-
for******a****ng
February 24, 2026
•
[ ransomware, finance ]
for******a****ng was listed as a victim on the leak site of the vect ransomware group; the attack is estimated to have taken place on 2026-02-24. Sector: Financial Services. Country: United States of America. Website: for******a****ng.com. Status: STATUS: NEGOTIATING | Sector: Finance | Deadline: 18d 7h
-
***wire
February 24, 2026
•
[ ransomware, finance, technology ]
***wire was listed as a victim on the leak site of the vect ransomware group; the attack is estimated to have taken place on 2026-02-24. Sector: Professional Services. Country: United States of America. Website: ***wire.com. Status: STATUS: NEGOTIATING | Sector: LAW | Deadline: 18d 7h
-
****360.com
February 24, 2026
•
[ ransomware, healthcare ]
****360.com was listed as a victim on the leak site of the vect ransomware group; the attack is estimated to have taken place on 2026-02-24. Sector: Healthcare. Country: United States of America. Website: *****360.com. Status: STATUS: NEGOTIATING | Sector: healthcare logistics | Deadline: 18d 7h
-
a*f***a
February 24, 2026
•
[ ransomware, healthcare ]
a*f***a was listed as a victim on the leak site of the vect ransomware group; the attack is estimated to have taken place on 2026-02-24. Sector: Healthcare. Website: a*f***a.care. Status: STATUS: NEGOTIATING | Sector: Healthcare | client records, documents and so on | Deadline: 18d 19h
-
s***om****x
February 24, 2026
•
[ ransomware, healthcare ]
s***om****x was listed as a victim on the leak site of the vect ransomware group; the attack is estimated to have taken place on 2026-02-24. Sector: Healthcare. Country: United States of America. Website: s***om****x.com. Status: STATUS: NEGOTIATING | Sector: Healthcare | PII data, clients medical records, and HIV tests | Deadline: 18d 7h
-
MB Contabilidade
February 24, 2026
•
[ ransomware, finance ]
MB Contabilidade was listed as a victim on the leak site of the vect ransomware group; the attack is estimated to have taken place on 2026-02-24. Sector: Professional Services. Country: Brazil. Website: mbcontabilidade.com.br. Status: STATUS: NEGOTIATING | Sector: accounting | Public/shared company directories (general, accounting I & II, HR, legal, indexes, systems, tokens)
Accounting system data and balance databases (multiple company instances)
Client/company... DATA SIZE: 121.03 GB | Deadline: 8d 4h
-
ApexHospitals
February 19, 2026
•
[ ransomware, healthcare, leak ]
ApexHospitals was listed as a victim on the leak site of the vect ransomware group; the attack is estimated to have taken place on 2026-02-19. Sector: Healthcare. Country: India. Website: apexhospitals.com. Status: STATUS: LEAKED | Sector: healthcare | Employee personally identifiable information (PII)
Payroll records and compensation data
Social Security numbers / national ID numbers
Complete patient medical records
Medical histories and clinic...
-
EnerTec
February 13, 2026
EnerTec was listed as a victim on the leak site of the vect ransomware group; the attack is estimated to have taken place on 2026-02-13. Sector: Manufacturing. Country: South Africa. Website: enertec.co.za. Status: STATUS: LEAKED | Sector: Manufacturing | Databases
Documents
Contracts
blueprints
and so on DATA SIZE: 151.79 GB
-
Mutualista Imbabura
February 13, 2026
•
[ ransomware, finance ]
Mutualista Imbabura was listed as a victim on the leak site of the vect ransomware group; the attack is estimated to have taken place on 2026-02-13. Sector: Financial Services. Country: Ecuador. Website: mutualistaimbabura.com. Status: STATUS: LEAKED | Sector: Finance | Customer financial records (loans, savings, balances)
Credit and loan portfolio data
Payroll and salary information
Employee personal data (PII)
National ID documents
Customer... DATA SIZE: 300GB
-
Was Madeiras
February 13, 2026
Was Madeiras was listed as a victim on the leak site of the vect ransomware group; the attack is estimated to have taken place on 2026-02-13. Sector: Manufacturing. Country: Brazil. Website: wasmadeiras.com.br. Status: STATUS: LEAKED | Sector: Manifacturer | Production control records
Daily production logs
Manufacturing scheduling data (multiple plants)
Assembly and mounting control records
Shipping and expedition records
Warehous... DATA SIZE: 151GB
-
Grupo VerdeAzul
February 13, 2026
•
[ ransomware, leak, finance ]
Grupo VerdeAzul was listed as a victim on the leak site of the vect ransomware group; the attack is estimated to have taken place on 2026-02-13. Sector: Financial Services. Country: Namibia. Website: Grupoverdeazul.com. Status: STATUS: LEAKED | Sector: asset management | Accounting and bookkeeping system data (Sage / Peachtree)
Company financial records and ledgers
Accounts payable and receivable data
Tax configuration and tax table files
Payro... DATA SIZE: 13.36 GB
-
Auvo
February 13, 2026
Auvo was listed as a victim on the leak site of the vect ransomware group; the attack is estimated to have taken place on 2026-02-13. Sector: Technology. Country: Brazil. Website: auvo.com. Status: STATUS: LEAKED | Sector: IT | Purchasing and procurement records
Supplier and vendor documentation
Purchase orders and order history
Quotations and pricing negotiations
Fabric and materials specificatio... DATA SIZE: 372.78 GB
-
Insight Hospital & Medical Center Chicago
September 2, 2025
•
[ ransomware, healthcare ]
Insight Hospital & Medical Center Chicago was listed as a victim on the leak site of the termite ransomware group; the attack is estimated to have taken place on 2025-09-02. Sector: Healthcare. Country: United States of America. Website: insightchicago.com. Founded in 1852 Mercy Hospital & Medical Center is a member of Trinity Health. They are a teaching hospital headquartered out of Chicago, Illinois
-
Triumph Group
February 24, 2026
•
[ ransomware, manufacturing, technology ]
Triumph Group was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-02-24. Sector: Manufacturing. Country: United States of America. Website: triumphgroup.com. [AI generated] Triumph Group is an international company specializing in manufacturing and repairing aerospace structures, systems, and components. Their work encompasses commercial, regional, business and military aircraft, as well as their components. Triumph Group has a robust supply chain providing services globally, significantly enhancing the performance of the aerospace industry.
-
Symeta
February 24, 2026
•
[ ransomware, technology ]
Symeta was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-02-24. Sector: Technology. Country: Belgium. Website: symeta.com. [AI generated] Symeta is a Belgian company specializing in marketing communication solutions. They provide personalized and relevant communication services to various industries. Their offerings include data-driven marketing, hybrid publishing and printing. The companys innovative solutions help businesses to improve customer engagement through personalization.
-
primaria ungheni
February 25, 2026
•
[ ransomware, education, government ]
primaria ungheni was listed as a victim on the leak site of the killsec ransomware group; the attack is estimated to have taken place on 2026-02-25. Sector: Education. Country: Romania. Website: primaria-ungheni.ro. Price ??? Disclosures 0/1
-
Birmingham Museum of Art
February 24, 2026
•
[ ransomware, education ]
Birmingham Museum of Art was listed as a victim on the leak site of the termite ransomware group; the attack is estimated to have taken place on 2026-02-24. Sector: Education. Country: United States of America. Website: www.artsbma.org. The Birmingham Museum of Art in Alabama features a vast collection of over 27,000 artworks and offers free admission to visitors. The museum is open from Tuesday to Sunday and hosts various exhibitions and events throughout the year. It serves a diverse audience, including families, students, and art enthusiasts, providing educational resources and opportunities for engagement.
-
Tricolor Holdings
February 25, 2026
•
[ ransomware, finance ]
Tricolor Holdings was listed as a victim on the leak site of the kittykatkrew ransomware group; the attack is estimated to have taken place on 2026-02-25. Sector: Financial Services. Country: United States of America. Website: tricolor.com. Mission-driven auto lender expanding access to affordable vehicle ownership nationwide. Deadline: 2026-03-03T00:00:00+00:00 Status: Awaiting Contact
-
Vera, spool. s.r.o.
February 6, 2026
•
[ ransomware, manufacturing ]
Vera, spool. s.r.o. was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-02-06. Sector: Manufacturing. Country: Czechia. Website: www.vera.cz.
-
OFFICINE FRATELLI AMADORI snc
February 3, 2026
•
[ ransomware, manufacturing ]
OFFICINE FRATELLI AMADORI snc was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-02-03. Sector: Agriculture and Food Production. Country: Italy. Website: www.officineamadori.com.
