-
Rogiken / institute of Science Tokyo
April 15, 2026
•
[ ransomware, education, technology ]
Rogiken / institute of Science Tokyo was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Education. Country: Japan. Website: rogiken.org. [AI generated] Rogiken is a research organization affiliated with the Institute of Science Tokyo, a Japanese national university formed through the merger of Tokyo Institute of Technology and Tokyo Medical and Dental University. It operates in Japan within the academic and scientific research sector, focusing on advanced engineering, natural sciences, and interdisciplinary studies. The institute supports innovation, technology development, and collaboration between academia and industry.
-
Kemenpppa
April 15, 2026
•
[ ransomware, government ]
Kemenpppa was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Government & Defense. Country: Indonesia. Website: keemenpppa.go.id. [AI generated] Kemenpppa, short for Kementerian Pemberdayaan Perempuan dan Perlindungan Anak, is an Indonesian government ministry responsible for empowering women and protecting children. Operating in Indonesia, it develops and oversees policies related to gender equality, women's rights, child protection, and social welfare. The ministry works to eliminate discrimination, violence, and exploitation affecting women and children across the country.
-
Millenium Packaging
April 15, 2026
•
[ ransomware, manufacturing ]
Millenium Packaging was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Manufacturing. Country: United States of America. Website: mil-pkg.com.
-
Questivity
April 15, 2026
•
[ ransomware, technology ]
Questivity was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Professional Services. Country: United States of America. Website: questivity.com.
-
Wayne Brothers Construction
April 15, 2026
•
[ ransomware, manufacturing, leak ]
Wayne Brothers Construction was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Manufacturing. Country: United States of America. Website: waynebrothers.com.
-
GL Steel
April 15, 2026
•
[ ransomware, manufacturing ]
GL Steel was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Manufacturing. Country: Poland. Website: glsteel.pl.
-
Superintendency of territorial planning
April 15, 2026
•
[ ransomware, government ]
Superintendency of territorial planning was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Government & Defense. Country: Ecuador. Website: sot.gob.ec.
-
Epoch Times
April 15, 2026
•
[ ransomware, technology, leak ]
Epoch Times was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Retail & E-Commerce. Country: United States of America. Website: epochtimes.com. [AI generated] Epoch Times is an American media company founded in 2000 by Chinese-American Falun Gong practitioners. It operates newspapers, websites, and video content across multiple countries, publishing in numerous languages. The company covers news, politics, health, and culture, but has drawn scrutiny from researchers and platforms for spreading misinformation and promoting far-right narratives. It is headquartered in New York, USA.
-
Vluznet
April 15, 2026
•
[ ransomware, technology ]
Vluznet was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-15. Country: United States of America. Website: vluznet.com.
-
UOM University
April 15, 2026
UOM University was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Education. Country: Malta. Website: www.uom.gr.
-
Gruppo ICM SPA
April 15, 2026
Gruppo ICM SPA was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Manufacturing. Country: Italy. Website: www.gruppoicm.com.
-
Truckload Carriers Association
March 26, 2026
•
[ ransomware, leak, finance ]
Truckload Carriers Association was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-03-26. Sector: Transportation. Country: United States of America. Website: truckload.org. Truckload Carriers Association is a national trade association fo
cused on the truckload segment of the motor carrier industry.
We will upload 21gb of corporate data soon. Personal data of empl
oyees, detailed financials, contracts and agreements, customer an
d partner files, projects, etc.
-
The Epoch Times
April 15, 2026
The Epoch Times was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Retail & E-Commerce. Country: United States of America. Website: theepochtimes.com. [AI generated] The Epoch Times is a American media company founded in 2000 by John Tang and other Falun Gong practitioners. It operates as a multi-platform news outlet publishing print and digital content in multiple languages across numerous countries. The company is known for promoting conservative viewpoints and has been associated with spreading misinformation. It operates primarily in the United States with a significant global reach.
-
Limkon
April 15, 2026
•
[ ransomware, manufacturing ]
Limkon was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-04-15. Country: Turkey. Website: www.limkon.com.
-
guesty, LITELLM/TRIVY CAMPAIGN (TEAMPCP)
April 15, 2026
•
[ ransomware, technology, retail ]
guesty, LITELLM/TRIVY CAMPAIGN (TEAMPCP) was listed as a victim on the leak site of the vect ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Technology. Country: Israel. Website: www.guesty.com. Status: STATUS: NEGOTIATING | Sector: property management | internal projects, 4 million sent/received mails with attachments, userbase, Airbnb and booking.com data stolen from guesty DATA SIZE: 700GB | Deadline: 9d 8h
-
S&PGLOBAL, LiteLLM/Trivy campaign (TeamPCP)
October 5, 2025
•
[ ransomware, technology ]
S&PGLOBAL, LiteLLM/Trivy campaign (TeamPCP) was listed as a victim on the leak site of the vect ransomware group; the attack is estimated to have taken place on 2025-10-05. Sector: Technology. Country: United States of America. Website: www.spglobal.com/en. Status: STATUS: NEGOTIATING | Sector: Business Services | Internal projects, secrets, api keys etc DATA SIZE: 250GB | Deadline: 8d 8h
-
Uniwersytet Warszawski
April 15, 2026
•
[ ransomware, education, leak ]
Uniwersytet Warszawski was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Education. Country: Poland. Website: uw.edu.pl. The Faculty of Management at the University of Warsaw is a leading institution in the field of business education, offering a wide range of undergraduate and graduate programs that combine theory with practical experience. However, it is not known for its high level of security and data storage reliability, resulting in the leak of data on students, instructors, and leading professors, as well as student projects and papers.
-
Clearwater Marine Aquarium
April 13, 2026
•
[ ransomware, retail ]
Clearwater Marine Aquarium was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-04-13. Sector: Retail & E-Commerce. Country: United States of America. Website: www.cmaquarium.org.
-
FriendlyCare Pharmacy
April 15, 2026
•
[ ransomware, healthcare ]
FriendlyCare Pharmacy was listed as a victim on the leak site of the kairos ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Healthcare. Country: Australia. Website: friendlycare.com.au. FriendlyCare Pharmacy offers a wide range of health and beauty products, including cosmetics, skincare, personal care, and medical devices. Their services cater to various health needs such as asthma care, diabetes management, and first aid supplies. The pharmacy targets a diverse clientele, including individuals seeking general health products, beauty enthusiasts, and families in need of baby care items. With multiple store locations and a commitment to customer satisfaction, they provide a price match guarantee and free shipping on orders over $99.
-
Harris Beach Murtha
April 7, 2026
Harris Beach Murtha was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-04-07. Sector: Professional Services. Country: United States of America. Website: harrisbeachmurtha.com. [AI generated] Harris Beach Murtha is a full-service law firm operating in the United States, primarily in the northeastern region. Formed through the merger of Harris Beach and Murtha Cullina, the firm provides legal services across areas including corporate law, litigation, real estate, healthcare, and public finance. It serves clients ranging from businesses and municipalities to nonprofits and individuals across Connecticut, New York, and nearby states.