-
Startec Group of Companies
April 23, 2026
Startec Group of Companies was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-04-23. Sector: Professional Services. Country: Philippines. Startec Group of Companies, a privately held Calgary-based industrial OEM founded in 1976 by Joe Cawthorn. Startec designs, fabricates, installs, and services compression, process, and refrigeration systems for oil-and-gas operators and the energy-transition sector (RNG, hydrogen, CO&sub2; sequestration, flare-gas capture). The company employs ~270 people and exports ~80% of its cleantech output to US customers including Pembina, ARC Resources, SemCAMS, Cenovus, and Shell. The exposed material spans the entire corporate knowledge base: 25 years of payroll (20012026) including a master SIN VERIFICATION.xlsx register, ADP exports, T4/ROE/T2200 forms, banking/EFT direct-deposit data for ~600+ current and former employees 18+ named passport scans plus a Pakistan resume-and-passport applicant pool (~20+) Wildcard TLS private keys for *.startec.ca (20222027 series) and the suspected Active-Directory-integrated internal CA private key The cyber-insurance policy (BZA2151) and the Nov 2025 Statement of Values & Business-Interruption submission to Zurich ~25+ named customer engineering libraries (Pembina, ARC, SemCAMS, Cenovus, Shell Scotford) with process specs, as-built drawings, and sizing calculations Shell Caroline + Shell Saturn dispute-counsel files (~665 MB of privileged litigation material) 12 fiscal years of board packs including in camera sessions, the 2020 Valuation Report, family-trust T3 returns, and succession-planning documents Cawthorn family QuickBooks files (live .QBW full chart of accounts, general ledger, every transaction) 11 Outlook PST mailboxes (several multi-GB named ex-employees' complete email history) Physical-security access codes (CCTV passwords, Telsco alarm chart, all-doors key record)
-
Saharuang
May 12, 2026
•
[ ransomware, manufacturing ]
Saharuang was listed as a victim on the leak site of the lamashtu ransomware group; the attack is estimated to have taken place on 2026-05-12. Sector: Other. Country: Thailand. Website: saharuang.com. Company operates a large-scale sugar mill and refinery in the Saraburi province, producing various types of sugar for both domestic and export markets.
-
NaRaYa
May 12, 2026
•
[ ransomware, retail ]
NaRaYa was listed as a victim on the leak site of the lamashtu ransomware group; the attack is estimated to have taken place on 2026-05-12. Sector: Retail & E-Commerce. Country: Thailand. Website: naraya.com. NaRaYa is a famous Thai brand recognized worldwide for its distinctive fabric bags and accessories. Founded in 1989, it has grown into one of Asia's most influential brands, specializing in high-quality, handcrafted products that showcase Thai crafts
-
Avanti Windows & Doors
May 12, 2026
Avanti Windows & Doors was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-05-12. Sector: Manufacturing. Country: United States of America. Avanti Windows & Doors a vinyl window manufacturer headquartered in El Mirage, Arizona, with regional offices across Nevada, Texas, California, and Florida.
The exposed material includes:
Plaintext SQL Server SA (system administrator) credentials the master key to the FeneVision ERP database containing every customer order, every price, every financial record the company has ever processed.
Employee SSNs, W-4s, I-9s, and E-Verify data the complete identity package for the entire workforce, from new-hire packets through payroll records spanning 20142016+.
1099-MISC/INT forms SSNs/EINs and payment amounts for 50200+ contractors and vendors across two tax years.
Direct deposit authorizations bank account and routing numbers for employees who enrolled in ACH payroll.
24+ months of Chase bank statements and 28 months of AMEX corporate card statements full account numbers, transaction details, and spending patterns.
The complete proprietary pricing algorithm source code for the FastAPI backend that determines window pricing for every builder contract, plus 41+ builder Master Service Agreements with exact pricing terms.
CPA-reviewed financial statements, partnership returns, K-1s, and budget forecasts the companys full financial anatomy, from cost structure to profit allocation.
OSHA 300 logs, workers compensation audit files, and UHC health insurance invoices employee medical and injury data, names of injured workers, treatment details.
Attorney-client privileged ADOSH settlement correspondence OSHA settlement negotiations between outside counsel and the CEO.
~80 Windows roaming profiles employee desktops, documents, AppData, Outlook .ost/.pst files, browser caches, and cached credentials.
-
Vision 3 Architects
April 24, 2026
•
[ ransomware, leak, technology ]
Vision 3 Architects was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-04-24. Sector: Professional Services. Country: United States of America. Website: vision3architects.com. Vision 3 Architects is a collaborative and responsive design studio specializing in architectur
e and interior design projects. They focus on crafting spaces that reflect each client's vision
and values, ensuring a design environment that fosters creativity and collaboration.
We will upload 31gb of corporate data soon. Detailed employee personal information (passports,
DLs, SSNs and so on), contracts and agreements, client information, projects, NDAs, etc.
-
Manhattan Broadcasting
May 6, 2026
•
[ ransomware, technology, leak ]
Manhattan Broadcasting was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-05-06. Sector: Technology. Country: United States of America. Website: manhattanbroadcasting.com. Manhattan Broadcasting Company is a leading source of local and regional news, sports, weather,
and entertainment in Northeast Kansas, engaging over 100,000 listeners weekly.
We will upload of corporate data soon. Employee personal informatics, contracts, lots of pictur
es and other files.
-
Mediapost Spain
May 12, 2026
•
[ ransomware, technology ]
Mediapost Spain was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-12. Sector: Professional Services. Country: Spain. Website: www.mediapost.es.
-
Kaplan Companies
April 7, 2026
•
[ ransomware, financial, leak ]
Kaplan Companies was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-04-07. Sector: Professional Services. Country: United States of America. Website: thinkkaplan.com. Kaplan Companies specializes in providing rental and commercial properties, focusing on new hom
es and maintenance services for current residents. The company aims to cater to individuals and
families seeking quality housing solutions.
We will upload 45gb of corporate data soon. Employee and owners personal information (passports
, DLs, SSNs, and other personal docs), contracts and agreements, client information, financials
, payment details, projects files, drawings and specifications and so on.
-
Taylor Clay Products
October 7, 2025
•
[ ransomware, manufacturing ]
Taylor Clay Products was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-10-07. Sector: Manufacturing. Country: United States of America. Website: taylorclaybrick.com. Taylor Clay Products specializes in premium architectural brick, thin brick, and custom masonry
solutions, catering to architects and builders for over 75 years. The company offers a wide se
lection of colors, textures, and finishes, including custom blends tailored to specific project
s.
We will upload 72gb of corporate data soon. Employee personal information (DL and other persona
l docs), contracts, client information, drawings and specifications.
-
Bestat Pharmaservices Corp.
May 12, 2026
•
[ ransomware, healthcare ]
Bestat Pharmaservices Corp. was listed as a victim on the leak site of the worldleaks ransomware group; the attack is estimated to have taken place on 2026-05-12. Sector: Healthcare. Country: Taiwan. Website: bestat.com.tw.
-
dentoncalvary.org
March 31, 2026
dentoncalvary.org was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-03-31. Sector: Healthcare. Country: United States of America. Website: dentoncalvary.org. Denton Calvary Academy is a K-12 University-Model school that focuses on fostering a love of learnin...
-
GeTeCe
May 12, 2026
•
[ ransomware, technology, manufacturing ]
GeTeCe was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-12. Sector: Technology. Country: Germany. Website: getece.com. getece.com zoominfo.com/c/getece-co-ltd/353619915 GeTeCe is Thailand's trusted ingredients partner since 1978, specializing in premium chemicals, fragrances, flavours, and food ingredients for diverse manufacturing industries. With four decades of expertise, a state-of-the-art blending facility, and strategic global partnerships, they deliver tailored solutions backed by deep market insights and regulatory compliance. Their dedicated technical team and reliable supply chain empower clients to innovate confidently and stay ahead in competitive markets across Southeast Asia
-
Amstel Securities
May 12, 2026
•
[ ransomware, finance ]
Amstel Securities was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-12. Sector: Financial Services. Country: Netherlands. Website: amstelsecurities.com. amstelsecurities.com zoominfo.com/c/amstel-securities-llp/353641962 Amstel Securities is a premier independent brokerage firm founded in 1989, connecting Asian and global markets with 35+ years of expertise in fixed income, equities, and derivatives. As a trusted agency and matched-principal broker, they specialize in Southeast Asian domestic currency bonds, high-yield credit, and G7 markets, serving institutional clients with unbiased execution and deep liquidity. Backed by strategic partnerships with BNY Mellon's Pershing for clearing and custody, they deliver secure, efficient solutions for wealth managers, family offices, and accredited investors worldwide
-
Dodson & Horrell
May 12, 2026
Dodson & Horrell was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-12. Sector: Agriculture and Food Production. Country: United Kingdom of Great Britain and Northern Ireland. Website: dodsonandhorrell.com. dodsonandhorrell.com zoominfo.com/c/dodson--horrell-ltd/21104188 Dodson Horrell is a world-leading, family-run feed manufacturer established in 1939, specializing in premium nutrition for horses, poultry, and zoo animals. With over 80 years of expertise, their science-backed formulations and dedicated Nutritional Helpline empower owners to care for every animal as an individual. As exclusive feed partners to the British Equestrian Teams and a trusted name across global equestrian communities, they combine heritage, innovation, and unwavering quality
-
Value Exchange International
May 12, 2026
•
[ ransomware, technology, finance ]
Value Exchange International was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-12. Sector: Financial Services. Country: Hong Kong. Website: valueexch.com. valueexch.com Value Exchange International Inc. is a trailblazing retail technology leader with over 30 years of expertise, delivering comprehensive digital solutions across Asia, the UK, Australia, and New Zealand. Their 300+ professionals provide 24/7 Managed Operations, Systems Integration, and innovative retail hardware from Electronic Shelf Labels to AI-powered inspection robots powering 20,000+ daily POS transactions and HK$400+ billion in annual retail sales. With a customer-centric approach and cutting-edge technology, VEII empowers retailers to thrive through seamless digital transformation and operational excellence
-
SETCAR
May 12, 2026
SETCAR was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-12. Sector: Transportation. Country: Tunisia. Website: setcar.com.tn. setcar.com.tn zoominfo.com/c/setcar/507355731 SETCAR is Tunisia's pioneering private manufacturer of buses, coaches, and minibuses, with over 50 years of excellence since 1976. Partnering with global leaders like Volvo and Iveco, they produce up to 500 vehicles annually, serving public transport, tourism, and institutional clients across Africa and the Middle East. With a 300-strong expert team, advanced production facilities, and dedicated after-sales support, SETCAR delivers innovative, eco-friendly mobility solutions built for reliability and performance
-
Oriental Diamond
May 12, 2026
•
[ ransomware, manufacturing, retail ]
Oriental Diamond was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-12. Sector: Manufacturing. Country: Japan. Website: orientaldiamond.jp. orientaldiamond.jp Oriental Diamond Inc. is a pioneering Japanese diamond enterprise established in 1966, specializing in the import, design, and manufacturing of fine diamond jewelry and loose stones. As the first company in Japan to earn the prestigious Sightholder qualification, they combine global sourcing with in-house craftsmanship to deliver conflict-free diamonds and elegant collections like Hoshi no Suna. With a heritage of excellence and a diversified portfolio spanning jewelry, bridal, and traditional kimono wholesale, they continue to innovate as a trusted market leader in Tokyo's luxury sector
-
Electroban SAE
May 12, 2026
•
[ ransomware, manufacturing, retail ]
Electroban SAE was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-12. Sector: Manufacturing. Country: Paraguay. Website: electroban.com.py. electroban.com.py zoominfo.com/c/electroban-sae/372861276 Electroban is a leading 100% Paraguayan retail company founded in 2007, specializing in home appliances, electronics, furniture, and motorcycles. With nationwide coverage through numerous branches and home delivery, they serve over 100,000 customers with a certified e-commerce platform and reliable after-sales support. Backed by a team of 700+ employees and values like honesty and continuous learning, Electroban is expanding toward 70 stores to bring innovation and quality of life to families across Paraguay
-
Qatar National Broadband
May 12, 2026
•
[ ransomware, technology, government ]
Qatar National Broadband was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-12. Sector: Technology. Country: Qatar. Website: qnbn.qa. qnbn.qa zoominfo.com/c/qatar-national-broadband-network-qnbn/1121927707 Qatar National Broadband Network is a government-owned leader in passive fiber infrastructure, established in 2011 to power Qatar's digital transformation and National Vision 2030. With nationwide fiber-optic coverage, QNBN enables ultra-fast, secure connectivity for homes, businesses, and government through open access for all licensed service providers. Strategic partnerships with Microsoft and Carnegie Mellon Qatar underscore its commitment to innovation, AI readiness, and cyber-resilient infrastructure all delivered with sustainability and future-ready excellence
-
Shajarpak Securities
May 12, 2026
•
[ ransomware, finance, technology ]
Shajarpak Securities was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-12. Sector: Financial Services. Country: Iran. Website: shajarpaksecurities.com. shajarpaksecurities.com Shajarpak Securities is a trusted SECP-licensed brokerage and part of the Shajarpak Group, empowering clients with secure online trading on the Pakistan Stock Exchange. Their seasoned equity team brings 60+ years of combined experience, delivering timely market insights and best-in-class execution with strict compliance and ethical standards. With a robust Oracle-based platform, mobile apps, and dedicated support for NRPs and institutional investors, they make intelligent investing accessible anytime, anywhere
