-
Sidra Kuwait Hospital
May 28, 2026
Sidra Kuwait Hospital was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-05-28. Sector: Healthcare. Country: Kuwait. Website: sidrakwhospital.com. [AI generated] Sidra Kuwait Hospital is a private healthcare facility located in Kuwait. It provides a range of medical and clinical services to patients, including diagnostics, outpatient consultations, and specialized treatments. Operating within the private healthcare sector in Kuwait, the hospital serves both local residents and expatriates, contributing to the country's growing private medical infrastructure alongside public health institutions.
-
Advanced Psychiatry Associates
May 28, 2026
•
[ ransomware, healthcare ]
Advanced Psychiatry Associates was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-05-28. Sector: Healthcare. Country: United States of America. Website: advancedpsychiatryassociates.com. [AI generated] Advanced Psychiatry Associates is a psychiatric medical practice based in the United States. The company provides comprehensive mental health services, including evaluation, diagnosis, and treatment of psychiatric conditions such as depression, anxiety, ADHD, and bipolar disorder. It operates within the healthcare and behavioral health industry, offering both medication management and therapy services to adult and adolescent patients across its clinic locations.
-
Spedition Kern
May 28, 2026
•
[ ransomware, leak ]
Spedition Kern was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-05-28. Sector: Transportation. Country: Germany. Website: spedition-kern.com.
-
Paid Victim B35411691DDC2265
May 28, 2026
•
[ ransomware ]
Paid Victim B35411691DDC2265 was listed as a victim on the leak site of the AuditTeam ransomware group; the attack is estimated to have taken place on 2026-05-28. Country: Russian Federation.
-
American Battery Factory
May 28, 2026
•
[ ransomware, manufacturing, energy ]
American Battery Factory was listed as a victim on the leak site of the worldleaks ransomware group; the attack is estimated to have taken place on 2026-05-28. Sector: Manufacturing. Country: United States of America. Website: americanbatteryfactory.com. [AI generated] American Battery Factory is a US-based company focused on manufacturing lithium iron phosphate (LFP) battery cells for grid-scale energy storage applications. Operating in the clean energy and advanced manufacturing sector, the company aims to build large-scale gigafactories across the United States to support domestic battery production, reduce reliance on foreign supply chains, and accelerate the transition to renewable energy infrastructure.
-
Fox Rothschild LLP
May 28, 2026
•
[ ransomware, finance, hack ]
Fox Rothschild LLP was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-05-28. Sector: Professional Services. Country: United States of America. Website: foxrothschild.com. [AI generated] Fox Rothschild LLP is a national law firm headquartered in the United States. Founded in 1907, it operates across numerous offices throughout the country, providing legal services in areas including corporate law, litigation, employment law, real estate, and finance. The firm serves a broad range of clients, from individuals and startups to large corporations, operating within the legal services industry in the United States.
-
Corporacion Prokompra
May 28, 2026
Corporacion Prokompra was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-28. Sector: Professional Services. Country: Venezuela (Bolivarian Republic of). ***.com/business-directory/company-profiles.corporacion_prokompra_2020_ca.cafb282c8025c52485cccb47942fa6b9.html Corporacion Prokompra 2020, C.A. is a Venezuelan retail company based in Caracas, operating in the department store and general merchandise sector. The company is led by key principal Tsvi Kornbluth Seinfeld and focuses on home products, cosmetics, sporting goods, and novelty items. Registered in the Mercantile Registry of Caracas, it serves local consumers through traditional retail channels. The business combines regional market knowledge with diversified product offerings to meet everyday consumer needs in Venezuela
-
Heartland Growers
May 28, 2026
•
[ ransomware, manufacturing, retail ]
Heartland Growers was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-28. Sector: Agriculture and Food Production. Country: United States of America. Website: heartlandgrowers.com. heartlandgrowers.com zoominfo.com/c/heartland-growers/48466328 Heartland Growers is a family-owned wholesale greenhouse in Westfield, Indiana, operated by the Gapinski family since 1984. They supply spring annuals, holiday plants, and hydroponic produce to garden centers, florists, and retailers across the Midwest. Their 30-acre modern facility features advanced automation and a skilled workforce of up to 175 employees. Committed to innovation and quality, they combine decades of expertise with sustainable growing practices
-
Fonderia Corra
May 28, 2026
•
[ ransomware, manufacturing, leak ]
Fonderia Corra was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-28. Sector: Manufacturing. Country: Italy. Website: fonderiacorra.com. fonderiacorra.com zoominfo.com/c/fonderia-corra/371359796 Fonderia Corra is an Italian foundry founded in 1946, specializing in high-precision cast iron components for industrial sectors like railway, energy, and machinery. With over 70 years of expertise, they offer in-house services from design optimization to final finishing, ensuring quality, waste reduction, and ISO 9001 certification. The company operates two plants in Thiene and Montebelluna, producing lamellar and spheroidal graphite cast iron using advanced automation and skilled professionals. Family-led since its founding, Fonderia Corra combines tradition, innovation, and passion to shape metal into core elements for demanding global industries
-
Grupo Premier
May 28, 2026
Grupo Premier was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-28. Sector: Retail & E-Commerce. Country: Mexico. Website: grupopremier.com.mx. grupopremier.com.mx zoominfo.com/c/grupo-premier/439704898 Grupo Premier is a leading Mexican company with 50+ years in importing, processing, and distributing nuts and dried fruits. They offer wholesale, retail, and industrial solutions with ISO 22000 certification and advanced quality control systems. The company operates nationwide distribution routes and serves as exclusive distributor for brands like Ocean Spray in Mexico. Headquartered in Mexico, they combine tradition, technology, and trust to deliver premium agricultural products across the country
-
Techmar
May 26, 2026
•
[ ransomware, technology, manufacturing ]
Techmar was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-26. Sector: Technology. Country: United Kingdom of Great Britain and Northern Ireland. Website: techmar.com. techmar.com https://www.zoominfo.com/c/techmar-inc/37699777 is a Dutch company specializing in 12 Volt outdoor lighting solutions since 2002. Headquartered in Hengelo, Netherlands, it designs, produces, and supplies lighting fixtures globally.Products serve gardens, landscapes, and commercial applications with a focus on quality and innovation.The brand emphasizes in-house development, sustainability, and reliable low-voltage technology
-
Mayelia Automotive
May 26, 2026
•
[ ransomware, manufacturing, automotive ]
Mayelia Automotive was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-26. Sector: Manufacturing. Country: Mexico. Website: mayelia.com. mayelia.com zoominfo.com/c/mayelia-automotive/480899337 is an Ivorian automotive company specializing in vehicle technical inspections.Founded in 2019, it operates under Mayelia Participations holding across multiple African sectors.Services include technical checks, stickers, and corporate solutions for drivers and businesses.The company emphasizes customer service, modern equipment, and road safety education
-
Peña & Bromberg
May 28, 2026
•
[ ransomware, leak ]
Pea & Bromberg was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-05-28. Sector: Professional Services. Country: United States of America. Website: jonathanpena.com. A legal firm dedicated to safeguard the rights of its clients
-
entransinternational.com
May 28, 2026
entransinternational.com was listed as a victim on the leak site of the chaos ransomware group; the attack is estimated to have taken place on 2026-05-28. Sector: Professional Services. Country: United States of America. Website: entransinternational.com. STATUS: PENDING PUBLICATION | TIME REMAINING: 72 HOURS
ENTITY: Entrans International (entransinternational.com)
THE REALITY OF ENTRANS INTERNATIONAL
We have been in possession of your internal data for some time. Throughout this period, we have attempted to engage with your management, but their si
-
powerhousenow.com
May 28, 2026
•
[ ransomware, leak ]
powerhousenow.com was listed as a victim on the leak site of the chaos ransomware group; the attack is estimated to have taken place on 2026-05-28. Sector: Professional Services. Country: United States of America. Website: powerhousenow.com. STATUS: PENDING PUBLICATION | TIME REMAINING: 72 HOURS
ENTITY: Powerhouse (powerhousenow.com)
THE REALITY OF POWERHOUSE
We have been in possession of your internal data for some time. We have attempted to engage with your management to resolve this incident professionally, but their silence speaks
-
belimed.com
May 28, 2026
•
[ ransomware, healthcare, finance ]
belimed.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-05-28. Sector: Healthcare. Country: United States of America. Website: belimed.com. We are announcing the successful breach of the secure network of Belimed AG, a leading provider of sterilization equipment. Our team has gained full access to the digital assets of their finance department and has exfiltrated the entire dataset.
Data Volume: 1.5 Terabytes.
In our possession is the complete financial picture of Belimed AG. This isn't just tables or reports; it is the entire nervous system of their business, including:
* **SAP (SUP) Databases:** Full dumps containing all operational and financial information.
* **Accounting Records:** All transactions, entries, and financial operations spanning many years.
* **Client Contracts and Payments:** Detailed information on deals, pricing, and accounts receivable.
* **Employee Data:** Salaries, bonuses, and personal financial information.
* **Internal Audits and Strategic Planning:** Documents revealing their weaknesses, future plans, and trade secrets.
* **Tax Documentation and Banking Details:** All information necessary for a complete understanding of their financial flows.
The management of Belimed AG was given the opportunity to resolve this matter privately and without consequence. They chose silence, believing they could ignore us. This was a fatal mistake. By refusing to engage, they have jeopardized not only their own reputation but also the security of their clients, partners, and employees.
**This is not a threat. It is an announcement of a coming event.**
Exactly one month from the date of this post, the entire 1.5 TB data archive will be published for public access on this resource. Anyonecompetitors, journalists, regulatorswill be able to download and scrutinize the inner workings of Belimed AG.
To the management of Belimed AG: you have made your choice. Now you will serve as an example to all others. Enjoy the consequences. The clock is ticking.
-
ЕРМ
May 29, 2026
was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-05-29. Sector: Professional Services.
-
Asopagos S.A.
May 29, 2026
Asopagos S.A. was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-05-29. Sector: Financial Services. Country: Colombia. Website: asopagos.com.
-
Restorative Therapies, Inc.
May 29, 2026
•
[ ransomware, healthcare, technology ]
Restorative Therapies, Inc. was listed as a victim on the leak site of the AiLock ransomware group; the attack is estimated to have taken place on 2026-05-29. Sector: Healthcare. Country: United States of America. Website: restorative-therapies.com. Restorative Therapies was established in 2004 as a partnership between researchers, engineers, and patient advocates to develop and promote Advanced Rehabilitation Technologies (ART).
-
Shanpoornam Metals
May 29, 2026
•
[ ransomware, manufacturing ]
Shanpoornam Metals was listed as a victim on the leak site of the lamashtu ransomware group; the attack is estimated to have taken place on 2026-05-29. Sector: Manufacturing. Country: Malaysia. Website: shanpoornammetals.com. Shanpoornam Metals is a metal trading and fabrication company supplying a range of raw and processed metal products to manufacturers and construction firms. They provide custom cutting, processing, and distribution services to meet industrial.