-
City'Pro
April 20, 2026
City'Pro was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-04-20. Sector: Professional Services. Country: France. Website: www.city-pro.info.
-
SEL (Safety Engineering Laboratory)
April 20, 2026
•
[ ransomware, manufacturing ]
SEL (Safety Engineering Laboratory) was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-04-20. Sector: Manufacturing. Country: Germany. Website: www.seldirect.com.
-
JOH Investments Limited
April 20, 2026
•
[ ransomware, finance ]
JOH Investments Limited was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-04-20. Sector: Financial Services. Country: Jamaica. Website: myjohgroup.com. Data size claimed by the group: 30 GB. JOH Investments Limited is an officially registered financial entity based in Kingston, Jamaica, holding an active Legal Entity Identifier (LEI) for international operations. The company specializes in investment activities and asset management, maintaining integration with global banking systems for financial transactions.
-
SafeRain
April 20, 2026
•
[ ransomware, technology ]
SafeRain was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-04-20. Sector: Technology. Country: United States of America. Website: www.saferain.com.
-
ATKINSON RITSON SOLICITORS LIMITED
April 20, 2026
•
[ ransomware, leak ]
ATKINSON RITSON SOLICITORS LIMITED was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-04-20. Sector: Professional Services. Country: United Kingdom of Great Britain and Northern Ireland. Website: atkinsonritson.co.uk.
-
B&e Juice
April 20, 2026
•
[ ransomware, retail ]
B&e Juice was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-04-20. Sector: Retail & E-Commerce. Country: United States of America. Website: www.bejuice.com.
-
Hoeren Gartencenter GmbH
April 20, 2026
•
[ ransomware, retail ]
Hoeren Gartencenter GmbH was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-04-20. Sector: Retail & E-Commerce. Country: Germany. Website: www.blumen-hoeren.de.
-
Engie
April 20, 2026
•
[ ransomware, energy ]
Engie was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-20. Sector: Energy & Utilities. Country: France. Website: engie.com. [AI generated] Engie is a French multinational energy company headquartered in Paris, France. It operates across the electricity generation, natural gas distribution, and renewable energy sectors. The company provides energy services to individuals, businesses, and local authorities worldwide, with activities spanning power production, infrastructure management, and energy efficiency solutions. Engie is active in over 70 countries globally.
-
Playmates Toys
April 20, 2026
Playmates Toys was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-20. Sector: Retail & E-Commerce. Country: Hong Kong. Website: playmatestoys.com. [AI generated] Playmates Toys is a Hong Kong-based toy manufacturer and distributor founded in 1966. The company operates in the consumer goods and toy industry, specializing in the design, production, and marketing of action figures, dolls, and interactive toys. It is widely recognized for producing licensed products based on popular entertainment franchises, including Teenage Mutant Ninja Turtles and Star Trek, distributing its products globally across major retail markets.
-
Commscope
April 20, 2026
Commscope was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-20. Sector: Technology. Country: United States of America. Website: Commscope.com. [AI generated] CommScope is an American telecommunications infrastructure company headquartered in Hickory, North Carolina. It designs and manufactures network infrastructure solutions including cables, connectivity systems, wireless equipment, and data center infrastructure. The company serves telecommunications providers, enterprises, and government clients worldwide. Founded in 1976, CommScope operates globally across the broadband, wireless, and enterprise networking industries.
-
SIG.biz
April 20, 2026
SIG.biz was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-20. Sector: Professional Services. Country: Switzerland. Website: sig.biz.
-
rheem
April 20, 2026
•
[ ransomware, manufacturing, technology ]
rheem was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-04-20. Sector: Manufacturing. Country: United States of America. Website: rheem.com. Rheem Manufacturing Company
1100 Abernathy Road, Suite 1700
Atlanta, GA 30328, United States
www.rheem.com
is a well-established manufacturer specializing in heating, cooling, and water heating products. Founded in 1925, the company has its headquarters in Atlanta, Georgia, and has grown to become a global leader in its industry.
Company Overview. Rheem produces a wide range of products, including residential and commercial water heaters, boilers, air conditioning units, and heating, ventilation, and air conditioning (HVAC) equipment. The company is particularly noted for its commitment to energy efficiency, offering numerous ENERGY STAR certified products.
Leaked data: 320 GB (479,856 Files, 76,897 Folders)
includes
developments: technical documentation, drawings, test reports and other technical information, employee data containing personal information, corporate information, contracts and agreements (including non-disclosure agreements), financial information and metrics, and much more.
-
Nordenta (a daughter company of LIFCO)
April 20, 2026
•
[ ransomware, healthcare ]
Nordenta (a daughter company of LIFCO) was listed as a victim on the leak site of the kairos ransomware group; the attack is estimated to have taken place on 2026-04-20. Sector: Healthcare. Country: Denmark. Website: nordenta.dk. Nordenta og al dente nyhedsbrev Tilbud, produktnyheder og inspiration Ja tak, jeg vil gerne modtage tilbud, information og nyheder fra Nordenta og al dente via e-mail vedrrende varer og services inden for Nordenta og al dentes produktsortiment. Samtykket kan til enhver tid trkkes tilbage. Personoplysninger behandles fortroligt, ls mere i vores privatlivs- og cookiepolitik.
"The beneficial owner of Nordenta is Carl Bennet".
-
polycorp.com
February 19, 2025
•
[ ransomware, manufacturing, hack ]
polycorp.com was listed as a victim on the leak site of the chaos ransomware group; the attack is estimated to have taken place on 2025-02-19. Sector: Manufacturing. Country: United Kingdom of Great Britain and Northern Ireland. Website: polycorp.com. Data size claimed by the group: 400 GB. If the company does not contact us within 48 hours, the files will be published.
Polycorp is a privately owned Canadian Company that specializes in the design and manufacture of engineered elastomeric parts that provide our customers with cost effective solutions to their corrosion, abrasion, impac
-
ViaQuest
April 21, 2026
•
[ ransomware, healthcare, leak ]
ViaQuest was listed as a victim on the leak site of the anubis ransomware group; the attack is estimated to have taken place on 2026-04-21. Sector: Transportation. Country: United States of America. Website: viaquestinc.com. Large-scale data breach at a care provider for seriously ill patients.
-
Samuel I. White, PC
April 21, 2026
Samuel I. White, PC was listed as a victim on the leak site of the anubis ransomware group; the attack is estimated to have taken place on 2026-04-21. Sector: Professional Services. Country: United States of America. Website: siwpc.net. Significant breach at a law firm.
-
Roman Catholic Archdiocese of St John
April 21, 2026
•
[ ransomware, government ]
Roman Catholic Archdiocese of St John was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-04-21. Sector: Government & Defense. Country: Canada. Website: www.rcsj.org.
-
Champion Homes
April 21, 2026
•
[ ransomware, retail, leak ]
Champion Homes was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-04-21. Sector: Retail & E-Commerce. Country: Australia. Website: championhomes.com.au. Champion Homes is a progressive residential building company which undertakes building work in the Greater Sydney and Illawarra region. Champion Homes operates as a specialist residential builder in the following major segments of the residential home building market: Duplex Builder Knockdown Rebuild Own Designs Narrow Lot Designs New Home Builder Sydney Townhouse Builder New Home Property Sales Project Home Builder Home and Land Packages Sydney Champion Homes is structured to use its construction expertise and resources so as to cater for both individual and corporate clients. Champion Homes has considerable experience building in the older established suburbs of Sydney. Champion Homes can help you with narrow lots, difficult building lots and customise designs to suit your needs. When the time comes to find project home builders in Sydney, Champion homes has earned their reputation as one of the most trusted and reliable project home builders in Australia
-
CHARLES CONSEIL COORDINATION (3CCC)
April 21, 2026
•
[ ransomware, finance, leak ]
CHARLES CONSEIL COORDINATION (3CCC) was listed as a victim on the leak site of the nova ransomware group; the attack is estimated to have taken place on 2026-04-21. Sector: Professional Services. Country: France. La socit CHARLES CONSEIL COORDINATION (3CCC) a t cre le 17 mars 2015, il y a 11 ans. Sa forme juridique est SAS, socit par actions simplifie. Son domaine dactivit est : activit des conomistes de la construction. En 2023, elle tait catgorise Petite ou Moyenne Entreprise. Elle ne possdait pas de salaris, all data have been taken from official ARM used by 3ccc, there is lot of MIX Data, bank transfers etc, if you didn't contact for deal sorry to say that the company will be closed because there is insane data, really sensitive, there is sum of data will be sold if no deal.
https://annuaire-entreprises.data.gouv.fr/entreprise/charles-conseil-coordination-3ccc-810273862
-
Arctic Home Living
February 20, 2026
•
[ ransomware, retail, financial ]
Arctic Home Living was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-02-20. Sector: Retail & E-Commerce. Country: United States of America. Website: arctichomeliving.com. Arctic Home is Alaska's locally owned hot tub dealer with over 25
years of experience, specializing in premium hot tubs, spas, sau
nas, and cold plunges designed for the unique Alaskan environment
.
We will upload corporate data soon. Employee information (scanned
passports, DLs, I9s, SSNs, credit cards information and so on),
customer data, agreements, etc.