-
Quezon Power
December 10, 2025
Quezon Power was listed as a victim on the leak site of the devman ransomware group; the attack is estimated to have taken place on 2025-12-10. Sector: Energy & Utilities. Country: Philippines. Website: www.qpl.com.ph. Employee data, hr info, projects, Work logs of the power plants, Scada SRC
-
*****.com
December 12, 2025
*****.com was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2025-12-12. Sector: Retail & E-Commerce. Website: i2ohjeeqe37jre4f2u7pyq73cbm6lecumdxapkvrlryna6rc3it4zsid.onion. The entire infrastructure of a major regional retail grocery networkcomprising approximately 80 grocery stores, about 40 liquor outlets, and roughly 50 pharmacies, along with its franchise operationshas been compromised, with all data stolen and encrypted. The targeted company reports an annual revenue of $1.4 to $1.8 billion (according to various 2025 estimates). The exfiltrated data includes all insurance payouts (even detailed records of payouts to families of deceased employees, listing cause of death and amounts paid), complete personnel records for all employees and executives (containing SSN, date of birth, full name, address, passport details, and W-9 forms), every financial document, records of active deals and income/expenses, as well as all documentation and insurance records for the company's movable and immovable property. http://i2ohjeeqe37jre4f2u7pyq73cbm6lecumdxapkvrlryna6rc3it4zsid.onion (your key in Tox Chat)
-
Warrior Crane Service
December 12, 2025
Warrior Crane Service was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-12-12. Sector: Transportation. Country: United States of America. Website: warriorcrane.com. Warrior Crane is a leading provider of specialized crane lifting
services, delivering customized solutions to diverse industries.
We will upload 22gb of corporate data soon. Employee information
(DLs, passports, phones, address and so on), financials, client i
nformation, contracts and agreements, confidentiality agreements,
etc.
-
Anderson Engineering
November 9, 2025
•
[ ransomware, manufacturing, financial ]
Anderson Engineering was listed as a victim on the leak site of the spacebears ransomware group; the attack is estimated to have taken place on 2025-11-09. Sector: Manufacturing. Country: United States of America. Website: www.andersoneng.com. We specialize in navigating complex regulatory requirements, engineering precise designs, and ensuring seamless permitting to get you building faster.With over 35 years of experience, we solve your most demanding engineering, permitting, and compliance challenges, letting you move to construction with precision and expertise.Personal information of employees and clientsFinancial documentsProjects, drawings https://www.andersoneng.com/
-
C*** | A******** - Contact us by monday
December 12, 2025
•
[ ransomware, technology ]
C*** | A******** - Contact us by monday was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2025-12-12. Website: secret.com. We have 2TB of your files. Proof in chat, Contact us by Monday.
-
GDEV
December 12, 2025
•
[ ransomware, technology ]
GDEV was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2025-12-12. Sector: Technology. Country: Germany. Website: gdev.inc. GDEV (Nasdaq: GDEV) is a gaming and entertainment powerhouse, focused on growing and enhancing its portfolio of studios. With a diverse range of su...
-
ATG
December 12, 2025
•
[ ransomware, retail, technology ]
ATG was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2025-12-12. Sector: Retail & E-Commerce. Country: Sweden. Website: atg.se. ATG has since 1974 delivered excitement and entertainment with quality to the Swedish people. The vision is to deliver the world's best gaming expe...
-
Arcom Digital
December 12, 2025
•
[ ransomware, technology ]
Arcom Digital was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2025-12-12. Sector: Technology. Country: United States of America. Website: arcomdigital.com. Arcom Digital specializes in advanced digital technologies aimed at enhancing network performance through products like PNM+, Hunter, and QAM Snare...
-
Maven Solutions
December 12, 2025
•
[ ransomware, technology ]
Maven Solutions was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2025-12-12. Sector: Professional Services. Country: United States of America. Website: mavensolutions.net. We offer one of the best solutions in the market. We have solutions to target every vertical segment of the market be it a small shop, a small busi...
-
Solarpro Holding
December 12, 2025
•
[ ransomware, energy, leak ]
Solarpro Holding was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2025-12-12. Sector: Energy & Utilities. Country: Bulgaria. Website: solarpro.bg. Solarpro Holding is a leading EPC contractor specializing in the design, construction, and integration of photovoltaic (PV) plants with over 7 GW o...
-
Twinsoft
December 12, 2025
•
[ ransomware, technology ]
Twinsoft was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2025-12-12. Sector: Technology. Country: Greece. Website: twinsoft.gr. Twinsoft is a leading provider of software solutions tailored for the hospitality market, focusing on enhancing business operations through their f...
-
RJS Logistics
December 12, 2025
•
[ ransomware, manufacturing ]
RJS Logistics was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-12-12. Sector: Transportation. Country: United States of America. Website: rjslogistics.com. RJS Logistics is a freight and logistics company specializing in
transporting produce and refrigerated freight. RJS Logistics also
provides van freight and flatbed freight services.
We will upload corporate data soon. Employee information (DLs, w-
9, phones, address and so on), detailed financials, a lot of cust
omers files, contracts, NDAs, confidentiality agreements, etc.
-
HKR Architects
December 12, 2025
•
[ ransomware, technology ]
HKR Architects was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2025-12-12. Sector: Professional Services. Country: Ireland. Website: hkrarchitects.com. HKR Architects is a prominent international architecture and urban design practice founded in 1992, with offices located in London, Dublin, Dubai, and Abu Dhabi. The firm specializes in various sectors including living, working, staying, masterplanning, modular, and learning environments. Their services cater to a diverse range of clients seeking innovative architectural solutions. HKR Architects is committed to delivering high-quality design and planning services across multiple regions.
-
United Keetoowah Band of Cherokee Indians in Oklahoma
December 12, 2025
•
[ ransomware, government ]
United Keetoowah Band of Cherokee Indians in Oklahoma was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2025-12-12. Sector: Government & Defense. Country: United States of America. Website: ukbb-nsn.gov. United Keetoowah Band of Cherokee Indians in Oklahoma
-
New Obscura 2.0!
December 12, 2025
New Obscura 2.0! was listed as a victim on the leak site of the obscura ransomware group; the attack is estimated to have taken place on 2025-12-12. Sector: Government & Defense. Website: fbi.gov. We present the new version of Obscura 2.0. Faster encryption mechanisms, bugs fixed in the first version, more covert operation, and more upset companies.
Now you can rent our software. You can write to us on Tox, where we will tell you about the terms and conditions.
-
StanleyCo Malaysia
December 4, 2025
•
[ ransomware, finance, technology ]
StanleyCo Malaysia was listed as a victim on the leak site of the obscura ransomware group; the attack is estimated to have taken place on 2025-12-04. Sector: Professional Services. Country: Malaysia. Website: stanleyco.com.my. StanleyCo Malaysia provides expert accounting, tax advisory, company incorporation, and compliance services for local and foreign businesses in Malaysia.
-
Startek Engineering Inc.
December 3, 2025
•
[ ransomware, technology, manufacturing ]
Startek Engineering Inc. was listed as a victim on the leak site of the obscura ransomware group; the attack is estimated to have taken place on 2025-12-03. Sector: Technology. Country: Taiwan. Website: startek-eng.com. STARTEK is a worldwide leading company in the fingerprint identification industry, dedicated to developing and providing consumer-ready fingerprint identification products, biometric fingerprint sensors and modules. Established in 1989 at Hsinchu Science Industrial Park, Taiwan, the company has a long history and rich experience in the Biometric fingerprinting field, and continues to be a strong player in the evolution of fingerprint technology development and applications. Starteks patented proprietary fingerprint algorithm technology follows the ISO/IEC 19794-2 standard and provides maximum accuracy, performance, and reliability.
-
ACE Forwarding
November 19, 2025
•
[ ransomware, manufacturing ]
ACE Forwarding was listed as a victim on the leak site of the obscura ransomware group; the attack is estimated to have taken place on 2025-11-19. Sector: Transportation. Country: United States of America. Website: aceforwarding.com. Ace Forwarding offers several methods of protecting your freight. Full-service crating and repackaging are available in a variety of materials. Our full time staff of carpenters will custom-tailor crating and packaging to fit your specific needs.
-
David M. Schwarz Architects
December 7, 2025
•
[ ransomware, hack ]
David M. Schwarz Architects was listed as a victim on the leak site of the minteye ransomware group; the attack is estimated to have taken place on 2025-12-07. Sector: Professional Services. Country: United States of America. Website: www.dmsas.com. Size: 1.9 TB
-
Cranford, Buckley, Schultze, Tomchin, Allen & Buie, P.A.
December 12, 2025
•
[ ransomware, finance, leak ]
Cranford, Buckley, Schultze, Tomchin, Allen & Buie, P.A. was listed as a victim on the leak site of the minteye ransomware group; the attack is estimated to have taken place on 2025-12-12. Sector: Financial Services. Country: United States of America. Website: www.southcharlottelawfirm.com. Size: 350 GB
