-
Stonehenge
April 6, 2026
•
[ ransomware, manufacturing ]
Stonehenge was listed as a victim on the leak site of the lynx ransomware group; the attack is estimated to have taken place on 2026-04-06. Sector: Other. Country: United Kingdom of Great Britain and Northern Ireland. Website: stonehenge.o.uk. Stonehenge Co Ltd is a company that operates in the Commercial & Residential Construction industry. It employs 250to499 people and has 10Mto25M of revenue. The company is headquartered in Phra Nakhon Si Ayutthaya, Phra Nakhon Si Ayutthaya, Thailand.
-
Gastroenterology & Hepatology of CNY
April 14, 2026
•
[ ransomware, healthcare, leak ]
Gastroenterology & Hepatology of CNY was listed as a victim on the leak site of the exitium ransomware group; the attack is estimated to have taken place on 2026-04-14. Sector: Healthcare. Country: United States of America. Website: gandhofcny.com. Website: gandhofcny.com
Zoominfo: https://www.zoominfo.com/c/gastroenterology--hepatology-of-cny-pc/346091487
Data sample, whole internal data will be sold if they wouldn't pay ransom.
Also Digestive Disease Center of CNY, LLC (ddcofcny.com)
GI practice + AAAHC-accredited endoscopy center. Syracuse, New York, USA.
Full database for sale 167,303 patients, 124,761 SSN, 49,798 with sensitive diagnoses:
- 167,303 patients 124,761 with SSN, 166,402 (99%) with address, 164,296 (98%) with phone, 85,318 (51%) with email
- 1,093,863 diagnoses (ICD-10), 1,547,142 medications, 186,246 pathology specimens with narrative reports
- Sensitive (dx + meds): 49,798 patients 44,861 with SSN. Mental health: 43,902 | Substance/Alcohol: 5,111 | STIs: 2,779 | Cancer: 2,708 | Hepatitis C: 1,906
- Includes notable individuals (politicians, businesspeople, public figures)
-
Hacked 0APT
April 14, 2026
•
[ ransomware, technology ]
Hacked 0APT was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-04-14. Sector: Technology. Website: Hacked 0APT. Next time, don't play with the big boys.
The response will be fast....
-
LACROIX
April 14, 2026
LACROIX was listed as a victim on the leak site of the lamashtu ransomware group; the attack is estimated to have taken place on 2026-04-14. Sector: Manufacturing. Country: Canada. Website: palacroix.com. Pices d'Auto Lacroix is a Canadian company specializing in the retail distribution of automotive parts and accessories across several locations in Quebec.
-
Flash Charm INC - (IDERA)
April 14, 2026
•
[ ransomware, technology ]
Flash Charm INC - (IDERA) was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-14. Sector: Technology. Country: United States of America. Website: idera.com. [AI generated] Flash Charm Inc is a software company associated with Idera, Inc., a US-based technology firm headquartered in Houston, Texas. Idera develops and provides database management, developer tools, and test management software solutions. Its products support database administrators and developers across multiple platforms. Flash Charm Inc appears to operate as a subsidiary or affiliated entity within Idera's broader portfolio of software brands serving enterprise IT markets.
-
bela - pharm
April 15, 2026
•
[ ransomware, healthcare ]
bela - pharm was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Healthcare. Country: Germany. Website: www.bela-pharm.com. bela-pharm GmbH specializes in the production of veterinary pharmaceuticals aimed at enhancing animal health. Their product range includes solutions for various livestock such as pigs, cattle, poultry, horses, sheep, goats, and small pets. The company serves veterinarians and international clients, offering expertise in drug production and approval. Committed to quality and innovation, bela-pharm focuses on ensuring safe and effective treatments for animals worldwide.
-
McCOR
April 15, 2026
McCOR was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Professional Services. Country: Canada. Website: mccor.ca. McCor is a leading real estate and property management company in Canada, specializing in commercial, retail, and residential property management services. The company offers a comprehensive range of services including investment management, advisory services, leasing, and project management, targeting clients involved in real estate developments. McCor prides itself on building long-term partnerships through innovation, collaboration, and a strong focus on value creation. Their proactive approach ensures high levels of tenant satisfaction and operational efficiency, catering to a diverse clientele across various market segments
-
Curtis Design Group
April 15, 2026
•
[ ransomware, leak ]
Curtis Design Group was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Professional Services. Country: United States of America. Website: curtisdesigngroup.com. Curtis Design Group specializes in home architecture and design, creating beautiful and livable spaces tailored to the needs of families and developers. They focus on understanding client dreams and site specifics to produce detailed blueprints that reflect those visions. The company emphasizes a collaborative approach, ensuring clients are delighted with the final designs before working with builders. Their services extend beyond Utah, aiming to create homes that endure and bring joy for generations.
-
VOLTERRIES
April 15, 2026
•
[ ransomware, energy ]
VOLTERRIES was listed as a victim on the leak site of the lamashtu ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Energy & Utilities. Country: France. Website: volterres.fr. Volterres, a subsidiary of the Eiffage group, is reinventing the supply of green electricity for businesses and public sector players.
-
Fletcher Chrysler Products
April 15, 2026
Fletcher Chrysler Products was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Manufacturing. Country: United States of America. Website: fletcherchrysler.com. Fletcher Chrysler Dodge Jeep Ram is a dealership located in Frank
lin, IN, offering a wide selection of new and used Chrysler, Dodg
e, Jeep, and Ram vehicles. They serve clients in Franklin, Indian
apolis, Shelbyville, and surrounding areas, providing assistance
in vehicle purchasing, financing options, and automotive services
.
We will upload 28gb of corporate data soon. Personal data of empl
oyees (passports, DLs, SSNs and others), financials, contracts an
d agreements, client files, and so on.
-
INDESMALLA
February 20, 2026
•
[ ransomware, manufacturing ]
INDESMALLA was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-02-20. Sector: Manufacturing. Country: Argentina. Website: indesmalla.com. Indesmalla is a family business with two production plants, one w
ith raschel machines and the other with Ketten machines. It produ
ces knitted weft (circular) fabric and knitted and finished weft
fabrics in different weights, draws and elasticity.
We will upload corporate data soon. Personal data of employees, f
inancials, contracts and agreements, lots of client files, projec
ts, NDA, internal confidential files and so on.
-
CIR Realty
April 1, 2026
•
[ ransomware, retail, leak ]
CIR Realty was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-04-01. Sector: Professional Services. Country: Canada. Website: cirrealty.ca. Established in 1983, CIR Realty is a real estate brokerage in Can
ada, serving the Central and Southern Alberta markets. They are h
eadquartered in Calgary, Alberta.
We will upload 25gb of corporate data soon. Detailed personal dat
a of employees (names, emails, addresses, phones, photos, persona
l documents) and clients (names, emails, addresses, driver licens
es, phones, payment detailed, account details and so on), detaile
d financials, contracts and agreements, lots of client files, pro
jects, NDA, internal confidential files and so on.
-
Cognizant
April 15, 2026
Cognizant was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Professional Services. Country: United States of America. Website: cognizant.com. [AI generated] Cognizant is a multinational information technology and professional services company headquartered in Teaneck, New Jersey, USA. It operates in the IT services and consulting industry, offering digital transformation, technology, and business process outsourcing services. Founded in 1994, Cognizant serves clients across healthcare, financial services, manufacturing, and retail sectors globally, with major delivery centers in India.
-
Astreya
April 15, 2026
•
[ ransomware, technology ]
Astreya was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Technology. Country: United States of America. Website: astreya.com. [AI generated] Astreya is a US-based IT managed services company headquartered in Sunnyvale, California. It provides technology workforce solutions, IT support, infrastructure management, and digital workplace services to large enterprises. Operating primarily in the information technology services industry, Astreya partners with major technology firms globally, delivering staffing and managed IT services across multiple countries while maintaining its core operations in the United States.
-
Sampol
April 15, 2026
•
[ ransomware, energy, technology ]
Sampol was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Energy & Utilities. Country: Spain. Website: sampol.com. [AI generated] Sampol is a Spanish engineering and services company headquartered in Mallorca, Spain. It operates in the energy, industrial, and infrastructure sectors, offering services such as electrical installations, renewable energy solutions, facility management, and maintenance. The company works across multiple countries, primarily in Spain and international markets, serving both public and private clients in areas including smart grids, sustainability, and industrial automation.
-
La Maison Bleue France
April 15, 2026
•
[ ransomware, retail ]
La Maison Bleue France was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Hospitality. Country: France. Website: la-maison-bleue.fr.
-
Rogiken / institute of Science Tokyo
April 15, 2026
•
[ ransomware, education, technology ]
Rogiken / institute of Science Tokyo was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Education. Country: Japan. Website: rogiken.org. [AI generated] Rogiken is a research organization affiliated with the Institute of Science Tokyo, a Japanese national university formed through the merger of Tokyo Institute of Technology and Tokyo Medical and Dental University. It operates in Japan within the academic and scientific research sector, focusing on advanced engineering, natural sciences, and interdisciplinary studies. The institute supports innovation, technology development, and collaboration between academia and industry.
-
Kemenpppa
April 15, 2026
•
[ ransomware, government ]
Kemenpppa was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Government & Defense. Country: Indonesia. Website: keemenpppa.go.id. [AI generated] Kemenpppa, short for Kementerian Pemberdayaan Perempuan dan Perlindungan Anak, is an Indonesian government ministry responsible for empowering women and protecting children. Operating in Indonesia, it develops and oversees policies related to gender equality, women's rights, child protection, and social welfare. The ministry works to eliminate discrimination, violence, and exploitation affecting women and children across the country.
-
Millenium Packaging
April 15, 2026
•
[ ransomware, manufacturing ]
Millenium Packaging was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Manufacturing. Country: United States of America. Website: mil-pkg.com.
-
Questivity
April 15, 2026
•
[ ransomware, technology ]
Questivity was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Professional Services. Country: United States of America. Website: questivity.com.