-
St Andrew's CE High School
January 20, 2026
St Andrew's CE High School was listed as a victim on the leak site of the beast ransomware group; the attack is estimated to have taken place on 2026-01-20. Sector: Education. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.sta-worthing.com. Data size claimed by the group: 300GB. St Andrew's School Worthing is a co-educational secondary school dedicated to serving the local community in Worthing. The school is undergoing significant renovations to enhance its sports and STEM facilities and aims to be the top choice for secondary education in the area. It prides itself on nurturing an inclusive environment where kindness and aspiration are key values. The school offers a variety of educational programs and extracurricular activities to support student development.
-
tob-bmw.sk
January 23, 2026
tob-bmw.sk was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-01-23. Sector: Manufacturing. Country: Slovakia. Website: tob-bmw.sk. Some data from 590 gigabytes
T.O.B. is an authorized BMW dealer located in Trenn, Slovakia, offering a wide range of new and certified pre-owned BMW vehicles.
-
Betterment, LLC.
September 28, 2025
•
[ ransomware, finance ]
Betterment, LLC. was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2025-09-28. Sector: Financial Services. Country: United States of America. Size: 1.6 GB (compressed) | Records: 20M Records | Updated: 23 Jan 2026 | Note: Betterment better(get some)help | Betterment refused our generous offers as low as $0.95 per active customer record stolen. If you are a Betterment customer, remember that they value your privacy and peace of mind lower than the price of a roll of toilet paper.
-
Crunchbase, Inc.
September 20, 2025
•
[ ransomware, technology ]
Crunchbase, Inc. was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2025-09-20. Sector: Technology. Country: United States of America. Size: 1.3 GB (compressed) | Records: 2M Records | Updated: 23 Jan 2026
-
SoundCloud
August 10, 2025
•
[ ransomware, technology, leak ]
SoundCloud was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2025-08-10. Sector: Technology. Country: Germany. Size: 2.8 GB (compressed) | Records: 30M Records | Updated: 23 Jan 2026
-
JA Riollano, M&W Manufacturing, Mirbeau Hospitality Services, Reuland Electric Motor Co, S...
January 23, 2026
•
[ ransomware, manufacturing, financial ]
JA Riollano, M&W Manufacturing, Mirbeau Hospitality Services, Reuland Electric Motor Co, S... was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-01-23. Sector: Manufacturing. Country: United States of America. We obtained about 28gb of data of the following companies:
JA Riollano Co, Inc. is a leading provider of school, office, cra
ft, and copy supplies featuring the largest inventory and variety
of educational products. The company offers online shopping with
options for in-store pickup or direct shipping to offices.
M&W Hydraulics specializes in designing and manufacturing custom
hydraulic manifolds for mission-critical applications across vari
ous industries. Their services include in-house design, rapid pro
totyping, and integration, ensuring tailored solutions that meet
specific client needs.
Mirbeau Inn & Spa offers French-inspired hotel and spa resorts lo
cated in Skaneateles, Albany, Rhinebeck, NY, and Plymouth, MA. Th
e company focuses on providing a sanctuary for those seeking bala
nce in their lives, emphasizing a restful ambiance and classic pl
easures.
Reuland produces standard Electric Motor Laminations as well as L
aminations for custom applications. From High Speed Liquid Cooled
motors to standard rated motors, Reuland has a solution for your
application.
Spectorgroup is a collective of architects, designers, strategist
s, planners, and problem solvers dedicated to creating inspired s
paces that foster teamwork and collaboration.
You will find personal employee personal data, medical informatio
n, client information, numerous project files, confidential files
, accounting and financials and other internal operational files.
-
IGI Global
January 23, 2026
•
[ ransomware, education ]
IGI Global was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-01-23. Sector: Education. Country: United States of America. IGI Global is an international academic publisher committed to pr
oducing the highest quality research and ensuring the timely diss
emination of innovative research findings through an expeditious
and technologically advanced publishing process.
We will upload 220gb of corporate data soon. Employee personal in
formation (passports, DLs, credit card details, health informatio
n), financials, contracts and agreements, NDA, confidentiality ag
reements and so on.
-
goldair.gr
January 23, 2026
•
[ ransomware, leak, transportation ]
goldair.gr was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-01-23. Sector: Transportation. Country: Greece. Website: goldair.gr. Goldair Handling Overview Metrics
www.goldair-handling.gr
This company has 72 hours before we publish 1TB of personal data.
Goldair Handling
Goldair Handling is a leading provider of ground handling services operating in Greece, Cyprus, Bulgaria, India, and Serbia. The company employs more than 5,000 qualified specialists who have successfully serviced more than 160,000 flights at 36 airports. The company focuses on providing customized services tailored to the needs of its business partners, with a special emphasis on corporate social responsibility and sustainable development. Goldair Handling is committed to innovation and progressive thinking in the aviation industry.
Goldair Cargo
Greece
Headquarters: Tessi Rikya, Aspropyrgos, Greece
Phone number: +30 2111804200
Website: www.goldair-cargo.com
Revenue: $190.2 million
Employees: 201-500
Goldair Cargo, part of the Goldair Group founded in 1987, is a leading international freight forwarding and logistics company based in Greece. The company offers a wide range of high-quality services, including third-party logistics (3PL), road, air, and sea transport, relying on an extensive network of partners. With over 35 years of experience, Goldair Cargo strives to provide reliable and efficient logistics solutions tailored to the needs of its customers. Its focus on sustainable development and corporate social responsibility further strengthens its reputation in the logistics industry.
_______________________
-
Encore Roofing
January 14, 2026
•
[ ransomware, manufacturing ]
Encore Roofing was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-01-14. Sector: Manufacturing. Country: United States of America. Website: www.encoreroofing.com. United States
-
TREC Group
January 15, 2026
•
[ ransomware, technology ]
TREC Group was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-01-15. Sector: Professional Services. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.trecgroup.com. United States
-
YCC Parts Mfg
January 23, 2026
•
[ ransomware, manufacturing ]
YCC Parts Mfg was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-23. Sector: Manufacturing. Country: Taiwan. Website: www.yccco.com.tw.
-
Warren County Sheriff’s Office
December 19, 2025
•
[ ransomware, government ]
Warren County Sheriffs Office was listed as a victim on the leak site of the ransomhouse ransomware group; the attack is estimated to have taken place on 2025-12-19. Sector: Government & Defense. Country: United States of America. Website: warrencountykysheriff.com. The Warren County Sheriff's Office (Kentucky, USA), led by Sheriff Brett Hightower, is a professional law enforcement agency dedicated to protecting residents and visitors, upholding Kentucky state laws and the U.S. Constitution, and delivering comprehensive public safety services across the county. The office provides a wide range of functions, including proactive crime prevention, rapid incident response, equitable enforcement of ordinances and statutes, civil process execution, tax collection and administration, concealed carry permit issuance, and various community-oriented programs and educational initiatives. Headquartered in Bowling Green, the agency maintains a 24/7 operational commitment to emergency preparedness, integrity-driven community policing, and continuous improvement through citizen engagement and feedback to enhance overall safety and quality of life.
-
Supriya Aesthetic Dermatology
January 23, 2026
•
[ ransomware, healthcare ]
Supriya Aesthetic Dermatology was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-01-23. Sector: Healthcare. Country: United States of America. Website: supriyamd.com. Data size claimed by the group: 300 GB. Supriya Aesthetic Dermatology
-
KPMG
January 23, 2026
KPMG was listed as a victim on the leak site of the nova ransomware group; the attack is estimated to have taken place on 2026-01-23. Sector: Financial Services. Country: Indonesia. Website: amalgamated.co.id. KPMG is a professional services firms, providing innovative business solutions and audit, tax, and advisory services to many of the world's largest organizations. KPMG LLP North America is the independent U.S. member firm of KPMG International Cooperative. corp you have 10 days to contact and get in touch.
-
rlc.es
January 14, 2026
•
[ ransomware, technology ]
rlc.es was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-01-14. Sector: Technology. Country: Spain. Website: rlc.es. RLC Transportes (operating under Rau Load Cargo, S.L.) is a Spanish logistics and freight-transport company based in El Puig de
-
X-CD Technologies
January 23, 2026
•
[ ransomware, technology ]
X-CD Technologies was listed as a victim on the leak site of the killsec ransomware group; the attack is estimated to have taken place on 2026-01-23. Sector: Technology. Country: United States of America. Website: x-cd.com. Price ??? Disclosures 0/1
-
CarMax, Inc.
September 29, 2025
•
[ ransomware, retail ]
CarMax, Inc. was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2025-09-29. Sector: Retail & E-Commerce. Country: United States of America. Website: carmax.com. Size: 1.7 GB (compressed) | Records: 500k Records | Updated: 24 Jan 2026
-
****cr*nem*ds.c*m
January 24, 2026
•
[ ransomware, healthcare, leak ]
****cr*nem*ds.c*m was listed as a victim on the leak site of the devman ransomware group; the attack is estimated to have taken place on 2026-01-24. Sector: Healthcare. Country: Svalbard & Jan Mayen. Website: ****cr*nem*ds.c*m. Patient data, medical cards clinic records
-
Hilong Petroleum Pipe Company LLC
January 24, 2026
•
[ ransomware, energy ]
Hilong Petroleum Pipe Company LLC was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-01-24. Sector: Energy & Utilities. Country: China. Website: hilonguae.com. Data size claimed by the group: 10 GB. Hilong Petroleum Pipe Company LLC
-
Edmunds.com, Inc.
September 30, 2025
•
[ ransomware, technology ]
Edmunds.com, Inc. was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2025-09-30. Sector: Technology. Country: United States of America. Size: 12 GB (compressed) | Updated: 24 Jan 2026