-
Colacem
January 17, 2026
•
[ ransomware, manufacturing ]
Colacem was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-17. Sector: Manufacturing. Country: Italy. Website: www.colacem.com.
-
UGS
January 17, 2026
•
[ ransomware, technology ]
UGS was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-17. Sector: Technology. Country: Singapore. Website: www.ugs.com.sg.
-
Ilumno
January 17, 2026
Ilumno was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-17. Sector: Education. Country: United States of America. Website: www.ilumno.com.
-
Laboratorios Smasac
January 17, 2026
•
[ ransomware, healthcare ]
Laboratorios Smasac was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-17. Sector: Healthcare. Country: Mexico. Website: www.smasac.com.
-
Central Roofing South Wales
January 17, 2026
•
[ ransomware, manufacturing ]
Central Roofing South Wales was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-17. Sector: Manufacturing. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.crsw.co.uk.
-
Fluorsid Spa
January 17, 2026
•
[ ransomware, manufacturing ]
Fluorsid Spa was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-17. Sector: Manufacturing. Country: Italy. Website: www.fluorsid.com.
-
em***int*-ho***.com
January 17, 2026
•
[ ransomware, leak ]
em***int*-ho***.com was listed as a victim on the leak site of the benzona ransomware group; the attack is estimated to have taken place on 2026-01-17. Website: em***int*-ho***.com. Ransom demand: $*.000. Data size claimed by the group: 80 GB.
-
ccbrt.org
January 17, 2026
•
[ ransomware, healthcare ]
ccbrt.org was listed as a victim on the leak site of the benzona ransomware group; the attack is estimated to have taken place on 2026-01-17. Sector: Healthcare. Country: Tanzania, United Republic of. Website: ccbrt.org. Ransom demand: $500.000. Data size claimed by the group: 1.8TB. [AI generated] Comprehensive Community Based Rehabilitation in Tanzania (CCBRT) is a healthcare organization that operates primarily in Tanzania. The organization aims to provide affordable, high-quality healthcare services to the local community, particularly those with disabilities. It focuses on areas like disability hospital services, rehabilitation, eye health, maternal and newborn healthcare. CCBRT is also known for its training and capacity building activities.
-
anfibius.net
January 17, 2026
•
[ ransomware, technology ]
anfibius.net was listed as a victim on the leak site of the tengu ransomware group; the attack is estimated to have taken place on 2026-01-17. Sector: Technology. Country: Spain. Website: anfibius.net. Anfibius is an Ecuadorian company specializing in providing software solutions and technology services for integrated business and project management.
-
Cary Pediatric Center
January 17, 2026
•
[ ransomware, healthcare ]
Cary Pediatric Center was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-17. Sector: Healthcare. Country: United States of America. Website: carypediatriccenter.com.
-
Orthopaedic Specialists of Massachusetts
January 17, 2026
Orthopaedic Specialists of Massachusetts was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-17. Sector: Healthcare. Country: United States of America. Website: www.orthomass.com.
-
Nafae Sanitaire S.a.r.l
January 17, 2026
•
[ ransomware, retail ]
Nafae Sanitaire S.a.r.l was listed as a victim on the leak site of the tengu ransomware group; the attack is estimated to have taken place on 2026-01-17. Sector: Professional Services. Country: Morocco. Website: nafaesanitaire.com. Nafae Sanitaire S.a.r.l A local company in Tangier Castilla district, specializing in plumbing and sanitary ware (sanitaire, plomberie, chauffage)
-
Avraham Hayyim ( Mehrdad Rahimi ) – Mossad Agent
January 18, 2026
•
[ ransomware, espionage, government ]
Avraham Hayyim ( Mehrdad Rahimi ) Mossad Agent was listed as a victim on the leak site of the handala ransomware group; the attack is estimated to have taken place on 2026-01-18. Avraham Hayyim ( Mehrdad Rahimi ) | (Guiding Officer of Iranian Agents in Mossads Iran Desk) Mehrdad Rahimi, serving as the guiding officer for Iranian agents within Mossads Iran Desk, attempted to play a major role in organizing and directing networks behind the unrest inside Iran. By managing and directing Iranian operatives, he sought to
-
MKC Customs Brokers International Inc.
January 18, 2026
•
[ ransomware, leak ]
MKC Customs Brokers International Inc. was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Transportation. Country: United States of America. Website: mkcchb.com. International trading has never been as complicated and demanding as it is today. Every shipment, large or small, requires a customs broker who is an absolutely dependable working partner. That's MKC Customs Brokers!
-
Southern Alberta Community Living Association
January 18, 2026
•
[ ransomware, government, healthcare ]
Southern Alberta Community Living Association was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Government & Defense. Country: Canada. Website: sacla.ca. SACLA provides individualized services and supports aimed at assisting individuals with disabilities to achieve their personal goals. Established in 1980, the association focuses on building vibrant communities where every person is connected, contributing, and valued. Their services are tailored to the unique needs of each individual, beginning with a comprehensive consultation to determine the best approach for fostering quality of life and aspirations. SACLA also engages in projects like MyCompass and CATALYST to promote empowerment and address issues such as unemployment for marginalized groups.
-
Balneario
January 18, 2026
•
[ ransomware, retail ]
Balneario was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Hospitality. Country: Spain. Website: www.balneario.com.
-
Vietnam Airlines
January 18, 2026
•
[ ransomware, leak ]
Vietnam Airlines was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Transportation. Country: Vietnam. Website: www.vietnamairlines.com.
-
University Volkswagen Mazda
January 18, 2026
•
[ ransomware, retail, automotive ]
University Volkswagen Mazda was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Retail & E-Commerce. Country: United States of America. Website: www.universityvwmazda.com.
-
Jampen Holzbau AG
January 18, 2026
•
[ ransomware, manufacturing ]
Jampen Holzbau AG was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Manufacturing. Country: Switzerland. Website: www.jampen-holzbau.ch.
-
Dreher Law Firm
January 18, 2026
Dreher Law Firm was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Professional Services. Country: United States of America. Website: www.dreherlawfirm.com.