-
GeoMechanics Technologies
March 27, 2026
•
[ ransomware, technology, financial ]
GeoMechanics Technologies was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-03-27. Sector: Technology. Country: United States of America. Website: geomechanics-technologies.com. GeoMechanics Technologies, formerly called Terralog Technologies
USA, was founded in 1994 by Dr. Michael S. Bruno. It originally o
perated as the US subsidiary of Terralog Technologies Inc in Cana
da. The new name, adopted August 1, 2012, reflects our primary an
d expanding focus on Advanced Geomechanics from the wellbore to t
he reservoir scale.
We will upload corporate data soon. Employee personal documents (
passports, driver licenses, SSNs and so on), project files, medic
al information, financials, contracts and agreements (Bentley and
others), client files, NDAs.
-
Fondation Boghossian
March 27, 2026
•
[ ransomware, leak ]
Fondation Boghossian was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-03-27. Sector: Other. Country: Belgium. Website: villaempain.com.
-
Orient Petroleum
February 2, 2026
Orient Petroleum was listed as a victim on the leak site of the worldleaks ransomware group; the attack is estimated to have taken place on 2026-02-02. Sector: Energy & Utilities. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.orientpetroleum.com. [AI generated] Orient Petroleum Resources Plc is a Nigerian company engaged in the exploration and production of oil and gas. Established in 2002, the company aims to take advantage of the liberalization of the sector by the Nigerian government. It deals with the development, marketing, distribution, and storage of oil and gas. It's active in the Anambra Basin, one of the most significant oil production areas in Nigeria.
-
Leighton
March 11, 2026
•
[ ransomware, leak, manufacturing ]
Leighton was listed as a victim on the leak site of the worldleaks ransomware group; the attack is estimated to have taken place on 2026-03-11. Sector: Manufacturing. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.leighton.com. [AI generated] Leighton is a multinational construction company, based in Australia, known for undertaking major construction, infrastructure, telecommunications and engineering works around the world. It was previously known as Leighton Contractors, prior to its rebranding as CIMIC Group in 2015. Some of its notable projects include large-scale building, infrastructure, and civil & mining projects globally.
-
CIM
March 27, 2026
•
[ ransomware, finance, real-estate ]
CIM was listed as a victim on the leak site of the worldleaks ransomware group; the attack is estimated to have taken place on 2026-03-27. Sector: Professional Services. Country: Germany. Website: www.cim-logistics.com. [AI generated] CIM is a community-focused, integrity-driven real estate and infrastructure investment firm that was founded in 1994. It specializes in urban transitions and sustainable development, lifting up communities through strategic investments. Their assets range from hotels, retail, and residential buildings to renewable energy infrastructure. They focus on maximizing value for all stakeholders - investors, community, and team.
-
Sheraton Hotel
March 27, 2026
Sheraton Hotel was listed as a victim on the leak site of the worldleaks ransomware group; the attack is estimated to have taken place on 2026-03-27. Sector: Hospitality. Country: United States of America. Website: sheraton.marriott.com. [AI generated] Sheraton Hotels and Resorts, founded in 1937, is a global hospitality brand owned by Marriott International. It operates luxury hotels, resorts, and residential establishments globally, known for providing high-quality services and amenities. Its properties often offer conference facilities, meeting rooms, fitness centers and occasionally dining services, serving both leisure tourists and business travelers.
-
meridenct.gov
February 18, 2026
•
[ ransomware, government ]
meridenct.gov was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-02-18. Sector: Government & Defense. Country: United States of America. Website: meridenct.gov. Meriden 2020 provides a variety of government, business, recreational, educational, and transportation resources for residents and visitors of Meriden, Connecticut (CT).
Employees: 200
Revenue: $23 Million
Industry: Government
Phone Number: (203) 630-4000
-
kdmpop.com
March 27, 2026
•
[ ransomware, retail, manufacturing ]
kdmpop.com was listed as a victim on the leak site of the chaos ransomware group; the attack is estimated to have taken place on 2026-03-27. Sector: Professional Services. Country: United States of America. Website: www.kdmpop.com. Data size claimed by the group: 600 GB. KDM P.O.P. Solutions Group, headquartered in Cincinnati, Ohio, with additional facilities in Cincinnati, Nashville, Atlanta and Cleveland, has been in business since 1970. KDM specializes in custom, innovative retail solutions at the point of purchase: P.O.P. print solutions
-
A A Al Moosa Enterprises (ARENCO Group)
March 28, 2026
•
[ ransomware, leak, manufacturing ]
A A Al Moosa Enterprises (ARENCO Group) was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-03-28. Sector: Professional Services. Country: United Arab Emirates. Website: aaalmoosa.com. Data size claimed by the group: 40 GB. A.A. Al Moosa Enterprises, also known as ARENCO Group, is a diversified conglomerate based in Dubai, with interests spanning architectural and engineering consulting, real estate, hospitality, car rentals, manufacturing, and interior design. Established in 1971, the group has grown into one of the top family-owned business groups in Dubai, focusing on quality, service, and innovation.
-
terix.com
March 28, 2026
terix.com was listed as a victim on the leak site of the ALP-001 ransomware group; the attack is estimated to have taken place on 2026-03-28. Sector: Technology. Country: United States of America. Website: terix.com. Data size claimed by the group: 251GB Description: Terix (TERiX International, founded in 1997, is a third-party provider of data center maintenance, hardware, and multi-vendor support services. Country: Canada Revenue: $26.5 Million Storage: 251GB Description: Terix (TERiX International, founded in 1997, is a third-party provider of data center maintenance, hardware, and multi-vendor support services
Deadline: 2026-04-07 12:11:01
-
Genobank
March 28, 2026
•
[ ransomware, technology, healthcare ]
Genobank was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-03-28. Sector: Technology. Country: United States of America. Website: genobank.io. [AI generated] Genobank is a blockchain-driven company focused on genomic research. It provides a decentralized platform where users can have their DNA sequenced and gain full control over their genomic data. The company is known for prioritizing privacy, allowing users to decide who can access their genetic information.
-
Don-Nan
March 28, 2026
•
[ ransomware, manufacturing, energy ]
Don-Nan was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-03-28. Sector: Manufacturing. Country: United States of America. Website: q2als.com. Data size claimed by the group: 80 GB. Q2 Artificial Lift Services specializes in the sales, service, engineering, and manufacturing of down hole rod pumps, positioning itself as a leader in artificial lift technology. The company operates from a state-of-the-art 118,000 sq. ft. facility and boasts over 40 service and repair locations across Canada and the USA. Q2 offers a comprehensive range of products, including API pumps, specialty tubing, and production tools, combined with supportive engineering and technical services. Their commitment to quality and innovation enables them to provide tailored solutions that maximize productivity for their clients in the oilfield sector.
-
Q2 Artificial Lift Services
March 28, 2026
•
[ ransomware, manufacturing, technology ]
Q2 Artificial Lift Services was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-03-28. Sector: Manufacturing. Country: Canada. Data size claimed by the group: 80 GB. Q2 Artificial Lift Services is a leading company specializing in the sales, service, engineering, and manufacturing of down hole rod pumps. With a state-of-the-art facility in Red Deer, Alberta, and over 40 service locations across Canada and the USA, they provide innovative solutions and technical support. Their product range includes various types of rod pumps, production tools, and specialty accessories. Q2 aims to maximize productivity and enhance the operational lifespan of their clients' pumping systems.
-
TR Construya
March 28, 2026
•
[ ransomware, manufacturing ]
TR Construya was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-03-28. Sector: Manufacturing. Country: Argentina. Website: www.trconstruya.es.
-
IBB Institut für Bildung und Beratung
March 28, 2026
•
[ ransomware, education ]
IBB Institut fr Bildung und Beratung was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-03-28. Sector: Education. Country: Germany. Website: www.ibb-dresden.de.
-
Florida Therapy Services
March 21, 2026
•
[ ransomware, healthcare ]
Florida Therapy Services was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-03-21. Sector: Healthcare. Country: United States of America. Website: flatherapy.com. [AI generated] Florida Therapy Services is a mental health organization based in Florida, USA. It provides psychiatric services, psychotherapy, and substance abuse counseling, among other services for children, adolescents, adults, and families. The organization specializes in home, school, community, and office-based treatment, aiming to support individuals struggling with various mental health issues.
-
OTNet
March 21, 2026
OTNet was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-03-21. Sector: Technology. Country: Japan. Website: www.otnet.co.jp.
-
kob.com
March 29, 2026
•
[ ransomware, technology ]
kob.com was listed as a victim on the leak site of the ALP-001 ransomware group; the attack is estimated to have taken place on 2026-03-29. Sector: Technology. Country: United States of America. Website: kob.com. Data size claimed by the group: 1.127TB Description: KON (KOB 4, Eyewitness News 4 is your best source for Albuquerque news, Santa Fe news and New Mexico news, weather and sports.. Country: USA Revenue: $22 Million Storage: 1.127TB Description: KON (KOB 4, Eyewitness News 4 is your best source for Albuquerque news, Santa Fe news and New Mexico news, weather and sports.
Deadline: 2026-04-02 23:23:40
-
kyoceradocumentsolutions.eu
March 31, 2025
•
[ ransomware, technology, manufacturing ]
kyoceradocumentsolutions.eu was listed as a victim on the leak site of the ALP-001 ransomware group; the attack is estimated to have taken place on 2025-03-31. Sector: Technology. Country: Netherlands. Website: kyoceradocumentsolutions.eu. Data size claimed by the group: 75GB Description: Kyocera (Kyocera Document Solutions Europe Management BV is a company that operates in the Office Products Retail & Distribution industry. It employs 250to499 people and has 100MMto250M of revenue. The company is headquartered in Reading, Berkshire, United Kingdom.. Country: United Kingdom Revenue: $154.1 Million Storage: 75GB Description: Kyocera (Kyocera Document Solutions Europe Management BV is a company that operates in the Office Products Retail & Distribution industry. It employs 250to499 people and has 100MMto250M of revenue. The company is headquartered in Reading, Berkshire, United Kingdom.
Deadline: 2026-04-07 23:54:11
-
lacor.es
March 29, 2026
lacor.es was listed as a victim on the leak site of the ALP-001 ransomware group; the attack is estimated to have taken place on 2026-03-29. Sector: Manufacturing. Country: Spain. Website: lacor.es. Data size claimed by the group: 182.71 GB Description: Guys, i just want to have SOME fun About this Corp, i know its small, but i like the files they have LOL .. Country: Spain Revenue: $9 Million Storage: 182.71 GB Description: Guys, i just want to have SOME fun About this Corp, i know its small, but i like the files they have LOL .
Deadline: 2026-04-08 00:09:29
