-
Nations Financial Group Inc
January 23, 2026
•
[ ransomware, finance ]
Nations Financial Group Inc was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-01-23. Sector: Financial Services. Country: United States of America. Website: nationsfg.com. Above all else, Nations is committed to providing the highest level of support and assistance to its f
-
Two River Group Holdings LLC
January 26, 2026
•
[ ransomware, finance, technology ]
Two River Group Holdings LLC was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-01-26. Sector: Financial Services. Country: United States of America. Website: tworiver.com. Two River specializes in founding, building, and incubating companies in the life sciences sector that
-
US.MAD DOG CONSTRUCTION
February 10, 2026
•
[ ransomware, manufacturing ]
US.MAD DOG CONSTRUCTION was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-02-10. Sector: Manufacturing. Country: United States of America. Website: morethanbuildings.com.
-
Plaza Home Mortgage
February 27, 2026
•
[ ransomware, finance ]
Plaza Home Mortgage was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-02-27. Sector: Financial Services. Country: United States of America. Website: plazahomemortgage.com. Founded in 2000, Plaza Home Mortgage offers conventional fixed-rate, conventional ARM, FHA, and VA loa
-
Rockwood Retirement Communities
February 26, 2026
•
[ ransomware, healthcare ]
Rockwood Retirement Communities was listed as a victim on the leak site of the kairos ransomware group; the attack is estimated to have taken place on 2026-02-26. Sector: Retail & E-Commerce. Country: United States of America. Website: rockwoodretirement.org. With more than 65 years of mission-driven nonprofit service and two thriving Life Plan communities in Spokane, Washington, Rockwood Retirement is the recognized leader in senior living in the Inland Northwest. Our vision is simple: to create caring retirement communities that enrich the lives of seniors, every day.
-
Insight Hospital and Medical Center Chicago
September 2, 2025
•
[ ransomware, healthcare ]
Insight Hospital and Medical Center Chicago was listed as a victim on the leak site of the termite ransomware group; the attack is estimated to have taken place on 2025-09-02. Sector: Healthcare. Country: United States of America. Website: insightchicago.com. Founded in 1852 Mercy Hospital and Medical Center is a member of Trinity Health. They are a teaching hospital headquartered out of Chicago, Illinois.
-
UD Trucks
February 28, 2026
•
[ ransomware, manufacturing, technology ]
UD Trucks was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-02-28. Sector: Manufacturing. Country: Japan. Website: udtrucks.co.jp. [AI generated] UD Trucks is a Japan-based company that designs, manufactures, and distributes transport solutions ranging from heavy-duty to medium-duty trucks. It is well-recognized for its reliable and high-quality products. Originally founded in 1935 as Nihon Diesel Industries, it was acquired by Volvo in 2007. UD Trucks operates globally with a primary focus on Asia and Africa.
-
keliweb
February 28, 2026
keliweb was listed as a victim on the leak site of the vect ransomware group; the attack is estimated to have taken place on 2026-02-28. Sector: Technology. Country: Italy. Website: keliweb.it. Status: STATUS: NEGOTIATING | Sector: IT | DATA SIZE: 200GB | Deadline: 28d 7h
-
Casas del Mediterraneo
February 28, 2026
Casas del Mediterraneo was listed as a victim on the leak site of the vect ransomware group; the attack is estimated to have taken place on 2026-02-28. Sector: Hospitality. Country: Spain. Website: casasdelmediterraneo.com. Status: STATUS: NEGOTIATING | Sector: Real Estate | DATA SIZE: 200GB | Deadline: 29d 7h
-
jdaas
February 28, 2026
•
[ ransomware, technology, financial ]
jdaas was listed as a victim on the leak site of the vect ransomware group; the attack is estimated to have taken place on 2026-02-28. Sector: Technology. Country: India. Website: jdaas.com. Status: STATUS: NEGOTIATING | Sector: IT | backups, source codes, financial records, and so on DATA SIZE: 600GB | Deadline: 20d 7h
-
SK-Telecom - Data reuploaded
February 28, 2026
•
[ ransomware, technology ]
SK-Telecom - Data reuploaded was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-02-28. Sector: Technology. Country: South Korea. Website: sktelecom.com. [AI generated] SK Telecom is a leading South Korean wireless telecommunication services provider. It covers a vast range of services including mobile phone services, broadband Internet services, and digital media services. The company is renowned for its advancements in 5G, AI, IoT and autonomous vehicle technology. It is a key player in developing and setting standards for these technologies worldwide.
-
J.R. Martin & Associates
February 18, 2026
•
[ ransomware, finance ]
J.R. Martin & Associates was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-02-18. Sector: Financial Services. Country: United States of America. Website: jrmartincpa.com. A High Quality, Comprehensive Accounting & Tax Service
-
Skibiel Law
February 18, 2026
•
[ ransomware, leak ]
Skibiel Law was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-02-18. Sector: Professional Services. Country: United States of America. Website: skibiellaw.com. Georgia Work Injury And Personal Injury Lawyers
-
Aegis Project Controls
January 26, 2026
Aegis Project Controls was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-01-26. Sector: Professional Services. Country: United States of America. Website: www.consultaegis.com. Aegis Project Controls is a construction company providing 4d scheduling, training, and construction scheduling services.
214GB of files, projects, and documents that threaten US national security. These include projects on military-critical facilities (Space Fence, Nitrocellulose Facility, etc.), biosecurity laboratories (USAMRIID), critical infrastructure facilities, and others. We know you didn't contact the FBI after the attack on your infrastructure, but now the FBI will come to you. We advise you to contact us immediately; your IT department knows how. You have 15 days before this data is made public.
Dear David J. Hatwell (+1 269-673-8962, +1 360-918-3187, +1 240-331-0437), we promise you public shame and the destruction of your company if you don't pay. Time has begun.
-
Whipflip
February 21, 2026
•
[ ransomware, technology ]
Whipflip was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-02-21. Country: United States of America. Website: www.whipflip.com.
-
[Suspended] #2036
February 21, 2026
[Suspended] #2036 was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-02-21. Sector: Technology. Country: United States of America. We have suspended this notification since we have doubt about the claim
-
hicare
February 21, 2026
•
[ ransomware, healthcare ]
hicare was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-02-21. Sector: Healthcare. Country: United States of America. Website: www.hicare.net.
-
PriceTable
February 21, 2026
•
[ ransomware, technology ]
PriceTable was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-02-21. Sector: Technology. Country: United States of America. Website: pricetable.io.
-
www.pyramisgroup.com
February 28, 2026
www.pyramisgroup.com was listed as a victim on the leak site of the alphalocker ransomware group; the attack is estimated to have taken place on 2026-02-28. Sector: Financial Services. Country: Greece. Website: www.pyramisgroup.com. PYRAMIS METALLOURGIA S.A. PYRAMIS is the only producer of household electrical appliances in Greece, and at the same time, a Global Champion with presence in more than 85 countries and exports exceeding 97% of its production.
-
Hicare.net Inc
February 21, 2026
•
[ ransomware, technology ]
Hicare.net Inc was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-02-21. Sector: Technology. Country: United States of America. Website: www.hicare.net.