Portend Breaches

CIR Realty April 1, 2026 • [ ransomware, retail, leak ] CIR Realty was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-04-01. Sector: Professional Services. Country: Canada. Website: cirrealty.ca. Established in 1983, CIR Realty is a real estate brokerage in Can ada, serving the Central and Southern Alberta markets. They are h eadquartered in Calgary, Alberta. We will upload 25gb of corporate data soon. Detailed personal dat a of employees (names, emails, addresses, phones, photos, persona l documents) and clients (names, emails, addresses, driver licens es, phones, payment detailed, account details and so on), detaile d financials, contracts and agreements, lots of client files, pro jects, NDA, internal confidential files and so on.

Cognizant April 15, 2026 Cognizant was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Professional Services. Country: United States of America. Website: cognizant.com. [AI generated] Cognizant is a multinational information technology and professional services company headquartered in Teaneck, New Jersey, USA. It operates in the IT services and consulting industry, offering digital transformation, technology, and business process outsourcing services. Founded in 1994, Cognizant serves clients across healthcare, financial services, manufacturing, and retail sectors globally, with major delivery centers in India.

Astreya April 15, 2026 • [ ransomware, technology ] Astreya was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Technology. Country: United States of America. Website: astreya.com. [AI generated] Astreya is a US-based IT managed services company headquartered in Sunnyvale, California. It provides technology workforce solutions, IT support, infrastructure management, and digital workplace services to large enterprises. Operating primarily in the information technology services industry, Astreya partners with major technology firms globally, delivering staffing and managed IT services across multiple countries while maintaining its core operations in the United States.

Sampol April 15, 2026 • [ ransomware, energy, technology ] Sampol was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Energy & Utilities. Country: Spain. Website: sampol.com. [AI generated] Sampol is a Spanish engineering and services company headquartered in Mallorca, Spain. It operates in the energy, industrial, and infrastructure sectors, offering services such as electrical installations, renewable energy solutions, facility management, and maintenance. The company works across multiple countries, primarily in Spain and international markets, serving both public and private clients in areas including smart grids, sustainability, and industrial automation.

La Maison Bleue France April 15, 2026 • [ ransomware, retail ] La Maison Bleue France was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Hospitality. Country: France. Website: la-maison-bleue.fr.

Rogiken / institute of Science Tokyo April 15, 2026 • [ ransomware, education, technology ] Rogiken / institute of Science Tokyo was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Education. Country: Japan. Website: rogiken.org. [AI generated] Rogiken is a research organization affiliated with the Institute of Science Tokyo, a Japanese national university formed through the merger of Tokyo Institute of Technology and Tokyo Medical and Dental University. It operates in Japan within the academic and scientific research sector, focusing on advanced engineering, natural sciences, and interdisciplinary studies. The institute supports innovation, technology development, and collaboration between academia and industry.

Kemenpppa April 15, 2026 • [ ransomware, government ] Kemenpppa was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Government & Defense. Country: Indonesia. Website: keemenpppa.go.id. [AI generated] Kemenpppa, short for Kementerian Pemberdayaan Perempuan dan Perlindungan Anak, is an Indonesian government ministry responsible for empowering women and protecting children. Operating in Indonesia, it develops and oversees policies related to gender equality, women's rights, child protection, and social welfare. The ministry works to eliminate discrimination, violence, and exploitation affecting women and children across the country.

Millenium Packaging April 15, 2026 • [ ransomware, manufacturing ] Millenium Packaging was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Manufacturing. Country: United States of America. Website: mil-pkg.com.

Questivity April 15, 2026 • [ ransomware, technology ] Questivity was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Professional Services. Country: United States of America. Website: questivity.com.

Wayne Brothers Construction April 15, 2026 • [ ransomware, manufacturing, leak ] Wayne Brothers Construction was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Manufacturing. Country: United States of America. Website: waynebrothers.com.

GL Steel April 15, 2026 • [ ransomware, manufacturing ] GL Steel was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Manufacturing. Country: Poland. Website: glsteel.pl.

Superintendency of territorial planning April 15, 2026 • [ ransomware, government ] Superintendency of territorial planning was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Government & Defense. Country: Ecuador. Website: sot.gob.ec.

Epoch Times April 15, 2026 • [ ransomware, technology, leak ] Epoch Times was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Retail & E-Commerce. Country: United States of America. Website: epochtimes.com. [AI generated] Epoch Times is an American media company founded in 2000 by Chinese-American Falun Gong practitioners. It operates newspapers, websites, and video content across multiple countries, publishing in numerous languages. The company covers news, politics, health, and culture, but has drawn scrutiny from researchers and platforms for spreading misinformation and promoting far-right narratives. It is headquartered in New York, USA.

Vluznet April 15, 2026 • [ ransomware, technology ] Vluznet was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-15. Country: United States of America. Website: vluznet.com.

UOM University April 15, 2026 UOM University was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Education. Country: Malta. Website: www.uom.gr.

Gruppo ICM SPA April 15, 2026 Gruppo ICM SPA was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Manufacturing. Country: Italy. Website: www.gruppoicm.com.

Truckload Carriers Association March 26, 2026 • [ ransomware, leak, finance ] Truckload Carriers Association was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-03-26. Sector: Transportation. Country: United States of America. Website: truckload.org. Truckload Carriers Association is a national trade association fo cused on the truckload segment of the motor carrier industry. We will upload 21gb of corporate data soon. Personal data of empl oyees, detailed financials, contracts and agreements, customer an d partner files, projects, etc.

The Epoch Times April 15, 2026 The Epoch Times was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Retail & E-Commerce. Country: United States of America. Website: theepochtimes.com. [AI generated] The Epoch Times is a American media company founded in 2000 by John Tang and other Falun Gong practitioners. It operates as a multi-platform news outlet publishing print and digital content in multiple languages across numerous countries. The company is known for promoting conservative viewpoints and has been associated with spreading misinformation. It operates primarily in the United States with a significant global reach.

Limkon April 15, 2026 • [ ransomware, manufacturing ] Limkon was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-04-15. Country: Turkey. Website: www.limkon.com.

guesty, LITELLM/TRIVY CAMPAIGN (TEAMPCP) April 15, 2026 • [ ransomware, technology, retail ] guesty, LITELLM/TRIVY CAMPAIGN (TEAMPCP) was listed as a victim on the leak site of the vect ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Technology. Country: Israel. Website: www.guesty.com. Status: STATUS: NEGOTIATING | Sector: property management | internal projects, 4 million sent/received mails with attachments, userbase, Airbnb and booking.com data stolen from guesty DATA SIZE: 700GB | Deadline: 9d 8h

Recent Breaches