Full List

Search

Recent Breaches

• Desert Christian Schools (DCS) May 5, 2026 Desert Christian Schools (DCS) was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Education. Country: United States of America. K-12 Christian school affiliated with First Baptist Church of Lancaster, CA. ADP payroll, DCFS childcare program, City of Lancaster Water Safety program. Financial docs: P&L, Balance Sheet, Trial Balance, 1099s. School Board minutes 2025.
• SIT Group / Robusta May 5, 2026 SIT Group / Robusta was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Professional Services. Country: Italy. Website: sitgroup.it. Italian company SIT Group (sitgroup.it) and Bulgarian Robusta (robusta.bg). Also abv.bg emails.
• Atencio Engineering May 5, 2026 Atencio Engineering was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Manufacturing. Country: United States of America. Website: atencioengineering.com. Civil engineering & land surveying firm. Services: site plans, boundary surveys, OWTS (septic) design, fire line design, elevation certificates, flood plain analysis. Clients in Las Animas County, Pueblo County, Florence CO area.
• Trimble Inc / Gerrard Inc November 7, 2025 Trimble Inc / Gerrard Inc was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2025-11-07. Sector: Technology. Country: United States of America. Website: trimble.com. Technology company Trimble (trimble.com) and Gerrard Inc (gerrardinc.com). ~18 Trimble email addresses.
• Magnolia (Israel) May 5, 2026 • [ ransomware, retail, leak ] Magnolia (Israel) was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Retail & E-Commerce. Country: Israel. Website: magnolia-jewellery.com. Israeli jewelry company. Silver & accessories, participates in Vicenza jewelry fair (2025/2026). Sells via buyme.co.il gift cards. ~38k files, invoices in Hebrew (SI/IN/OV prefix).
• Strategic Imports May 5, 2026 Strategic Imports was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Professional Services. Country: Australia. Australian auto parts/batteries importer. Brands: Strategic Imports, Auto Parts Now, Discount Batteries Now. User: bstuart (Brad Stuart). QNAP NAS (CACHEDEV1_DATA).
• Bandeirante Supermercados May 5, 2026 • [ ransomware, retail ] Bandeirante Supermercados was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Retail & E-Commerce. Country: Brazil. Website: bandeirantesupermercados.com.br. Brazilian supermarket chain.
• Elken Sdn Bhd May 5, 2026 • [ ransomware, retail ] Elken Sdn Bhd was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Retail & E-Commerce. Country: Malaysia. Website: elken.com. MLM / health & beauty products company. ~16k emails extracted.
• Sysco May 5, 2026 • [ ransomware, manufacturing ] Sysco was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Agriculture and Food Production. Country: United States of America. Website: www.sysco.com.
• Scales and Associates Inc May 5, 2026 • [ ransomware, technology ] Scales and Associates Inc was listed as a victim on the leak site of the sinobi ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Professional Services. Country: United States of America. Website: scalesassoc.com. Scales & Associates, Inc. is a firm that specializes in engineering and architecture, focusing on creating intelligent and economical solutions for their clients. They adopt a strategic, big-picture perspective, ensuring that all components of a project work together efficiently for overall success. Their services are designed to meet both current needs and future demands. The company is DBE certified and operates from Detroit, MI.
• Ropers Majeski April 23, 2026 • [ ransomware, leak, finance ] Ropers Majeski was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-04-23. Sector: Professional Services. Country: United States of America. Website: ropers.com. [AI generated] Ropers Majeski is a law firm based in the United States, operating primarily in California. The firm provides legal services across a range of practice areas including litigation, insurance defense, business law, employment law, and professional liability. It serves corporate clients, insurers, and individuals, with offices in multiple California cities. The firm is known for its work in complex civil litigation and risk management counsel.
• ttt.vn TTT Corporation May 5, 2026 • [ ransomware, manufacturing, government ] ttt.vn TTT Corporation was listed as a victim on the leak site of the stormous ransomware group; the attack is estimated to have taken place on 2026-05-05. Country: Vietnam. Website: ttt.vn. $900k to Solve the Problem 5TB While TTT Company was preoccupied with designing luxurious interiors and architectural masterpieces, they completely overlooked the design of a secure network. We have spent enough time within their internal infrastructure to conclude that their security is incredibly fragile. We have successfully exfiltrated all of the company's data and now possess 5 TB of the most sensitive information, including complete blueprints and CAD designs for prestigious clients (Toyota showrooms, gyms, luxury resorts, and government projects). We have accessed every employee's personal drive, including IDs, passports, and private medical records. Furthermore, we hold confidential contracts, tax reports (BCTC), internal financial audits, and detailed security schematics for client buildings.
• WOHA May 6, 2026 WOHA was listed as a victim on the leak site of the lamashtu ransomware group; the attack is estimated to have taken place on 2026-05-06. Sector: Hospitality. Country: Singapore. Website: woha.net. WOHA is a renowned Singapore-based architectural practice founded in 1994 by Wong Mun Summ and Richard Hassell. The firm is globally recognized for its integration of environmental and social principles into high-density urban settings.
• Farmers Association of Iceland May 3, 2026 • [ ransomware, manufacturing ] Farmers Association of Iceland was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-03. Sector: Agriculture and Food Production. Country: Iceland. Website: bondi.is. bondi.is Farmers Association of Iceland, is Iceland's primary agricultural interest organization representing approximately 3,000 people employed in farming and agriculture-related jobs across the country. The association acts as the official advocate for Icelandic farmers in public forums, protecting their interests in matters of policy, economics, and sustainability, while also developing climate action roadmaps for sustainable farm management. Headquartered in Borgartn 25 in Reykjavk, B publishes agricultural statistics, supports farm productivity improvement, and bridges the gap between society and food producers
• La Kaffa International May 3, 2026 • [ ransomware, retail ] La Kaffa International was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-03. Sector: Agriculture and Food Production. Country: Italy. Website: lakaffagroup.com. lakaffagroup.com zoominfo.com/c/la-kaffa-international-co-ltd/426003975 La Kaffa International is a publicly listed Taiwanese multinational food and beverage group (Taiwan Stock Exchange, code: 2732), founded in 2004 and headquartered in Zhubei City, Hsinchu County, Taiwan, with over 663 employees and annual revenues around $46 million. The company is best known as the parent brand of Chatime the world-famous bubble tea chain expanded to 50+ countries across 6 continents, making it the top takeout tea brand in Australia, Southeast Asia, and beyond. Beyond Chatime, La Kaffa manages a multi-brand portfolio of 9+ F&B concepts including ZenQ Dessert, Bake Code Bakery, ChunSun Cake, La Kaffa Cafe, Wagokoro Tonkatsu, and Osaka Ohsho Taiwan, with over 1,100 outlets in China alone
• Diviso Grupo Financiero April 29, 2026 • [ ransomware, finance ] Diviso Grupo Financiero was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-04-29. Sector: Financial Services. Country: Peru. Website: diviso.pe. diviso.pe zoominfo.com/c/diviso-grupo-financiero-sa/372139811 Diviso Grupo Financiero S.A. is a Lima-based financial holding company founded in 2003 (formerly NCF Inversiones SA, rebranded in November 2013). With around 1,0005,000 employees and led by CEO Jos Romero Tapia, it offers a comprehensive portfolio of capital market services through its two main subsidiaries DIVISO Fondos (mutual and investment funds) and DIVISO Bolsa (stock brokerage). The group holds strategic stakes in major regional exchanges, including the Lima Stock Exchange (BVL), CAVALI, and the Chilean Products Exchange. It is publicly traded on the Lima Stock Exchange under ticker DIVIC1 with a market cap of ~313 million PEN
• Mediaplex May 3, 2026 Mediaplex was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-03. Sector: Technology. Country: Canada. Website: mediaplexcnc.com. mediaplexcnc.com zoominfo.com/c/mediaplex-inc/465166226 Mediaplex sas is a young, dynamic Italian manufacturing company based in Casoria (Naples, Italy), specializing in CNC machining, cutting, and fabrication of plexiglass and plastic materials in general. The company serves clients needing precision plastic components, decorative elements, displays, and custom-made plastic parts produced via CNC routing, laser cutting, and thermoforming. Rated 4.5/5 by customers, Mediaplex is regarded as a reliable plastic fabrication partner in the Campania region of Italy
• Marutake May 3, 2026 • [ ransomware, healthcare, technology ] Marutake was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-03. Sector: Agriculture and Food Production. Country: Japan. Website: kk-marutake.co.jp. kk-marutake.co.jp zoominfo.com/c/marutake/561552308 Marutake Co., Ltd. is a comprehensive pharmaceutical and medical wholesale company founded on June 15, 1925, and headquartered in Niigata City, Japan, with a 100-year history of connecting manufacturers to healthcare providers across the region. The company distributes prescription pharmaceuticals, medical devices, clinical diagnostic reagents, hygiene materials, nursing care products, and healthcare IT systems to hospitals, clinics, and pharmacies, primarily across Niigata, Yamagata, Miyagi, Akita, Tokyo, and Gunma prefectures. With a workforce of 477 employees and capital of 100 million, Marutake positions itself as a "supporter of the medical frontline," ensuring stable supply of essential medical commodities to local communities
• Kasapreko May 3, 2026 • [ ransomware, manufacturing ] Kasapreko was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-03. Sector: Agriculture and Food Production. Country: Ghana. Website: kasapreko.com. kasapreko.com zoominfo.com/c/kasapreko-company-ltd/113558803 Kasapreko PLC is Ghana's leading herbal beverage manufacturer, founded in 1989 by Dr. Kwabena Adjei in a garage in Nungua, Accra, and today grown into a multinational company with over 500 employees, 100+ product SKUs, and exports to 16 countries worldwide. The company pioneered the first scientifically formulated herbal-based alcoholic beverage in Ghana Alomo Bitters which became its flagship product and was named by CNN Money as one of the top 5 emerging brands in the world in 2013. ISO 22000:2005 certified and a member of the prestigious Ghana Club 100, Kasapreko produces bitters, whisky, gin, liqueur, brandy, wine, soft drinks, and water, with active expansion into East Africa including Kenya
• Levante Living May 3, 2026 • [ ransomware, healthcare, retail ] Levante Living was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-03. Sector: Retail & E-Commerce. Country: Italy. Website: levanteliving.com. levanteliving.com zoominfo.com/c/levante-living-lp/388951109 Levante Living is a Canadian-owned senior living enterprise founded in 2016 by Michael Petersen and Jim MacDonald, and headquartered in Toronto, Ontario, focused on acquiring, managing, and redeveloping senior housing across North America. The company currently operates 24 retirement residences across Ontario, employs over 600 team members, and manages approximately 1,600 investors with over $175 million in senior living assets. Its service offerings span the full care spectrum independent living, assisted living, memory care, respite care, and long-term care guided by the values of dignity, compassion, integrity, and excellence