-
Naftali Bennett Chats
December 17, 2025
•
[ ransomware, government, espionage ]
Naftali Bennett Chats was listed as a victim on the leak site of the handala ransomware group; the attack is estimated to have taken place on 2025-12-17. Sector: Government & Defense. Naftali Bennett has publicly denied any breach and insists that his phone was never hacked. However, the truth speaks for itself. As Handala Hack, we are exposing 1,900 chats directly from his device to prove beyond any doubt that his claims are false. The evidence is clear and undeniable, Bennetts attempt to mislead the public
-
zimeda.eu
December 17, 2025
•
[ ransomware, healthcare, technology ]
zimeda.eu was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2025-12-17. Sector: Healthcare. Country: Germany. Website: zimeda.eu. Zimeda GmbH & Co. KG is a German medical technology and healthcare supplier headquartered in Passau, Bavaria. The firm operates
-
gandlmechanical.com
December 17, 2025
gandlmechanical.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2025-12-17. Sector: Manufacturing. Country: United States of America. Website: gandlmechanical.com. G & L Mechanical Contractor, L.P. is a regional mechanical contracting firm based in Grapevine, Texas, and has been operating
-
artcitydental.com
December 17, 2025
•
[ ransomware, healthcare ]
artcitydental.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2025-12-17. Sector: Healthcare. Country: United States of America. Website: artcitydental.com. Art City Dental is a family-oriented dental clinic located in Springville, Utah, within the United States. The practice provides a
-
notar-gerresheim.de
December 17, 2025
•
[ ransomware, leak ]
notar-gerresheim.de was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2025-12-17. Sector: Professional Services. Country: Germany. Website: notar-gerresheim.de. Notare Dr. Heinrich & Dr. Berg is a private notary office located in the Gerresheim district of Dsseldorf, Germany. The
-
silverlinegroupinc.com
December 17, 2025
•
[ ransomware, manufacturing ]
silverlinegroupinc.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2025-12-17. Sector: Professional Services. Country: Canada. Website: silverlinegroupinc.com. Silverline Group Inc. is a Canadian construction and civil contracting firm based in St. Catharines, Ontario. It operates in the
-
smilecenterutah.com
December 17, 2025
smilecenterutah.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2025-12-17. Sector: Healthcare. Country: United States of America. Website: smilecenterutah.com. Smile Center Utah is a private dental practice located in Provo, Utah, providing comprehensive oral healthcare services to patients of
-
seguriamericas.com
December 17, 2025
•
[ ransomware, technology ]
seguriamericas.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2025-12-17. Sector: Professional Services. Country: Colombia. Website: seguriamericas.com. SeguriAmericas, formally known as Seguridad Las Americas Ltda, is a Colombian company specialising in private security and investigation services. Founded
-
CVK Hotels & Resorts_Turkey
December 17, 2025
CVK Hotels & Resorts_Turkey was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2025-12-17. Sector: Hospitality. Country: Turkey. Website: cvkhotels.com. We would like to draw your attention to the fact that even after being notified of the leak, the management of this organization treated it with complete indifference. If you are one of this organization's customers, rest assured that they couldn't care less about your personal data and who will use it and how.
----------------
CVK Hotels & Resorts offers luxury accommodations in the heart of Istanbul, providing guests with a blend of traditional Turkish hospitality and modern comfort. The company operates several hotels, including the CVK Park Bosphorus Hotel, CVK Park Bosphorus Residences, and CVK Taksim Hotel, catering to both leisure and business travelers. Their services include fine dining, spa and fitness facilities, and event spaces, ensuring a comprehensive experience for their clients. With a focus on creating memorable stays, CVK Hotels & Resorts also features a rewards program for guests to earn benefits during their visits.
-
MedHelp
December 17, 2025
MedHelp was listed as a victim on the leak site of the termite ransomware group; the attack is estimated to have taken place on 2025-12-17. Sector: Healthcare. Country: United States of America. Website: medhelpclinics.com. MedHelp Birmingham provides urgent and primary care services in the Birmingham area, welcoming walk-in patients. Their offerings include a Long COVID clinic, wellness therapies, and specialized services such as Lyme Disease treatment and gynecology care.
-
LSO Inc
December 18, 2025
LSO Inc was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-12-18. Country: United States of America. Website: www.lso.com.
-
deerfield.com (singulargenomics.com)
December 18, 2025
deerfield.com (singulargenomics.com) was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2025-12-18. Sector: Technology. Country: United States of America. Website: singulargenomics.com. Singular Genomics
https://www.singulargenomics.com/
The company, known for its next-generation sequencing technologies such as the G4 Sequencing Platform and the upcoming G4X Spatial Sequencer, is now focused on further innovation in genomic and spatial multiomics research.
Singular Genomics Systems, Inc. is a life science technology company founded in 2016 that develops next-generation sequencing (NGS) and multiomics technologies to empower researchers and clinicians in advancing science and medicine.
The company's mission centers on leveraging its proprietary Sequencing Engine platform, which underpins its core product tenets of accuracy, speed, flexibility, and scale.
Its commercially available G4 Sequencing Platform is a benchtop genomic sequencer designed for fast and accurate results, while the G4X Spatial Sequencer, an upgrade to the G4 platform, enables high-throughput in situ direct sequencing of RNA, targeted transcriptomics, and proteomics profiling from formalin-fixed, paraffin-embedded (FFPE) tissues.
The company is also developing the PX Integrated Solution, a multiomics platform that combines single-cell analysis, spatial analysis, genomics, and proteomics in one instrument.
As of February 21, 2025, Singular Genomics was taken private following the closing of an acquisition by Deerfield Management.
The company is headquartered in San Diego, California, with additional operations in La Jolla.
Target CEO:
Drew Spaventa
https://www.linkedin.com/in/drew-spaventa-98087213/
Josh Stahl
https://www.linkedin.com/in/joshua-stahl-77238627/
Target Owner:
James E. Flynn
https://www.linkedin.com/in/james-flynn-99304a72/
Deerfield Management Company, L.P.
Singular Genomics is currently owned by Deerfield Management Company, L.P., following the completion of its acquisition on February 21, 2025.
The transaction involved an affiliate of Deerfield acquiring all outstanding shares of Singular Genomics common stock not already owned by Deerfield for $20.00 per share in cash.
As a result, Singular Genomics transitioned from a publicly traded company to a private entity, with the goal of providing greater strategic flexibility.
The company's new leadership includes Josh Stahl as Chief Executive Officer and Drew Spaventa, the co-founder, continuing on the board as a special advisor to the CEO.
The data affected by this breach includes:
Source Codes
Biological Data
Experemental Data
Client Data
Personal Data (PII)
Staff Data
Financial Data
Proposal Contracts
NDA's
Internal Documents
Service Agreements
Breach size:
20TB
Breach review:
Singular Genomics Systems, Inc., a U.S.-based life-science technology company developing high-throughput spatial multiomics and next-generation sequencing platforms, experienced a data breach discovered on September 11, 2025.
The threat actor involved was identified as INC_RANSOM.
The breach is currently under investigation, and the leak size remains unknown.
The incident highlights growing concerns about cybersecurity in the genomics sector, where biological data is increasingly processed through digital pipelines vulnerable to cyber threats.
https://www.breachsense.com/breaches/singular-genomics-systems-data-breach/
Research Genomes:
Bacillus_cereus
bcereus
clost
danio_rerio
ecoli
epr
grch38
metaphlan4_databases
mm10
Mycobacterium_tuberculosis
phep
phix
phixil
plasmodium_falciparum
pse
rhodo
Rhodobacter_sphaeroides
roche
ruber
sal
spc
staph
synthetic_allen
synthetic_allen_hp1
synthetic_allen_hp2
tb
This company does not show any interest in solving its problem. She doesn't care about the security of her data and the research of her customers.
-
The Araneta Group
December 10, 2025
•
[ ransomware, hack, retail ]
The Araneta Group was listed as a victim on the leak site of the osiris ransomware group; the attack is estimated to have taken place on 2025-12-10. Sector: Hospitality. Country: Philippines. Website: aranetacity.com. The Araneta Group is a private, diversified conglomerate in the Philippines active in property development, food service, leisure & entertainment, and hospitality and is composed of five main business units including ACI, Inc., PPI Holdings Inc., Uniprom Inc., Araneta Hotels Inc. and Progressive Development Corporation.
aranetacity.com, aranetagroup.com
The group employs around 12,000 people.
While publicly available consolidated revenue figures for the entire group are not clearly disclosed, one of its listed related entities (separate from the core private group) Araneta Properties, Inc. (PSE: ARA) reported gross revenue of 706.7 million in 2024
-
uro.com
December 18, 2025
•
[ ransomware, healthcare ]
uro.com was listed as a victim on the leak site of the ms13089 ransomware group; the attack is estimated to have taken place on 2025-12-18. Sector: Healthcare. Country: Germany. Website: uro.com. Virginia Urology (VU) has a long history of providing quality care to the Greater Richmond metro area since 1929. This practice prides itself on its strong commitment to the communitys urological needs by recruiting highly...
-
dgpcommercialisti.it
December 18, 2025
•
[ ransomware, finance ]
dgpcommercialisti.it was listed as a victim on the leak site of the ms13089 ransomware group; the attack is estimated to have taken place on 2025-12-18. Sector: Professional Services. Country: Italy. Website: dgpcommercialisti.it. Aree di specializzazione: contabilit, bilanci, dichiarazioni fiscali, incarichi di sindaco e revisore legale, consulente tecnico dufficio, ristrutturazioni e operazioni straordinarie. Consulenza Societaria, ordinaria e straordinaria, ivi...
-
d*v***.cl
December 18, 2025
•
[ ransomware, healthcare ]
d*v***.cl was listed as a victim on the leak site of the devman ransomware group; the attack is estimated to have taken place on 2025-12-18. Sector: Healthcare. Country: Chile. Website: d*v***.cl. Patients full records, HIV tests results, ID's
-
beausejourco-op.crs
December 16, 2025
•
[ ransomware, leak, financial ]
beausejourco-op.crs was listed as a victim on the leak site of the devman ransomware group; the attack is estimated to have taken place on 2025-12-16. Sector: Agriculture and Food Production. Country: Canada. Website: beausejourco-op.crs. Financial, HR
-
The 200,000 Message Bombshell: Bennett’s Game is Over
December 18, 2025
•
[ ransomware, government, hack ]
The 200,000 Message Bombshell: Bennetts Game is Over was listed as a victim on the leak site of the handala ransomware group; the attack is estimated to have taken place on 2025-12-18. To Naftali Bennett, We watched your video with great amusement as you tried to brush off the truth, insisting that your phone was never hacked and all reports are fake. How desperate you must be, thinking that repeating a lie makes it any less false. Its almost entertaining to see how confident you are in
-
Best Hotels Spain
December 18, 2025
•
[ ransomware, retail ]
Best Hotels Spain was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-12-18. Sector: Hospitality. Country: Spain. Website: www.besthotels.es.
-
Telechaim
December 15, 2025
•
[ ransomware, technology ]
Telechaim was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-12-15. Sector: Technology. Country: Israel. Website: tlechaim.org.il.