-
renovagy.com
February 11, 2026
•
[ ransomware, technology ]
renovagy.com was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-02-11. Sector: Technology. Country: Germany. Website: renovagy.com. Renovagy provides business services. Contact them directly for more information about their offering...
-
cmcconstruct.com
February 11, 2026
•
[ ransomware, manufacturing ]
cmcconstruct.com was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-02-11. Sector: Manufacturing. Country: Romania. Website: cmcconstruct.com. Chamberlain & McCreery is a general contractor specializing in the construction of custom, energy-ef...
-
sands.mu
January 13, 2026
•
[ ransomware, retail ]
sands.mu was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-01-13. Sector: Hospitality. Country: Mauritius. Website: sands.mu. Sands Suites Resort & Spa is a tranquil beachfront boutique hotel in Mauritius that offers luxury ac...
-
hanover-ma.gov
January 21, 2026
•
[ ransomware, government ]
hanover-ma.gov was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-01-21. Sector: Government & Defense. Country: United States of America. Website: hanover-ma.gov. The mission of the Hanover Police Department is to prevent crime, but instead of doing their job, th...
-
cs.at
January 25, 2026
cs.at was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-01-25. Sector: Technology. Country: Austria. Website: cs.at. CS Pflege & Betreuung Die CS Caritas Socialis bietet Pflege- und Betreuungsangebote aus einer Hand:...
-
Northeast Pharmacy Service
February 14, 2026
•
[ ransomware, healthcare, financial ]
Northeast Pharmacy Service was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-02-14. Sector: Healthcare. Country: United States of America. Website: northeastpharmacy.com. Northeast Pharmacy Service Corporation (NPSC) is dedicated to sup
porting independent community pharmacies by providing business de
velopment services, individualized support, and strategic advocac
y. They offer a range of concierge-level services, including acce
ss to dedicated pharmacy consultants, educational resources, and
industry insights to help pharmacies thrive.
We are going to upload company data soon. You will find financial
data (audit, invoices,financial reports), personal files and cus
tomers data.
-
MESA Products
February 13, 2026
•
[ ransomware, manufacturing ]
MESA Products was listed as a victim on the leak site of the medusa ransomware group; the attack is estimated to have taken place on 2026-02-13. Sector: Manufacturing. Country: United States of America. Website: mesaproducts.com. Ransom demand: 800000. MESA Products is a U.S.-based industrial company that supplies cathodic protection materials and corrosion control solutions. The company focuses on preventing rust and structural damage in critical infrastructure such as pipelines and underground metal systems. Its product range includes test stations, connection kits, and monitoring equipment used to measure and maintain corrosion-protection systems. MESA emphasizes safety, reliable manufacturing, and high on-time delivery performance while supporting engineers, utilities, and construction sectors. The companys mission is to protect people, property, and the environment by extending the life and reliability of essential infrastructure through quality protective technologies and technical support services.
The company headquarters is located in 4445 S 74th East Ave, Tulsa, Oklahoma 74145, United States.
201-500 Employees
-
Grandview Family Medicine
February 8, 2026
•
[ ransomware, healthcare ]
Grandview Family Medicine was listed as a victim on the leak site of the medusa ransomware group; the attack is estimated to have taken place on 2026-02-08. Sector: Healthcare. Country: United States of America. Website: grandviewfamilymedicine.com. Ransom demand: 100000. Grandview Family Medicine is a healthcare provider offering a range of services including family medicine, obstetrics, women's health, men's health, and pediatrics. They operate clinics in Provo and Cedar Hills and provide both in-person and telehealth appointments for their patients. The clinic emphasizes comprehensive care, addressing chronic disease management, mental health, urgent visits, and minor procedures. Their intended clients include families and individuals seeking quality healthcare across various age groups.
The company headquarters is located in 1900 North State Street Provo, Utah 84604 United States.
11-50 Employees
-
Comune di Battipaglia
February 2, 2026
•
[ ransomware, government ]
Comune di Battipaglia was listed as a victim on the leak site of the medusa ransomware group; the attack is estimated to have taken place on 2026-02-02. Sector: Government & Defense. Country: Italy. Website: battipaglia.sa.it. Ransom demand: 100000. The Comune di Battipaglia is the official municipal government of Battipaglia, a town in the Province of Salerno in the Campania region of southern Italy. As the local public administration, it oversees civic services, urban planning, public records, community programs, and administrative functions for the towns residents, known as Battipagliesi. The municipality is led by a mayor and council, and its offices are based in Piazza Aldo Moro. Battipaglia is historically an agricultural and industrial centre, famous for its buffalo mozzarella and rich cultural traditions. The Comunes website provides access to local services, news, governance information, and contact details for citizens and visitors.
The company headquarters is located in Piazza Aldo Moro, 84091 Battipaglia (SA), Italia.
30 Employees
-
South Hays Fire Department
January 29, 2026
•
[ ransomware, government ]
South Hays Fire Department was listed as a victim on the leak site of the medusa ransomware group; the attack is estimated to have taken place on 2026-01-29. Sector: Government & Defense. Country: United States of America. Website: southhaysfire.com. Ransom demand: 100000. Hays County Emergency Services District 3 provides essential fire prevention and emergency services to the South Hays County area. The district focuses on recruiting full-time firefighters and is dedicated to community safety and preparedness. In addition to emergency response, the district promotes public knowledge on fire safety and outdoor burning regulations. Their commitment to accessibility ensures that all community members can engage with their services effectively.
The company headquarters is located in 3528 Hunter Road, San Marcos, Texas 78666.
11-50 Employees
-
Balloons Everywhere
January 29, 2026
•
[ ransomware, retail ]
Balloons Everywhere was listed as a victim on the leak site of the medusa ransomware group; the attack is estimated to have taken place on 2026-01-29. Sector: Retail & E-Commerce. Country: United States of America. Website: balloons.com. Ransom demand: 150000. Balloons.com is a wholesale distributor specializing in a wide range of balloon products including foil film, latex balloons, and balloon decoration kits. They cater to various themes, occasions, and licensed characters, offering items for both everyday events and special celebrations. Their services target individuals and businesses looking for party supplies, with a focus on DIY balloon decor and promotional products. Additionally, they provide customers with resources and learning tools related to balloon usage and care.
The company headquarters is located in 16474 Greeno Road, Fairhope, AL 36532-5528, United States.
11-50 Employees
-
UniTurn Kft.
February 3, 2026
•
[ ransomware, manufacturing ]
UniTurn Kft. was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-02-03. Sector: Manufacturing. Country: Hungary. Website: www.uniturn.hu. Data size claimed by the group: 200GB. - Drawing data- HR info-Employee data
-
Makimura Co., Ltd.
January 31, 2026
Makimura Co., Ltd. was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-01-31. Sector: Manufacturing. Country: Japan. Website: makimura.co.jp/en. Data size claimed by the group: 500GB. - Internal data- financial data- client list
-
RIECO Industries Limited
January 28, 2026
•
[ ransomware, manufacturing ]
RIECO Industries Limited was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-01-28. Sector: Manufacturing. Country: India. Website: www.rieco.com. Data size claimed by the group: 10GB. drawing data
-
Master Handlers
January 29, 2026
•
[ ransomware, manufacturing, leak ]
Master Handlers was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-01-29. Sector: Transportation. Country: India. Website: www.masterhandlers.com. Data size claimed by the group: 300GB. - drawing data- employee personal info
-
Abrahamsom Center
February 1, 2026
•
[ ransomware, education ]
Abrahamsom Center was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-02-01. Sector: Education. Country: Israel. Website: www.abrahamson.co.il/en. Data size claimed by the group: 200GB. - customer info-HR data
-
*e**l I*s***u*e f*r Clinical Research LLC
February 1, 2026
•
[ ransomware, healthcare ]
*e**l I*s***u*e f*r Clinical Research LLC was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-02-01. Sector: Healthcare. Country: United States of America. Website: pi-cr.net.
-
A** L** Office
January 13, 2026
A** L** Office was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-01-13. Sector: Professional Services. Country: Austria. Website: anc-legal.com.
-
S.Y.L Pastilhas e Sapatas de Freios
January 21, 2026
•
[ ransomware, manufacturing ]
S.Y.L Pastilhas e Sapatas de Freios was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-01-21. Sector: Manufacturing. Country: Brazil. Website: www.syl.com.br. [AI generated] "S.Y.L Pastilhas e Sapatas de Freios" is a Brazilian company that specializes in the manufacture and marketing of brake pads and shoes. They provide products for a wide range of vehicles, maintaining focus on quality and performance for its customers. Besides, the company develops and executes technical and commercial training for professionals, promoting expertise in the automotive repair market.
-
PERLITE, S.L.U
January 16, 2026
•
[ ransomware, manufacturing ]
PERLITE, S.L.U was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-01-16. Sector: Manufacturing. Country: Spain. Website: solucionesperlite.com. Data size claimed by the group: 100GB. - Drawings- Customized data according to clients
