-
Dos
February 24, 2026
•
[ ransomware, manufacturing ]
Dos was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-02-24. Sector: Manufacturing. Country: Thailand. Website: dos.co.th. dos.co.th thammasorn.co.th zoominfo.com/c/dos-corp/448308416 DOS Life specializes in water management solutions, offering a range of products including water storage tanks, wastewater treatment systems, and various water-related equipment. Their services cater to both residential and industrial clients, focusing on enhancing water quality and environmental sustainability. The company is committed to providing high-quality products and expert guidance, ensuring customer satisfaction and adherence to international standards. DOS Life aims to meet the diverse needs of its clients while promoting a better quality of life through effective water management
-
El IBR
February 24, 2026
El IBR was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-02-24. Sector: Agriculture and Food Production. Country: Spain. Website: ibr-conicet.gov.ar. ibr-conicet.gov.ar zoominfo.com/c/el-ibr/547000244 IBR is a leading research institute with over 240 professionals specializing in microbiology, biomedicine, structural biology, and agrobiotechnology. It offers cutting-edge technology and access to advanced infrastructure for researchers, companies, and organizations globally. The institute promotes scientific knowledge generation and its transfer to the production sector while encouraging innovation through startups led by researchers. IBR also provides opportunities for doctoral and postdoctoral training to advance careers in scientific research
-
Industrias Iberia
February 24, 2026
•
[ ransomware, manufacturing ]
Industrias Iberia was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-02-24. Sector: Manufacturing. Country: Spain. Website: industriasiberia.com. industriasiberia.com zoominfo.com/c/industrias-iberia/371428987 Industrias Iberia is a food production company that takes food safety seriously. They work hard to make sure every food product they create and sell meets the highest safety standards. From processing to packaging, the team checks each step to protect consumers and deliver top-quality food items. Based in Venezuela, they supply local markets with safe, reliable food products that families can trust
-
Smartbytes
February 24, 2026
Smartbytes was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-02-24. Sector: Technology. Country: India. Website: smartbytes.com.pa. smartbytes.com.pa Smartbytes is a dynamic technology partner that brings passion and customer care to every project. With a young, curious team that thinks differently, we help businesses grow by solving complex tech challenges. Our approach is simple: we listen, we understand, and we create custom solutions that make a real difference
-
OKJ Group
February 24, 2026
•
[ ransomware, retail, hack ]
OKJ Group was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-02-24. Sector: Retail & E-Commerce. Country: Finland. Website: okjgroup.com. okjgroup.com OKJ Group is the online identity of Pluk Phak Praw Rak Mae Public Company Limited, a Thai public company based in Chiang Mai that operates a chain of healthy food restaurants and cafes . The company is best known for its "Oh Ka Jhu" brand, offering a variety of health-conscious meals, salads, juices, and bakery items, and is also involved in cultivating organic produce . Founded in 2014, the company went public on the Stock Exchange of Thailand (ticker: OKJ) in October 2024 . They operate through multiple channels including full-service restaurants, delivery kitchens, kiosks, and supermarkets
-
MUST Informatique
February 24, 2026
•
[ ransomware, technology, healthcare ]
MUST Informatique was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-02-24. Sector: Technology. Country: Switzerland. Website: mustinformatique.com. mustinformatique.com MUST INFORMATIQUE is a French software publisher founded in 1990 and based in Couzeix, France . The company specializes in creating digital solutions for Home Healthcare Providers (PSAD), focusing on areas like home care, respiratory assistance, orthopedics, and infusion therapy . For nearly 31 years, it has been a key player in its sector, offering software that helps manage patient data, ensure regulatory compliance, and digitize organizational processes for healthcare professionals . In 2024, the company, which generates around 10 million in annual revenue, was acquired by Orisha, a European software publisher, to create a comprehensive digital ecosystem for the home healthcare industry .
-
Ruamjai
February 24, 2026
Ruamjai was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-02-24. Sector: Healthcare. Country: Thailand. Website: ruamjaimedical.co.th. ruamjaimedical.co.th Ruamjairak Hospital is a modern 144-bed private hospital located in the Sukhumvit area of Bangkok, Thailand . It was established as a comprehensive medical facility with a significant investment and features specialized centers, including a fertility center partnered with the world-leading group GENEA, as well as advanced dental and neuroscience centers . The hospital focuses on providing premium healthcare services to the local community, offering everything from advanced treatments like IVF and MRI brain scans to routine health check-ups and wellness promotions
-
Boltech
February 24, 2026
•
[ ransomware, manufacturing, technology ]
Boltech was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-02-24. Sector: Manufacturing. Country: Poland. Website: boltech.pl. [AI generated] Boltech is a company that provides services for industrial automation and electrical installations. In addition, Boltech offers a range of electrical and energy solutions to various sectors including aviation, automotive, and logistics. The company prides itself on providing innovative solutions by using the latest technology to ensure efficient and sustainable results for their clients.
-
Westwing Home & Living
February 24, 2026
•
[ ransomware, retail, technology ]
Westwing Home & Living was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-02-24. Sector: Retail & E-Commerce. Country: Germany. Website: westwing.de. [AI generated] Westwing Home & Living is a European e-commerce company, headquartered in Munich, Germany. It offers an extensive collection of furnishings and home dcor. Westwing operates on a membership model, offering interior design inspiration, lifestyle articles, and select sales on home essentials. The company operates in 11 European countries, providing a curated, hand-picked selection of brands and products across various price points.
-
A large bank in Asia
February 24, 2026
•
[ ransomware, finance ]
A large bank in Asia was listed as a victim on the leak site of the atomsilo ransomware group; the attack is estimated to have taken place on 2026-02-24. Sector: Financial Services. Website: bank.com. [AI generated] A large bank in Asia refers to a financial institution that provides diversified services like deposits, loans, wealth management to individual and corporate clients. Being large-scale, they generally operate across several countries in the Asia region, often having a significant market share. This also involves operating digital banking services, given the widespread internet usage. Their influence in the finance sector can affect regional economic stability.
-
Pappytech
February 24, 2026
•
[ ransomware, retail, financial ]
Pappytech was listed as a victim on the leak site of the vect ransomware group; the attack is estimated to have taken place on 2026-02-24. Sector: Retail & E-Commerce. Country: India. Website: Pappytech.com. Status: STATUS: NEGOTIATING | Sector: retail | Main accounting software data directories (multiple financial years)
Company-wise accounting datasets (separate numeric company instances)
Archived accounting backups (ZIP and RAR files, mu... DATA SIZE: 22.82 GB | Deadline: 18d 7h
-
pay***
February 24, 2026
•
[ ransomware, finance ]
pay*** was listed as a victim on the leak site of the vect ransomware group; the attack is estimated to have taken place on 2026-02-24. Sector: Financial Services. Country: Egypt. Website: pay***.com. Status: STATUS: NEGOTIATING | Sector: Finance | Deadline: 18d 19h
-
for******a****ng
February 24, 2026
•
[ ransomware, finance ]
for******a****ng was listed as a victim on the leak site of the vect ransomware group; the attack is estimated to have taken place on 2026-02-24. Sector: Financial Services. Country: United States of America. Website: for******a****ng.com. Status: STATUS: NEGOTIATING | Sector: Finance | Deadline: 18d 7h
-
***wire
February 24, 2026
•
[ ransomware, finance, technology ]
***wire was listed as a victim on the leak site of the vect ransomware group; the attack is estimated to have taken place on 2026-02-24. Sector: Professional Services. Country: United States of America. Website: ***wire.com. Status: STATUS: NEGOTIATING | Sector: LAW | Deadline: 18d 7h
-
****360.com
February 24, 2026
•
[ ransomware, healthcare ]
****360.com was listed as a victim on the leak site of the vect ransomware group; the attack is estimated to have taken place on 2026-02-24. Sector: Healthcare. Country: United States of America. Website: *****360.com. Status: STATUS: NEGOTIATING | Sector: healthcare logistics | Deadline: 18d 7h
-
a*f***a
February 24, 2026
•
[ ransomware, healthcare ]
a*f***a was listed as a victim on the leak site of the vect ransomware group; the attack is estimated to have taken place on 2026-02-24. Sector: Healthcare. Website: a*f***a.care. Status: STATUS: NEGOTIATING | Sector: Healthcare | client records, documents and so on | Deadline: 18d 19h
-
s***om****x
February 24, 2026
•
[ ransomware, healthcare ]
s***om****x was listed as a victim on the leak site of the vect ransomware group; the attack is estimated to have taken place on 2026-02-24. Sector: Healthcare. Country: United States of America. Website: s***om****x.com. Status: STATUS: NEGOTIATING | Sector: Healthcare | PII data, clients medical records, and HIV tests | Deadline: 18d 7h
-
MB Contabilidade
February 24, 2026
•
[ ransomware, finance ]
MB Contabilidade was listed as a victim on the leak site of the vect ransomware group; the attack is estimated to have taken place on 2026-02-24. Sector: Professional Services. Country: Brazil. Website: mbcontabilidade.com.br. Status: STATUS: NEGOTIATING | Sector: accounting | Public/shared company directories (general, accounting I & II, HR, legal, indexes, systems, tokens)
Accounting system data and balance databases (multiple company instances)
Client/company... DATA SIZE: 121.03 GB | Deadline: 8d 4h
-
ApexHospitals
February 19, 2026
•
[ ransomware, healthcare, leak ]
ApexHospitals was listed as a victim on the leak site of the vect ransomware group; the attack is estimated to have taken place on 2026-02-19. Sector: Healthcare. Country: India. Website: apexhospitals.com. Status: STATUS: LEAKED | Sector: healthcare | Employee personally identifiable information (PII)
Payroll records and compensation data
Social Security numbers / national ID numbers
Complete patient medical records
Medical histories and clinic...
-
EnerTec
February 13, 2026
EnerTec was listed as a victim on the leak site of the vect ransomware group; the attack is estimated to have taken place on 2026-02-13. Sector: Manufacturing. Country: South Africa. Website: enertec.co.za. Status: STATUS: LEAKED | Sector: Manufacturing | Databases
Documents
Contracts
blueprints
and so on DATA SIZE: 151.79 GB