-
Zara (zara.com)
April 18, 2026
•
[ ransomware, retail, technology ]
Zara (zara.com) was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-04-18. Sector: Retail & E-Commerce. Country: Spain. Website: zara.com. Your Bigquery instances data was compromised thanks to Anodot.com. Pay or Leak. This is a final warning to reach out by 21 Apr 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 18 Apr 2026 | Warning: FINAL WARNING PAY OR LEAK
-
Carnival Corporation & plc (carnivalcorp.com)
April 18, 2026
•
[ ransomware, retail, leak ]
Carnival Corporation & plc (carnivalcorp.com) was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-04-18. Sector: Hospitality. Country: United States of America. Website: carnivalcorp.com. Over 8.7M records containing PII and other terabytes of internal corporate data have been compromised. Pay or Leak. This is a final warning to reach out by 21 Apr 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 18 Apr 2026 | Warning: FINAL WARNING PAY OR LEAK
-
7-Eleven, Inc. (7-eleven.com)
April 18, 2026
•
[ ransomware, retail, technology ]
7-Eleven, Inc. (7-eleven.com) was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-04-18. Sector: Retail & E-Commerce. Country: United States of America. Website: 7-eleven.com. Over 600k Salesforce records containing PII and other internal corporate data have been compromised. Pay or Leak. This is a final warning to reach out by 21 Apr 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 18 Apr 2026 | Warning: FINAL WARNING PAY OR LEAK
-
Pitney Bowes Inc. (pb.com)
April 18, 2026
•
[ ransomware, technology, leak ]
Pitney Bowes Inc. (pb.com) was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-04-18. Sector: Professional Services. Country: United States of America. Website: pb.com. Over 25M Salesforce records containing PII have been compromised. Pay or Leak. This is a final warning to reach out by 21 Apr 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 18 Apr 2026 | Warning: FINAL WARNING PAY OR LEAK
-
The Canada Life Assurance Company (canadalife.com)
April 18, 2026
•
[ ransomware, leak, finance ]
The Canada Life Assurance Company (canadalife.com) was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-04-18. Sector: Financial Services. Country: Canada. Website: canadalife.com. Over 5.6M Salesforce records containing PII have been compromised. Pay or Leak. This is a final warning to reach out by 21 Apr 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 18 Apr 2026 | Warning: FINAL WARNING PAY OR LEAK
-
Aman Resorts (aman.com)
April 18, 2026
•
[ ransomware, leak, retail ]
Aman Resorts (aman.com) was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-04-18. Sector: Hospitality. Country: Singapore. Website: aman.com. Over 500k Salesforce records containing PII have been compromised. Pay or Leak. This is a final warning to reach out by 21 Apr 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 18 Apr 2026 | Warning: FINAL WARNING PAY OR LEAK
-
Frost Bank
April 20, 2026
Frost Bank was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-04-20. Sector: Financial Services. Country: United States of America. Website: frostbank.com. [AI generated] Frost Bank is a Texas-based financial institution and a subsidiary of Cullen/Frost Bankers, Inc. Founded in 1868 and headquartered in San Antonio, it operates across major Texas cities offering personal and commercial banking, wealth management, insurance, and investment services. As one of the largest independent banks in Texas, it serves individuals, businesses, and institutions within the United States financial services industry.
-
Citizens Bank
April 20, 2026
Citizens Bank was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-04-20. Sector: Financial Services. Country: United States of America. Website: citizensbank.com. [AI generated] Citizens Bank is a major American retail and commercial bank headquartered in Providence, Rhode Island. Operating within the financial services industry, it offers a wide range of products including personal and business banking, loans, mortgages, credit cards, and wealth management services. It serves millions of customers across the United States through branches, ATMs, and digital banking platforms.
-
Tokoparts
April 20, 2026
•
[ ransomware, retail, technology ]
Tokoparts was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-04-20. Sector: Retail & E-Commerce. Country: Indonesia. Website: tokoparts.com.
-
Complete Aircraft Group
April 20, 2026
•
[ ransomware, manufacturing ]
Complete Aircraft Group was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-04-20. Sector: Manufacturing. Country: United States of America. Website: complete-aircraft.com.
-
Umiles Group
April 20, 2026
•
[ ransomware, technology, leak ]
Umiles Group was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-04-20. Sector: Professional Services. Country: Spain. Website: umilesgroup.com. [AI generated] Umiles Group is a Spanish technology and services company specializing in drone operations, urban air mobility, and advanced aerial solutions. Based in Spain, it provides unmanned aerial vehicle services for sectors including logistics, inspection, surveillance, and emergency response. The company also focuses on developing regulatory frameworks and training programs to support the integration of drones into civil airspace across Europe.
-
Nutrabio
April 20, 2026
•
[ ransomware, manufacturing, retail ]
Nutrabio was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-04-20. Sector: Agriculture and Food Production. Country: United States of America. Website: nutrabio.com. [AI generated] NutraBio is a US-based dietary supplement manufacturer founded in 1996 and headquartered in Middlesex, New Jersey. The company operates in the health and wellness industry, producing sports nutrition products including protein powders, pre-workouts, vitamins, and recovery supplements. NutraBio is known for its commitment to transparency, using fully disclosed labels and manufacturing products in an FDA-registered, cGMP-certified facility.
-
Al Sulaiti Law Firm
April 20, 2026
•
[ ransomware, leak, finance ]
Al Sulaiti Law Firm was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-04-20. Sector: Professional Services. Country: Qatar. Website: alsulaitilawfirm.com. Data size claimed by the group: 104 GB. Al Sulaiti Law Firm is one of the largest law firms in Qatar, established in 2002, offering a wide range of legal services including arbitration, banking, corporate, employment, energy, and intellectual property. The firm emphasizes teamwork and collaboration, aiming to build strong relationships with clients to exceed their expectations. With a diverse and innovative team, they provide high-quality professional services tailored to meet the unique needs of their clients. Their commitment to integrity and client satisfaction has earned them recognition and respect in the legal community.
-
Better House
April 20, 2026
Better House was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-04-20. Sector: Retail & E-Commerce. Data size claimed by the group: 46 GB. Better House Development specializes in real estate projects, offering a wide range of properties including residential apartments, villas, and various types of houses such as Twin Houses and Town Houses. The company has successfully implemented over 150 projects, focusing on providing high-quality service and maximizing return on investment for its clients. Their developments are located in prominent areas such as New Capital, Sky Capital, and Galala City.
-
Integra Architecture
November 13, 2025
•
[ ransomware, leak, technology ]
Integra Architecture was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-11-13. Sector: Professional Services. Country: Canada. Website: integra-arch.com. Integra Architecture Inc. is an award-winning architecture firm b
ased in downtown Vancouver, specializing in innovative design sol
utions. The firm focuses on a variety of projects, including mixe
d-use developments and affordable housing initiatives.
We will upload over 180gb of corporate data soon. Employee inform
ation, client data, lots of project files, drawings and specifica
tions, client data, contracts and agreements, NDAs, etc.
-
Jesin Group
April 20, 2026
•
[ ransomware, retail ]
Jesin Group was listed as a victim on the leak site of the lamashtu ransomware group; the attack is estimated to have taken place on 2026-04-20. Sector: Other. Country: Malaysia. Website: jesin.com.my. Jesin Group is a prominent property developer in Northern Malaysia with over 50 years of experience, specializing in residential and commercial real estate development, construction, and asset management.
-
Cooperativa de Hospitales de Antioquia - COHAN
April 20, 2026
•
[ ransomware, healthcare ]
Cooperativa de Hospitales de Antioquia - COHAN was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-04-20. Sector: Healthcare. Country: Colombia. Website: www.cohan.org.co.
-
imbriefamilylaw.com
April 17, 2026
imbriefamilylaw.com was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-04-17. Sector: Professional Services. Country: United Kingdom of Great Britain and Northern Ireland. Website: imbriefamilylaw.com. The attorneys at the Imbrie Law Firm practice primarily in the following counties: Brazos, Robertson, Burleson, Lee, Gri...
-
The Go Solution
April 20, 2026
•
[ ransomware, technology ]
The Go Solution was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-04-20. Sector: Professional Services. Country: Ireland. Website: www.thegosolution.com.
-
GUEGUEN Avocats
March 19, 2026
•
[ ransomware, finance ]
GUEGUEN Avocats was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-03-19. Sector: Professional Services. Country: France. Website: www.gueguenavocats.com.