-
Avraham Hayyim ( Mehrdad Rahimi ) – Mossad Agent
January 18, 2026
•
[ ransomware, espionage, government ]
Avraham Hayyim ( Mehrdad Rahimi ) Mossad Agent was listed as a victim on the leak site of the handala ransomware group; the attack is estimated to have taken place on 2026-01-18. Avraham Hayyim ( Mehrdad Rahimi ) | (Guiding Officer of Iranian Agents in Mossads Iran Desk) Mehrdad Rahimi, serving as the guiding officer for Iranian agents within Mossads Iran Desk, attempted to play a major role in organizing and directing networks behind the unrest inside Iran. By managing and directing Iranian operatives, he sought to
-
MKC Customs Brokers International Inc.
January 18, 2026
•
[ ransomware, leak ]
MKC Customs Brokers International Inc. was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Transportation. Country: United States of America. Website: mkcchb.com. International trading has never been as complicated and demanding as it is today. Every shipment, large or small, requires a customs broker who is an absolutely dependable working partner. That's MKC Customs Brokers!
-
Southern Alberta Community Living Association
January 18, 2026
•
[ ransomware, government, healthcare ]
Southern Alberta Community Living Association was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Government & Defense. Country: Canada. Website: sacla.ca. SACLA provides individualized services and supports aimed at assisting individuals with disabilities to achieve their personal goals. Established in 1980, the association focuses on building vibrant communities where every person is connected, contributing, and valued. Their services are tailored to the unique needs of each individual, beginning with a comprehensive consultation to determine the best approach for fostering quality of life and aspirations. SACLA also engages in projects like MyCompass and CATALYST to promote empowerment and address issues such as unemployment for marginalized groups.
-
Balneario
January 18, 2026
•
[ ransomware, retail ]
Balneario was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Hospitality. Country: Spain. Website: www.balneario.com.
-
Vietnam Airlines
January 18, 2026
•
[ ransomware, leak ]
Vietnam Airlines was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Transportation. Country: Vietnam. Website: www.vietnamairlines.com.
-
University Volkswagen Mazda
January 18, 2026
•
[ ransomware, retail, automotive ]
University Volkswagen Mazda was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Retail & E-Commerce. Country: United States of America. Website: www.universityvwmazda.com.
-
Jampen Holzbau AG
January 18, 2026
•
[ ransomware, manufacturing ]
Jampen Holzbau AG was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Manufacturing. Country: Switzerland. Website: www.jampen-holzbau.ch.
-
Dreher Law Firm
January 18, 2026
Dreher Law Firm was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Professional Services. Country: United States of America. Website: www.dreherlawfirm.com.
-
GSM PORTAL TEKNOLOJİ HİZMETLERİ TİC. LTD. ŞTİ
January 18, 2026
•
[ ransomware, technology ]
GSM PORTAL TEKNOLOJ HZMETLER TC. LTD. T was listed as a victim on the leak site of the tengu ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Technology. Country: Turkey. Website: gsmportal.com.tr. This is a small to medium-sized Turkish company officially registered in Istanbul, operating in the GSM telecommunications technology and technical services sector. It has complete official documentation but is not very active digitally
-
Galutti Automotive Industria Metalurgica Ltda
January 18, 2026
Galutti Automotive Industria Metalurgica Ltda was listed as a victim on the leak site of the sinobi ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Manufacturing. Country: Brazil. Website: galutti.com.br. Galutti Automotive, established in 1988, specializes in the production of wire artifacts such as support rods, comfort screens, springs, tubes, welding, and stamping. With over 35 years in the market, it has become a leading manufacturer in South America, producing automotive components for both two and four-wheeled vehicles, as well as products for white and yellow line machinery. The company focuses on quality and sustainability, holding ISO 14001:2015 certification to ensure environmentally friendly practices. Galutti serves diverse sectors by offering a wide range of automotive parts including seat covers, headrests, and various metallic and spring components.
-
Title Guaranty
January 18, 2026
•
[ ransomware, finance ]
Title Guaranty was listed as a victim on the leak site of the sinobi ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Financial Services. Country: United States of America. Website: www.titleguaranty.com. Title Guaranty Company of Lewis County is a locally owned title escrow provider located in Chehalis, Washington, servicing clients across the entire state. They offer comprehensive title and real estate settlement services tailored for realtors, consumers, lenders, builders, and commercial clients. The company emphasizes integrity and local knowledge, ensuring personal attention and outstanding service for each transaction. Their mission is to simplify the closing process, making significant transactions easier for their clients.
-
Office for Students
January 18, 2026
•
[ ransomware, education ]
Office for Students was listed as a victim on the leak site of the sinobi ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Education. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.officeforstudents.org.uk. he Office for Students (OfS) aims to ensure that all students have a rewarding experience in higher education that enhances their personal and professional lives. It provides resources and guidance on quality assessment, financial sustainability, and student welfare while promoting equal opportunities and student choice. The OfS collaborates with educational institutions to improve standards and support systems in the sector. Their focus includes the well-being of students, financial support, and the overall academic landscape in England.
-
Bikkal & Associates (sblawyers)
January 18, 2026
Bikkal & Associates (sblawyers) was listed as a victim on the leak site of the sinobi ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Professional Services. Country: United States of America. Website: sblawyers.com. Bikkal & Associates, P.C. is a full-service immigration law firm based in New York, specializing in immigration and nationality law for individuals, families, and employers. With over 40 years of experience, the firm provides comprehensive assistance with various immigration matters, including employment-based immigration, naturalization, and family-based immigration. They are dedicated to protecting the rights of immigrants and offer personalized legal guidance to navigate complex immigration processes. The firm serves clients in New York, the tri-state area, and nationwide.
-
Advanced Business Equipment
January 18, 2026
•
[ ransomware, technology ]
Advanced Business Equipment was listed as a victim on the leak site of the sinobi ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Technology. Country: United States of America. Website: www.advancedbusinessequipment.com. Advanced UK is one of four trusted Xerox Platinum Partners and established for over a quarter of a century (since 1991). We pride ourselves with focusing on reliable customer service, entwined with the ability to identify and deliver the best managed-print service, production printing and digital transformation solutions for our clients every need. We also work in collaboration with leading technology and software providers to further enhance our value proposition and operate with a vendor-neutral approach. Advanced UK serves a large customer base which varies from small organisations through to large international corporates. We are accredited to sell the entire range of Xerox products and services, and we are an experienced provider of managed-print and document services. In line with industry trends, Advanced UK are experts at bespoke software solutions for all print and document management processes.
-
QFloors
January 18, 2026
•
[ ransomware, technology ]
QFloors was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Technology. Country: United States of America. Website: qfloors.com. A flooring software provider.
-
Mid-park Ink
January 18, 2026
•
[ ransomware, retail ]
Mid-park Ink was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Retail & E-Commerce. Country: United States of America. Website: mid-park.com. A construction holding from Kentucky.
-
Thunder Mountain Harley-Davidson
January 18, 2026
•
[ ransomware, retail ]
Thunder Mountain Harley-Davidson was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Retail & E-Commerce. Country: United States of America. Website: thundermountainharley.com. A Harley-Davidson dealership
-
Ocean Fish
January 14, 2026
•
[ ransomware, retail ]
Ocean Fish was listed as a victim on the leak site of the lynx ransomware group; the attack is estimated to have taken place on 2026-01-14. Sector: Agriculture and Food Production. Country: Romania. Website: www.oceanfish.com. OceanFish is a leading company in Romania since 1998, specializing in the import, processing, and distribution of fish products. Their offerings include fresh, frozen, prepared seafood, sushi, and canned products, catering primarily to the HORECA sector. The company is committed to high standards and certifications, participating in social projects and promoting their products through various campaigns. OceanFish also runs a 'Seafood School' to educate clients about seafood preparation and benefits.
-
National Waste Associates
January 18, 2026
National Waste Associates was listed as a victim on the leak site of the sinobi ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Professional Services. Country: United States of America. Website: www.nationalwasteassociates.com. National Waste Associates (NWA) is a family-owned waste management consultant that specializes in providing tailored commercial and industrial recycling solutions. They serve various industries including construction, healthcare, retail, and hospitality, by optimizing waste management plans and significantly reducing costs for organizations with multiple locations across the U.S. and Canada. With a focus on sustainability, NWA has been recognized for diverting over 90% of waste from landfills and provides ongoing gap analyses and customized reporting for their clients. Their extensive database of hauler relationships allows them to pair clients with the best vendors for their specific waste management needs.
-
Avalon Hills
January 18, 2026
Avalon Hills was listed as a victim on the leak site of the sinobi ransomware group; the attack is estimated to have taken place on 2026-01-18. Country: United States of America. Website: avalonhills.org. The Avalon Hills business staff work behind the scenes to help manage all aspects of the program. They route calls, assist with travel plans for clients and families, track all things financial, keep all of the technical machines purring and whatever else it takes to keep a busy program in business! The financial office and utilization review team partners with families to help them access and maximize their insurance benefits. This requires the dedication of families to expand the financial resources available to them for treatment. We help those struggling with an eating disorder recover through a combination of the best, tried-and-true traditional psychotherapies and applied neuroscience, including the latest discoveries about human brain plasticity. Prior to arriving at Avalon Hills, our 21 year-old daughter struggled with a life-threatening eating disorder for over 4 years.