-
EXPEDITOR
May 5, 2026
•
[ ransomware, healthcare, technology ]
EXPEDITOR was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Transportation. Country: United States of America. Expeditor Systems specializes in improving patient flow through innovative light signaling systems designed for medical practices and institutions.
Their solutions, including the LEAN Patient Flow System and Life Safety Nurse Call Systems, aim to enhance patient experience, increase operational efficiency, and boost revenues.
With over 40 years of experience and a client base exceeding 8,000
Laek: 50GB
WE HAS COLLECTED SUCH DATA AS:
- Confidential documents
- Clients Data
- NDA
- Financial data
- Operations
- Corporate data
- Business Agreements
- Development
- Financial databases, all transactions, all clients
And a lot of other VERY IMPORTANT information!
-
Ahorramas
May 5, 2026
•
[ ransomware, retail ]
Ahorramas was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Retail & E-Commerce. Country: Spain. Website: www.ahorramas.com.
-
GRANDHOME
May 5, 2026
•
[ ransomware, retail ]
GRANDHOME was listed as a victim on the leak site of the lamashtu ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Retail & E-Commerce. Country: Bangladesh. Website: grandhomemart.com. GRANDHOME is a leading Thai retailer specializing in construction materials, home decor, and furnishing products. Established in 1973, it has grown into a major hub for high-quality tiles, sanitary ware, and kitchen innovations
-
Pipestone
May 5, 2026
Pipestone was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Energy & Utilities. Country: United States of America. ATF Aerospace specializes in aerospace manufacturing and distribution, offering high-quality me
chanical and electrical components sourced from leading manufacturers. Their manufacturing capa
bilities focus on CNC milling and lathe operations, emphasizing short runs and quick turnaround
projects.
We will upload 137gb of corporate data soon. Detailed client and employee personal documents (p
assports, SSNs, DLs, financial and medical information), DBs with personal info, litigation doc
s, contracts and agreements, insurance files, NDAs, etc.
-
Punch & Associates Investment Management
May 5, 2026
•
[ ransomware, finance, leak ]
Punch & Associates Investment Management was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Financial Services. Country: United States of America. Punch & Associates is a boutique investment advisory firm based in Edina, MN. They offer specia
lized investment advisory services tailored for private clients and institutions. The firm focu
ses on providing personalized financial strategies to meet the unique needs of their clients. W
ith a commitment to excellence, Punch & Associates aims to help clients achieve their financial
goals.
We will upload 10gb of corporate data soon. Detailed client personal information (passports, SS
Ns, DLs and so on for almost 80 ppl), employee personal files, lots of confidential files (fina
ncials and personal docs), contracts and agreements, projects, NDAs, etc.
-
Maximum Mold
May 5, 2026
•
[ ransomware, manufacturing, leak ]
Maximum Mold was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Manufacturing. Maximum Mold is a specialized provider of tooling and machining solutions, focusing on the des
ign, engineering, and manufacturing of die cast dies, trim dies, and plastic injection molds.
Here is the access to upload company data. Employee personal information (passports, and other
docs), customer files, contracts and agreements, projects, NDAs, etc.
You will find several password-free archives. Click on any of them to start the download.
Download link
https://3i7uisihrgv3v7kjafmhahhcmtjfepckhw5vournekuamhbt37liplid.onion/LEAKS_1/maximummold.com
/
-
Unre3d
May 5, 2026
•
[ ransomware, technology ]
Unre3d was listed as a victim on the leak site of the sinobi ransomware group; the attack is estimated to have taken place on 2026-05-05. Unre3d is a company that operates in the Information & Document Management industry. UNRE Technology was established in 2017.As a full-stack solution provider, we offer advanced 3D laser scanner, measurement and semantic modeling solutions.We specialize in making connections between the digital and physical worlds.Our mission is to give service throughout the whole life cycle of building projects, including civil construction,decoration and maintenance.We have successfully co-worked with more than 500 projects (more than 5 million square meters).
-
Bay State Land Services
May 5, 2026
•
[ ransomware, technology ]
Bay State Land Services was listed as a victim on the leak site of the sinobi ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Professional Services. Country: United States of America. Bay State Land Services Inc is a company that operates in the Architecture, Engineering & Design industry.
-
Celeris Networks
May 5, 2026
Celeris Networks was listed as a victim on the leak site of the sinobi ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Technology. Celeris Networks is a business IT support provider based in Knoxville, specializing in managed IT services, cybersecurity solutions, and cloud managed services. The firm serves various industries, including accounting, distribution, legal services, nonprofits, and professional services. Composed of expert technology specialists, Celeris Networks aims to alleviate IT challenges and help local businesses maximize productivity. With a commitment to personalized service, they ensure that clients receive dedicated support tailored to their needs.
-
Positiwise Infotech Pvt
May 5, 2026
•
[ ransomware, technology, healthcare ]
Positiwise Infotech Pvt was listed as a victim on the leak site of the sinobi ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Technology. Country: India. Positiwise Software Pvt Ltd is a software development company based in India and the USA, specializing in a wide range of services including web development, eCommerce solutions, mobile app development, and custom software development. They cater to various industries such as healthcare, retail, real estate, finance, and hospitality, providing tailored solutions to meet specific business needs. With over two decades of experience, their team of top-tier developers is dedicated to delivering high-quality, scalable, and innovative software solutions. Positiwise aims to help businesses digitize their operations effectively while ensuring data security and timely project delivery.
-
Cazh.id
May 5, 2026
•
[ ransomware, finance, technology ]
Cazh.id was listed as a victim on the leak site of the Icarus ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Financial Services. Country: Indonesia. Website: bkdp.cazh.id. - User DB: 300,000 Users (Email, Hash, Phone, Address, DOB) for https://bkdp.cazh.id/.
- KYC Vault: 7,800 Government IDs + 4,200 Selfies (including "Hold-to-Face" ID selfies).
- 34 SQL Databases for associated schools (Students/Parents/Staff).
- Corporate/Financial: Full Investor Database + partner documents
- Collateral documents (Vehicle Registration Documents & Property Deeds)
- Billing Proofs
- Full src code of their services
Data stolen: PII, SOURCE CODE, KYC
-
ovextech.com
May 4, 2026
•
[ ransomware, technology ]
ovextech.com was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-05-04. Sector: Technology. Country: United States of America. Website: ovextech.com. Ovex Tech specializes in providing comprehensive BPO services and call center solutions, including inbound and outbound ...
-
Raycolighting
May 5, 2026
•
[ ransomware, manufacturing ]
Raycolighting was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Manufacturing. Country: United Kingdom of Great Britain and Northern Ireland. Website: raycolighting.com. Organization with 2 emails extracted. Domain: raycolighting.com
-
CEAGESP / Netfeirasp
May 5, 2026
CEAGESP / Netfeirasp was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Agriculture and Food Production. Country: Brazil. Website: netfeirasp.ceagesp. Brazilian produce wholesale market network. Domain netfeirasp.ceagesp (CEAGESP). Also demarchibrasil.com.br accounts.
-
Colegio María Inmaculada (CMI)
May 5, 2026
•
[ ransomware, education ]
Colegio Mara Inmaculada (CMI) was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Education. Country: Costa Rica. Website: mariainmaculada.ed.cr. Catholic school in Moravia, Costa Rica. Domain cmi.local / mariainmaculada.ed.cr. Servers: CMI-DC01, CMI-APP, CMI-HTTP2, main-server1/2.
-
Académie de Montpellier / CSJM
May 5, 2026
•
[ ransomware, education, government ]
Acadmie de Montpellier / CSJM was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Education. Country: France. Website: ac-montpellier.fr. French public school network. Domain CSJM.BEZIERS, part of Acadmie de Montpellier (ac-montpellier.fr). Occitanie region (laregion.fr). Teacher and admin staff credentials.
-
Palmers Relocations
May 5, 2026
•
[ ransomware, leak ]
Palmers Relocations was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Transportation. Country: United Kingdom of Great Britain and Northern Ireland. Australian international removals & relocation company. FIDI accredited, ISO 9001:2015 certified. Services: household moves, storage, customs, immigration (IMMI/VEVO). Operates Melbourne area (Pascoe Vale, Dandenong, Caulfield).
-
ActionAid / TACOSA
May 5, 2026
•
[ ransomware, government ]
ActionAid / TACOSA was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Government & Defense. Country: United Kingdom of Great Britain and Northern Ireland. Website: actionaid.org. NGO sector. Domains: actionaid.org, tacosa.org.za, immigration.go.tz.
-
Hathcock (Personal)
May 5, 2026
•
[ ransomware ]
Hathcock (Personal) was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Personal comprehensive reports. Individuals: Noel Ray Hathcock, Trinity John Hathcock.
-
CourtSmart
May 5, 2026
•
[ ransomware, technology, government ]
CourtSmart was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Professional Services. Country: United States of America. Website: courtsmart.com. Court technology company. Domain courtsmart.com / COURTSMART2. Dev server: dev-rich20.courtsmart.com. Connections to JIS.org, nashville.org.