-
Skibiel Law
February 18, 2026
•
[ ransomware, leak ]
Skibiel Law was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-02-18. Sector: Professional Services. Country: United States of America. Website: skibiellaw.com. Georgia Work Injury And Personal Injury Lawyers
-
Aegis Project Controls
January 26, 2026
Aegis Project Controls was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-01-26. Sector: Professional Services. Country: United States of America. Website: www.consultaegis.com. Aegis Project Controls is a construction company providing 4d scheduling, training, and construction scheduling services.
214GB of files, projects, and documents that threaten US national security. These include projects on military-critical facilities (Space Fence, Nitrocellulose Facility, etc.), biosecurity laboratories (USAMRIID), critical infrastructure facilities, and others. We know you didn't contact the FBI after the attack on your infrastructure, but now the FBI will come to you. We advise you to contact us immediately; your IT department knows how. You have 15 days before this data is made public.
Dear David J. Hatwell (+1 269-673-8962, +1 360-918-3187, +1 240-331-0437), we promise you public shame and the destruction of your company if you don't pay. Time has begun.
-
Whipflip
February 21, 2026
•
[ ransomware, technology ]
Whipflip was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-02-21. Country: United States of America. Website: www.whipflip.com.
-
[Suspended] #2036
February 21, 2026
[Suspended] #2036 was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-02-21. Sector: Technology. Country: United States of America. We have suspended this notification since we have doubt about the claim
-
hicare
February 21, 2026
•
[ ransomware, healthcare ]
hicare was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-02-21. Sector: Healthcare. Country: United States of America. Website: www.hicare.net.
-
PriceTable
February 21, 2026
•
[ ransomware, technology ]
PriceTable was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-02-21. Sector: Technology. Country: United States of America. Website: pricetable.io.
-
www.pyramisgroup.com
February 28, 2026
www.pyramisgroup.com was listed as a victim on the leak site of the alphalocker ransomware group; the attack is estimated to have taken place on 2026-02-28. Sector: Financial Services. Country: Greece. Website: www.pyramisgroup.com. PYRAMIS METALLOURGIA S.A. PYRAMIS is the only producer of household electrical appliances in Greece, and at the same time, a Global Champion with presence in more than 85 countries and exports exceeding 97% of its production.
-
Hicare.net Inc
February 21, 2026
•
[ ransomware, technology ]
Hicare.net Inc was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-02-21. Sector: Technology. Country: United States of America. Website: www.hicare.net.
-
Unibros Shipping
February 28, 2026
•
[ ransomware, leak ]
Unibros Shipping was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-02-28. Sector: Transportation. Country: Greece. Website: www.unibros.gr.
-
Schmuck Welt
February 28, 2026
•
[ ransomware, retail ]
Schmuck Welt was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-02-28. Sector: Retail & E-Commerce. Country: Germany. Website: www.schmuck-welt.com.
-
North Andover Country Club
February 28, 2026
•
[ ransomware, retail ]
North Andover Country Club was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-02-28. Sector: Hospitality. Country: United States of America. Website: www.northandovercc.com.
-
Pro-Plastics
February 28, 2026
•
[ ransomware, manufacturing ]
Pro-Plastics was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-02-28. Sector: Manufacturing. Country: United States of America. Website: www.proplastics.com.
-
Barnes & Jones
December 27, 2025
•
[ ransomware, manufacturing ]
Barnes & Jones was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2025-12-27. Sector: Manufacturing. Country: United States of America. Website: www.barnesandjones.com. Barnes & Jones was founded before the turn of the century by two engineers: Walter Barnes, a graduate of The Massachusetts Institute of Technology, and Bill Jones, a graduate of The Worcester Polytechnic Institute. Around 1897, the two joined forces to design and layout two-pipe steam heating systems for new commercial construction projects throughout Boston, New York City and Chicago. By applying their engineering expertise, the partners built a strong reputation for designing quiet, trouble free and efficient steam heating systems. Because most steam traps of the day were inherently inefficient and problematic, Barnes and Jones focused their talents to develop a more efficient and reliable steam trap. In 1902, Barnes & Jones introduced their first line of balanced-pressured thermostatic steam traps to improve overall system performance.
-
Supreme Group
January 2, 2026
•
[ ransomware, technology ]
Supreme Group was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-02. Sector: Other. Country: Taiwan. Website: www.supreme.com.tw.
-
Sugawara Laboratories
January 2, 2026
•
[ ransomware, technology ]
Sugawara Laboratories was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-02. Sector: Technology. Country: Japan. Website: www.sugawara-labs.co.jp.
-
Csv Group
January 2, 2026
•
[ ransomware, manufacturing ]
Csv Group was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-02. Sector: Manufacturing. Country: Italy. Website: www.csvgroup.it.
-
SINBON Electronics Co., Ltd
January 2, 2026
SINBON Electronics Co., Ltd was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-01-02. Sector: Technology. Country: Taiwan. Website: sinbon.com. SINBON Electronics, a leading Taiwanese maker of electronic components that partners with firms such as ASML Holding N.V. and trades under the ticker3023.TW, posted a notice on the Taiwan Stock Exchange about a cyber-attack on its network. The statement claimed an unknown group carried out the attack, that it was quickly detected and blocked, that a specialized organization would successfully decrypt the files, and that no data were taken. In fact, none of that is accurate. The breach was not anonymous. We always disclose that we performed the intrusion and include our contact information. Its well known that no one can decrypt what we encrypt without our assistance. Any claim to the contrary has resulted in multi-billion-dollar losses for those who believed it. The incident was not resolved quickly. It unfolded over several weeks and impacted both the headquarters and the U.S. subsidiary. During our operation we exfiltrated a massive volume of company data, including executive-level information. We have now assembled a package of roughly650,000files for publication. The collection contains, as usual, financial and accounting records, reports, client data, and personal information. It also includes documentation of the collaboration with ASML Holding N.V., production records, and detailed evidence of product defects and the companys financial condition. It appears the IT staff tried to conceal the scale of the breach from senior management and regulators to limit personal repercussions. That decision forced us to go public with the incident and its magnitude. We have already sent our contact details to the executives email addresses. Please use those details to reach out to us so we can discuss how to keep the data from being released while your company continues to grow and thrive. (The list of files prepared now isnt final. If needed, we can expand it considerably by adding mail files and other data.)
-
Stoughton Steel
December 26, 2025
•
[ ransomware, manufacturing ]
Stoughton Steel was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2025-12-26. Sector: Manufacturing. Country: United States of America. Website: www.stoughtonsteel.com. United States
-
Rockport Technology Group
December 26, 2025
Rockport Technology Group was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2025-12-26. Sector: Technology. Country: United States of America. Website: www.rockporttech.com. United States
-
Benise-Dowling & Associates
December 18, 2025
•
[ ransomware, technology ]
Benise-Dowling & Associates was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2025-12-18. Sector: Professional Services. Country: United States of America. Website: www.benise-dowling.com. United States