-
weiss-pm.de
April 30, 2026
•
[ ransomware, technology ]
weiss-pm.de was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-04-30. Sector: Professional Services. Country: Germany. Website: weiss-pm.de. WEISS PM: The ideal company for tailored recruitment solutions. For nearly 40 years, WEISS PM has been a trusted partner...
-
Liberty Mutual Insurance
April 30, 2026
•
[ ransomware, finance ]
Liberty Mutual Insurance was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-04-30. Sector: Financial Services. Country: United States of America. [AI generated] Liberty Mutual Insurance is a leading American insurance company headquartered in Boston, Massachusetts. Founded in 1912, it operates in the property and casualty insurance industry, offering products such as auto, home, life, and commercial insurance. The company serves individuals and businesses across the United States and internationally, making it one of the largest global insurers by premium revenue.
-
Progressive Oral Surgery & Implantology
April 27, 2026
•
[ ransomware, healthcare ]
Progressive Oral Surgery & Implantology was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-04-27. Sector: Healthcare. Country: United States of America.
-
Apothebeauty
April 30, 2026
•
[ ransomware, retail ]
Apothebeauty was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-04-30. Sector: Retail & E-Commerce. Country: United States of America. Website: www.apothecabeauty.com.
-
Zinkan & Barker Development
April 30, 2026
•
[ ransomware, leak ]
Zinkan & Barker Development was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-04-30. Sector: Other. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.zinkanandbarker.com.
-
Jayeff Construction
April 30, 2026
•
[ ransomware, manufacturing ]
Jayeff Construction was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-04-30. Sector: Manufacturing. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.jayeff.com.
-
See's Candies
April 30, 2026
•
[ ransomware, retail ]
See's Candies was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-04-30. Sector: Agriculture and Food Production. Country: United States of America. Website: www.sees.com.
-
The Switch Enterprises
April 30, 2026
•
[ ransomware, technology ]
The Switch Enterprises was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-04-30. Sector: Professional Services. Country: Finland. Website: www.theswitch.tv.
-
MES Hybrid Document Systems
April 30, 2026
•
[ ransomware, technology ]
MES Hybrid Document Systems was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-04-30. Sector: Professional Services. Country: Canada. Website: www.mesltd.ca.
-
SMTA Sherwood Mutual Telephone Association
April 16, 2026
SMTA Sherwood Mutual Telephone Association was listed as a victim on the leak site of the worldleaks ransomware group; the attack is estimated to have taken place on 2026-04-16. Sector: Technology. Country: United States of America. Website: smta.cc. [AI generated] SMTA Sherwood Mutual Telephone Association is a cooperative telecommunications provider based in the United States. It operates in the rural telecommunications industry, offering telephone and related communication services to members in the Sherwood, North Dakota area. As a mutual association, it is member-owned and focused on delivering reliable local and long-distance voice services to underserved rural communities.
-
Silfab Solar
April 30, 2026
•
[ ransomware, energy, manufacturing ]
Silfab Solar was listed as a victim on the leak site of the mnt6 ransomware group; the attack is estimated to have taken place on 2026-04-30. Sector: Energy & Utilities. Country: Canada. Website: silfabsolar.com. Silfab Solar is a leading North American manufacturer of high-efficiency, premium-quality solar panels for residential, commercial, and utility projects. With over 40 years of industry experience, the company operates advanced manufacturing facilities in Canada and the United States, focusing on producing durable, reliable solar modules. [Revenue: $217.3M]
-
McKay
April 30, 2026
•
[ ransomware, manufacturing, technology ]
McKay was listed as a victim on the leak site of the mnt6 ransomware group; the attack is estimated to have taken place on 2026-04-30. Sector: Manufacturing. Country: New Zealand. Website: mckay.co.nz. McKay is a leading international engineering firm that delivers strategically vital projects across national defense, high-tech shipbuilding, and global energy sectors. The company serves as a key technological partner to the state, implementing innovative automation systems and 'green' solutions for critical infrastructure. [Revenue: $135.8M]
-
Follett Software LLC
April 30, 2026
Follett Software LLC was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-04-30. Sector: Education. Country: United States of America. Website: follettsoftware.com. Over 4M Salesforce records containing PII and other internal corporate data have been compromised. This is a final warning to reach out by 4 May 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 1 May 2026 | Warning: FINAL WARNING
-
TOWERPOINT WEALTH, LLC
April 30, 2026
•
[ ransomware, finance, technology ]
TOWERPOINT WEALTH, LLC was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-04-30. Sector: Financial Services. Country: United States of America. Website: towerpointwealth.com. Salesforce records containing PII and other internal corporate data have been compromised. This is a final warning to reach out by 4 May 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 1 May 2026 | Warning: FINAL WARNING
-
Bohmler Einrichtungshaus GmbH
April 13, 2026
•
[ ransomware, retail, hack ]
Bohmler Einrichtungshaus GmbH was listed as a victim on the leak site of the blacknevas ransomware group; the attack is estimated to have taken place on 2026-04-13. Sector: Retail & E-Commerce. Country: Germany. Website: boehmler.de. First-class. Since 1875. For 150 years, we have stood for elegant and contemporary living: living concepts, flooring and parquet, office and contract furnishings, kitchens, carpets, fabrics, wallpapers, and selected accessories we advise you on all interior design matters. As a family business in the fourth and fifth generation, we are the first address for modern interiors far beyond the borders of Bavaria. We offer all areas of expertise under one roof and work with innovative products, pioneering designers, visionary manufacturers, and reliable partners. Massive Breach by Hacker Group! The notorious hacker collective blackNevas has struck again, launching a bold cyberattack against the servers of Bhmler Einrichtungshaus GmbH (boehmler.de) a leading name in Germanys world of modern interior design and luxury furniture. In this high-profile breach, the attackers have reportedly gained access to confidential client data, unreleased furniture collections, and exclusive design concepts. The digital fortress of a 150-year-old icon has been compromised, sending shockwaves through the industry. The full extent of the leak is still under investigation. Stay tuned for updates as the story unfolds.#cyberattack #hackers #Bhmler #databreach #infosec
-
Carrera Casting Corp.
March 21, 2026
Carrera Casting Corp. was listed as a victim on the leak site of the blacknevas ransomware group; the attack is estimated to have taken place on 2026-03-21. Sector: Manufacturing. Country: United States of America. Website: arreracasting.com. 3 terabytes of corporate data for free. Download it now while it's still available. Please wait 2 -3 days while files are uploaded to the site. Brief Overview of Carrera Casting Carrera Casting is one of the premier jewelry manufacturing and casting companies, located in the heart of New York City. It provides a full range of services for jewelry designers, brands, and retailers. Core Activities: Precious Metal Casting: Working with gold of various karats and colors, silver, platinum, and palladium. 3D Printing and CAD: Converting digital 3D models (CAD) into high-precision wax or resin prototypes for subsequent casting. Mold Making: Creating high-quality rubber and silicone molds for jewelry mass production and reproduction. Finishing and Preparation: Basic processing and finishing of cast pieces prior to final polishing and stone setting. Company Features: The company is known for its strict quality control, commitment to client design confidentiality, and use of cutting-edge technologies. It is a reliable partner for both emerging independent jewelers and major global brands, offering scalable solutions for jewelry manufacturing.
-
Heng An Standard Life Insurance
March 21, 2026
•
[ ransomware, finance, technology ]
Heng An Standard Life Insurance was listed as a victim on the leak site of the blacknevas ransomware group; the attack is estimated to have taken place on 2026-03-21. Sector: Financial Services. Country: Hong Kong. Website: hengansl.com.hk. Downloaded:Complete Client Database: Unencrypted records containing full names, addresses, scanned identification documents (passports, drivers licenses), and biometric facial data.Corporate Intellectual Property: All proprietary IT solutions, source code repositories, and internal development tools.Executive Correspondence: The complete archive of the Board of Directors meetings, including minutes, strategic plans, and the entirety of internal email correspondence among top management.We offer all data for purchase.The company's management concealed the fact of the leak.Heng An Standard Life Insurance is a major insurance company specializing in life insurance, operating primarily in the Asian region.
-
E-CON Packaging Private Limited
March 21, 2026
•
[ ransomware, leak, manufacturing ]
E-CON Packaging Private Limited was listed as a victim on the leak site of the blacknevas ransomware group; the attack is estimated to have taken place on 2026-03-21. Sector: Manufacturing. Country: India. Website: e-con.co. 312367 files300GBhttps://gofile.io/d/3nrP9GE-CON Packaging Private Limited,established in 1997 and based in Mumbai, is a leading manufacturer and supplier of industrial packaging solutions,specializing in Mild Steel (MS) drums/barrels, HDPE drums, and lacquered drums. The company serves various sectors,including chemicals, pharmaceuticals, and lubricants.Key details about the company:Location: Registered in Mumbai, Maharashtra, with operations in Silvassa, Dadra and Nagar Haveli.Products: They manufacture a variety of containers, including Open Head Drums, Tight Head Drums, Conical Drums, and Composite Drums.Key Personnel: The directors include Hitesh Ramesh Thacker, Neil Dhiren Thacker, and Dhiren Hariram Thacker.Status: It is an active, unlisted private company.About the Company:History: The company has origins dating back to 1969, though it was incorporated in 1997.Market Reach: They are prominent suppliers in India, targeting industries like petroleum, agrochemicals, and paints.Capacity: The company has a significant presence, with revenue reported in the range of 100 Cr - 500 Cr for the financial year ending March 2024.
-
The company MST (Sanko Makina and ASKO Holding)
March 17, 2026
The company MST (Sanko Makina and ASKO Holding) was listed as a victim on the leak site of the blacknevas ransomware group; the attack is estimated to have taken place on 2026-03-17. Sector: Manufacturing. Country: Turkey. Website: asko.com.tr. The company MST (Sanko Makina and ASKO Holding) has direct and close ties to the Turkish defense industry. It serves as an important supplier of specialized military engineering equipment for Turkish security forces. Here is exactly how the company is connected to the defense sector: 1. Production of Armored Construction Equipment: Ordinary construction machinery is vulnerable in combat zones. MST develops and manufactures armored backhoe loaders and telehandlers specifically designed for military needs. The cabins, engine compartments, and vital components of these machines are protected by armor capable of withstanding small arms fire and improvised explosive device (IED) blasts. 2. Supplies for the Army and Police: The primary customers for MST's military products are the Turkish Armed Forces (TSK), the General Command of the Gendarmerie, and the General Directorate of Security (Police). 3. Specific Applications: MST's military equipment is actively used by engineering troops and special forces for the following tasks: Digging trenches and building defensive berms on the front lines; Dismantling barricades, destroying militant shelters, and clearing streets during anti-terrorist operations (such equipment was heavily used by Turkish security forces during urban operations in the southeastern part of the country); Safely neutralizing explosive devices on roads; Constructing and fortifying military outposts and bases. 4. Integration into State Defense Programs: MST works in close cooperation with the Presidency of Defense Industries (SSB) of Turkey. The production of indigenous armored engineering equipment is part of Turkey's state strategy for import substitution and ensuring the national army's independence from foreign suppliers. 5. Participation in Defense Exhibitions: The MST brand regularly showcases its military developments at major international arms exhibitions, such as IDEF (International Defence Industry Fair), offering its armored special equipment not only to the domestic market but also for export to allied nations. Information for our partners: > Over the course of seven months, a significant volume of data was stolen. > The obtained files were encrypted and stored in secure storage. > The stated starting price is 15 bitcoins.
-
Paramount Health Services & Insurance TPA Pvt. Ltd
November 20, 2025
Paramount Health Services & Insurance TPA Pvt. Ltd was listed as a victim on the leak site of the blacknevas ransomware group; the attack is estimated to have taken place on 2025-11-20. Sector: Healthcare. Country: India. Website: paramounttpa.com. listing fileshttps://gofile.io/d/d34YJQThe website paramounttpa.com belongs to Paramount Health Services & Insurance TPA Pvt. Ltd., a health insurance third-party administrator (TPA) in India. It provides services such as cashless hospitalization claims, reimbursement claims, and ePHR (electronic Personal Health Records) for policyholders. The company, established in 1996, is licensed by IRDAI and offers digital claim intimation
