, Guatemala, Guatemala
-
Dom Development
December 27, 2025
•
[ ransomware, leak ]
Dom Development was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-12-27. Sector: Other. Country: Poland. Website: www.domd.pl.
-
Typhoo Tea
December 27, 2025
•
[ ransomware, retail ]
Typhoo Tea was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-12-27. Sector: Agriculture and Food Production. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.typhoo.co.uk.
-
larosadelmonte.com
December 27, 2025
•
[ ransomware, leak ]
larosadelmonte.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2025-12-27. Sector: Transportation. Country: United States of America. Website: larosadelmonte.com. La Rosa Del Monte is a long-standing family-owned moving and logistics company based in Bronx, New York, with operations extending
-
inpipeproducts.com
November 13, 2025
•
[ ransomware, manufacturing ]
inpipeproducts.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2025-11-13. Sector: Manufacturing. Country: United Kingdom of Great Britain and Northern Ireland. Website: inpipeproducts.com. iNPIPE PRODUCTS is a British engineering and manufacturing company headquartered in Brompton on Swale, North Yorkshire, United Kingdom. The firm
-
wadzeck-stiftung.de
December 27, 2025
wadzeck-stiftung.de was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2025-12-27. Sector: Government & Defense. Country: Germany. Website: wadzeck-stiftung.de. Wadzeck-Stiftung is one of Germanys oldest charitable youth-welfare organisations, founded in 1819 in Berlin as the first evangelical orphanage in
-
vanvenrooy.com
December 27, 2025
•
[ ransomware, manufacturing ]
vanvenrooy.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2025-12-27. Sector: Manufacturing. Country: Netherlands. Website: vanvenrooy.com. Van Venrooy is a Dutch family-owned engineering and manufacturing company based in Oss, the Netherlands, that specialises in tailor-made utility
-
hmpccpa.com
November 14, 2025
•
[ ransomware, finance ]
hmpccpa.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2025-11-14. Sector: Financial Services. Country: United States of America. Website: hmpccpa.com. Harvey & Martin, PLLC is a professional accounting firm based in Massachusetts, United States, with additional offices in Gloucester, MA
-
debralmorrison.com
December 27, 2025
•
[ ransomware, finance ]
debralmorrison.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2025-12-27. Sector: Professional Services. Country: United States of America. Website: debralmorrison.com. Debra L. Morrison operates a professional coaching, speaking, and financial education practice associated with the domain DebraLMorrison.com, which serves as
-
studioelad.it
December 27, 2025
•
[ ransomware, leak ]
studioelad.it was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2025-12-27. Sector: Professional Services. Country: Italy. Website: studioelad.it. Studio Elad legally registered as Elad S.r.l. is an Italian company operating in the professional services and business
-
ryc.org
December 27, 2025
•
[ ransomware, retail ]
ryc.org was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2025-12-27. Sector: Hospitality. Country: United States of America. Website: ryc.org. Raritan Yacht Club (RYC) is a private, member-owned recreational club located in Perth Amboy, New Jersey, with a history dating
-
heatcel.co.uk
December 27, 2025
heatcel.co.uk was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2025-12-27. Sector: Manufacturing. Country: United Kingdom of Great Britain and Northern Ireland. Website: heatcel.co.uk. Heatcel is a UK-based specialist supplier of central heating spares, components and equipment, operating as a stockist and distributor for
