-
https://www.wilkemgroup.com/
May 2, 2026
https://www.wilkemgroup.com/ was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-05-02. Sector: Manufacturing. Country: Bahamas. Website: wilkemgroup.com. wilkemsolutions.com wilkemgroup.com 400gb gov contract etc
-
Cult Wines
May 4, 2026
•
[ ransomware, retail, finance ]
Cult Wines was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-05-04. Sector: Hospitality. Country: United Kingdom of Great Britain and Northern Ireland. Website: cultwines.com. Cult Wines is revolutionizing the fine wine industry by leveraging expertise, digital platforms, and innovative technology to enhance the buying, selling, investing, and collecting experience for producers and consumers. Their services support the entire life cycle of fine wine, ensuring transparency and secure transactions. Recognizing fine wine as a unique investment, Cult Wine Investment provides clients with a wealth of possibilities, combining heritage with cutting-edge technology to enrich portfolios and enhance lives. Targeting both new generations of wine drinkers and seasoned collectors, Cult Wines aims to build a global community around fine wine appreciation.
-
ROYAL M HOTEL BY GEWAN FUJAIRAH LLC
May 4, 2026
ROYAL M HOTEL BY GEWAN FUJAIRAH LLC was listed as a victim on the leak site of the lamashtu ransomware group; the attack is estimated to have taken place on 2026-05-04. Sector: Hospitality. Country: United Arab Emirates. Website: royalmhotels.com. Royal M Hotel Fujairah by Gewan is an upscale 5-star hotel located in the heart of Fujairah, United Arab Emirates.
-
City of Sandstone
May 4, 2026
•
[ ransomware, government ]
City of Sandstone was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-04. Sector: Government & Defense. Country: United States of America. Website: sandstone.govoffice.com.
-
Luna Group
May 4, 2026
•
[ ransomware, manufacturing, healthcare ]
Luna Group was listed as a victim on the leak site of the lamashtu ransomware group; the attack is estimated to have taken place on 2026-05-04. Sector: Manufacturing. Country: Egypt. Website: lunagroupeg.com. Luna Group is a major Egyptian conglomerate established in 1966. It operates across the Middle East and North Africa (MENA) region, primarily focusing on pharmaceuticals, cosmetics, perfumes, and industrial raw materials.
-
Johnson & Johnson Innovative Medicine
April 26, 2026
•
[ ransomware, healthcare ]
Johnson & Johnson Innovative Medicine was listed as a victim on the leak site of the spacebears ransomware group; the attack is estimated to have taken place on 2026-04-26. Sector: Healthcare. Country: United States of America. Website: www.jnj.com/innovativemedicine. Johnson & Johnson Innovative Medicine (formerly known as Janssen Pharmaceuticals) is the pharmaceutical division of the American corporation Johnson & Johnson, specializing in the development and production of revolutionary medicines. The company focuses on creating treatments for the most complex diseases, transforming the future of healthcare.-CAR-T Research https://www.jnj.com/innovativemedicine/
-
Standard Bank Group
February 27, 2026
•
[ ransomware, leak, finance ]
Standard Bank Group was listed as a victim on the leak site of the PrinzEugen ransomware group; the attack is estimated to have taken place on 2026-02-27. Sector: Financial Services. Country: South Africa. Website: standardbank.com. Beginning on February 27th 2026, The 3 week long attack on both Standard Bank and Liberty has resulted in 1.2TB of data being exfiltrated from internal servers.
-
Lonestar Truck Group & Tag Truck Center
May 4, 2026
•
[ ransomware, leak, financial ]
Lonestar Truck Group & Tag Truck Center was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-05-04. Sector: Transportation. Country: United States of America. Website: tntxtruck.com. Lonestar Truck Group consists of multiple dealerships that sell new and used trucks and trailers, as well as providing service and parts. They work with a vast number of customers and businesses, yet they have failed to prioritize security. As a result, personal data of employees, contact information for the companies they work with, and a significant number of customer records have been leaked online. We are also presenting their confidential and financial documents for your review.
-
www.cswindustrials.com
May 4, 2026
•
[ ransomware, manufacturing ]
www.cswindustrials.com was listed as a victim on the leak site of the chaos ransomware group; the attack is estimated to have taken place on 2026-05-04. Sector: Manufacturing. Country: United States of America. Website: www.cswindustrials.com. If the company's management does not contact us within 24 hours, we will publish 540 GB of the company's internal files.
CSW Industrials, Inc. is a diversified industrial growth company that operates across contractor solutions, specialized reliability solutions, and engineered building solutions.
-
vacaero.com
May 4, 2026
•
[ ransomware, manufacturing, technology ]
vacaero.com was listed as a victim on the leak site of the chaos ransomware group; the attack is estimated to have taken place on 2026-05-04. Sector: Hospitality. Country: Mexico. Website: vacaero.com. If the company's management does not reach an agreement with us within 4 days, we will publish 250 GB of the company's internal data.
Founded in 1959, VAC AERO provides vacuum heat treating and thermal & paint coating services as well as vacuum furnace systems and controls to aerospace and high-tec
-
Cushman & Wakefield
May 3, 2026
•
[ ransomware ]
Cushman & Wakefield was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-03. Sector: Professional Services. Country: United States of America. Website: www.cushmanwakefield.com.
-
General Hardware
May 4, 2026
•
[ ransomware, manufacturing ]
General Hardware was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-04. Sector: Manufacturing. Country: Colombia. Website: www.generalhardware.co.
-
Rizzuto Law Firm
May 4, 2026
•
[ ransomware, finance ]
Rizzuto Law Firm was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-04. Sector: Professional Services. Country: United States of America. Website: www.rizzutolawfirm.com.
-
Lexus
May 4, 2026
•
[ ransomware, manufacturing, automotive ]
Lexus was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-04. Sector: Manufacturing. Country: Ukraine. Website: www.lexus.ua.
-
Foxstone Financial
May 4, 2026
•
[ ransomware, finance ]
Foxstone Financial was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-04. Sector: Financial Services. Country: Australia. Website: www.foxstonefinancial.com.
-
Law Office of Steven R Smith
May 4, 2026
•
[ ransomware, leak ]
Law Office of Steven R Smith was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-04. Sector: Professional Services. Country: United States of America. Website: www.newyorkattorneyatlaw.com.
-
Morning Star Tours
April 30, 2026
•
[ ransomware, retail ]
Morning Star Tours was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-04-30. Sector: Hospitality. Country: United States of America. Website: morningstartours.com. Journeys that can change lives
-
Seagate Capital Construction
May 4, 2026
•
[ ransomware, manufacturing ]
Seagate Capital Construction was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-04. Sector: Manufacturing. Country: United States of America. Website: www.seagatecapitalconstruction.com.
-
fital-treppenlifte.de
May 4, 2026
fital-treppenlifte.de was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-05-04. Sector: Retail & E-Commerce. Country: Germany. Website: fital-treppenlifte.de. Is a German company specializing in stairlifts and mobility solutions for individuals with reduced mobility. The company operates in the
-
zonaovest.to.it
May 4, 2026
•
[ ransomware, government ]
zonaovest.to.it was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-05-04. Sector: Other. Country: Italy. Website: zonaovest.to.it. Is likely an Italian regional organization or consortium based in the Turin (Torino) area. Entities with similar naming conventions in
