-
RT Software
April 26, 2026
•
[ ransomware, technology ]
RT Software was listed as a victim on the leak site of the tridentlocker ransomware group; the attack is estimated to have taken place on 2026-04-26. Sector: Technology. Country: United Kingdom of Great Britain and Northern Ireland. Website: rtsw.co.uk. [AI generated] RT Software is a UK-based company specializing in real-time graphics and virtual studio technology for the broadcast television industry. Founded in the 1990s, it develops software solutions including tOG (The Output Generator), used for live on-air graphics, augmented reality, and virtual set production. Its clients include major broadcasters and sports networks worldwide. The company operates primarily in the media and entertainment technology sector.
-
Rural Municipality of Gimli
April 27, 2026
Rural Municipality of Gimli was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-04-27. Sector: Government & Defense. Country: Canada. Website: gimli.ca. Data size claimed by the group: 69 GB. The Rural Municipality of Gimli is a local government district in the province of Manitoba, Canada. Situated on the western shore of Lake Winnipeg, it administers a region known for its Icelandic heritage, recreational tourism, and lakefront economy. Gimli serves as both a residential community and a cultural hub for the Interlake area.
-
massdevelopment.com
January 18, 2025
•
[ ransomware, finance, government ]
massdevelopment.com was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2025-01-18. Sector: Professional Services. Country: United States of America. Website: massdevelopment.com. MassDevelopment, a state agency for finance and development, partners with businesses,
nonprofit organizations, financial institutions, and local communities to stimulate economic
growth throughout the state. In fiscal year 2017, MassDevelopment financed or managed 377 projects,
which attracted more than $4 billion in investment to the Massachusetts economy. These projects are expected
to create approximately 9,488 jobs and build or renovate approximately 1,863 housing units.
-
rosehillgardens.com
April 27, 2026
•
[ ransomware, retail ]
rosehillgardens.com was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-04-27. Sector: Retail & E-Commerce. Country: United States of America. Website: rosehillgardens.com. Rosehill Gardens is a professional landscaping company based in Kansas City, employing over 150 specialists in landscape design, maintenance, irrigation, lighting, and the wholesale of gardening supplies.
They serve both residential and commercial clients, offering services such as snow removal, garden center supplies, and event space at their winery.
-
gelatissimo.com.au
April 27, 2026
gelatissimo.com.au was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-04-27. Sector: Hospitality. Country: Australia. Website: gelatissimo.com.au. A global brand seeking major investors with experience in retail and franchising to expand its artisanal ice cream chain through a master franchise program
-
avalonflooring.com
April 27, 2026
•
[ ransomware, retail ]
avalonflooring.com was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-04-27. Sector: Retail & E-Commerce. Country: United States of America. Website: avalonflooring.com. Avalon Flooring, founded in 1958 and located in Cherry Hill, New Jersey,
specializes in installing flooring in both residential and commercial spaces.
In addition to flooring installation services, Avalon also specializes in window treatments and the fabrication of bathroom vanities.
-
mopec.com
April 27, 2026
•
[ ransomware, manufacturing, healthcare ]
mopec.com was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-04-27. Sector: Manufacturing. Country: United States of America. Website: mopec.com. Mopec supplies American-made medical equipment and laboratory products for pathological, histological, autopsy, and morgue services.
-
fatbrands.com
April 27, 2026
•
[ ransomware, retail ]
fatbrands.com was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-04-27. Sector: Hospitality. Country: United States of America. Website: fatbrands.com. FAT Brands is a leading global franchising company that strategically acquires, promotes, and develops quick-service, fast-casual,
and casual dining concepts around the world.
-
andrewtjohnson.com
April 27, 2026
•
[ ransomware, technology ]
andrewtjohnson.com was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-04-27. Sector: Professional Services. Country: United States of America. Website: andrewtjohnson.com. The company is a leading provider of printing and reprographic services, offering image processing, printing, graphic design for exhibitions, copying, offset printing, and an online catalog of drawings
-
wmsopko.com
April 27, 2026
•
[ ransomware, manufacturing ]
wmsopko.com was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-04-27. Sector: Manufacturing. Country: Ukraine. Website: wmsopko.com. Wm. Sopko & Sons Co. supplies and distributes the full line of Dumore automatic self-feeding drilling and threading equipment
-
aotco.com
April 27, 2026
•
[ ransomware, manufacturing, technology ]
aotco.com was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-04-27. Sector: Professional Services. Country: United States of America. Website: aotco.com. AOTCO specializes in metal finishing solutions, offering a wide range of services, including electroplating, anodizing, and passivation,
and has over 45 years of experience. It serves various industries, such as aerospace, energy, defense, medical, and semiconductor,
providing capabilities for both rapid prototyping and high-volume production.
-
delonhampton.com
April 27, 2026
delonhampton.com was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-04-27. Sector: Professional Services. Country: United Kingdom of Great Britain and Northern Ireland. Website: delonhampton.com. An engineering and consulting firm specializing in civil and structural engineering, program management, and construction, delivering complex infrastructure projects across various sectors, from aviation and roads to water treatment facilities.
-
ibswebsite.com
April 27, 2026
ibswebsite.com was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-04-27. Sector: Professional Services. Country: United States of America. Website: ibswebsite.com. The company helps commercial organizations invest in technology solutions for their businesses by offering technology consulting,
as well as the design and integration of solutions for voice communications, data transmission, video, and security.
-
Selex - Gruppo Commerciale
April 27, 2026
Selex - Gruppo Commerciale was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-04-27. Sector: Retail & E-Commerce. Country: Italy. Selex Group Announces Cyber Attack and Data Breach
Today We confirm that Selex, a leading grocery retailer and distributor in Italy, has fallen victim to a large-scale cyber attack. The breach, which occurred in recent days, has compromised approximately 1 terabyte of sensitive data, including both production and development sources, as well as the personal and financial information of employees, customers, and partners.
It is estimated that the attack affected a significant amount of critical company data, including:
Production and Development Sources: Intellectual property, project plans, and confidential development documents.
Personal and Financial Data: Sensitive personal information, including names, addresses, financial records, and employee payroll details.
Customer and Partner Information: Data related to Selexs customer base and business partners, including transaction history and contractual agreements.
Moreover, We dumped databases include: products, suppliers, specifications, login credentials, tokens, workflow engine, production data, and BPM system.
-
BELFOR
April 26, 2026
BELFOR was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-04-26. Sector: Professional Services. Country: Singapore. BELFOR (Asia) Pte Ltd, Singapore.
RecoveryPro Ltd, Japan.
Country list: Singapore, Japan, Korea, Taiwan, Thailand, Malaysia.
Total Data: 430GB
Data:
Confidential (Classified) - non-disclosure agreements (NDA's), Personal scan passports, Employee Privacy, Employment contracts, Employment Records, Health Information.
Finance Department - Salary & Bonus structures, Internal audit reports, Insurance contracts & payments, Payroll Reports, Benefits & pension details, Internal investigations, Partners agreements, Balance sheets, Budget reports, Credit agreements, Tax filings, Marketing plans.
IT Department - IT network infrastructure, Research and development data, SDLC documentation.
Other - All projects report & files, Buildings drawings, Object Photo, Photo of damages, Object plans, a lot of internal documentation.
Clients: Mitsubishi, Samsung, Toyota, Kawasaki Motors, Sony Technology, Fujifilm Business Innovation, Siemens, Seiko, Nissan and many other.
Full data release coming soon!!!
-
St Stephens International
November 4, 2025
•
[ ransomware, education ]
St Stephens International was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2025-11-04. Sector: Professional Services. Country: United Kingdom of Great Britain and Northern Ireland. https://www.zoominfo.com/c/st-stephens-international-school/1293733677 www.sis.edu St Stephens International School offers educational programs at its Bangkok and Khao Yai campuses, catering to a diverse student population. The school provides weekend schooling and various camps for groups, aiming to enhance the educational experience. It is associated with several organizations including Ocean Glass, Ocean Property, and Bandara Group. The institution focuses on fostering an international learning environment for its students
-
TokyoHosoKogyo Corporation
April 27, 2026
•
[ ransomware, manufacturing ]
TokyoHosoKogyo Corporation was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-04-27. Sector: Manufacturing. Country: Japan. Website: www.tokyohoso.co.jp.
-
Raich Sp. z o.o.
April 27, 2026
•
[ ransomware, technology ]
Raich Sp. z o.o. was listed as a victim on the leak site of the AiLock ransomware group; the attack is estimated to have taken place on 2026-04-27. Sector: Professional Services. Country: Poland. Website: raich.net. Raich Sp. z o.o. is an enterprise in Poland, with the main office in Warsaw. The company operates in the Wired Telecommunications Carriers industry.
-
Stelia North America
April 27, 2026
Stelia North America was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-04-27. Sector: Manufacturing. Country: United States of America. Stelia North America
-
Casale Del Giglio
April 27, 2026
•
[ ransomware, leak, retail ]
Casale Del Giglio was listed as a victim on the leak site of the orca ransomware group; the attack is estimated to have taken place on 2026-04-27. Sector: Agriculture and Food Production. Country: Italy. Website: www.casaledelgiglio.it. Casale del Giglio was founded in 1967 by Dr. Berardino Santarelli, a native of t...