Portend Breaches

USArt January 6, 2026 • [ ransomware, technology ] USArt was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-06. Sector: Technology. Country: United States of America. Website: www.usart.com.

Charles Leonard Steel Services January 6, 2026 • [ ransomware, manufacturing ] Charles Leonard Steel Services was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-01-06. Sector: Manufacturing. Country: United States of America. Website: charlesleonardsteelservices.com. Charles Leonard Steel Services

Hytec South Africa January 5, 2026 • [ ransomware, leak, manufacturing ] Hytec South Africa was listed as a victim on the leak site of the vect ransomware group; the attack is estimated to have taken place on 2026-01-05. Sector: Manufacturing. Country: South Africa. Website: hytec.com. Status: STATUS: NEGOTIATING | Sector: Engineering Solutions | All data exfiltrated including PII, employee information. | Deadline: 4d 15h

Apex Spine and Neurosurgery January 6, 2026 Apex Spine and Neurosurgery was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-01-06. Sector: Healthcare. Country: United States of America. Website: apexspineandneuro.com. Apex Spine and Neurosurgery specializes in the comprehensive neurosurgical treatment of spinal and cranial disorders. The team consists of neurosurgeons who offer treatment options, including minimally invasive spine surgery, tailored to the needs of their patients. They serve patients from across Georgia, particularly Atlanta, and emphasize a patient-centered approach. Their services cover a wide range of conditions, including back pain, brain tumors, and trauma.

Aero Fabrications January 6, 2026 • [ ransomware, manufacturing, leak ] Aero Fabrications was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-01-06. Sector: Manufacturing. Country: United States of America. Website: aerofabrications.co.uk. Aero Fabrications Ltd specializes in the manufacture of aerospace components, with over 30 years of experience. They partner with leading aerospace companies such as Airbus and BAE Systems. However, due to poor security and employee negligence, all data and databases were compromised and leaked publicly. This included customer, employee, and company data, as well as contracts and, most importantly, confidential drawings.

Complexul Energetic Oltenia January 6, 2026 • [ ransomware, energy ] Complexul Energetic Oltenia was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-01-06. Sector: Energy & Utilities. Country: Romania. Website: www.ceoltenia.ro. www.ceoltenia.ro https://www.ceoltenia.ro/en/despre/profil/date-financiare/ https://www.zoominfo.com/c/complexul-energetic-oltenia-sa/372669392 Complexul Energetic Oltenia is a Romanian energy company established on May 31, 2012, following the government's decision to reorganize the energy sector through the merger of several energy-producing companies. The company focuses on sustainable energy production and aims to ensure safety and professionalism in its operations. Its services include energy supply and commercialization, as well as investments in energy efficiency and development. The intended clients are diverse, including both residential and commercial sectors seeking reliable energy solutions.

Berkmann Wine Cellars January 6, 2026 • [ ransomware, retail, hack ] Berkmann Wine Cellars was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-06. Sector: Retail & E-Commerce. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.berkmann.co.uk.

Morgan Records Management January 6, 2026 Morgan Records Management was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-01-06. Sector: Professional Services. Country: United States of America. Website: morganrecordsmanagement.com. [AI generated] Morgan Records Management is a company specializing in secure document storage, data protection, and document destruction services. They offer solutions for digital transitions, including scanning services, and electronic content management systems. Their focus is on protecting client information, helping businesses save space, reduce risk, and manage data more efficiently. They operate both domestically and internationally.

Options December 31, 2025 Options was listed as a victim on the leak site of the lynx ransomware group; the attack is estimated to have taken place on 2025-12-31. Sector: Professional Services. Country: Canada. Website: options.com. Options Community Services Society is a company that operates in the Individual & Family Services industry. It employs 101-250 people and has $25M-$50M of revenue. The company is headquartered in Surrey, British Columbia, Canada

Hart February 19, 2025 • [ ransomware, retail, automotive ] Hart was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2025-02-19. Sector: Retail & E-Commerce. Country: Poland. https://hartphp.com.pl https://www.zoominfo.com/c/hart-sp-zoo/469629635 HART was founded in 1990 specialize in the wholesale of parts and accessories for passenger cars, vans and motorcycles, also offering workshop equipment and electric scooters. In addition to goods from renowned suppliers, HART also offers of equally high quality, including in particular private label products: HART, HART Premium, M.Line, e-HART, Presspower and Sigert. HART Sp. z o.o.

Systherm Grupa January 7, 2026 Systherm Grupa was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-01-07. Sector: Manufacturing. Country: Poland. Website: www.systherm.pl. https://www.systherm.pl https://www.emis.com/php/company-profile/PL/Systherm_Danuta_Gazinska_sp_j_en_3366600.html SYSTHERM Chodnictwo i Klimatyzacja sp SYSTHERM Technik sp SYSTHERM Danuta Gaziska sp. Export and import of components for refrigeration and air conditioning, publishing activities, installation and service of refrigeration and air conditioning equipment.

Wamtechnik January 7, 2026 Wamtechnik was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-01-07. Sector: Technology. Country: Poland. Website: www.wamtechnik.pl. www.wamtechnik.pl https://www.zoominfo.com/c/wamtechnik-ltd/398138337 Wamtechnik specializes in the production and distribution of batteries and accumulator packs, focusing on lithium-ion technology and other battery types for industrial applications. The company offers tailored battery solutions and professional consulting services for various sectors, including automotive, medical, and industrial electronics. With over 30 years of experience, Wamtechnik has established itself as a leading manufacturer in the battery systems industry, collaborating with global leaders like Panasonic and LG Chem. Their commitment to quality and safety ensures reliable power solutions for a wide range of devices.

Wilson Smith CochranDickerson January 7, 2026 • [ ransomware, leak, finance ] Wilson Smith CochranDickerson was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-01-07. Sector: Financial Services. Country: United States of America. Website: wscd.com. Wilson Smith Cochran Dickerson is a law firm specializing in tria l and appellate litigation, providing advocacy and advice for cli ents dealing with business and casualty disputes. We will upload 120gb of corporate data soon. We will upload numer ous files with personal information of clients, lots of court fil es, police reports, court hearings and other confidential legal f iles.

strategic-ts.com January 7, 2026 • [ ransomware, technology ] strategic-ts.com was listed as a victim on the leak site of the tengu ransomware group; the attack is estimated to have taken place on 2026-01-07. Sector: Technology. Country: United States of America. Website: strategic-ts.com. The website https://strategic-ts.com/ belongs to a small US-based IT and technology services companyand serves as the official website for a company called Strategic Technology, which operates in IT services and technical support. This information is based on company data available from professional databases.

Labeltex Group December 18, 2025 • [ ransomware, manufacturing, financial ] Labeltex Group was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-12-18. Sector: Manufacturing. Country: Hong Kong. Website: labeltexgroup.it. Labeltex Group Srl offers products made with certified raw materi als in a continuous process that looks to the future of the texti le industry and the planet. We will upload corporate data soon. Financial data, agreements an d other internal files.

RJS January 7, 2026 • [ ransomware, manufacturing, leak ] RJS was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-01-07. Sector: Manufacturing. RJS Corporation is a global supplier of equipment for the tire ma nufacturing industry, specializing in products such as tension co ntrollers, creel systems, and specialty tire equipment. We will upload corporate data soon. You will find detailed employ ee information (SSNs, passport numbers, DLs, addresses and so on) , financials, agreements with Goddyear, Bridgestone, Nokia, Yokoh ama, Michelin, Pirelli and so on, NDAs and other files.

RGD Consulting Engineers January 7, 2026 • [ ransomware, technology ] RGD Consulting Engineers was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-01-07. Sector: Professional Services. Country: Australia. Website: rgdengineers.com. RGD Consulting Engineers is a full-service engineering firm specializing in mechanical, electrical, plumbing, and structural design, based in Florida. RGD is focused on providing engineering solutions, exceptional customer service, and cost-effective systems. Serving a variety of markets throughout Florida, the United States, and the Caribbean, RGD collaborates closely with its clients.

Westlake Christian Academy January 7, 2026 • [ ransomware, leak, education ] Westlake Christian Academy was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-01-07. Sector: Education. Country: United States of America. Website: westlakechristianacademy.org. Westlake Christian Academy is a private Christian school located in Grayslake. Due to security issues, its database, including its entire student list and staff information, was made publicly available. The staff at this institution exhibits extreme indifference and inappropriate behavior toward its students and staff.

BUHLMANN GROUP December 3, 2025 • [ ransomware, manufacturing, financial ] BUHLMANN GROUP was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-12-03. Sector: Manufacturing. Country: Germany. Website: buhlmann-group.com. BUHLMANN GROUP is a premium trading company specializing in steel pipes, pipe fittings, and accessories, serving various industrie s including energy, chemicals, shipbuilding, and machine construc tion. We will upload more than 55gb of corporate data soon. Lots of dra wings and specifications, confidentiality agreements, employees p ersonal documents, project files, financials, contracts and agree ments, customers information and so on.

Commercial Paving January 7, 2026 • [ ransomware, manufacturing ] Commercial Paving was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-07. Sector: Manufacturing. Country: Canada. Website: www.commercialpaving.ca.

Recent Breaches