-
Swansea Ambulance Corps
April 17, 2026
•
[ ransomware, healthcare ]
Swansea Ambulance Corps was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-04-17. Sector: Healthcare. Country: United Kingdom of Great Britain and Northern Ireland. Data size claimed by the group: 0GB.
-
Mid Florida Dermatology & Plastic Surgery
April 25, 2026
Mid Florida Dermatology & Plastic Surgery was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-04-25. Sector: Healthcare. Country: United States of America. Website: www.midflmed.com.
-
Travel Expert
April 25, 2026
•
[ ransomware, retail ]
Travel Expert was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-04-25. Sector: Hospitality. Country: Hong Kong. Website: www.travelexpert.com.hk.
-
Woodfields Consultants
April 25, 2026
•
[ ransomware, technology, leak ]
Woodfields Consultants was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-04-25. Sector: Professional Services. Country: Philippines. Website: www.wci.com.ph.
-
Chelten House
April 25, 2026
•
[ ransomware, manufacturing ]
Chelten House was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-04-25. Sector: Professional Services. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.cheltenhouse.com.
-
First County FCU
April 25, 2026
•
[ ransomware, finance ]
First County FCU was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-04-25. Sector: Financial Services. Country: United States of America. Website: www.firstcountyfcu.org.
-
SanCor
April 25, 2026
•
[ ransomware, manufacturing, hack ]
SanCor was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-04-25. Sector: Agriculture and Food Production. Country: Argentina. Website: www.sancor.com.
-
KEMBA Indianapolis Credit Union
April 25, 2026
KEMBA Indianapolis Credit Union was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-04-25. Sector: Financial Services. Country: United States of America. Website: www.mykemba.org.
-
Leistritz Turbine Technology
April 25, 2026
•
[ ransomware, manufacturing, technology ]
Leistritz Turbine Technology was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-04-25. Sector: Manufacturing. Country: Germany. Website: turbines.leistritz.com.
-
Cahbo Produkter
April 25, 2026
•
[ ransomware, retail ]
Cahbo Produkter was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-04-25. Sector: Agriculture and Food Production. Country: Sweden. Website: www.cahbo.se.
-
Buckley Powder
April 25, 2026
Buckley Powder was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-04-25. Sector: Manufacturing. Country: Canada. Website: www.buckleypowder.com.
-
Marlborough Partners
August 25, 2025
•
[ ransomware, finance ]
Marlborough Partners was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2025-08-25. Sector: Financial Services. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.marlboroughpartners.com. [AI generated] Marlborough Partners is a UK-based independent corporate finance advisory firm specialising in mergers and acquisitions, private equity transactions, and strategic advisory services. The firm primarily works with mid-market companies, providing guidance on buyouts, disposals, fundraising, and growth strategies. It operates within the financial services and investment banking sector, serving clients across Europe and beyond.
-
Dreyfuss Williams & Associates CO LPA
November 20, 2023
•
[ ransomware, finance ]
Dreyfuss Williams & Associates CO LPA was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2023-11-20. Sector: Professional Services. Country: United States of America. Website: dreyfuss.com.
-
Chase Cooper Limited (RiskLogix Solutions)
April 25, 2026
•
[ ransomware, technology, finance ]
Chase Cooper Limited (RiskLogix Solutions) was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-04-25. Sector: Professional Services. Country: United Kingdom of Great Britain and Northern Ireland. Website: Chase Cooper Limited (RiskLogix Solutions).
-
Apple Film Group
April 25, 2026
•
[ ransomware, manufacturing, retail ]
Apple Film Group was listed as a victim on the leak site of the lamashtu ransomware group; the attack is estimated to have taken place on 2026-04-25. Sector: Retail & E-Commerce. Country: Germany. Website: applefilm-group.com. Apple Film Co., Ltd. is a leading manufacturer of high-quality plastic bags and films, specializing in Polyethylene (PE) products like HDPE, LDPE, and LLDPE.
-
CHECKMARX
April 24, 2026
•
[ ransomware, technology, leak ]
CHECKMARX was listed as a victim on the leak site of the lapsus$ ransomware group; the attack is estimated to have taken place on 2026-04-24. Sector: Technology. Country: United States of America. Website: checkmarx.com. Source Code, Employee DB, API Keys, MongoDB/MySQL Creds
-
merlo.de
April 16, 2026
•
[ ransomware, manufacturing ]
merlo.de was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-04-16. Sector: Manufacturing. Country: Germany. Website: merlo.de. Merlo Teleskoplader: von Profis fr Profis Teleskoplader fr jeden Einsatz plus Dienstleistung! M...
-
heinrichs-logistic.de
April 17, 2026
•
[ ransomware, leak ]
heinrichs-logistic.de was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-04-17. Sector: Transportation. Country: Germany. Website: heinrichs-logistic.de. D. Heinrichs Logistic GmbH is a leading logistics service provider based in Bremerhaven, specializin...
-
bladex.com
April 15, 2026
•
[ ransomware, finance, technology ]
bladex.com was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Technology. Country: Panama. Website: bladex.com. Bladex, a multinational bank originally established by the central banks of Latin-American and Carib...
-
erstransportes.com.br
April 14, 2026
•
[ ransomware, leak ]
erstransportes.com.br was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-04-14. Sector: Transportation. Country: Brazil. Website: erstransportes.com.br. A ERS Transportes, iniciou suas atividades em 2003, transportando cargas em equipamentos porta cont...
