-
WANCHI STEEL INDUSTRIAL
January 19, 2026
•
[ ransomware, manufacturing, leak ]
WANCHI STEEL INDUSTRIAL was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-01-19. Sector: Manufacturing. Country: Taiwan. Website: wanchi.com.tw. [AI generated] WANCHI STEEL INDUSTRIAL Co. Ltd. is a multinational company that specializes in steel manufacturing and distribution. The company has advanced production technology and equipment. They manufacture a variety of products including cold-rolled, hot-rolled, galvanized, and pre-painted galvanized steel. Their products are used widely in construction, automotive, appliance, and other industries. WANCHI STEEL INDUSTRIAL is known for its quality and commitment to innovation and sustainability.
-
GC Accounting
January 19, 2026
•
[ ransomware, finance ]
GC Accounting was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-01-19. Sector: Financial Services. Country: United Kingdom of Great Britain and Northern Ireland. Website: gcaccounting.co.uk.
-
ipu.co.il
December 29, 2025
•
[ ransomware, technology, manufacturing ]
ipu.co.il was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2025-12-29. Sector: Technology. Country: Israel. Website: ipu.co.il. IPU Industries Ltd. is a privately held Israeli industrial manufacturing company headquartered in Kiryat Gat, Israel, specialising in advanced plastic
-
wohnverbund-st-gertrud.de
January 19, 2026
•
[ ransomware, healthcare ]
wohnverbund-st-gertrud.de was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-01-19. Sector: Healthcare. Country: Germany. Website: wohnverbund-st-gertrud.de. Wohnverbund St. Gertrud is a German social care and residential support organisation located in Morsbach, North Rhine-Westphalia, Germany. It operates
-
abcseamless.com
January 19, 2026
abcseamless.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-01-19. Sector: Retail & E-Commerce. Country: United States of America. Website: abcseamless.com. ABC Seamless is a U.S.-based home improvement and exterior construction company that specialises in custom on-site manufactured seamless steel siding,
-
PAO HWA TRADING LTD
January 19, 2026
•
[ ransomware, manufacturing, automotive ]
PAO HWA TRADING LTD was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-01-19. Sector: Manufacturing. Country: Taiwan. Website: www.paohwa.com. https://www.paohwa.com/ PAO HWA TRADING CO., LTD is a leading Taiwanese importer and distributor of comprehensive cutting tools for industries including automotive, aerospace, electronics, and mold manufacturing. The company serves as a general agent for brands such as Japan's KYOCERA and a distributor for NACHI.
-
Geoplin
January 18, 2026
•
[ ransomware, energy ]
Geoplin was listed as a victim on the leak site of the sinobi ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Energy & Utilities. Country: Slovenia. Website: www.geoplin.com. Geoplin is a leading supplier of natural gas in Slovenia, providing reliable and flexible energy solutions since 1975. The company caters to a diverse clientele, including industries, commercial sectors, and residential customers, by offering a range of services such as energy optimization and industrial lighting. Geoplin is also focused on environmental responsibility, promoting natural gas as a cleaner energy source to support the transition to a low-carbon society. With operations extending into neighboring countries, Geoplin is committed to adapting its offerings to meet the individual needs of its customers.
-
Pivotal Healthcare
January 18, 2026
Pivotal Healthcare was listed as a victim on the leak site of the sinobi ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Healthcare. Country: United States of America. Website: www.pivotalhealthcare.com. Pivotal Healthcare is a company that operates in the Hospitals & Physicians Clinics industry. It employs 10to19 people and has 500Kto1M of revenue. The company is headquartered in the United States.
-
Talleyville Fire
January 18, 2026
•
[ ransomware, government ]
Talleyville Fire was listed as a victim on the leak site of the sinobi ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Government & Defense. Country: United States of America. Website: www.talleyvillefire.com. Talleyville Fire Company is dedicated to providing essential fire, ambulance, and rescue services to approximately 50,000 residents in New Castle County, Delaware. They rely on community support and donations to maintain their equipment and operations to effectively safeguard lives and property. The organization also promotes fire safety through educational programs and actively seeks volunteers to assist in their mission. Notable community events, such as fundraisers and public service activities, further highlight their commitment to the local community.
-
Kontena Nasional Berhad
January 20, 2026
•
[ ransomware, technology, manufacturing ]
Kontena Nasional Berhad was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-01-20. Sector: Transportation. Country: Malaysia. Website: www.kn.com.my. www.kn.com.my https://www.zoominfo.com/c/kontena-nasional-berhad/405980620 Kontena Nasional Berhad (KNB) is Malaysia's premier logistics company with over 50 years of experience in logistics operations, specializing in integrated solutions such as haulage, freight forwarding, and project logistics. The company offers a comprehensive range of services including transportation and distribution, customs brokerage, and cold chain solutions, catering to various industries across multiple regions. KNB is recognized for its commitment to providing tailored logistics solutions and real-time visibility of cargo movements. Its clientele includes businesses requiring efficient and reliable supply chain management, particularly in cross-border transportation within Southeast Asia.
-
San Carlo Gruppo Alimentare
January 20, 2026
•
[ ransomware, retail, manufacturing ]
San Carlo Gruppo Alimentare was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-01-20. Sector: Agriculture and Food Production. Country: Italy. Website: www.sancarlo.it. www.sancarlo.it https://www.zoominfo.com/c/san-carlo-gruppo-alimentare-spa/348425917 SAN CARLO is a renowned brand specializing in the production of high-quality snacks, particularly potato chips and other savory snacks. The company focuses on delivering exceptional taste and quality, appealing to a wide range of consumers who enjoy indulgent snack options. With a commitment to innovation and sustainability, SAN CARLO aims to meet the evolving preferences of its customers. Their products are widely available in various retail outlets, catering to both local and international markets.
-
TriApex US Laboratories
January 20, 2026
TriApex US Laboratories was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-01-20. Sector: Manufacturing. Country: United States of America. Website: tri-apex.com/info/news/headlines/596.html. Data size claimed by the group: 80 GB. TriApex US Laboratories
-
Altius Geotecnia y Obras Especiales
January 20, 2026
•
[ ransomware, manufacturing ]
Altius Geotecnia y Obras Especiales was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-20. Sector: Professional Services. Country: Spain. Website: www.altiusvertical.com.
-
Warning about the negotiator: All4you
January 20, 2026
Warning about the negotiator: All4you was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-01-20.
-
McDonalds India
January 20, 2026
•
[ ransomware, retail ]
McDonalds India was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-01-20. Sector: Hospitality. Country: India. Website: mcdindia.com. [AI generated] McDonalds India, a subsidiary of the global fast-food giant, McDonald's Corporation, operates in India through two business entities, Connaught Plaza Restaurants Pvt. Ltd for North & East India and Hardcastle Restaurants Pvt. Ltd for West & South India. The company has revolutionized the fast-food industry in India since its establishment in 1996 with its menu of burgers, fries, drinks, and localized food items. With their extensive reach, they've significantly influenced India's quick-service restaurant segment.
-
Virginia Records - Database leaked
January 20, 2026
•
[ ransomware, leak ]
Virginia Records - Database leaked was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-01-20. Sector: Other. Country: Bulgaria.
-
Sandberg
January 20, 2026
Sandberg was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-01-20. Sector: Technology. Country: United Kingdom of Great Britain and Northern Ireland. Website: sandberg.co.uk. Sandberg is an independent consultancy firm established in 1860, renowned for its expertise in materials testing, inspection, and consultancy services within the construction industry. The company offers a wide range of services including laboratory testing, site inspections, and quality assurance for various materials such as concrete, stone, and metals
Laek: 100GB
WE HAS COLLECTED SUCH DATA AS:
- Confidential documents
- Clients Data
- NDA
- Financial data
- Operations
- Corporate data
- Business Agreements
- Development
- Financial databases, all transactions, all clients
And a lot of other VERY IMPORTANT information!
-
MecMatica
January 20, 2026
•
[ ransomware, technology, manufacturing ]
MecMatica was listed as a victim on the leak site of the sarcoma ransomware group; the attack is estimated to have taken place on 2026-01-20. Sector: Technology. Country: Italy. Website: mecmatica.it. MecMatica is focused on developing software solutions for automating manufacturing processes, particularly in the field of industrial monitoring and management.Geo: Italy - Leak size: 74 GB - Contains: Files, SQL
-
www.coconutboard.gov.in
January 20, 2026
www.coconutboard.gov.in was listed as a victim on the leak site of the tengu ransomware group; the attack is estimated to have taken place on 2026-01-20. Sector: Government & Defense. Country: India. Website: www.coconutboard.gov.in. The Coconut Development Board (CDB) focuses on the promotion and development of coconut cultivation and processing in India. It offers a range of products including virgin coconut oil, desiccated coconut, and coconut milk, catering to both domestic and international markets. The board supports farmers and producer companies through various schemes and technology missions aimed at enhancing productivity and sustainability. Its intended clients include coconut farmers, producers, and consumers interested in coconut-based products.
-
veenkoloniaalmuseum.nl
December 16, 2025
•
[ ransomware, education ]
veenkoloniaalmuseum.nl was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2025-12-16. Sector: Education. Country: Netherlands. Website: veenkoloniaalmuseum.nl. Welcome to the Veenkoloniaal Museum The museum was founded in 1939 and has been housed in the forme...