-
Csv Group
January 2, 2026
•
[ ransomware, manufacturing ]
Csv Group was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-02. Sector: Manufacturing. Country: Italy. Website: www.csvgroup.it.
-
SINBON Electronics Co., Ltd
January 2, 2026
SINBON Electronics Co., Ltd was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-01-02. Sector: Technology. Country: Taiwan. Website: sinbon.com. SINBON Electronics, a leading Taiwanese maker of electronic components that partners with firms such as ASML Holding N.V. and trades under the ticker3023.TW, posted a notice on the Taiwan Stock Exchange about a cyber-attack on its network. The statement claimed an unknown group carried out the attack, that it was quickly detected and blocked, that a specialized organization would successfully decrypt the files, and that no data were taken. In fact, none of that is accurate. The breach was not anonymous. We always disclose that we performed the intrusion and include our contact information. Its well known that no one can decrypt what we encrypt without our assistance. Any claim to the contrary has resulted in multi-billion-dollar losses for those who believed it. The incident was not resolved quickly. It unfolded over several weeks and impacted both the headquarters and the U.S. subsidiary. During our operation we exfiltrated a massive volume of company data, including executive-level information. We have now assembled a package of roughly650,000files for publication. The collection contains, as usual, financial and accounting records, reports, client data, and personal information. It also includes documentation of the collaboration with ASML Holding N.V., production records, and detailed evidence of product defects and the companys financial condition. It appears the IT staff tried to conceal the scale of the breach from senior management and regulators to limit personal repercussions. That decision forced us to go public with the incident and its magnitude. We have already sent our contact details to the executives email addresses. Please use those details to reach out to us so we can discuss how to keep the data from being released while your company continues to grow and thrive. (The list of files prepared now isnt final. If needed, we can expand it considerably by adding mail files and other data.)
-
Stoughton Steel
December 26, 2025
•
[ ransomware, manufacturing ]
Stoughton Steel was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2025-12-26. Sector: Manufacturing. Country: United States of America. Website: www.stoughtonsteel.com. United States
-
Rockport Technology Group
December 26, 2025
Rockport Technology Group was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2025-12-26. Sector: Technology. Country: United States of America. Website: www.rockporttech.com. United States
-
Benise-Dowling & Associates
December 18, 2025
•
[ ransomware, technology ]
Benise-Dowling & Associates was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2025-12-18. Sector: Professional Services. Country: United States of America. Website: www.benise-dowling.com. United States
-
Pewarchuk CPA
December 26, 2025
•
[ ransomware, finance ]
Pewarchuk CPA was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2025-12-26. Sector: Financial Services. Country: Canada. Website: www.pewarchukcpa.com. Canada
-
Garner Foods
January 2, 2026
•
[ ransomware, leak, manufacturing ]
Garner Foods was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-01-02. Sector: Agriculture and Food Production. Country: United States of America. Website: www.garnerfoods.com. United States
-
Wardell Builders
December 26, 2025
•
[ ransomware, manufacturing ]
Wardell Builders was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2025-12-26. Sector: Manufacturing. Country: United States of America. Website: www.wardellbuilders.com. United States
-
Lakeside Title Company
December 29, 2025
•
[ ransomware, finance ]
Lakeside Title Company was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2025-12-29. Sector: Financial Services. Country: United States of America. Website: www.lakesidetitle.com. United States
-
сj Global
January 2, 2026
•
[ ransomware, retail, hack ]
j Global was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-02. Sector: Retail & E-Commerce. Country: United States of America. Website: www.shopcjglobal.com.
-
NECO Equipment
January 2, 2026
•
[ ransomware, manufacturing ]
NECO Equipment was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-02. Sector: Manufacturing. Country: Taiwan. Website: www.necoequipment.com.
-
Röben Tonbaustoffe
January 2, 2026
•
[ ransomware, manufacturing ]
Rben Tonbaustoffe was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-02. Sector: Manufacturing. Country: Germany. Website: www.roeben.com/de.
-
McKenzie SewOn
January 2, 2026
•
[ ransomware, leak, manufacturing ]
McKenzie SewOn was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-02. Sector: Manufacturing. Country: United States of America. Website: www.mcsewon.com.
-
mdm®NT
January 2, 2026
•
[ ransomware, technology ]
mdmNT was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-02. Sector: Technology. Country: Poland. Website: www.mdmnt.com.
-
Sai Oral SurgeryOral
January 2, 2026
•
[ ransomware, healthcare ]
Sai Oral SurgeryOral was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-02. Sector: Healthcare. Country: United States of America. Website: www.saioralsurgery.com.
-
Jing Cheng Enterprise Co., Ltd.
January 2, 2026
•
[ ransomware, manufacturing ]
Jing Cheng Enterprise Co., Ltd. was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-02. Sector: Manufacturing. Country: Taiwan. Website: www.jcec.com.tw.
-
Farmacia San Pablo
January 2, 2026
•
[ ransomware, healthcare ]
Farmacia San Pablo was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-02. Sector: Healthcare. Country: Mexico. Website: www.farmaciasanpablo.com.mx.
-
Ellison Educational Equipment
December 24, 2025
•
[ ransomware, education ]
Ellison Educational Equipment was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-12-24. Sector: Education. Country: United States of America. Website: www.ellisoneducation.com.
-
UBS Office
January 2, 2026
UBS Office was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-01-02. Sector: Financial Services. Country: Switzerland. Website: ubsoffice.com. United Business Systems specializes in simplifying the management of hardcopy and digital documents for various industries, with a strong focus on education. Their offerings include printers, copiers, print management, document management, and cloud printing solutions, all designed to enhance efficiency and security. UBS is recognized for its commitment to service excellence, providing reliable support and technology solutions tailored to client needs. The company emphasizes sustainability and cost savings, making it a preferred partner for organizations looking to optimize their document workflows.
-
Handala Alert: Amplifying the Voice of Resistance
January 2, 2026
Handala Alert: Amplifying the Voice of Resistance was listed as a victim on the leak site of the handala ransomware group; the attack is estimated to have taken place on 2026-01-02. Sector: Other. Country: Palestine, State of. Official Statement from Handala Peoples Resistance Front of Truth-Seekers (HPR) on the Launch of Handala Alert We are proud to announce that the Handala Peoples Resistance Front of Truth-Seekers (HPR), in line with expanding its range of activities and responding to the growing needs of freedom movements, has launched a new division called Handala Alert.