-
s***om****x
February 24, 2026
•
[ ransomware, healthcare ]
s***om****x was listed as a victim on the leak site of the vect ransomware group; the attack is estimated to have taken place on 2026-02-24. Sector: Healthcare. Country: United States of America. Website: s***om****x.com. Status: STATUS: NEGOTIATING | Sector: Healthcare | PII data, clients medical records, and HIV tests | Deadline: 18d 7h
-
MB Contabilidade
February 24, 2026
•
[ ransomware, finance ]
MB Contabilidade was listed as a victim on the leak site of the vect ransomware group; the attack is estimated to have taken place on 2026-02-24. Sector: Professional Services. Country: Brazil. Website: mbcontabilidade.com.br. Status: STATUS: NEGOTIATING | Sector: accounting | Public/shared company directories (general, accounting I & II, HR, legal, indexes, systems, tokens)
Accounting system data and balance databases (multiple company instances)
Client/company... DATA SIZE: 121.03 GB | Deadline: 8d 4h
-
ApexHospitals
February 19, 2026
•
[ ransomware, healthcare, leak ]
ApexHospitals was listed as a victim on the leak site of the vect ransomware group; the attack is estimated to have taken place on 2026-02-19. Sector: Healthcare. Country: India. Website: apexhospitals.com. Status: STATUS: LEAKED | Sector: healthcare | Employee personally identifiable information (PII)
Payroll records and compensation data
Social Security numbers / national ID numbers
Complete patient medical records
Medical histories and clinic...
-
EnerTec
February 13, 2026
EnerTec was listed as a victim on the leak site of the vect ransomware group; the attack is estimated to have taken place on 2026-02-13. Sector: Manufacturing. Country: South Africa. Website: enertec.co.za. Status: STATUS: LEAKED | Sector: Manufacturing | Databases
Documents
Contracts
blueprints
and so on DATA SIZE: 151.79 GB
-
Mutualista Imbabura
February 13, 2026
•
[ ransomware, finance ]
Mutualista Imbabura was listed as a victim on the leak site of the vect ransomware group; the attack is estimated to have taken place on 2026-02-13. Sector: Financial Services. Country: Ecuador. Website: mutualistaimbabura.com. Status: STATUS: LEAKED | Sector: Finance | Customer financial records (loans, savings, balances)
Credit and loan portfolio data
Payroll and salary information
Employee personal data (PII)
National ID documents
Customer... DATA SIZE: 300GB
-
Was Madeiras
February 13, 2026
Was Madeiras was listed as a victim on the leak site of the vect ransomware group; the attack is estimated to have taken place on 2026-02-13. Sector: Manufacturing. Country: Brazil. Website: wasmadeiras.com.br. Status: STATUS: LEAKED | Sector: Manifacturer | Production control records
Daily production logs
Manufacturing scheduling data (multiple plants)
Assembly and mounting control records
Shipping and expedition records
Warehous... DATA SIZE: 151GB
-
Grupo VerdeAzul
February 13, 2026
•
[ ransomware, leak, finance ]
Grupo VerdeAzul was listed as a victim on the leak site of the vect ransomware group; the attack is estimated to have taken place on 2026-02-13. Sector: Financial Services. Country: Namibia. Website: Grupoverdeazul.com. Status: STATUS: LEAKED | Sector: asset management | Accounting and bookkeeping system data (Sage / Peachtree)
Company financial records and ledgers
Accounts payable and receivable data
Tax configuration and tax table files
Payro... DATA SIZE: 13.36 GB
-
Auvo
February 13, 2026
Auvo was listed as a victim on the leak site of the vect ransomware group; the attack is estimated to have taken place on 2026-02-13. Sector: Technology. Country: Brazil. Website: auvo.com. Status: STATUS: LEAKED | Sector: IT | Purchasing and procurement records
Supplier and vendor documentation
Purchase orders and order history
Quotations and pricing negotiations
Fabric and materials specificatio... DATA SIZE: 372.78 GB
-
Insight Hospital & Medical Center Chicago
September 2, 2025
•
[ ransomware, healthcare ]
Insight Hospital & Medical Center Chicago was listed as a victim on the leak site of the termite ransomware group; the attack is estimated to have taken place on 2025-09-02. Sector: Healthcare. Country: United States of America. Website: insightchicago.com. Founded in 1852 Mercy Hospital & Medical Center is a member of Trinity Health. They are a teaching hospital headquartered out of Chicago, Illinois
-
Triumph Group
February 24, 2026
•
[ ransomware, manufacturing, technology ]
Triumph Group was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-02-24. Sector: Manufacturing. Country: United States of America. Website: triumphgroup.com. [AI generated] Triumph Group is an international company specializing in manufacturing and repairing aerospace structures, systems, and components. Their work encompasses commercial, regional, business and military aircraft, as well as their components. Triumph Group has a robust supply chain providing services globally, significantly enhancing the performance of the aerospace industry.
-
Symeta
February 24, 2026
•
[ ransomware, technology ]
Symeta was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-02-24. Sector: Technology. Country: Belgium. Website: symeta.com. [AI generated] Symeta is a Belgian company specializing in marketing communication solutions. They provide personalized and relevant communication services to various industries. Their offerings include data-driven marketing, hybrid publishing and printing. The companys innovative solutions help businesses to improve customer engagement through personalization.
-
primaria ungheni
February 25, 2026
•
[ ransomware, education, government ]
primaria ungheni was listed as a victim on the leak site of the killsec ransomware group; the attack is estimated to have taken place on 2026-02-25. Sector: Education. Country: Romania. Website: primaria-ungheni.ro. Price ??? Disclosures 0/1
-
Birmingham Museum of Art
February 24, 2026
•
[ ransomware, education ]
Birmingham Museum of Art was listed as a victim on the leak site of the termite ransomware group; the attack is estimated to have taken place on 2026-02-24. Sector: Education. Country: United States of America. Website: www.artsbma.org. The Birmingham Museum of Art in Alabama features a vast collection of over 27,000 artworks and offers free admission to visitors. The museum is open from Tuesday to Sunday and hosts various exhibitions and events throughout the year. It serves a diverse audience, including families, students, and art enthusiasts, providing educational resources and opportunities for engagement.
-
Tricolor Holdings
February 25, 2026
•
[ ransomware, finance ]
Tricolor Holdings was listed as a victim on the leak site of the kittykatkrew ransomware group; the attack is estimated to have taken place on 2026-02-25. Sector: Financial Services. Country: United States of America. Website: tricolor.com. Mission-driven auto lender expanding access to affordable vehicle ownership nationwide. Deadline: 2026-03-03T00:00:00+00:00 Status: Awaiting Contact
-
Vera, spool. s.r.o.
February 6, 2026
•
[ ransomware, manufacturing ]
Vera, spool. s.r.o. was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-02-06. Sector: Manufacturing. Country: Czechia. Website: www.vera.cz.
-
OFFICINE FRATELLI AMADORI snc
February 3, 2026
•
[ ransomware, manufacturing ]
OFFICINE FRATELLI AMADORI snc was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-02-03. Sector: Agriculture and Food Production. Country: Italy. Website: www.officineamadori.com.
-
Clalit: Israel’s Largest Healthcare Organization Falls to Cyber Resistance
February 25, 2026
•
[ ransomware, healthcare ]
Clalit: Israels Largest Healthcare Organization Falls to Cyber Resistance was listed as a victim on the leak site of the handala ransomware group; the attack is estimated to have taken place on 2026-02-25. Sector: Healthcare. Country: Israel. Clalit Security Breach: Israels Largest Healthcare Organization Falls to Cyber Resistance In the name of justice, We, the soldiers of the resistance front, have delivered a devastating blow to the core of the Zionist regimes healthcare system. In the cyber operation Justice for the Oppressed, the vast network of Clalit, Israels largest health fund and
-
Nathalin Group
February 25, 2026
Nathalin Group was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-02-25. Sector: Energy & Utilities. Country: Thailand. Website: nathalin.com. nathalin.com zoominfo.com/c/nathalin-group-co-ltd/353727230 Nathalin Group was founded on 21st July 1987 formerly known as "Buawaree Company Limited" and had been changed to "Nathalin Co.,Ltd in September the same year. We are widely recognized as one of the largest independent operator of petroleum and chemicals tanker in Thailand. We provide various marine services to fulfill our customers need; Logistics and Storing, International Maritime, Floating Storage and Trading and Service. We have succeed in encouraging our crew to operate under international standard that we obtained ISM Code Certificate by Lloyd's register of shipping (LR), ISO 9001:2000 by SGS and participated in Tanker Management and Self-Assessment (TMSA) program, which has been verified by major oils
-
Silvestres
February 25, 2026
•
[ ransomware, retail ]
Silvestres was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-02-25. Sector: Agriculture and Food Production. Country: United States of America. Website: silvestres.com. silvestres.com zoominfo.com/c/silvestres-sa/359809243 Silvestres Flowers has been dedicated to growing and sharing Colombian feelings through high-quality fresh cut flowers since 1988. With an annual production of nearly 85,000 stems, they have created over 1,160 jobs focused on the processes of cultivation, marketing, and distribution. Their intended clients include global customers who appreciate authentic floral experiences. They are recognized for their excellence in flower quality and commitment to sustainable practices
-
Boutique Harley-Davidson
February 25, 2026
•
[ ransomware, retail ]
Boutique Harley-Davidson was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-02-25. Sector: Retail & E-Commerce. Country: France. Website: boutique-hd-nantes.fr. boutique-hd-nantes.fr zoominfo.com/c/boutique-harley-davidson-nantes/1342023331 Boutique Harley-Davidson Nantes offers a wide range of official Harley-Davidson products including clothing, accessories, helmets, and e-bikes. The store caters to the entire family with options for men, women, and children, featuring technical gear and sportswear. Customers can also find unique items such as jewelry, home decor, and collectibles. With services like secure payment and free delivery on purchases over 100 euros, the boutique aims to provide a comprehensive shopping experience for Harley-Davidson enthusiasts
