-
Leadway Assurance
December 11, 2025
•
[ ransomware, finance ]
Leadway Assurance was listed as a victim on the leak site of the kazu ransomware group; the attack is estimated to have taken place on 2025-12-11. Sector: Financial Services. Country: Nigeria. Website: leadwayhealth.com. Ransom demand: $300 000. Data size claimed by the group: 13 GB. Leadway Assurance Company Limited is the leading insurance provider in Nigeria, offering a comprehensive range of products including life, education, auto, travel, health, and property insurance. The company caters to both individual and business clients, providing solutions such as wealth management and prompt claims processing. With a commitment to customer satisfaction, Leadway ensures financial security for customers and their assets through tailored insurance plans. Established in 1970, Leadway is recognized for its reliability and proactive service in the insurance sector.
-
Nepes
December 11, 2025
•
[ ransomware, technology ]
Nepes was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-12-11. Sector: Technology. Country: South Korea. Website: www.nepes.co.kr.
-
WJ Professional
December 11, 2025
•
[ ransomware, finance ]
WJ Professional was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-12-11. Sector: Professional Services. Country: Canada. Website: www.wjcpa.ca.
-
Woodard, Emhardt, Henry, Reeves & Wagner, LLP
December 11, 2025
•
[ ransomware, leak, technology ]
Woodard, Emhardt, Henry, Reeves & Wagner, LLP was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2025-12-11. Sector: Professional Services. Country: United States of America. Website: uspatent.com. Woodard, Emhardt, Henry, Reeves & Wagner, LLP
-
Northern Air Systems(2)
December 11, 2025
Northern Air Systems(2) was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-12-11. Sector: Manufacturing. Country: United States of America. Website: northernairsystems.com. Northern Air Systems has been a leading manufacturer of high-qual
ity HVAC systems for commercial and industrial applications for n
early three decades.
As you could have noticed, we've made it 2nd time to penetrate to
their systems and locked almost 90 vms. At this time we've taken
five times more data (150gb) and we will upload the files soon.
Detailed employee information (i-9 forms, passports, DLs, medical
information, pictures and so on), client data (DLs, addresses, e
mails), detailed financials, lots of projects information, contra
cts and agreements, numerous NDAs, etc.
-
Dan Technologies Group
December 11, 2025
•
[ ransomware, technology ]
Dan Technologies Group was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-12-11. Sector: Technology. Country: Denmark. Website: www.dantechnologies.com.
-
Iroquois Memorial Hospital
November 25, 2025
•
[ ransomware, healthcare ]
Iroquois Memorial Hospital was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2025-11-25. Sector: Healthcare. Country: United States of America. Website: iroquoismemorial.com. Cost-efficient, high quality, consumer-responsive health care services
-
The Parkes Companies
December 12, 2025
•
[ ransomware, manufacturing ]
The Parkes Companies was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-12-12. Sector: Manufacturing. Country: United States of America. Website: www.parkescompanies.com.
-
Oxford Rehabilitation Center
December 12, 2025
•
[ ransomware, healthcare ]
Oxford Rehabilitation Center was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-12-12. Sector: Healthcare. Country: United States of America. Website: www.oxfordrehab.com.
-
Spitzer Auto Group
December 12, 2025
•
[ ransomware, retail ]
Spitzer Auto Group was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-12-12. Sector: Retail & E-Commerce. Country: United States of America. Website: www.spitzer.com.
-
Jeff D'Ambrosio
December 12, 2025
•
[ ransomware, leak ]
Jeff D'Ambrosio was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-12-12. Sector: Professional Services. Country: United States of America. Website: www.jeffdambrosio.com.
-
Personal Injury
December 12, 2025
Personal Injury was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-12-12. Sector: Professional Services. Country: United States of America. Website: www.stipeinjurylaw.com.
-
SCIPIONI
December 12, 2025
•
[ ransomware, energy ]
SCIPIONI was listed as a victim on the leak site of the morpheus ransomware group; the attack is estimated to have taken place on 2025-12-12. Sector: Energy & Utilities. Country: Belgium. Website: SCIPIONI.be. **Website**: scipioni.be
**Revenue**: $5 Million
Scipioni is a company specializing in the distribution of petroleum products since 1974. Located in the Charleroi region.Scipioni is a company that s
-
Right Power Technology Sdn Bhd
December 9, 2025
•
[ ransomware, technology, financial ]
Right Power Technology Sdn Bhd was listed as a victim on the leak site of the spacebears ransomware group; the attack is estimated to have taken place on 2025-12-09. Sector: Technology. Country: Malaysia. Website: www.rightpowerups.com.my. Established in 2000, Right Power Technology Sdn Bhd stands as a leading producer and distributor of reliable, affordable, and efficient UPS systems. With over 20 years of experience, Right Power excels in delivering power protection solutions and maintenance services for critical mission facilities across the business, education, and commercial sectors. Right Power offers a comprehensive range of products, including Line Interactive Simulated Sinewave, True Online Sinewave, and Smart Pure Sinewave UPS systems. Additionally, we provide a full suite of heavy-duty and high-performance Industrial Automatic Voltage Regulators (AVRs), with capacities ranging from 800VA to 10,000KVA. Our extensive portfolio ensures total data center power protection, featuring VRLA AGM and Lithium-ion batteries, Battery Monitoring Systems (BMS), reliable Frequency Converters, and scalable Modular Data Center solutions. Personal information of employees and clientsFinancial documents https://www.rightpowerups.com.my/
-
Greene Metal Products
December 12, 2025
•
[ ransomware, manufacturing ]
Greene Metal Products was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-12-12. Sector: Manufacturing. Country: United States of America. Website: www.greenemetal.com.
-
Hopital La Rabta
December 11, 2025
•
[ ransomware, healthcare ]
Hopital La Rabta was listed as a victim on the leak site of the devman ransomware group; the attack is estimated to have taken place on 2025-12-11. Sector: Healthcare. Country: Tunisia. Website: www.chularabta.tn. [AI generated] Hopital La Rabta is a major hospital located in Tunis, Tunisia. It provides a wide array of medical services to the Tunisian population. The hospital prides itself on its team of highly skilled and dedicated medical professionals who utilize advanced medical equipment to effectively diagnose and treat diseases. It offers surgical services, specialty medicine, emergency care, and outpatient services.
-
Quezon Power
December 10, 2025
Quezon Power was listed as a victim on the leak site of the devman ransomware group; the attack is estimated to have taken place on 2025-12-10. Sector: Energy & Utilities. Country: Philippines. Website: www.qpl.com.ph. Employee data, hr info, projects, Work logs of the power plants, Scada SRC
-
*****.com
December 12, 2025
*****.com was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2025-12-12. Sector: Retail & E-Commerce. Website: i2ohjeeqe37jre4f2u7pyq73cbm6lecumdxapkvrlryna6rc3it4zsid.onion. The entire infrastructure of a major regional retail grocery networkcomprising approximately 80 grocery stores, about 40 liquor outlets, and roughly 50 pharmacies, along with its franchise operationshas been compromised, with all data stolen and encrypted. The targeted company reports an annual revenue of $1.4 to $1.8 billion (according to various 2025 estimates). The exfiltrated data includes all insurance payouts (even detailed records of payouts to families of deceased employees, listing cause of death and amounts paid), complete personnel records for all employees and executives (containing SSN, date of birth, full name, address, passport details, and W-9 forms), every financial document, records of active deals and income/expenses, as well as all documentation and insurance records for the company's movable and immovable property. http://i2ohjeeqe37jre4f2u7pyq73cbm6lecumdxapkvrlryna6rc3it4zsid.onion (your key in Tox Chat)
-
Warrior Crane Service
December 12, 2025
Warrior Crane Service was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-12-12. Sector: Transportation. Country: United States of America. Website: warriorcrane.com. Warrior Crane is a leading provider of specialized crane lifting
services, delivering customized solutions to diverse industries.
We will upload 22gb of corporate data soon. Employee information
(DLs, passports, phones, address and so on), financials, client i
nformation, contracts and agreements, confidentiality agreements,
etc.
-
Anderson Engineering
November 9, 2025
•
[ ransomware, manufacturing, financial ]
Anderson Engineering was listed as a victim on the leak site of the spacebears ransomware group; the attack is estimated to have taken place on 2025-11-09. Sector: Manufacturing. Country: United States of America. Website: www.andersoneng.com. We specialize in navigating complex regulatory requirements, engineering precise designs, and ensuring seamless permitting to get you building faster.With over 35 years of experience, we solve your most demanding engineering, permitting, and compliance challenges, letting you move to construction with precision and expertise.Personal information of employees and clientsFinancial documentsProjects, drawings https://www.andersoneng.com/
