-
rolser.com
May 25, 2026
•
[ ransomware, retail, manufacturing ]
rolser.com was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-05-25. Sector: Retail & E-Commerce. Country: Spain. Website: rolser.com. Rolser specializes in producing a variety of eco-friendly and practical products, including folding and non-folding shopping carts, eco-friendly ironing boards, stylish shopping bags, and versatile aluminum ladders. The product range meets a variety of customer needs, including families with children, eco-conscious consumers, and those seeking convenient home solutions. Rolser emphasizes innovation and quality, offering special edition series and accessories to enhance the user experience.
-
IDS Group
May 25, 2026
IDS Group was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-05-25. Sector: Professional Services. Country: United States of America. Website: idsgi.com. IDS Group IDS Group is an award-winning multi-discipline design, engineering, and management consulting firm based in Southern California. More
-
North Dallas Shared Ministries
May 25, 2026
•
[ ransomware, healthcare, retail ]
North Dallas Shared Ministries was listed as a victim on the leak site of the cmdorganization ransomware group; the attack is estimated to have taken place on 2026-05-25. Sector: Retail & E-Commerce. Country: United States of America. Website: www.ndsm.org. Now-Forward is a non-profit organization based in Dallas that provides a range of essential services such as financial aid, medical and dental care, food, clothing, and ESL classes to low-income families. Established to effectively serve the urgent needs of the community, they have been a trusted resource for over 40 years, assisting residents facing unexpected life challenges. The organization supports their mission through donations, volunteer work, and partnerships with local entities, ensuring that 96% of their funds are directed toward client services. Their extensive offerings also include tax preparation and school supply assistance, enabling families to achieve greater stability and self-sufficiency.
-
vdmtrucking.com
April 29, 2026
•
[ ransomware, manufacturing ]
vdmtrucking.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-04-29. Sector: Transportation. Country: Canada. Website: vdmtrucking.com. Headquartered in Edmonton, Alberta, the company has operated for more than 40 years and has developed into a significant regional
-
cyuou.com
May 25, 2026
cyuou.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-05-25. Country: Japan. Website: cyuou.com. Founded in 2000, the company specializes in website development, digital advertising, graphic design, Wi-Fi infrastructure projects, and online business support
-
tme-rusta.de
May 25, 2026
tme-rusta.de was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-05-25. Sector: Professional Services. Country: Germany. Website: tme-rusta.de. The company was originally founded in Munich in 1966 as an artistic metalworking workshop and later expanded into woodworking, plastics
-
eitecpro.co.jp
May 25, 2026
•
[ ransomware, technology ]
eitecpro.co.jp was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-05-25. Sector: Technology. Country: Japan. Website: eitecpro.co.jp. Founded in 1988 and headquartered in Osaka, the company operates multiple regional offices across Japan, including Tokyo, Yokohama, Nagoya, Sendai,
-
De Waard Transport
May 1, 2026
•
[ ransomware ]
De Waard Transport was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-05-01. Sector: Transportation. Country: Netherlands. Website: www.dewaardtransport.nl. Netherlands
-
Open Door Health Center
May 25, 2026
•
[ ransomware, healthcare ]
Open Door Health Center was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-05-25. Sector: Healthcare. Country: United States of America. Website: odhc.org. Open Door Health Center of Illinois offers a comprehensive medical home approach to primary health care, focusing on improving community health since 1977. Their services include medical assistance, HIV programs, behavioral health, case management, and community outreach, catering especially to LGBTQI individuals and those living with HIV/AIDS. The center aims to provide affordable and accessible healthcare without discrimination, while also engaging in education and training initiatives. Their intended clients include patients in need of medical care, community members seeking support, and volunteers looking to contribute to health equity.
-
MyPillow
May 17, 2026
•
[ ransomware, retail ]
MyPillow was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-05-17. Sector: Retail & E-Commerce. Country: United States of America. Website: www.mypillow.com. United States
-
Legend Networking & Telecom
May 15, 2026
•
[ ransomware, technology ]
Legend Networking & Telecom was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-05-15. Sector: Technology. Country: United States of America. Website: www.legendnt.com. United States
-
Round Hill Country Club
May 19, 2026
Round Hill Country Club was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-05-19. Sector: Hospitality. Country: United States of America. Website: www.rhcountryclub.com. United States
-
NL Fisher
April 21, 2026
•
[ ransomware, retail ]
NL Fisher was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-04-21. Sector: Agriculture and Food Production. Country: Netherlands. Website: www.nlfisher.com. Canada
-
GW Mechanical
May 20, 2026
•
[ ransomware, technology ]
GW Mechanical was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-05-20. Sector: Professional Services. Country: United States of America. Website: www.gwmechanical.com. United States
-
PILLER AIMMCO
May 25, 2026
•
[ ransomware, manufacturing, technology ]
PILLER AIMMCO was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-05-25. Sector: Manufacturing. Country: United States of America. Website: pilleraimmco.com. PILLER AIMMCO is a leading vertically integrated custom plastic injection molding and tool-making company based in Woodland and Washougal, Washington. The company serves as a "one-stop shop" by managing the entire manufacturing lifecycle under one rooffrom initial part design and engineering to mold production, automated high-volume manufacturing, and secondary assembly.
PILLER AIMMCO holds ISO 9001:2015 certifications across both its tooling and molding operations, enabling it to support rigorous industrial regulations:
1. Medical Devices & Biotech: Fluid management components, orthodontic instruments, and lab devices that meet FDA, biocompatibility, and sterilization metrics.
2. Aerospace & Defense: Specialized tooling, gauges, fixtures, and finished components requiring absolute traceability.
3. Consumer Electronics: Complex enclosures, wearable technology components, and carbon-fiber-filled metal replacements.
4. Industrial & Agriculture: Heavy-duty commodities, nursery containers, large housings, and automotive/heavy trucking aftermarket parts
-
basatamfi
May 25, 2026
•
[ ransomware, finance ]
basatamfi was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-05-25. Sector: Financial Services. Country: Egypt.
-
BASE SPA
May 25, 2026
•
[ ransomware, leak, financial ]
BASE SPA was listed as a victim on the leak site of the spacebears ransomware group; the attack is estimated to have taken place on 2026-05-25. Sector: Professional Services. Country: Italy. Website: www.basespa.com/en/the-company. BASE S.p.A.is a company internationally operating in the field ofgoods inspection, in themanagement of commodities loading/unloading and logistic services, in the pertinentcertificationsandcustoms brokerage, generally offers full assistance in the international trading being present in about35 countries worldwide. BASE S.p.A. is established in 1983 as International Freight Forwarder, Custom House Broker and Inspection Company and achieved important goals, becoming one of the more affirmed and known operator of the field of the port services. The Company got an immediate commercial success, all now is in continuous growth, increasing her own business volume day by day, developing in the years an international top quality network. The Company specialized itself incontainers and project cargo handling, waste recycling promotion, bulk dry & liquid cargo traffic, control and survey. The operative administrative centre is placed in Livorno, from where local staff, Italian branches, and companys world partners are monitored and followed up. The constant growth of business volume has allowed to saving and the private financing her own business by continuous investments in the staffs know-how, supporting the staff by training finalized to professional grew, in innovation and expansion of the national and international structures, making certain thebest solution to tradersto any tied up problem related to the commodities manipulation, allowing them to bringing trade in absolute serenity and safely. In fact ourefficacy consists of ensuring an individual solution to each client, sorting out for their demands. -Confidential information-Personal information of employees and clients-Financial documents-Other files https://www.basespa.com/en/the-company/
-
Hunter
May 19, 2026
•
[ ransomware, technology ]
Hunter was listed as a victim on the leak site of the spacebears ransomware group; the attack is estimated to have taken place on 2026-05-19. Sector: Professional Services. Country: Ireland. Website: hunter.io. Hunter was created by Antoine Finkelstein and Franois Grante in 2015. Freshly graduated, they saw the untapped potential of cold emails and wanted to address the challenges of prospecting and finding contact information. To achieve great success rate while complying with privacy regulations, they decided to use emails found on the public web. Email Hunter was born. Soon rebranded as Hunter, the tool quickly became a game-changer in business intelligence. Within weeks, it attracted thousands of users thanks to its user-friendly interface, handy browser extension, affordable pricing, and data accuracy. Unlike its peers, Hunter aimed not at large enterprises but at making cold emailing accessible to all. Over time, Hunter grew into a comprehensive email outreach platform, offering everything from finding contact information to sending cold emails. Antoine and Franois, with a focused team, continued to empower professionals with simple, powerful tools.-Personal information of employees and clients-Databse-Financial documents-Other files https://hunter.io/
-
Filabé
May 13, 2026
•
[ ransomware, retail, manufacturing ]
Filab was listed as a victim on the leak site of the spacebears ransomware group; the attack is estimated to have taken place on 2026-05-13. Sector: Agriculture and Food Production. Country: Switzerland. Website: www.filabe.ch. Filab of Switzerland is a skincare company that uses a unique, additive-free technology to treat skin problems. Developed alongside dermatologists and pharmacists in Switzerland, the brand focuses on a science-based approach to skincare. In 2025, they won a PETA Award for "Best Vegan Innovation" due to their animal-friendly cosmetic concepts -Personal information of employees and clients -Financial documents -Other files https://www.filabe.ch/
-
H-W-G & Acros Sport
May 26, 2026
•
[ ransomware, manufacturing, technology ]
H-W-G & Acros Sport was listed as a victim on the leak site of the lamashtu ransomware group; the attack is estimated to have taken place on 2026-05-26. Sector: Retail & E-Commerce. Country: Germany. Website: h-w-g.com. HWG (h-w-g.com): German manufacturer of bearings and mechanical components for industrial machinery and automation.
Acros Components (acros-components.com): Distributor and supplier of electronic components and related logistics/technical support.