-
Baresque Group
April 22, 2026
Baresque Group was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-04-22. Sector: Retail & E-Commerce. Country: United Kingdom of Great Britain and Northern Ireland. Website: baresquegroup.com. [design] Baresque Group a respected commercial-interiors company headquartered in Perth, Australia, with offices in Dallas, Chicago, and Brussels.
The exposed material includes:
100+ passport scans, 35 birth certificates, 60+ driver's licences, 50+ TFN declarations the complete identity-theft toolkit for the entire workforce, spanning Australia, the US, and Europe.
Plaintext credentials for every critical system Microsoft 365, HR platform (Elmo Talent), remote-access gateway (LogMeIn), phone system (3CX), ERP (Jim2) all in browser-export CSVs and an enterprise-wide Password_Listing.xls that had been sitting on a shared drive since at least 2017.
4 TLS private keys for customer-facing domains enabling impersonation of the company's websites.
343 GB of product R&D SolidWorks CAD files, manufacturing specifications, and product blueprints for Zintra acoustic panels, FUNC furniture, botton+gardiner wallcoverings, and Scribblr surfaces. The complete design library.
Two years of board packs, financial reports, and cash-flow models the company's entire strategic and financial position laid bare.
Privileged legal documents active subpoena files, sworn affidavit exhibits, Fair Work Australia tribunal filings, and settlement agreements with confidentiality clauses.
Workers compensation medical records naming specific employees with diagnoses, treatment plans, and claim amounts.
-
Advanta Genetics LLC
April 17, 2026
•
[ ransomware, healthcare, finance ]
Advanta Genetics LLC was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-04-17. Sector: Healthcare. Country: United States of America. Website: aalabs.com. [health] Advanta Genetics LLC a respected CLIA/CAP-accredited clinical toxicology and molecular diagnostics laborator. The exposed material includes: Tens of thousands of real patient lives including highly sensitive chronic opioid therapy charts flagged by the Texas Medical Board and elderly Medicare audit records. Provider identities and prescribing power SSNs, DEA numbers, and state licenses from 20+ states that can be turned into black-market "script pads". Gold-standard identity theft kits W-2s, I-9s with passport scans, and full employee packages for 50+ staff. 102 complete QuickBooks company files exposing every vendor, payroll run, bank link, and financial secret across the Advanta/RedLeaf/OSPRI empire. High-value trade secrets OSPRI Biopath investment decks, valuation models, FDA pre-submission packets, and the proprietary "The Brain" AI diagnostic architecture. Explosive privileged attorney-client memos on active regulatory battles (Texas Medical Board Remedial Plan #19-153 and a federal NORA subpoena). Active Directory domain controller data (NTDS.dit and SAM hives).
-
zsiclife.co.zm
April 26, 2026
•
[ ransomware, healthcare, finance ]
zsiclife.co.zm was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-04-26. Sector: Healthcare. Country: Zambia. Website: zsiclife.co.zm. ZSIC Life Plc is a leading assurance, savings, and wealth management company in Zambia, offering a diverse range of life...
-
PROM (Peakside Ros Outlet Management)
April 29, 2026
•
[ ransomware, leak, retail ]
PROM (Peakside Ros Outlet Management) was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-04-29. Sector: Retail & E-Commerce. PROM (Peakside Ros Outlet Management) is a joint venture established by the investment firm Peakside Capital and the operator Ros Retail to manage outlet centers across Europe. The organization specializes in the strategic development of retail real estate, handling the full lifecycle from brand acquisition to operational marketing. Its primary objective is to maximize asset value and performance by implementing international management standards within the outlet sector.
-
Antica Sartoria
April 29, 2026
•
[ ransomware, retail ]
Antica Sartoria was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-04-29. Sector: Retail & E-Commerce. Country: Italy. Website: www.anticasartoriapositano.it.
-
Edenshaw Developments
April 29, 2026
•
[ ransomware, leak ]
Edenshaw Developments was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-04-29. Sector: Other. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.edenshaw.com.
-
Metro-ILA Funds
April 29, 2026
•
[ ransomware, financial ]
Metro-ILA Funds was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-04-29. Sector: Financial Services. Country: Germany. Website: www.metro-ila.com.
-
Probity Contracting Group
April 29, 2026
•
[ ransomware, manufacturing ]
Probity Contracting Group was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-04-29. Sector: Professional Services. Country: Australia. Website: www.probitycg.com.
-
Eduporium
April 29, 2026
Eduporium was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-04-29. Sector: Education. Country: United States of America. Website: www.eduporium.com.
-
Bentley Capital Ventures
April 29, 2026
Bentley Capital Ventures was listed as a victim on the leak site of the radar ransomware group; the attack is estimated to have taken place on 2026-04-29. Sector: Financial Services. Country: United States of America. Website: bentleycapitalventures.com. https://www.linkedin.com/company/bentley-capital-ventures
We started Bentley Capital Ventures in 2012 to facilitate small business owners across the country in the process of obtaining capital. We know a simple trip to the local bank doesnt always provide the results many are looking for and as business owners ourselves we know how challenging it can be to obtain capital when you dont fit within the guidelines of the traditional banking world.
At Bentley Capital we use the relationships we have built over the last 25 years in both the consumer and commercial banking markets to provide our clients with the very best options available for their specific situation.
Whether you have perfect or less than perfect credit our goal will always be to provide you with options that promote growth and properity for your business.
-
Karl Chevrolet
April 3, 2026
Karl Chevrolet was listed as a victim on the leak site of the ransomhouse ransomware group; the attack is estimated to have taken place on 2026-04-03. Sector: Retail & E-Commerce. Country: United States of America. Website: www.karlchevrolet.com. Karl Chevrolet, Inc. operates a Chevrolet car dealership. It offers new and used cars, commercial vehicles, SUVs, trucks, and vans. The company also provides automotive parts and accessories, such as brake pads, oil filters, and others; and services, which include vehicle maintenance, repair, inspection, and other services. It also allows customers to order parts online.
-
Iowa Spring Manufacturing & Sales
April 29, 2026
•
[ ransomware, leak, manufacturing ]
Iowa Spring Manufacturing & Sales was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-04-29. Sector: Manufacturing. Country: United States of America. Website: iowaspring.com. Iowa Spring
is a well-established manufacturer specializing in a variety of springs, including those for overhead garage doors, mechanical applications, and agricultural equipment. Founded in 1977 and based in Adel, Iowa, the company has built a strong reputation for quality and reliability in the spring manufacturing industry.
2112 Greene Street
P.O. Box 130
Adel, IA 50003, US
www.iowaspring.com
Leaked data: 49,4Gb
Accounting, product development and testing, laboratory defect analysis, supply logistics, contracts, NDA, financial indicators, corporate information, and much more
-
Color Communications LLC
April 27, 2026
•
[ ransomware, technology ]
Color Communications LLC was listed as a victim on the leak site of the secp0 ransomware group; the attack is estimated to have taken place on 2026-04-27. Sector: Technology. Country: United States of America. Website: ccicolor.com. The exposed dataset includes over 200,000 unique files containing sensitive information on more than 4,500 individuals and over 5,500 organizations...
-
N****a
April 24, 2026
•
[ ransomware, technology ]
N****a was listed as a victim on the leak site of the payoutsking ransomware group; the attack is estimated to have taken place on 2026-04-24. Country: United States of America. Website: n****.com.
-
H****l
April 21, 2026
•
[ ransomware, retail ]
H****l was listed as a victim on the leak site of the payoutsking ransomware group; the attack is estimated to have taken place on 2026-04-21. Sector: Hospitality. Country: United States of America. Website: t****.com.
-
S****p
April 16, 2026
•
[ ransomware, leak ]
S****p was listed as a victim on the leak site of the payoutsking ransomware group; the attack is estimated to have taken place on 2026-04-16. Country: United States of America. Website: s****.com.
-
F****p
April 14, 2026
•
[ ransomware, technology ]
F****p was listed as a victim on the leak site of the payoutsking ransomware group; the attack is estimated to have taken place on 2026-04-14. Sector: Technology. Country: United States of America. Website: fl****.com.
-
H****o
April 1, 2026
H****o was listed as a victim on the leak site of the payoutsking ransomware group; the attack is estimated to have taken place on 2026-04-01. Country: United States of America. Website: has****.com.
-
A****y
March 31, 2026
•
[ ransomware, technology ]
A****y was listed as a victim on the leak site of the payoutsking ransomware group; the attack is estimated to have taken place on 2026-03-31. Country: United States of America. Website: ape****.com.
-
SunSource
April 20, 2026
SunSource was listed as a victim on the leak site of the payoutsking ransomware group; the attack is estimated to have taken place on 2026-04-20. Sector: Energy & Utilities. Country: United States of America. Website: www.sun-source.com. [AI generated] SunSource is a US-based industrial distribution company specializing in the supply of fluid power, fluid process, and motion control components and systems. It serves a wide range of industries including manufacturing, agriculture, and construction. The company provides products such as hydraulics, pneumatics, and related technical services, helping businesses maintain and optimize their industrial equipment and operations.