-
Punch & Associates Investment Management
May 5, 2026
•
[ ransomware, finance, leak ]
Punch & Associates Investment Management was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Financial Services. Country: United States of America. Punch & Associates is a boutique investment advisory firm based in Edina, MN. They offer specia
lized investment advisory services tailored for private clients and institutions. The firm focu
ses on providing personalized financial strategies to meet the unique needs of their clients. W
ith a commitment to excellence, Punch & Associates aims to help clients achieve their financial
goals.
We will upload 10gb of corporate data soon. Detailed client personal information (passports, SS
Ns, DLs and so on for almost 80 ppl), employee personal files, lots of confidential files (fina
ncials and personal docs), contracts and agreements, projects, NDAs, etc.
-
Maximum Mold
May 5, 2026
•
[ ransomware, manufacturing, leak ]
Maximum Mold was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Manufacturing. Maximum Mold is a specialized provider of tooling and machining solutions, focusing on the des
ign, engineering, and manufacturing of die cast dies, trim dies, and plastic injection molds.
Here is the access to upload company data. Employee personal information (passports, and other
docs), customer files, contracts and agreements, projects, NDAs, etc.
You will find several password-free archives. Click on any of them to start the download.
Download link
https://3i7uisihrgv3v7kjafmhahhcmtjfepckhw5vournekuamhbt37liplid.onion/LEAKS_1/maximummold.com
/
-
Unre3d
May 5, 2026
•
[ ransomware, technology ]
Unre3d was listed as a victim on the leak site of the sinobi ransomware group; the attack is estimated to have taken place on 2026-05-05. Unre3d is a company that operates in the Information & Document Management industry. UNRE Technology was established in 2017.As a full-stack solution provider, we offer advanced 3D laser scanner, measurement and semantic modeling solutions.We specialize in making connections between the digital and physical worlds.Our mission is to give service throughout the whole life cycle of building projects, including civil construction,decoration and maintenance.We have successfully co-worked with more than 500 projects (more than 5 million square meters).
-
Bay State Land Services
May 5, 2026
•
[ ransomware, technology ]
Bay State Land Services was listed as a victim on the leak site of the sinobi ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Professional Services. Country: United States of America. Bay State Land Services Inc is a company that operates in the Architecture, Engineering & Design industry.
-
Celeris Networks
May 5, 2026
Celeris Networks was listed as a victim on the leak site of the sinobi ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Technology. Celeris Networks is a business IT support provider based in Knoxville, specializing in managed IT services, cybersecurity solutions, and cloud managed services. The firm serves various industries, including accounting, distribution, legal services, nonprofits, and professional services. Composed of expert technology specialists, Celeris Networks aims to alleviate IT challenges and help local businesses maximize productivity. With a commitment to personalized service, they ensure that clients receive dedicated support tailored to their needs.
-
Positiwise Infotech Pvt
May 5, 2026
•
[ ransomware, technology, healthcare ]
Positiwise Infotech Pvt was listed as a victim on the leak site of the sinobi ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Technology. Country: India. Positiwise Software Pvt Ltd is a software development company based in India and the USA, specializing in a wide range of services including web development, eCommerce solutions, mobile app development, and custom software development. They cater to various industries such as healthcare, retail, real estate, finance, and hospitality, providing tailored solutions to meet specific business needs. With over two decades of experience, their team of top-tier developers is dedicated to delivering high-quality, scalable, and innovative software solutions. Positiwise aims to help businesses digitize their operations effectively while ensuring data security and timely project delivery.
-
Cazh.id
May 5, 2026
•
[ ransomware, finance, technology ]
Cazh.id was listed as a victim on the leak site of the Icarus ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Financial Services. Country: Indonesia. Website: bkdp.cazh.id. - User DB: 300,000 Users (Email, Hash, Phone, Address, DOB) for https://bkdp.cazh.id/.
- KYC Vault: 7,800 Government IDs + 4,200 Selfies (including "Hold-to-Face" ID selfies).
- 34 SQL Databases for associated schools (Students/Parents/Staff).
- Corporate/Financial: Full Investor Database + partner documents
- Collateral documents (Vehicle Registration Documents & Property Deeds)
- Billing Proofs
- Full src code of their services
Data stolen: PII, SOURCE CODE, KYC
-
ovextech.com
May 4, 2026
•
[ ransomware, technology ]
ovextech.com was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-05-04. Sector: Technology. Country: United States of America. Website: ovextech.com. Ovex Tech specializes in providing comprehensive BPO services and call center solutions, including inbound and outbound ...
-
Raycolighting
May 5, 2026
•
[ ransomware, manufacturing ]
Raycolighting was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Manufacturing. Country: United Kingdom of Great Britain and Northern Ireland. Website: raycolighting.com. Organization with 2 emails extracted. Domain: raycolighting.com
-
CEAGESP / Netfeirasp
May 5, 2026
CEAGESP / Netfeirasp was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Agriculture and Food Production. Country: Brazil. Website: netfeirasp.ceagesp. Brazilian produce wholesale market network. Domain netfeirasp.ceagesp (CEAGESP). Also demarchibrasil.com.br accounts.
-
Colegio María Inmaculada (CMI)
May 5, 2026
•
[ ransomware, education ]
Colegio Mara Inmaculada (CMI) was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Education. Country: Costa Rica. Website: mariainmaculada.ed.cr. Catholic school in Moravia, Costa Rica. Domain cmi.local / mariainmaculada.ed.cr. Servers: CMI-DC01, CMI-APP, CMI-HTTP2, main-server1/2.
-
Académie de Montpellier / CSJM
May 5, 2026
•
[ ransomware, education, government ]
Acadmie de Montpellier / CSJM was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Education. Country: France. Website: ac-montpellier.fr. French public school network. Domain CSJM.BEZIERS, part of Acadmie de Montpellier (ac-montpellier.fr). Occitanie region (laregion.fr). Teacher and admin staff credentials.
-
Palmers Relocations
May 5, 2026
•
[ ransomware, leak ]
Palmers Relocations was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Transportation. Country: United Kingdom of Great Britain and Northern Ireland. Australian international removals & relocation company. FIDI accredited, ISO 9001:2015 certified. Services: household moves, storage, customs, immigration (IMMI/VEVO). Operates Melbourne area (Pascoe Vale, Dandenong, Caulfield).
-
ActionAid / TACOSA
May 5, 2026
•
[ ransomware, government ]
ActionAid / TACOSA was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Government & Defense. Country: United Kingdom of Great Britain and Northern Ireland. Website: actionaid.org. NGO sector. Domains: actionaid.org, tacosa.org.za, immigration.go.tz.
-
Hathcock (Personal)
May 5, 2026
•
[ ransomware ]
Hathcock (Personal) was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Personal comprehensive reports. Individuals: Noel Ray Hathcock, Trinity John Hathcock.
-
CourtSmart
May 5, 2026
•
[ ransomware, technology, government ]
CourtSmart was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Professional Services. Country: United States of America. Website: courtsmart.com. Court technology company. Domain courtsmart.com / COURTSMART2. Dev server: dev-rich20.courtsmart.com. Connections to JIS.org, nashville.org.
-
Desert Christian Schools (DCS)
May 5, 2026
Desert Christian Schools (DCS) was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Education. Country: United States of America. K-12 Christian school affiliated with First Baptist Church of Lancaster, CA. ADP payroll, DCFS childcare program, City of Lancaster Water Safety program. Financial docs: P&L, Balance Sheet, Trial Balance, 1099s. School Board minutes 2025.
-
SIT Group / Robusta
May 5, 2026
SIT Group / Robusta was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Professional Services. Country: Italy. Website: sitgroup.it. Italian company SIT Group (sitgroup.it) and Bulgarian Robusta (robusta.bg). Also abv.bg emails.
-
Atencio Engineering
May 5, 2026
Atencio Engineering was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Manufacturing. Country: United States of America. Website: atencioengineering.com. Civil engineering & land surveying firm. Services: site plans, boundary surveys, OWTS (septic) design, fire line design, elevation certificates, flood plain analysis. Clients in Las Animas County, Pueblo County, Florence CO area.
-
Trimble Inc / Gerrard Inc
November 7, 2025
Trimble Inc / Gerrard Inc was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2025-11-07. Sector: Technology. Country: United States of America. Website: trimble.com. Technology company Trimble (trimble.com) and Gerrard Inc (gerrardinc.com). ~18 Trimble email addresses.