-
Sunlight Express Airways
April 16, 2026
Sunlight Express Airways was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-04-16. Sector: Transportation. Country: Philippines. Website: sunlightair.ph. Data size claimed by the group: 200 GB. Sunlight Air offers affordable flights to popular Philippine island destinations such as Cebu, Coron, Boracay, Siquijor, and Siargao. The airline provides various services including private charters, vacation packages, and a loyalty program called Sunlight Miles. Targeting both leisure and business travelers, Sunlight Air aims to enhance the travel experience with exclusive passenger perks and flexible booking options. With a commitment to expanding flight frequencies and routes, the company continues to facilitate convenient travel across the Philippines.
-
Marino Food Products Pvt
April 16, 2026
•
[ ransomware, manufacturing ]
Marino Food Products Pvt was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-04-16. Sector: Agriculture and Food Production. Country: Sri Lanka. Website: marino.co.in. Data size claimed by the group: 30 GB. Marino Food Products Pvt Ltd, based in Hyderabad, India, specializes in a wide range of healthy and delicious bakery items including biscuits, cookies, cakes, and breads. The company is dedicated to providing high-quality food products that combine wellness with taste, making them an ideal choice for health-conscious consumers. Their offerings are available for online ordering and in various retail stores, ensuring accessibility for their clients. Marino aims to be the go-to destination for snacking bliss, with a commitment to crafting irresistible snacks that satisfy cravings while promoting a healthy lifestyle.
-
Franziskusschule Wilhelmshaven
April 16, 2026
Franziskusschule Wilhelmshaven was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-04-16. Sector: Education. Country: Germany. Website: franziskus-whv.de. Data size claimed by the group: 13 GB. Franziskusschule Wilhelmshaven is a school located in Wilhelmshaven, a city in northern Germany on the North Sea coast. The name Franziskusschule indicates that it is a Franciscan or Catholic school, often inspired by the values of Saint Francis of Assisi, emphasizing community, social responsibility, and moral education alongside academic learning.
-
R Roese Contracting
April 16, 2026
•
[ ransomware, manufacturing ]
R Roese Contracting was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-04-16. Sector: Manufacturing. Country: United States of America. Website: rroese.com. R. Roese Contracting Company Inc. is a leading provider of underg
round and aerial construction services, specializing in telecommu
nications, water and sewer, electric, and gas transmission and di
stribution.
We will upload 61gb of corporate data soon. Personal data of empl
oyees (passports, phones, emails and so on), financials, client d
ata, lots of project files, NDAs, etc.
-
Pharmathek
April 16, 2026
Pharmathek was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-04-16. Sector: Healthcare. Country: Germany. Website: pharmathek.com. Pharmathek specializes in the development, production, and instal
lation of automated warehouses and robots specifically designed f
or pharmacies. The company offers innovative technologies, includ
ing the third-generation SINTESI robot, which enhances performanc
e and user experience with customizable interfaces and smartphone
connectivity.
We will upload corporate data soon. Personal data of clients and
employees (passports, contacts and so on), financials, client dat
a, projects, NDAs, etc.
-
Law Offices of JamesC Shields
March 18, 2026
•
[ ransomware, leak, finance ]
Law Offices of JamesC Shields was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-03-18. Sector: Professional Services. Country: United States of America. Website: shieldslaw.net. The Law Offices of James C. Shields specializes in bankruptcy, es
tate planning, and probate services, providing tailored legal sol
utions to clients in Southern California. With over 15 years of e
xperience, the firm has assisted thousands in navigating financia
l difficulties and planning for the future.
We will upload corporate data soon. Personal data of clients (pas
sports, DLs, SSNs, death/birth certificates, financials and other
docs), detailed financials, court files, investigations, police
reports, etc.
-
Qatar Biomedical Research Institute (QBRI)
April 17, 2026
•
[ ransomware, healthcare, technology ]
Qatar Biomedical Research Institute (QBRI) was listed as a victim on the leak site of the crypto24 ransomware group; the attack is estimated to have taken place on 2026-04-17. Sector: Healthcare. Country: Qatar. Website: www.hbku.edu.qa/en/qbri. [AI generated] Qatar Biomedical Research Institute (QBRI) is a research institute based in Qatar, operating under Hamad Bin Khalifa University. It focuses on biomedical research in areas such as genomics, diabetes, cancer, and neurological disorders. QBRI aims to advance precision medicine and translational research to address health challenges prevalent in Qatar and the broader region, contributing to the country's science and innovation goals.
-
medicalnetworks CJ GmbH & Co. KG
April 17, 2026
•
[ ransomware, healthcare, technology ]
medicalnetworks CJ GmbH & Co. KG was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-04-17. Sector: Healthcare. Country: Germany. Website: medicalnetworks.de. Medicalnetworks specializes in integrated healthcare solutions, offering services such as ascleoncare and Hybrid-DRG billing. Their products are designed to streamline processes for health insurance providers and medical practices. The company aims to enhance the efficiency of healthcare delivery through innovative technology. Their intended clients include healthcare providers and insurance companies seeking to improve their operational workflows
-
bgcsnv.org
April 2, 2026
•
[ ransomware, education ]
bgcsnv.org was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-04-02. Sector: Education. Country: United States of America. Website: bgcsnv.org. Boys & Girls Club of Southern Nevada provides a safe and engaging environment for youth through various programs, including early childhood learning, summer camps, and mental health services. With 13 clubhouses across the region, they aim to support children in achieving their potential regardless of their background. The organization encourages community involvement and offers opportunities for volunteering and sponsorship. Their mission is to create a positive impact on the lives of young people in Southern Nevada.
Employees: 200
Revenue: 15.3 Million
Industry: Membership Organizations
Phone Number: (702) 367-2582
-
treelawoffice.com
April 1, 2026
•
[ ransomware, finance ]
treelawoffice.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-04-01. Sector: Professional Services. Country: United States of America. Website: treelawoffice.com. Tree Law is a Social Security Disability law firm with 25 years of experience, dedicated to representing claimants in their pursuit of Social Security disability benefits. The firm specializes in assisting disabled individuals who are unable to work, guiding them through the entire Social Security process from initial applications to federal court. With a proven track record of helping thousands of clients, Tree Law aims to provide financial and medical benefits to those in need. Their services are available in Yakima and Tri-Cities, WA.
Employees: 50
Revenue: $5 Million
Industry: Law Firms & Legal Services
Phone Number: (509) 452-1700
-
Fagen Friedman & Fulfrost LLP
April 17, 2026
•
[ ransomware, education ]
Fagen Friedman & Fulfrost LLP was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-04-17. Sector: Professional Services. Country: United States of America. Website: f3law.com. [AI generated] Fagen Friedman & Fulfrost LLP is a California-based law firm specializing in education law. The firm provides legal services exclusively to public educational agencies, including K-12 school districts, community colleges, and county offices of education throughout California. Its practice areas include labor and employment, special education, student matters, governance, and litigation. The firm operates entirely within the United States.
-
putzbaer.berlin
April 15, 2026
•
[ ransomware, retail ]
putzbaer.berlin was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Retail & E-Commerce. Country: Germany. Website: putzbaer.berlin. putzbr Gebudemanagement GmbH is a building management company based in Berlin, specializing in a wide range of servi...
-
HBX Group
April 17, 2026
•
[ ransomware, technology ]
HBX Group was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-04-17. Sector: Professional Services. Country: Singapore. Website: www.hbxgroup.com.
-
GoTip
April 16, 2026
•
[ ransomware, leak, technology ]
GoTip was listed as a victim on the leak site of the ransomexx ransomware group; the attack is estimated to have taken place on 2026-04-16. Sector: Professional Services. Country: Japan. Website: gotip.jp. GoTip - 1.13GB leaked. Gotip.jp is a Japanese live-streaming enhancement tool that connects digital tips (donations) to physical Bluetooth-enabled devices. It allows viewers to support creators by sending tips, which in turn trigger actions on devices owned by the creator, aimed at making live streams more interactive and engaging.
-
st-bernards.bham.sch.uk
April 17, 2026
•
[ ransomware, education ]
st-bernards.bham.sch.uk was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-04-17. Sector: Education. Country: United Kingdom of Great Britain and Northern Ireland. Website: st-bernards.bham.sch.uk. St Bernards provides primary education for children, including: English, maths, science and general curriculum subjects Religious education (Catholic values are
-
favellefavco.com
February 24, 2026
favellefavco.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-02-24. Sector: Manufacturing. Country: Malaysia. Website: favellefavco.com. Favelle Favco is a leading manufacturer of heavy-duty cranes, including: - tower cranes - offshore cranes - wharf and marine
-
thruwayplumbingservice.com
April 17, 2026
•
[ ransomware, retail ]
thruwayplumbingservice.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-04-17. Sector: Retail & E-Commerce. Country: United States of America. Website: thruwayplumbingservice.com. The business provides standard residential and commercial plumbing services, including: - Leak detection and pipe repair - Drain cleaning and
-
lynxprecast.co.uk
April 17, 2026
•
[ ransomware, manufacturing ]
lynxprecast.co.uk was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-04-17. Sector: Professional Services. Country: United Kingdom of Great Britain and Northern Ireland. Website: lynxprecast.co.uk. Lynx Precast Ltd is a UK-based construction manufacturing company specialising in the design, manufacture and installation of precast concrete products
-
genealogysa.org.au
April 17, 2026
•
[ ransomware, technology, leak ]
genealogysa.org.au was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-04-17. Sector: Retail & E-Commerce. Country: Australia. Website: genealogysa.org.au. Genealogy SA, formally known as the South Australian Genealogy & Heraldry Society, is a leading Australian nonprofit organisation dedicated to
-
abfall-kreis-kassel.de
February 16, 2026
•
[ ransomware, government ]
abfall-kreis-kassel.de was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-02-16. Sector: Government & Defense. Country: Germany. Website: abfall-kreis-kassel.de. The website abfall-kreis-kassel.de represents the Abfallentsorgung Kreis Kassel, a publicly owned waste management entity (Eigenbetrieb) operated by the district of
