-
Académie de Montpellier / CSJM
May 5, 2026
•
[ ransomware, education, government ]
Acadmie de Montpellier / CSJM was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Education. Country: France. Website: ac-montpellier.fr. French public school network. Domain CSJM.BEZIERS, part of Acadmie de Montpellier (ac-montpellier.fr). Occitanie region (laregion.fr). Teacher and admin staff credentials.
-
Palmers Relocations
May 5, 2026
•
[ ransomware, leak ]
Palmers Relocations was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Transportation. Country: United Kingdom of Great Britain and Northern Ireland. Australian international removals & relocation company. FIDI accredited, ISO 9001:2015 certified. Services: household moves, storage, customs, immigration (IMMI/VEVO). Operates Melbourne area (Pascoe Vale, Dandenong, Caulfield).
-
ActionAid / TACOSA
May 5, 2026
•
[ ransomware, government ]
ActionAid / TACOSA was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Government & Defense. Country: United Kingdom of Great Britain and Northern Ireland. Website: actionaid.org. NGO sector. Domains: actionaid.org, tacosa.org.za, immigration.go.tz.
-
Hathcock (Personal)
May 5, 2026
•
[ ransomware ]
Hathcock (Personal) was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Personal comprehensive reports. Individuals: Noel Ray Hathcock, Trinity John Hathcock.
-
CourtSmart
May 5, 2026
•
[ ransomware, technology, government ]
CourtSmart was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Professional Services. Country: United States of America. Website: courtsmart.com. Court technology company. Domain courtsmart.com / COURTSMART2. Dev server: dev-rich20.courtsmart.com. Connections to JIS.org, nashville.org.
-
Desert Christian Schools (DCS)
May 5, 2026
Desert Christian Schools (DCS) was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Education. Country: United States of America. K-12 Christian school affiliated with First Baptist Church of Lancaster, CA. ADP payroll, DCFS childcare program, City of Lancaster Water Safety program. Financial docs: P&L, Balance Sheet, Trial Balance, 1099s. School Board minutes 2025.
-
SIT Group / Robusta
May 5, 2026
SIT Group / Robusta was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Professional Services. Country: Italy. Website: sitgroup.it. Italian company SIT Group (sitgroup.it) and Bulgarian Robusta (robusta.bg). Also abv.bg emails.
-
Atencio Engineering
May 5, 2026
Atencio Engineering was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Manufacturing. Country: United States of America. Website: atencioengineering.com. Civil engineering & land surveying firm. Services: site plans, boundary surveys, OWTS (septic) design, fire line design, elevation certificates, flood plain analysis. Clients in Las Animas County, Pueblo County, Florence CO area.
-
Trimble Inc / Gerrard Inc
November 7, 2025
Trimble Inc / Gerrard Inc was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2025-11-07. Sector: Technology. Country: United States of America. Website: trimble.com. Technology company Trimble (trimble.com) and Gerrard Inc (gerrardinc.com). ~18 Trimble email addresses.
-
Magnolia (Israel)
May 5, 2026
•
[ ransomware, retail, leak ]
Magnolia (Israel) was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Retail & E-Commerce. Country: Israel. Website: magnolia-jewellery.com. Israeli jewelry company. Silver & accessories, participates in Vicenza jewelry fair (2025/2026). Sells via buyme.co.il gift cards. ~38k files, invoices in Hebrew (SI/IN/OV prefix).
-
Strategic Imports
May 5, 2026
Strategic Imports was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Professional Services. Country: Australia. Australian auto parts/batteries importer. Brands: Strategic Imports, Auto Parts Now, Discount Batteries Now. User: bstuart (Brad Stuart). QNAP NAS (CACHEDEV1_DATA).
-
Bandeirante Supermercados
May 5, 2026
•
[ ransomware, retail ]
Bandeirante Supermercados was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Retail & E-Commerce. Country: Brazil. Website: bandeirantesupermercados.com.br. Brazilian supermarket chain.
-
Elken Sdn Bhd
May 5, 2026
•
[ ransomware, retail ]
Elken Sdn Bhd was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Retail & E-Commerce. Country: Malaysia. Website: elken.com. MLM / health & beauty products company. ~16k emails extracted.
-
Sysco
May 5, 2026
•
[ ransomware, manufacturing ]
Sysco was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Agriculture and Food Production. Country: United States of America. Website: www.sysco.com.
-
Scales and Associates Inc
May 5, 2026
•
[ ransomware, technology ]
Scales and Associates Inc was listed as a victim on the leak site of the sinobi ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Professional Services. Country: United States of America. Website: scalesassoc.com. Scales & Associates, Inc. is a firm that specializes in engineering and architecture, focusing on creating intelligent and economical solutions for their clients. They adopt a strategic, big-picture perspective, ensuring that all components of a project work together efficiently for overall success. Their services are designed to meet both current needs and future demands. The company is DBE certified and operates from Detroit, MI.
-
Ropers Majeski
April 23, 2026
•
[ ransomware, leak, finance ]
Ropers Majeski was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-04-23. Sector: Professional Services. Country: United States of America. Website: ropers.com. [AI generated] Ropers Majeski is a law firm based in the United States, operating primarily in California. The firm provides legal services across a range of practice areas including litigation, insurance defense, business law, employment law, and professional liability. It serves corporate clients, insurers, and individuals, with offices in multiple California cities. The firm is known for its work in complex civil litigation and risk management counsel.
-
ttt.vn TTT Corporation
May 5, 2026
•
[ ransomware, manufacturing, government ]
ttt.vn TTT Corporation was listed as a victim on the leak site of the stormous ransomware group; the attack is estimated to have taken place on 2026-05-05. Country: Vietnam. Website: ttt.vn. $900k to Solve the Problem 5TB While TTT Company was preoccupied with designing luxurious interiors and architectural masterpieces, they completely overlooked the design of a secure network. We have spent enough time within their internal infrastructure to conclude that their security is incredibly fragile. We have successfully exfiltrated all of the company's data and now possess 5 TB of the most sensitive information, including complete blueprints and CAD designs for prestigious clients (Toyota showrooms, gyms, luxury resorts, and government projects). We have accessed every employee's personal drive, including IDs, passports, and private medical records. Furthermore, we hold confidential contracts, tax reports (BCTC), internal financial audits, and detailed security schematics for client buildings.
-
WOHA
May 6, 2026
WOHA was listed as a victim on the leak site of the lamashtu ransomware group; the attack is estimated to have taken place on 2026-05-06. Sector: Hospitality. Country: Singapore. Website: woha.net. WOHA is a renowned Singapore-based architectural practice founded in 1994 by Wong Mun Summ and Richard Hassell. The firm is globally recognized for its integration of environmental and social principles into high-density urban settings.
-
Farmers Association of Iceland
May 3, 2026
•
[ ransomware, manufacturing ]
Farmers Association of Iceland was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-03. Sector: Agriculture and Food Production. Country: Iceland. Website: bondi.is. bondi.is Farmers Association of Iceland, is Iceland's primary agricultural interest organization representing approximately 3,000 people employed in farming and agriculture-related jobs across the country. The association acts as the official advocate for Icelandic farmers in public forums, protecting their interests in matters of policy, economics, and sustainability, while also developing climate action roadmaps for sustainable farm management. Headquartered in Borgartn 25 in Reykjavk, B publishes agricultural statistics, supports farm productivity improvement, and bridges the gap between society and food producers
-
La Kaffa International
May 3, 2026
•
[ ransomware, retail ]
La Kaffa International was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-03. Sector: Agriculture and Food Production. Country: Italy. Website: lakaffagroup.com. lakaffagroup.com zoominfo.com/c/la-kaffa-international-co-ltd/426003975 La Kaffa International is a publicly listed Taiwanese multinational food and beverage group (Taiwan Stock Exchange, code: 2732), founded in 2004 and headquartered in Zhubei City, Hsinchu County, Taiwan, with over 663 employees and annual revenues around $46 million. The company is best known as the parent brand of Chatime the world-famous bubble tea chain expanded to 50+ countries across 6 continents, making it the top takeout tea brand in Australia, Southeast Asia, and beyond. Beyond Chatime, La Kaffa manages a multi-brand portfolio of 9+ F&B concepts including ZenQ Dessert, Bake Code Bakery, ChunSun Cake, La Kaffa Cafe, Wagokoro Tonkatsu, and Osaka Ohsho Taiwan, with over 1,100 outlets in China alone
