-
Elundini
October 4, 2025
Elundini was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2025-10-04. Sector: Government & Defense. Country: South Africa. Website: elundini.gov.za. elundini.gov.za zoominfo.com/c/elundini/425741285 Elundini Local Municipality (ELM) is dedicated to nurturing the history and sustainable growth of its communities within the Joe Gqabi District of the Eastern Cape province. The municipality is recognized for its good governance, particularly in AG audits. ELM offers various services aimed at community development, including training interventions in fields such as environment, media, technical skills, and public administration. Its intended clients include local residents, businesses, and organizations seeking to invest and engage in community initiatives
-
Groupe Caddac
March 21, 2026
Groupe Caddac was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-03-21. Sector: Manufacturing. Country: Canada. Website: groupe-caddac.com. groupe-caddac.com Groupe CADDAC is a French construction materials company founded in 1962, specializing in ready-mix concrete (RMC), prefabricated concrete elements, aggregates, and building materials. Headquartered in Donges, Pays de la Loire, the group operates 19 concrete plants along France's Atlantic coast and employs between 200 and 500 people. It ranks among the top 7 regional ready-mix concrete producers in France
-
Micro Leasing
March 21, 2026
•
[ ransomware, finance ]
Micro Leasing was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-03-21. Sector: Financial Services. Country: Thailand. Website: microleasingplc.com. microleasingplc.com zoominfo.com/c/micro-leasing/482150678 Micro Leasing Public Company Limited specializes in providing financing services for second-hand trucks, including truck purchase loans and refinancing options. The company targets clients in need of commercial vehicles, positioning itself as a leader in the second-hand truck financing sector in Thailand. In addition to truck financing, they also offer motorcycle loans and insurance brokerage services. Micro Leasing aims to support business expansion and improve liquidity for its clients while providing excellent consulting services
-
Rajagiri Hospital
March 21, 2026
•
[ ransomware, healthcare ]
Rajagiri Hospital was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-03-21. Sector: Healthcare. Country: India. Website: rajagirihospital.com. rajagirihospital.com zoominfo.com/c/rajagiri-hospital/358774283 At Rajagiri Hospital, the company's Neonatal Intensive Care Unit (NICU) provides care for babies after birth who need special attention. Some of the reasons include preterm birth, low birth weight, breathing difficulty, low blood sugar and infection. The company's level 2 beds in the nursery provide care for some babies who are convalescing but who continue to require the services of a specialized hospital. Physicians, nurses and support staff who work in the NICU are available 24 hours a day, 7 days a week. .Parents are encouraged to be active members of the team that takes care of their infant while in the company's unit. The company's nurses understand the unique medical needs of infants and can teach parents to understand how best to care for their babies
-
MEDICUS SHUPPAN
March 21, 2026
•
[ ransomware, healthcare, technology ]
MEDICUS SHUPPAN was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-03-21. Sector: Healthcare. Country: Japan. Website: medica.co.jp. medica.co.jp zoominfo.com/c/medicus-shuppan-co-ltd/463963337 is dedicated to providing enjoyable learning experiences for healthcare professionals through a variety of products and services, including seminar books and digital content. The company aims to support the education of medical practitioners and contribute to the future of healthcare. They also focus on sustainability and creating valuable content that serves as a backbone in the medical field. Their intended clients include healthcare professionals, authors, and bookstores
-
Fidanque Hermanos e Hijos, S.A
February 26, 2026
•
[ ransomware, financial ]
Fidanque Hermanos e Hijos, S.A was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-02-26. Sector: Transportation. Country: Panama. Website: www.fidanque.com. Data size claimed by the group: 500GB. - Financial Documents- Internal Documents- MSSQL Database
-
IASMOS
March 12, 2026
•
[ ransomware, technology ]
IASMOS was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-03-12. Sector: Technology. Country: Greece. Website: iasmos.gr. Data size claimed by the group: 0GB.
-
Nanxun Enterprise Co., Ltd.
March 21, 2026
•
[ ransomware, manufacturing ]
Nanxun Enterprise Co., Ltd. was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-03-21. Sector: Manufacturing. Country: Taiwan. Website: www.nse.com.tw.
-
Millerfoto
March 21, 2026
•
[ ransomware, retail ]
Millerfoto was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-03-21. Sector: Retail & E-Commerce. Country: United States of America. Website: www.millerfoto.com.
-
irco.com
March 27, 2023
•
[ ransomware, manufacturing, leak ]
irco.com was listed as a victim on the leak site of the ALP-001 ransomware group; the attack is estimated to have taken place on 2023-03-27. Sector: Manufacturing. Country: United States of America. Website: irco.com. Data size claimed by the group: 5.9 TB Ready: 5.9 TB. Country: USA Revenue: $7.7 Billion Storage: 5.9 TB Ready: 5.9 TB
Deadline: 2026-03-29 17:41:30
-
hikvision.com
March 21, 2026
•
[ ransomware, technology, manufacturing ]
hikvision.com was listed as a victim on the leak site of the ALP-001 ransomware group; the attack is estimated to have taken place on 2026-03-21. Sector: Technology. Country: China. Website: hikvision.com. Data size claimed by the group: 19.9 TB Ready: 19.9 TB. Country: China Revenue: $13.1 Billion Storage: 19.9 TB Ready: 19.9 TB
Deadline: 2026-03-30 00:20:04
-
Muffett
March 21, 2026
•
[ ransomware, manufacturing ]
Muffett was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-03-21. Sector: Manufacturing. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.muffettgears.co.uk.
-
Grupo Coril
March 21, 2026
•
[ ransomware, finance ]
Grupo Coril was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-03-21. Sector: Financial Services. Country: Peru. Website: www.grupocoril.com.
-
SATS Sports Club Sweden
March 22, 2026
SATS Sports Club Sweden was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-03-22. Sector: Hospitality. Country: Sweden. Website: sats.se. sats.se zoominfo.com/c/sats-sports-club-sweden-ab/431547514 SATS is the largest fitness chain in the Nordics, founded in Sweden in 1995 with a mission to make people healthier and happier. Operating under the brands SATS, ELIXIA, and Fresh Fitness, the group runs over 274 clubs across Norway, Sweden, Finland, and Denmark, serving 733,000 members with 10,000 employees. It is also one of the five largest fitness operators in Europe, offering gym facilities, group classes, personal training, and digital fitness tools
-
PTT Philippines
March 22, 2026
PTT Philippines was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-03-22. Sector: Energy & Utilities. Country: Philippines. Website: pttphilippines.com. pttphilippines.com zoominfo.com/c/ptt-philippines-corp/353484173 PTT Philippines Corporation, a subsidiary of Thailand's PTT Oil and Retail Business Public Company Limited, specializes in the trading of petroleum products across retail, wholesale, and commercial markets. The company offers a range of high-performance fuels, lubricants, and services, aiming to enhance customer satisfaction and fuel efficiency. Targeting both individual consumers and businesses, PTT Philippines is committed to providing products of international standards while expanding its market presence in the Philippines. With a focus on innovation and quality, PTT Philippines also engages in corporate social responsibility initiatives to support local communities
-
HOPPECKE Singapore
March 22, 2026
•
[ ransomware, manufacturing, energy ]
HOPPECKE Singapore was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-03-22. Sector: Manufacturing. Country: Singapore. Data size claimed by the group: 49 GB. HOPPECKE Asia Pacific Pte Ltd is the regional headquarters of the HOPPECKE Batteries Group in Singapore. It manages sales, service, and distribution for the Asia-Pacific region, providing industrial energy storage solutions. The company supports sectors including renewable energy, rail, telecommunications, and logistics.
-
Semenya Furumele Consulting Engineers
March 16, 2026
•
[ ransomware, technology ]
Semenya Furumele Consulting Engineers was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-03-16. Sector: Professional Services. Country: South Africa. Website: www.sfce.co.za. Data size claimed by the group: 0GB.
-
SAS CAP ESTEL HOTEL
March 13, 2026
•
[ ransomware, retail ]
SAS CAP ESTEL HOTEL was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-03-13. Sector: Hospitality. Country: France. Website: www.capestel.com/en. Data size claimed by the group: 0GB.
-
Cannavative Group
March 13, 2026
•
[ ransomware, retail, finance ]
Cannavative Group was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-03-13. Sector: Agriculture and Food Production. Country: United States of America. Website: www.cannavativegroup.com. Data size claimed by the group: 300GB. - QuickBook Files- METRC DB-Employeement & Clients Documents
-
Marc Dorcel
March 22, 2026
•
[ ransomware, retail ]
Marc Dorcel was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-03-22. Sector: Retail & E-Commerce. Country: France. Website: www.dorcel.com.