-
Cooperativa de Hospitales de Antioquia - COHAN
April 20, 2026
•
[ ransomware, healthcare ]
Cooperativa de Hospitales de Antioquia - COHAN was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-04-20. Sector: Healthcare. Country: Colombia. Website: www.cohan.org.co.
-
imbriefamilylaw.com
April 17, 2026
imbriefamilylaw.com was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-04-17. Sector: Professional Services. Country: United Kingdom of Great Britain and Northern Ireland. Website: imbriefamilylaw.com. The attorneys at the Imbrie Law Firm practice primarily in the following counties: Brazos, Robertson, Burleson, Lee, Gri...
-
The Go Solution
April 20, 2026
•
[ ransomware, technology ]
The Go Solution was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-04-20. Sector: Professional Services. Country: Ireland. Website: www.thegosolution.com.
-
GUEGUEN Avocats
March 19, 2026
•
[ ransomware, finance ]
GUEGUEN Avocats was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-03-19. Sector: Professional Services. Country: France. Website: www.gueguenavocats.com.
-
City'Pro
April 20, 2026
City'Pro was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-04-20. Sector: Professional Services. Country: France. Website: www.city-pro.info.
-
SEL (Safety Engineering Laboratory)
April 20, 2026
•
[ ransomware, manufacturing ]
SEL (Safety Engineering Laboratory) was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-04-20. Sector: Manufacturing. Country: Germany. Website: www.seldirect.com.
-
JOH Investments Limited
April 20, 2026
•
[ ransomware, finance ]
JOH Investments Limited was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-04-20. Sector: Financial Services. Country: Jamaica. Website: myjohgroup.com. Data size claimed by the group: 30 GB. JOH Investments Limited is an officially registered financial entity based in Kingston, Jamaica, holding an active Legal Entity Identifier (LEI) for international operations. The company specializes in investment activities and asset management, maintaining integration with global banking systems for financial transactions.
-
SafeRain
April 20, 2026
•
[ ransomware, technology ]
SafeRain was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-04-20. Sector: Technology. Country: United States of America. Website: www.saferain.com.
-
ATKINSON RITSON SOLICITORS LIMITED
April 20, 2026
•
[ ransomware, leak ]
ATKINSON RITSON SOLICITORS LIMITED was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-04-20. Sector: Professional Services. Country: United Kingdom of Great Britain and Northern Ireland. Website: atkinsonritson.co.uk.
-
B&e Juice
April 20, 2026
•
[ ransomware, retail ]
B&e Juice was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-04-20. Sector: Retail & E-Commerce. Country: United States of America. Website: www.bejuice.com.
-
Hoeren Gartencenter GmbH
April 20, 2026
•
[ ransomware, retail ]
Hoeren Gartencenter GmbH was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-04-20. Sector: Retail & E-Commerce. Country: Germany. Website: www.blumen-hoeren.de.
-
Engie
April 20, 2026
•
[ ransomware, energy ]
Engie was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-20. Sector: Energy & Utilities. Country: France. Website: engie.com. [AI generated] Engie is a French multinational energy company headquartered in Paris, France. It operates across the electricity generation, natural gas distribution, and renewable energy sectors. The company provides energy services to individuals, businesses, and local authorities worldwide, with activities spanning power production, infrastructure management, and energy efficiency solutions. Engie is active in over 70 countries globally.
-
Playmates Toys
April 20, 2026
Playmates Toys was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-20. Sector: Retail & E-Commerce. Country: Hong Kong. Website: playmatestoys.com. [AI generated] Playmates Toys is a Hong Kong-based toy manufacturer and distributor founded in 1966. The company operates in the consumer goods and toy industry, specializing in the design, production, and marketing of action figures, dolls, and interactive toys. It is widely recognized for producing licensed products based on popular entertainment franchises, including Teenage Mutant Ninja Turtles and Star Trek, distributing its products globally across major retail markets.
-
Commscope
April 20, 2026
Commscope was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-20. Sector: Technology. Country: United States of America. Website: Commscope.com. [AI generated] CommScope is an American telecommunications infrastructure company headquartered in Hickory, North Carolina. It designs and manufactures network infrastructure solutions including cables, connectivity systems, wireless equipment, and data center infrastructure. The company serves telecommunications providers, enterprises, and government clients worldwide. Founded in 1976, CommScope operates globally across the broadband, wireless, and enterprise networking industries.
-
SIG.biz
April 20, 2026
SIG.biz was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-20. Sector: Professional Services. Country: Switzerland. Website: sig.biz.
-
rheem
April 20, 2026
•
[ ransomware, manufacturing, technology ]
rheem was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-04-20. Sector: Manufacturing. Country: United States of America. Website: rheem.com. Rheem Manufacturing Company
1100 Abernathy Road, Suite 1700
Atlanta, GA 30328, United States
www.rheem.com
is a well-established manufacturer specializing in heating, cooling, and water heating products. Founded in 1925, the company has its headquarters in Atlanta, Georgia, and has grown to become a global leader in its industry.
Company Overview. Rheem produces a wide range of products, including residential and commercial water heaters, boilers, air conditioning units, and heating, ventilation, and air conditioning (HVAC) equipment. The company is particularly noted for its commitment to energy efficiency, offering numerous ENERGY STAR certified products.
Leaked data: 320 GB (479,856 Files, 76,897 Folders)
includes
developments: technical documentation, drawings, test reports and other technical information, employee data containing personal information, corporate information, contracts and agreements (including non-disclosure agreements), financial information and metrics, and much more.
-
Nordenta (a daughter company of LIFCO)
April 20, 2026
•
[ ransomware, healthcare ]
Nordenta (a daughter company of LIFCO) was listed as a victim on the leak site of the kairos ransomware group; the attack is estimated to have taken place on 2026-04-20. Sector: Healthcare. Country: Denmark. Website: nordenta.dk. Nordenta og al dente nyhedsbrev Tilbud, produktnyheder og inspiration Ja tak, jeg vil gerne modtage tilbud, information og nyheder fra Nordenta og al dente via e-mail vedrrende varer og services inden for Nordenta og al dentes produktsortiment. Samtykket kan til enhver tid trkkes tilbage. Personoplysninger behandles fortroligt, ls mere i vores privatlivs- og cookiepolitik.
"The beneficial owner of Nordenta is Carl Bennet".
-
polycorp.com
February 19, 2025
•
[ ransomware, manufacturing, hack ]
polycorp.com was listed as a victim on the leak site of the chaos ransomware group; the attack is estimated to have taken place on 2025-02-19. Sector: Manufacturing. Country: United Kingdom of Great Britain and Northern Ireland. Website: polycorp.com. Data size claimed by the group: 400 GB. If the company does not contact us within 48 hours, the files will be published.
Polycorp is a privately owned Canadian Company that specializes in the design and manufacture of engineered elastomeric parts that provide our customers with cost effective solutions to their corrosion, abrasion, impac
-
ViaQuest
April 21, 2026
•
[ ransomware, healthcare, leak ]
ViaQuest was listed as a victim on the leak site of the anubis ransomware group; the attack is estimated to have taken place on 2026-04-21. Sector: Transportation. Country: United States of America. Website: viaquestinc.com. Large-scale data breach at a care provider for seriously ill patients.
-
Samuel I. White, PC
April 21, 2026
Samuel I. White, PC was listed as a victim on the leak site of the anubis ransomware group; the attack is estimated to have taken place on 2026-04-21. Sector: Professional Services. Country: United States of America. Website: siwpc.net. Significant breach at a law firm.