-
Sheraton Hotel
March 27, 2026
Sheraton Hotel was listed as a victim on the leak site of the worldleaks ransomware group; the attack is estimated to have taken place on 2026-03-27. Sector: Hospitality. Country: United States of America. Website: sheraton.marriott.com. [AI generated] Sheraton Hotels and Resorts, founded in 1937, is a global hospitality brand owned by Marriott International. It operates luxury hotels, resorts, and residential establishments globally, known for providing high-quality services and amenities. Its properties often offer conference facilities, meeting rooms, fitness centers and occasionally dining services, serving both leisure tourists and business travelers.
-
meridenct.gov
February 18, 2026
•
[ ransomware, government ]
meridenct.gov was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-02-18. Sector: Government & Defense. Country: United States of America. Website: meridenct.gov. Meriden 2020 provides a variety of government, business, recreational, educational, and transportation resources for residents and visitors of Meriden, Connecticut (CT).
Employees: 200
Revenue: $23 Million
Industry: Government
Phone Number: (203) 630-4000
-
kdmpop.com
March 27, 2026
•
[ ransomware, retail, manufacturing ]
kdmpop.com was listed as a victim on the leak site of the chaos ransomware group; the attack is estimated to have taken place on 2026-03-27. Sector: Professional Services. Country: United States of America. Website: www.kdmpop.com. Data size claimed by the group: 600 GB. KDM P.O.P. Solutions Group, headquartered in Cincinnati, Ohio, with additional facilities in Cincinnati, Nashville, Atlanta and Cleveland, has been in business since 1970. KDM specializes in custom, innovative retail solutions at the point of purchase: P.O.P. print solutions
-
A A Al Moosa Enterprises (ARENCO Group)
March 28, 2026
•
[ ransomware, leak, manufacturing ]
A A Al Moosa Enterprises (ARENCO Group) was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-03-28. Sector: Professional Services. Country: United Arab Emirates. Website: aaalmoosa.com. Data size claimed by the group: 40 GB. A.A. Al Moosa Enterprises, also known as ARENCO Group, is a diversified conglomerate based in Dubai, with interests spanning architectural and engineering consulting, real estate, hospitality, car rentals, manufacturing, and interior design. Established in 1971, the group has grown into one of the top family-owned business groups in Dubai, focusing on quality, service, and innovation.
-
terix.com
March 28, 2026
terix.com was listed as a victim on the leak site of the ALP-001 ransomware group; the attack is estimated to have taken place on 2026-03-28. Sector: Technology. Country: United States of America. Website: terix.com. Data size claimed by the group: 251GB Description: Terix (TERiX International, founded in 1997, is a third-party provider of data center maintenance, hardware, and multi-vendor support services. Country: Canada Revenue: $26.5 Million Storage: 251GB Description: Terix (TERiX International, founded in 1997, is a third-party provider of data center maintenance, hardware, and multi-vendor support services
Deadline: 2026-04-07 12:11:01
-
Genobank
March 28, 2026
•
[ ransomware, technology, healthcare ]
Genobank was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-03-28. Sector: Technology. Country: United States of America. Website: genobank.io. [AI generated] Genobank is a blockchain-driven company focused on genomic research. It provides a decentralized platform where users can have their DNA sequenced and gain full control over their genomic data. The company is known for prioritizing privacy, allowing users to decide who can access their genetic information.
-
Don-Nan
March 28, 2026
•
[ ransomware, manufacturing, energy ]
Don-Nan was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-03-28. Sector: Manufacturing. Country: United States of America. Website: q2als.com. Data size claimed by the group: 80 GB. Q2 Artificial Lift Services specializes in the sales, service, engineering, and manufacturing of down hole rod pumps, positioning itself as a leader in artificial lift technology. The company operates from a state-of-the-art 118,000 sq. ft. facility and boasts over 40 service and repair locations across Canada and the USA. Q2 offers a comprehensive range of products, including API pumps, specialty tubing, and production tools, combined with supportive engineering and technical services. Their commitment to quality and innovation enables them to provide tailored solutions that maximize productivity for their clients in the oilfield sector.
-
Q2 Artificial Lift Services
March 28, 2026
•
[ ransomware, manufacturing, technology ]
Q2 Artificial Lift Services was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-03-28. Sector: Manufacturing. Country: Canada. Data size claimed by the group: 80 GB. Q2 Artificial Lift Services is a leading company specializing in the sales, service, engineering, and manufacturing of down hole rod pumps. With a state-of-the-art facility in Red Deer, Alberta, and over 40 service locations across Canada and the USA, they provide innovative solutions and technical support. Their product range includes various types of rod pumps, production tools, and specialty accessories. Q2 aims to maximize productivity and enhance the operational lifespan of their clients' pumping systems.
-
TR Construya
March 28, 2026
•
[ ransomware, manufacturing ]
TR Construya was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-03-28. Sector: Manufacturing. Country: Argentina. Website: www.trconstruya.es.
-
IBB Institut für Bildung und Beratung
March 28, 2026
•
[ ransomware, education ]
IBB Institut fr Bildung und Beratung was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-03-28. Sector: Education. Country: Germany. Website: www.ibb-dresden.de.
-
Florida Therapy Services
March 21, 2026
•
[ ransomware, healthcare ]
Florida Therapy Services was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-03-21. Sector: Healthcare. Country: United States of America. Website: flatherapy.com. [AI generated] Florida Therapy Services is a mental health organization based in Florida, USA. It provides psychiatric services, psychotherapy, and substance abuse counseling, among other services for children, adolescents, adults, and families. The organization specializes in home, school, community, and office-based treatment, aiming to support individuals struggling with various mental health issues.
-
OTNet
March 21, 2026
OTNet was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-03-21. Sector: Technology. Country: Japan. Website: www.otnet.co.jp.
-
kob.com
March 29, 2026
•
[ ransomware, technology ]
kob.com was listed as a victim on the leak site of the ALP-001 ransomware group; the attack is estimated to have taken place on 2026-03-29. Sector: Technology. Country: United States of America. Website: kob.com. Data size claimed by the group: 1.127TB Description: KON (KOB 4, Eyewitness News 4 is your best source for Albuquerque news, Santa Fe news and New Mexico news, weather and sports.. Country: USA Revenue: $22 Million Storage: 1.127TB Description: KON (KOB 4, Eyewitness News 4 is your best source for Albuquerque news, Santa Fe news and New Mexico news, weather and sports.
Deadline: 2026-04-02 23:23:40
-
kyoceradocumentsolutions.eu
March 31, 2025
•
[ ransomware, technology, manufacturing ]
kyoceradocumentsolutions.eu was listed as a victim on the leak site of the ALP-001 ransomware group; the attack is estimated to have taken place on 2025-03-31. Sector: Technology. Country: Netherlands. Website: kyoceradocumentsolutions.eu. Data size claimed by the group: 75GB Description: Kyocera (Kyocera Document Solutions Europe Management BV is a company that operates in the Office Products Retail & Distribution industry. It employs 250to499 people and has 100MMto250M of revenue. The company is headquartered in Reading, Berkshire, United Kingdom.. Country: United Kingdom Revenue: $154.1 Million Storage: 75GB Description: Kyocera (Kyocera Document Solutions Europe Management BV is a company that operates in the Office Products Retail & Distribution industry. It employs 250to499 people and has 100MMto250M of revenue. The company is headquartered in Reading, Berkshire, United Kingdom.
Deadline: 2026-04-07 23:54:11
-
lacor.es
March 29, 2026
lacor.es was listed as a victim on the leak site of the ALP-001 ransomware group; the attack is estimated to have taken place on 2026-03-29. Sector: Manufacturing. Country: Spain. Website: lacor.es. Data size claimed by the group: 182.71 GB Description: Guys, i just want to have SOME fun About this Corp, i know its small, but i like the files they have LOL .. Country: Spain Revenue: $9 Million Storage: 182.71 GB Description: Guys, i just want to have SOME fun About this Corp, i know its small, but i like the files they have LOL .
Deadline: 2026-04-08 00:09:29
-
polsat.pl
March 29, 2026
•
[ ransomware, technology ]
polsat.pl was listed as a victim on the leak site of the ALP-001 ransomware group; the attack is estimated to have taken place on 2026-03-29. Sector: Technology. Country: Poland. Website: polsat.pl. Data size claimed by the group: 75.71 GB Description: Polsat is t he first independent TV station in Poland. The main objective of Polsat is to meet the varied tastes of the general public. The program offer is built primarily on the basis of its own brand productions combined with the interesting portfolio of feature films.. Country: Poland Revenue: $148.5 Million Storage: 75.71 GB Description: Polsat is t he first independent TV station in Poland. The main objective of Polsat is to meet the varied tastes of the general public. The program offer is built primarily on the basis of its own brand productions combined with the interesting portfolio of feature films.
Deadline: 2026-04-08 00:27:18
-
Ming Hwei Energy
March 29, 2026
•
[ ransomware, energy, technology ]
Ming Hwei Energy was listed as a victim on the leak site of the exitium ransomware group; the attack is estimated to have taken place on 2026-03-29. Sector: Energy & Utilities. Country: Taiwan. Website: mhe.com.tw. Zoominfo: https://www.zoominfo.com/c/ming-hwei-energy-co-ltd/446006038
A small private B2B firm (1150 staff, <$5M revenue), part of a Taiwanese fastener conglomerate. Manufacturer of solar cells in a niche where Taiwanese firms are consistently undercut by Chinese pricing.
Their infra encrypted.
-
Doctor.com
March 29, 2026
•
[ ransomware, healthcare ]
Doctor.com was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-03-29. Sector: Healthcare. Country: United States of America. Website: www.centralparkptnyc.com.
-
Greenology Products
March 29, 2026
•
[ ransomware, leak, retail ]
Greenology Products was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-03-29. Sector: Retail & E-Commerce. Country: United States of America. Website: greenologyproducts.com. Since 2008, Greenology Products has been on a mission to create household and personal care products that do not harm our environment or human health. Our motto is Good, Clean, Honest.
We create a superlative customer-centric experience by producing household and personal care products that deliver performance, delight the senses, and solve everyday needs while using plant-based and responsible ingredients and materials that do not hard people, pets, or our precious planet.
-
Alliance Select Foods International
March 29, 2026
•
[ ransomware, leak, manufacturing ]
Alliance Select Foods International was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-03-29. Sector: Agriculture and Food Production. Country: Philippines. Website: allianceselectfoods.com. Alliance Select Foods International, Inc. is a leading seafood company specializing in the tuna canning industry since 2003, producing premium-quality tuna and salmon products. The company offers a diverse range of products including canned, pouched, and frozen tuna, ensuring high standards of quality and sustainability. With a global presence, ASFII is dedicated to supporting its workforce, empowering communities, and protecting the environment. Their commitment to corporate governance emphasizes sustainable growth and accountability to stakeholders
