-
Finance of America Companies Inc.
March 20, 2026
•
[ ransomware, finance ]
Finance of America Companies Inc. was listed as a victim on the leak site of the worldleaks ransomware group; the attack is estimated to have taken place on 2026-03-20. Sector: Financial Services. Country: United States of America. Website: www.financeofamerica.com. [AI generated] Finance of America Companies Inc. is an end-to-end lending and services platform operating in the United States. The company offers a wide range of financial products across various brands, focusing on fixed income asset management, commercial real estate, reverse mortgages, and retail lending. It serves clients through online platforms and its extensive national network of offices.
-
City of Los Angeles (LA)
March 20, 2026
•
[ ransomware, government, technology ]
City of Los Angeles (LA) was listed as a victim on the leak site of the worldleaks ransomware group; the attack is estimated to have taken place on 2026-03-20. Sector: Government & Defense. Country: United States of America. Website: lacity.gov. [AI generated] The City of Los Angeles, often referred to as "LA," is the largest city in the state of California, USA. It is governed as a municipal corporation known for its extensive services including housing, transportation, and public safety. LA has diverse economies ranging from entertainment (Hollywood) to technology and is a major cultural, financial, and commercial center.
-
Matthews Real Estate Investment Services
March 20, 2026
Matthews Real Estate Investment Services was listed as a victim on the leak site of the worldleaks ransomware group; the attack is estimated to have taken place on 2026-03-20. Sector: Financial Services. Country: United States of America. Website: matthews.com. [AI generated] Matthews Real Estate Investment Services is a leading brokerage company in the U.S. specialized in commercial real estate. The company offers a wide range of services such as leasing, property management, investment sales, debt financing and more. They aim to create long-term wealth for their clients by providing customizable strategies and innovative services in all sectors of real estate investment market.
-
Winmate Inc.
January 29, 2026
•
[ ransomware, technology ]
Winmate Inc. was listed as a victim on the leak site of the worldleaks ransomware group; the attack is estimated to have taken place on 2026-01-29. Sector: Technology. Country: Taiwan. Website: www.winmate.com. [AI generated] Winmate Inc. is a Taiwan-based technology company established in 1996. It specializes in industrial display technology and solutions, with a product line that includes rugged tablets, panel PCs, displays, and embedded automation devices. Known for its innovative, high-performance hardware, Winmate's products are used in a wide variety of industries, including maritime, medical, military, and transportation.
-
Oriska Insurance
March 20, 2026
•
[ ransomware, finance ]
Oriska Insurance was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-03-20. Sector: Financial Services. Country: United States of America. Website: www.oriskainsurance.com. Oriska Insurance specializes in providing surety bonding, workers compensation, health insurance, and disability insurance tailored for small and minority-owned businesses. The company positions itself as a single source solution for multi-policy requirements, ensuring competitive pricing and comprehensive protection. With a commitment to reliability, Oriska Insurance has a track record of never failing to pay a claim or abandoning an employer. Their services are designed to help clients meet job requirements while staying within budget and legal constraints
-
bdtronic
February 25, 2026
•
[ ransomware, manufacturing, technology ]
bdtronic was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-02-25. Sector: Manufacturing. Country: Germany. Website: bdtronic.com. bdtronic provides innovative solutions for dispensing, impregnati
on, hot riveting, and plasma applications, serving various indust
ries including automotive, electronics, telecommunications, and r
enewable energy.
We will upload 40gb of corporate data soon. Employee personal inf
ormation (passports, DLs, and so on), lots of HR files, financial
s, SpaceX project files, other partners files, contracts and agre
ements, and so on.
-
Motorpal
March 11, 2026
•
[ ransomware, manufacturing, financial ]
Motorpal was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-03-11. Sector: Manufacturing. Country: Czechia. Website: motorpal.cz. MOTORPAL, a. s. is a prominent manufacturer of injection systems
for diesel engines, established in 1946. The company specializes
in producing a range of products including injection pumps, injec
tors, and spare parts, as well as providing sales and service sup
port.
We will upload 31gb of corporate data soon. Employee personal inf
ormation (addresses, phones, scanned documents and so on), detail
ed HR data, financials, partners files, contracts, projects, and
so on.
-
VirtualExpo Group
March 20, 2026
VirtualExpo Group was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-03-20. Sector: Technology. Country: France. Website: www.virtual-expo.com.
-
Madesmart
February 28, 2026
•
[ ransomware, retail, financial ]
Madesmart was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-02-28. Sector: Retail & E-Commerce. Country: United States of America. Website: madesmart.com. Madesmart specializes in beautiful and functional home organizati
on solutions designed for everyday life. Their products cater to
various areas including kitchen, bath, and tabletop organization.
The company aims to provide thoughtfully designed organizational
solutions that enhance the living experience.
We will upload 31gb of corporate data soon. Employee personal inf
ormation, HR files, financials, client files, contracts and agree
ments, NDAs and so on.
-
Savvy Hawk
January 11, 2026
•
[ ransomware, technology, financial ]
Savvy Hawk was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-01-11. Sector: Technology. Country: United States of America. Website: savvyhawk.net. Savvy Hawk is a Miami-based IT service provider that specializes
in business-focused communication solutions for small to enterpri
se-level clients. They offer services such as custom cloud soluti
ons, data backup and recovery, and VoIP telephone services, all d
esigned to enhance productivity and business continuity.
We will upload 941gb of corporate data soon. Detailed employee pe
rsonal information (passports, DLs, SSNs, medical records and so
on), HR files, client's credit cards and other information, finan
cials, contracts and agreements, etc.
-
INP Schweiz
February 25, 2026
•
[ ransomware, energy, leak ]
INP Schweiz was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-02-25. Sector: Energy & Utilities. Country: Switzerland. Website: inp-e.ch. INP Schweiz AG partners with leading companies in the energy gene
ration and transmission sector, providing comprehensive engineeri
ng services that include concept development, planning, commissio
ning, and testing.
We will upload 9gb of corporate data soon. Employee personal info
rmation (passports, DLs and os on), HR files, financials, client
files, contracts with Siemens and others, etc.
-
odayequipment.com
March 20, 2026
•
[ ransomware, leak, energy ]
odayequipment.com was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-03-20. Sector: Transportation. Country: United States of America. Website: odayequipment.com. Founded in 1935, ODay Equipment specializes in supplying and maintaining equipment for the oil and gas industry, serving customers in the U.S. Midwest.The company offers fuel storage tanks, retail fueling systems, EV charging solutions,installation, and a variety of repair services.
-
wardencc.com
March 20, 2026
•
[ ransomware, technology, government ]
wardencc.com was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-03-20. Sector: Technology. Country: United States of America. Website: wardencc.com. Warden Construction is a general contractor based in Jacksonville, Florida, specializing in design-build, construction management, renovation, and new construction.
The company primarily serves clients in the government and public sectors, leveraging its expertise in indefinite-delivery/indefinite-quantity (IDIQ) contracts.
-
theunlimited.co.za
March 20, 2026
•
[ ransomware, finance ]
theunlimited.co.za was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-03-20. Sector: Financial Services. Country: South Africa. Website: www.theunlimited.co.za. The Unlimited offers a full range of insurance products, including health, auto, legal, and life insurance, designed to provide peace of mind and financial protection to its customers. Founded in 1994, the company strives to challenge the status quo and deliver exceptional value to millions of customers. Its services are designed to support
individuals and families during lifes unexpected moments, ensuring they are never left alone to face difficulties. Focused on meeting the needs of its clients, The Unlimited strives to treat them like family and provide hassle-free service.
-
centreconcrete.com
March 20, 2026
•
[ ransomware, manufacturing, leak ]
centreconcrete.com was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-03-20. Sector: Manufacturing. Country: United States of America. Website: www.centreconcrete.com. Centre Concrete has been a leader in the production and delivery of ready-mix concrete in central Pennsylvania since 1956, operating seven production sites. They offer a wide range of concrete products and services, including ready-mix concrete, roller-finished concrete, and decorative concrete, for residential and commercial customers. Their focus on quality, innovation, and sustainability ensures durable and energy-efficient solutions for construction needs. Through a strong commitment to customer service, Centre Concrete lays the foundation for a wide range of construction projects while contributing to environmentally responsible practices.
-
liverpoolphil.com
March 20, 2026
liverpoolphil.com was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-03-20. Sector: Hospitality. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.liverpoolphil.com. The Liverpool Philharmonic Hall, which hosts a variety of concerts and events.
-
sopower.com
March 20, 2026
•
[ ransomware, energy, hack ]
sopower.com was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-03-20. Sector: Energy & Utilities. Country: Japan. Website: www.sopower.com. industrial electrical service provider located in Baton Rouge, LA. Founded in 1994, it specializes in electrical testing, commissioning, maintenance, switchgear, transformers, and substation services, serving as a trusted ally for power infrastructure
-
AGENCAVI SRL
March 20, 2026
•
[ ransomware, technology ]
AGENCAVI SRL was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-03-20. Sector: Professional Services. Country: Italy. Website: www.agencavi.com.
-
smythco.com
February 19, 2025
•
[ ransomware, technology ]
smythco.com was listed as a victim on the leak site of the chaos ransomware group; the attack is estimated to have taken place on 2025-02-19. Sector: Professional Services. Country: United States of America. Website: smythco.com. Data size claimed by the group: 1000 GB. Smyth Companies, LLC has failed to protect its infrastructure. We have successfully exfiltrated high-value corporate data, and the window for private negotiation is now closed.
THE TERMS:
You have 24 HOURS to finalize the settlement. If the deadline expires:
FULL DISCLOSURE: 1000 GB of interna
-
The Farese Group
March 19, 2026
The Farese Group was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-03-19. Sector: Financial Services. Country: United States of America. Website: www.faresegroup.com. The Farese Group specializes in retirement income planning, investment management, and financial planning, focusing on the distribution phase of retirement. With nearly two decades of experience, they provide strategic game plans to help clients spend their savings wisely and intentionally. They offer complimentary workshops to address common retirement questions and concerns for those in or nearing retirement. The firm values client relationships and shows appreciation through various location-based events throughout the year