Full List

Search

Recent Breaches

• Heng An Standard Life Insurance March 21, 2026 • [ ransomware, finance, technology ] Heng An Standard Life Insurance was listed as a victim on the leak site of the blacknevas ransomware group; the attack is estimated to have taken place on 2026-03-21. Sector: Financial Services. Country: Hong Kong. Website: hengansl.com.hk. Downloaded:Complete Client Database: Unencrypted records containing full names, addresses, scanned identification documents (passports, drivers licenses), and biometric facial data.Corporate Intellectual Property: All proprietary IT solutions, source code repositories, and internal development tools.Executive Correspondence: The complete archive of the Board of Directors meetings, including minutes, strategic plans, and the entirety of internal email correspondence among top management.We offer all data for purchase.The company's management concealed the fact of the leak.Heng An Standard Life Insurance is a major insurance company specializing in life insurance, operating primarily in the Asian region.
• E-CON Packaging Private Limited March 21, 2026 • [ ransomware, leak, manufacturing ] E-CON Packaging Private Limited was listed as a victim on the leak site of the blacknevas ransomware group; the attack is estimated to have taken place on 2026-03-21. Sector: Manufacturing. Country: India. Website: e-con.co. 312367 files300GBhttps://gofile.io/d/3nrP9GE-CON Packaging Private Limited,established in 1997 and based in Mumbai, is a leading manufacturer and supplier of industrial packaging solutions,specializing in Mild Steel (MS) drums/barrels, HDPE drums, and lacquered drums. The company serves various sectors,including chemicals, pharmaceuticals, and lubricants.Key details about the company:Location: Registered in Mumbai, Maharashtra, with operations in Silvassa, Dadra and Nagar Haveli.Products: They manufacture a variety of containers, including Open Head Drums, Tight Head Drums, Conical Drums, and Composite Drums.Key Personnel: The directors include Hitesh Ramesh Thacker, Neil Dhiren Thacker, and Dhiren Hariram Thacker.Status: It is an active, unlisted private company.About the Company:History: The company has origins dating back to 1969, though it was incorporated in 1997.Market Reach: They are prominent suppliers in India, targeting industries like petroleum, agrochemicals, and paints.Capacity: The company has a significant presence, with revenue reported in the range of 100 Cr - 500 Cr for the financial year ending March 2024.
• The company MST (Sanko Makina and ASKO Holding) March 17, 2026 The company MST (Sanko Makina and ASKO Holding) was listed as a victim on the leak site of the blacknevas ransomware group; the attack is estimated to have taken place on 2026-03-17. Sector: Manufacturing. Country: Turkey. Website: asko.com.tr. The company MST (Sanko Makina and ASKO Holding) has direct and close ties to the Turkish defense industry. It serves as an important supplier of specialized military engineering equipment for Turkish security forces. Here is exactly how the company is connected to the defense sector: 1. Production of Armored Construction Equipment: Ordinary construction machinery is vulnerable in combat zones. MST develops and manufactures armored backhoe loaders and telehandlers specifically designed for military needs. The cabins, engine compartments, and vital components of these machines are protected by armor capable of withstanding small arms fire and improvised explosive device (IED) blasts. 2. Supplies for the Army and Police: The primary customers for MST's military products are the Turkish Armed Forces (TSK), the General Command of the Gendarmerie, and the General Directorate of Security (Police). 3. Specific Applications: MST's military equipment is actively used by engineering troops and special forces for the following tasks: Digging trenches and building defensive berms on the front lines; Dismantling barricades, destroying militant shelters, and clearing streets during anti-terrorist operations (such equipment was heavily used by Turkish security forces during urban operations in the southeastern part of the country); Safely neutralizing explosive devices on roads; Constructing and fortifying military outposts and bases. 4. Integration into State Defense Programs: MST works in close cooperation with the Presidency of Defense Industries (SSB) of Turkey. The production of indigenous armored engineering equipment is part of Turkey's state strategy for import substitution and ensuring the national army's independence from foreign suppliers. 5. Participation in Defense Exhibitions: The MST brand regularly showcases its military developments at major international arms exhibitions, such as IDEF (International Defence Industry Fair), offering its armored special equipment not only to the domestic market but also for export to allied nations. Information for our partners: > Over the course of seven months, a significant volume of data was stolen. > The obtained files were encrypted and stored in secure storage. > The stated starting price is 15 bitcoins.
• Paramount Health Services & Insurance TPA Pvt. Ltd November 20, 2025 Paramount Health Services & Insurance TPA Pvt. Ltd was listed as a victim on the leak site of the blacknevas ransomware group; the attack is estimated to have taken place on 2025-11-20. Sector: Healthcare. Country: India. Website: paramounttpa.com. listing fileshttps://gofile.io/d/d34YJQThe website paramounttpa.com belongs to Paramount Health Services & Insurance TPA Pvt. Ltd., a health insurance third-party administrator (TPA) in India. It provides services such as cashless hospitalization claims, reimbursement claims, and ePHR (electronic Personal Health Records) for policyholders. The company, established in 1996, is licensed by IRDAI and offers digital claim intimation
• KINAS SOLICITORS June 9, 2025 • [ ransomware, leak, finance ] KINAS SOLICITORS was listed as a victim on the leak site of the blacknevas ransomware group; the attack is estimated to have taken place on 2025-06-09. Sector: Professional Services. Country: United Kingdom of Great Britain and Northern Ireland. Website: kinas.co.uk. In stock: 158930+ filedata size: 138+ GBClients' and companies' data. All accompanying documents for the provision of legal services.https://upload.disroot.org/r/NcbLvRJA#4yFm0LKryVpJs1ljs/872ovN2R4sjFEd5fFA7N2jyB8=We ask all our partners, friends and clients to contact us to discuss the acquisition of this data. You know the contacts. For new members, please wait in the Contacts tab.Advertising:We are always ready to cooperate in any form, do you need specific data? We will try to provide it to you as soon as possible, we will receive and download your competitors' data, provide a list of what you are interested in. We are also ready to cooperate with law firms and data leak victims. We will provide all the information you need about the company that was negligent and provided access to data to its clients.
• PROMOSFERA S.R.l. May 19, 2025 PROMOSFERA S.R.l. was listed as a victim on the leak site of the blacknevas ransomware group; the attack is estimated to have taken place on 2025-05-19. Sector: Professional Services. Country: Italy. Website: promosfera.com. passports, employee and client documents, databases of promotional participants - hundreds of thousands of emails + full names, tens of thousands of emails + full names + phone numbersinternal company documentationhttps://gofile.io/d/5gNeSzhttps://gofile.io/d/dY7rYEWe ask all our partners, friends and clients to contact us to discuss the acquisition of this data. You know the contacts. For new members, please wait in the Contacts tab.Advertising:We are always ready to cooperate in any form, do you need specific data? We will try to provide it to you as soon as possible, we will receive and download your competitors' data, provide a list of what you are interested in. We are also ready to cooperate with law firms and data leak victims. We will provide all the information you need about the company that was negligent and provided access to data to its clients.
• DAINTY CLOUD INC March 1, 2026 • [ ransomware, technology ] DAINTY CLOUD INC was listed as a victim on the leak site of the tengu ransomware group; the attack is estimated to have taken place on 2026-03-01. Sector: Technology. Country: United States of America. Website: daintycloud.com. DaintyCloud offers a variety of affordable virtual private server (VPS) solutions including Windows, Linux, and GPU servers across more than 34 data centers worldwide. Their services cater to clients who require high performance for applications such as gaming, video processing, and cloud computing. With competitive pricing and features like one-click deployment and easy management, DaintyCloud is geared towards both individual users and businesses seeking reliable cloud services. Additionally, they provide proxy services, ensuring clients have access to high-speed, dedicated IP options
• USHA International Limited February 28, 2026 • [ ransomware, manufacturing, leak ] USHA International Limited was listed as a victim on the leak site of the vect ransomware group; the attack is estimated to have taken place on 2026-02-28. Sector: Manufacturing. Country: India. Website: usha.com. Status: STATUS: NEGOTIATING | Sector: manufacturer | Employee Data, CMS, CMR, SAP databases. | Deadline: 19d 11h
• https://www.hegelmann.com March 1, 2026 • [ ransomware ] https://www.hegelmann.com was listed as a victim on the leak site of the lynx ransomware group; the attack is estimated to have taken place on 2026-03-01. Sector: Transportation. Country: Germany. Website: hegelmann.com. Hegelmann Group is a family-run logistics company headquartered in Bruchsal, Germany, offering a diverse range of services including road transportation, intermodal solutions, air freight, and maritime transportation. The company has expanded globally to provide tailored logistics and warehousing solutions across various sectors and industries. With a commitment to sustainability, Hegelmann Group continually invests in innovation and multimodal services to meet customer demands. Their fleet includes state-of-the-art trucks and trailers designed for efficient transport of various cargo types
• Eni Energy March 1, 2026 • [ ransomware, energy, leak ] Eni Energy was listed as a victim on the leak site of the lapsus$ ransomware group; the attack is estimated to have taken place on 2026-03-01. Sector: Energy & Utilities. Country: Italy. Website: eni.com. [AI generated] Eni Energy is an Italian multinational oil and gas company headquartered in Rome. Founded in 1953, the firm is considered one of the global supermajors in the oil industry. It operates in 66 countries worldwide, and its activities span oil and gas exploration, production, and refining, as well as electricity and chemical production. Environmental sustainability is a critical focus area, with significant investments into renewable energy sources.
• FR Ministry of Agriculture March 1, 2026 • [ ransomware, government ] FR Ministry of Agriculture was listed as a victim on the leak site of the lapsus$ ransomware group; the attack is estimated to have taken place on 2026-03-01. Sector: Government & Defense. Country: France. Website: agriculture.gouv.fr. [AI generated] The FR Ministry of Agriculture, or the French Ministry of Agriculture, is a governmental body in France overseeing agriculture, forestry, and food processing. It develops policies to support farming and rural development, ensures food quality and safety, and handles fisheries and animal welfare. The ministry also plays crucial roles in research, education, and regulation of agricultural and food markets in France.
• Lille University March 1, 2026 • [ ransomware, education ] Lille University was listed as a victim on the leak site of the lapsus$ ransomware group; the attack is estimated to have taken place on 2026-03-01. Sector: Education. Country: France. Website: univ-lille.fr. [AI generated] Lille University, also known as University of Lille, is a well-recognized public university located in Lille, France. It was established in 1562 and offers a wide range of educational programs covering multiple disciplines. The university is known for its focus on research and innovation, and boasts a diverse student population from around the globe. In addition to its academic achievements, Lille University also encourages sports and cultural activities.
• DreamUp March 1, 2026 • [ ransomware, education, technology ] DreamUp was listed as a victim on the leak site of the lapsus$ ransomware group; the attack is estimated to have taken place on 2026-03-01. Sector: Education. Country: United States of America. Website: dreamup.org. [AI generated] DreamUp is an American company that provides space-based educational opportunities to students of all ages. They offer various programs that utilize the unique environment of space to spark interest in Science, Technology, Engineering, and Mathematics (STEM) fields. DreamUp provides tools to conduct research in microgravity through partnerships with SpaceX, the International Space Station and other space organizations.
• Lacoste March 1, 2026 • [ ransomware, leak, retail ] Lacoste was listed as a victim on the leak site of the lapsus$ ransomware group; the attack is estimated to have taken place on 2026-03-01. Sector: Retail & E-Commerce. Country: France. Website: lacoste.com. [AI generated] Lacoste is a high-end French clothing company founded in 1933 by tennis player Ren Lacoste and Andr Gillier. The company is renowned for its iconic green crocodile logo. They primarily produce clothing, footwear, sportswear, eyewear, leather goods, and perfumes. Its polo shirts are particularly popular. Lacoste products are sold internationally at various department stores, shopping malls, and standalone boutiques.
• Loozap March 1, 2026 • [ ransomware, retail ] Loozap was listed as a victim on the leak site of the lapsus$ ransomware group; the attack is estimated to have taken place on 2026-03-01. Sector: Retail & E-Commerce. Country: Switzerland. Website: loozap.com. [AI generated] Loozap is an online marketplace that provides a platform for users to buy and sell second-hand items. They operate in multiple countries across Africa, including Ghana and Kenya. Their inventory includes items such as cars, homes, electronics, furniture, and clothing. The platform adopts an innovative system that enhances the buying and selling experience.
• Adidas March 1, 2026 • [ ransomware, retail, hack ] Adidas was listed as a victim on the leak site of the lapsus$ ransomware group; the attack is estimated to have taken place on 2026-03-01. Sector: Retail & E-Commerce. Country: Germany. Website: adidas.de. [AI generated] Adidas is a renowned German multinational corporation that specializes in sports apparel, shoes, and accessories. Founded by Adolf Dassler in 1949, its headquarters located in Herzogenaurach, Germany. The company is globally recognized for its performance and lifestyle products, including football kits, running shoes, training gear and streetwear. Today, Adidas stands as one of the leading sports brands worldwide.
• Salesfloor March 1, 2026 • [ ransomware, technology, retail ] Salesfloor was listed as a victim on the leak site of the lapsus$ ransomware group; the attack is estimated to have taken place on 2026-03-01. Sector: Technology. Country: Canada. Website: salesfloor.com. [AI generated] Salesfloor is a software company that provides a mobile platform designed to connect retail store associates with online shoppers for a personalized customer experience. It empowers store associates to create and maintain personalized relationships through social selling, online engagement and clienteling tactics. Its services are used by leading retailers around the world.
• OSAC Aero March 1, 2026 • [ ransomware, manufacturing, technology ] OSAC Aero was listed as a victim on the leak site of the lapsus$ ransomware group; the attack is estimated to have taken place on 2026-03-01. Sector: Manufacturing. Country: France. Website: osac.aero. [AI generated] "OSAC Aero" is a Spanish aeronautical engineering company. They provide aeronautical consulting services, product development, aircraft maintenance, and also focus on designing, prototyping, and manufacturing aerostructures. Their innovative solutions have established OSAC as a reliable partner for leading global aerospace organizations.
• Eiffage March 1, 2026 • [ ransomware, manufacturing, technology ] Eiffage was listed as a victim on the leak site of the lapsus$ ransomware group; the attack is estimated to have taken place on 2026-03-01. Sector: Transportation. Country: France. Website: eiffage.com. [AI generated] Eiffage S.A. is a French publicly-listed company established in 1993, specializing in civil engineering and construction. Its activities are divided into five main segments: Construction, Infrastructure, Real Estate Development, Metal, and Concessions & Energy. It is known for working on significant projects such as the Eiffel Tower and the Millau Viaduct. Eiffage operates not only in France but also in more than 50 countries worldwide.
• PLUS Malaysia Berhad February 6, 2026 • [ ransomware, leak, transportation ] PLUS Malaysia Berhad was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-02-06. Sector: Transportation. Country: Malaysia. Website: www.plus.com.my.