Recent Breaches
-
January 17, 2026 • Laboratorios Smasac was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-17. Sector: Healthcare. Country: Mexico. Website: www.smasac.com.
-
January 17, 2026 • Central Roofing South Wales was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-17. Sector: Manufacturing. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.crsw.co.uk.
-
January 17, 2026 • Fluorsid Spa was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-17. Sector: Manufacturing. Country: Italy. Website: www.fluorsid.com.
-
January 17, 2026 • em***int*-ho***.com was listed as a victim on the leak site of the benzona ransomware group; the attack is estimated to have taken place on 2026-01-17. Website: em***int*-ho***.com. Ransom demand: $*.000. Data size claimed by the group: 80 GB.
-
January 17, 2026 • ccbrt.org was listed as a victim on the leak site of the benzona ransomware group; the attack is estimated to have taken place on 2026-01-17. Sector: Healthcare. Country: Tanzania, United Republic of. Website: ccbrt.org. Ransom demand: $500.000. Data size claimed by the group: 1.8TB. [AI generated] Comprehensive Community Based Rehabilitation in Tanzania (CCBRT) is a healthcare organization that operates primarily in Tanzania. The organization aims to provide affordable, high-quality healthcare services to the local community, particularly those with disabilities. It focuses on areas like disability hospital services, rehabilitation, eye health, maternal and newborn healthcare. CCBRT is also known for its training and capacity building activities.
-
January 17, 2026 • anfibius.net was listed as a victim on the leak site of the tengu ransomware group; the attack is estimated to have taken place on 2026-01-17. Sector: Technology. Country: Spain. Website: anfibius.net. Anfibius is an Ecuadorian company specializing in providing software solutions and technology services for integrated business and project management.
-
January 17, 2026 • Cary Pediatric Center was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-17. Sector: Healthcare. Country: United States of America. Website: carypediatriccenter.com.
-
January 17, 2026 Orthopaedic Specialists of Massachusetts was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-17. Sector: Healthcare. Country: United States of America. Website: www.orthomass.com.
-
January 17, 2026 • Nafae Sanitaire S.a.r.l was listed as a victim on the leak site of the tengu ransomware group; the attack is estimated to have taken place on 2026-01-17. Sector: Professional Services. Country: Morocco. Website: nafaesanitaire.com. Nafae Sanitaire S.a.r.l A local company in Tangier Castilla district, specializing in plumbing and sanitary ware (sanitaire, plomberie, chauffage)
-
January 18, 2026 • Avraham Hayyim ( Mehrdad Rahimi ) Mossad Agent was listed as a victim on the leak site of the handala ransomware group; the attack is estimated to have taken place on 2026-01-18. Avraham Hayyim ( Mehrdad Rahimi ) | (Guiding Officer of Iranian Agents in Mossads Iran Desk) Mehrdad Rahimi, serving as the guiding officer for Iranian agents within Mossads Iran Desk, attempted to play a major role in organizing and directing networks behind the unrest inside Iran. By managing and directing Iranian operatives, he sought to
-
January 18, 2026 • MKC Customs Brokers International Inc. was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Transportation. Country: United States of America. Website: mkcchb.com. International trading has never been as complicated and demanding as it is today. Every shipment, large or small, requires a customs broker who is an absolutely dependable working partner. That's MKC Customs Brokers!
-
January 18, 2026 • Southern Alberta Community Living Association was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Government & Defense. Country: Canada. Website: sacla.ca. SACLA provides individualized services and supports aimed at assisting individuals with disabilities to achieve their personal goals. Established in 1980, the association focuses on building vibrant communities where every person is connected, contributing, and valued. Their services are tailored to the unique needs of each individual, beginning with a comprehensive consultation to determine the best approach for fostering quality of life and aspirations. SACLA also engages in projects like MyCompass and CATALYST to promote empowerment and address issues such as unemployment for marginalized groups.
-
January 18, 2026 • Balneario was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Hospitality. Country: Spain. Website: www.balneario.com.
-
January 18, 2026 • Vietnam Airlines was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Transportation. Country: Vietnam. Website: www.vietnamairlines.com.
-
January 18, 2026 • University Volkswagen Mazda was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Retail & E-Commerce. Country: United States of America. Website: www.universityvwmazda.com.
-
January 18, 2026 • Jampen Holzbau AG was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Manufacturing. Country: Switzerland. Website: www.jampen-holzbau.ch.
-
January 18, 2026 Dreher Law Firm was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Professional Services. Country: United States of America. Website: www.dreherlawfirm.com.
-
January 18, 2026 • GSM PORTAL TEKNOLOJ HZMETLER TC. LTD. T was listed as a victim on the leak site of the tengu ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Technology. Country: Turkey. Website: gsmportal.com.tr. This is a small to medium-sized Turkish company officially registered in Istanbul, operating in the GSM telecommunications technology and technical services sector. It has complete official documentation but is not very active digitally
-
January 18, 2026 Galutti Automotive Industria Metalurgica Ltda was listed as a victim on the leak site of the sinobi ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Manufacturing. Country: Brazil. Website: galutti.com.br. Galutti Automotive, established in 1988, specializes in the production of wire artifacts such as support rods, comfort screens, springs, tubes, welding, and stamping. With over 35 years in the market, it has become a leading manufacturer in South America, producing automotive components for both two and four-wheeled vehicles, as well as products for white and yellow line machinery. The company focuses on quality and sustainability, holding ISO 14001:2015 certification to ensure environmentally friendly practices. Galutti serves diverse sectors by offering a wide range of automotive parts including seat covers, headrests, and various metallic and spring components.
-
January 18, 2026 • Title Guaranty was listed as a victim on the leak site of the sinobi ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Financial Services. Country: United States of America. Website: www.titleguaranty.com. Title Guaranty Company of Lewis County is a locally owned title escrow provider located in Chehalis, Washington, servicing clients across the entire state. They offer comprehensive title and real estate settlement services tailored for realtors, consumers, lenders, builders, and commercial clients. The company emphasizes integrity and local knowledge, ensuring personal attention and outstanding service for each transaction. Their mission is to simplify the closing process, making significant transactions easier for their clients.