Full List

Search

Recent Breaches

• CH Express March 26, 2026 CH Express was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-03-26. Sector: Transportation. Country: Venezuela (Bolivarian Republic of). Website: chxpress.com.ve. chxpress.com.ve C.H. Express C.A. is a Venezuelan logistics and light cargo transport company with over 20 years of experience in the national market. Based in San Diego, Carabobo state a strategically central location the company offers parcel delivery (encomiendas), cargo consolidation, and nationwide distribution across all Venezuelan states. The company continuously invests in fleet renewal, staff training, and technology to maintain efficiency and reliability throughout Venezuela
• Americo Advogados March 26, 2026 Americo Advogados was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-03-26. Sector: Professional Services. Country: Brazil. Website: americoadvogados.com.br. americoadvogados.com.br zoominfo.com/c/americo-advogados-associados/513361264 Americo Advogados Associados is a Brazilian private law firm founded in 1995 and headquartered in Anpolis, Gois, Brazil. The firm is a mid-to-large legal practice with 201500 employees, offering a full range of legal services for individuals and businesses. It is one of the more established regional law firms in the Centre-West of Brazil, serving clients from its main office on Rua Engenheiro Portela in central Anpolis
• Sunspray Food March 26, 2026 Sunspray Food was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-03-26. Sector: Agriculture and Food Production. Country: South Africa. Website: sunspray.co.za. sunspray.co.za zoominfo.com/c/sunspray-food-ingredients-ltd/425184083 Sunspray Solutions (Pty) Ltd, founded in 1944 and headquartered in Johannesburg, South Africa, is the country's largest independent manufacturer of spray-dried food ingredients. The company operates 10 spray dryers across two manufacturing sites (Industria, Johannesburg and Bronkhorstspruit, Gauteng), producing hundreds of products including caramel powders, fat powders, fruit & vegetable powders, creamers, egg powders, and cheese powders. In 2023, Israeli company Turpaz Industries acquired a 55% controlling stake, enabling Sunspray's geographic and portfolio expansion
• Cosmo Group March 26, 2026 • [ ransomware, manufacturing, retail ] Cosmo Group was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-03-26. Sector: Manufacturing. Country: Thailand. Website: cosmo.co.th. cosmo.co.th zoominfo.com/c/cosmo-group-public-co/459326707 Cosmo Group PCL, founded in 1964 and headquartered in Bangkok (Sukhumvit), is a Thai luxury packaging manufacturer with over 60 years of experience. The company specializes in premium gift boxes, displays, watch dials, cases, and accessories for global luxury brands in jewelry, watches, cosmetics, and perfume. With 1,0005,000 employees and a Swiss sales office (Cosmo Pusterla 1880), Cosmo serves top-tier international clients and holds multiple quality and sustainability certifications
• SYSTHERM INFO March 26, 2026 • [ ransomware, technology ] SYSTHERM INFO was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-03-26. Sector: Technology. Country: Poland. Website: systherm-info.pl. systherm-info.pl Systherm Info Sp. z o.o. is a Polish IT company headquartered in Poznan, founded in 1996. It specializes in GIS (Geographic Information Systems), IT solutions, and software security most notably developing GEO-INFO, a leading land information system widely used in Polish geodesy and surveying. The company also distributes world-class software protection solutions (Sentinel/Gemalto) and holds ISO quality certifications
• Sgt March 26, 2026 • [ ransomware, manufacturing ] Sgt was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-03-26. Sector: Professional Services. Country: France. Website: sgt-pet.com. sgt-pet.com zoominfo.com/c/sgt/370244282 SGT founded in 1981 and based in France, is a specialist in PET and RPET packaging . The company designs and manufactures PET/RPET preforms (mono- and multi-layer), HDPE caps, and bottles for the beverage and industrial sectors . With over 200 employees, 26 injection presses, and two recycled PET (SGR) factories, SGT is strongly committed to eco-responsibility and circular packaging .
• Friktimporten Stockholm March 26, 2026 • [ ransomware, retail ] Friktimporten Stockholm was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-03-26. Sector: Retail & E-Commerce. Country: Sweden. Website: fruktimporten.se. fruktimporten.se rocketreach.co/fruktimporten-stockholm-ab-profile_b7bc38e2c53a0296 Fruktimporten Stockholm AB, founded in 2013 and based in Norsborg (Stockholm), is the leading fruit and vegetable wholesaler in the Mlardalen region. They stock over 950 products across a ~5,000 m warehouse, offering fresh produce from around the world loose, packed, cut, and processed. The company is part of Dole Nordic AB, a subsidiary of the global giant Dole plc
• Alert 360 Opco Inc. (alert360.com) April 18, 2026 • [ ransomware, leak, technology ] Alert 360 Opco Inc. (alert360.com) was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-04-18. Sector: Professional Services. Country: United States of America. Website: alert360.com. Over 2.5M records containing PII and other internal corporate data have been compromised. Please read the chatlog of the negociation by cliking the Download button below to see why this data was leaked. | Size: 10GB+ (compressed) | Updated: 18 Apr 2026 | SHA256: 9c5c8225f27a23f1a03526bfd15dad02b5976797664a92bdd53b23f5f9ef3fe3
• Zara (zara.com) April 18, 2026 • [ ransomware, retail, technology ] Zara (zara.com) was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-04-18. Sector: Retail & E-Commerce. Country: Spain. Website: zara.com. Your Bigquery instances data was compromised thanks to Anodot.com. Pay or Leak. This is a final warning to reach out by 21 Apr 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 18 Apr 2026 | Warning: FINAL WARNING PAY OR LEAK
• Carnival Corporation & plc (carnivalcorp.com) April 18, 2026 • [ ransomware, retail, leak ] Carnival Corporation & plc (carnivalcorp.com) was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-04-18. Sector: Hospitality. Country: United States of America. Website: carnivalcorp.com. Over 8.7M records containing PII and other terabytes of internal corporate data have been compromised. Pay or Leak. This is a final warning to reach out by 21 Apr 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 18 Apr 2026 | Warning: FINAL WARNING PAY OR LEAK
• 7-Eleven, Inc. (7-eleven.com) April 18, 2026 • [ ransomware, retail, technology ] 7-Eleven, Inc. (7-eleven.com) was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-04-18. Sector: Retail & E-Commerce. Country: United States of America. Website: 7-eleven.com. Over 600k Salesforce records containing PII and other internal corporate data have been compromised. Pay or Leak. This is a final warning to reach out by 21 Apr 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 18 Apr 2026 | Warning: FINAL WARNING PAY OR LEAK
• Pitney Bowes Inc. (pb.com) April 18, 2026 • [ ransomware, technology, leak ] Pitney Bowes Inc. (pb.com) was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-04-18. Sector: Professional Services. Country: United States of America. Website: pb.com. Over 25M Salesforce records containing PII have been compromised. Pay or Leak. This is a final warning to reach out by 21 Apr 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 18 Apr 2026 | Warning: FINAL WARNING PAY OR LEAK
• The Canada Life Assurance Company (canadalife.com) April 18, 2026 • [ ransomware, leak, finance ] The Canada Life Assurance Company (canadalife.com) was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-04-18. Sector: Financial Services. Country: Canada. Website: canadalife.com. Over 5.6M Salesforce records containing PII have been compromised. Pay or Leak. This is a final warning to reach out by 21 Apr 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 18 Apr 2026 | Warning: FINAL WARNING PAY OR LEAK
• Aman Resorts (aman.com) April 18, 2026 • [ ransomware, leak, retail ] Aman Resorts (aman.com) was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-04-18. Sector: Hospitality. Country: Singapore. Website: aman.com. Over 500k Salesforce records containing PII have been compromised. Pay or Leak. This is a final warning to reach out by 21 Apr 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 18 Apr 2026 | Warning: FINAL WARNING PAY OR LEAK
• Frost Bank April 20, 2026 Frost Bank was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-04-20. Sector: Financial Services. Country: United States of America. Website: frostbank.com. [AI generated] Frost Bank is a Texas-based financial institution and a subsidiary of Cullen/Frost Bankers, Inc. Founded in 1868 and headquartered in San Antonio, it operates across major Texas cities offering personal and commercial banking, wealth management, insurance, and investment services. As one of the largest independent banks in Texas, it serves individuals, businesses, and institutions within the United States financial services industry.
• Citizens Bank April 20, 2026 Citizens Bank was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-04-20. Sector: Financial Services. Country: United States of America. Website: citizensbank.com. [AI generated] Citizens Bank is a major American retail and commercial bank headquartered in Providence, Rhode Island. Operating within the financial services industry, it offers a wide range of products including personal and business banking, loans, mortgages, credit cards, and wealth management services. It serves millions of customers across the United States through branches, ATMs, and digital banking platforms.
• Tokoparts April 20, 2026 • [ ransomware, retail, technology ] Tokoparts was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-04-20. Sector: Retail & E-Commerce. Country: Indonesia. Website: tokoparts.com.
• Complete Aircraft Group April 20, 2026 • [ ransomware, manufacturing ] Complete Aircraft Group was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-04-20. Sector: Manufacturing. Country: United States of America. Website: complete-aircraft.com.
• Umiles Group April 20, 2026 • [ ransomware, technology, leak ] Umiles Group was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-04-20. Sector: Professional Services. Country: Spain. Website: umilesgroup.com. [AI generated] Umiles Group is a Spanish technology and services company specializing in drone operations, urban air mobility, and advanced aerial solutions. Based in Spain, it provides unmanned aerial vehicle services for sectors including logistics, inspection, surveillance, and emergency response. The company also focuses on developing regulatory frameworks and training programs to support the integration of drones into civil airspace across Europe.
• Nutrabio April 20, 2026 • [ ransomware, manufacturing, retail ] Nutrabio was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-04-20. Sector: Agriculture and Food Production. Country: United States of America. Website: nutrabio.com. [AI generated] NutraBio is a US-based dietary supplement manufacturer founded in 1996 and headquartered in Middlesex, New Jersey. The company operates in the health and wellness industry, producing sports nutrition products including protein powders, pre-workouts, vitamins, and recovery supplements. NutraBio is known for its commitment to transparency, using fully disclosed labels and manufacturing products in an FDA-registered, cGMP-certified facility.