-
Grupo EBD
April 17, 2026
•
[ ransomware, technology ]
Grupo EBD was listed as a victim on the leak site of the blackwater ransomware group; the attack is estimated to have taken place on 2026-04-17. Sector: Professional Services. Country: Brazil. Website: ebdgrupo.com.br. All data will be published soon...
-
Minidoka Memorial Hospital
April 17, 2026
•
[ ransomware, healthcare ]
Minidoka Memorial Hospital was listed as a victim on the leak site of the blackwater ransomware group; the attack is estimated to have taken place on 2026-04-17. Sector: Healthcare. Country: United States of America. Website: minidokamemorial.org. Data will be published after 7 days.
-
Zampell
May 2, 2026
•
[ ransomware, manufacturing, energy ]
Zampell was listed as a victim on the leak site of the cmdorganization ransomware group; the attack is estimated to have taken place on 2026-05-02. Sector: Manufacturing. Country: Italy. Website: www.zampell.com. Zampell Ltd is a leading provider of refractory services, offering comprehensive solutions from design to ongoing maintenance. They cater to various industries, including power generation, biomass, fossil fuel, and petrochemicals, ensuring safety and efficiency in their operations. The company specializes in both standard and bespoke refractory products, delivering tailored services to meet client needs. With a commitment to quality and safety, Zampell aims to exceed customer expectations in all aspects of their service.
-
Cytek Biosciences
January 25, 2026
•
[ ransomware, healthcare, technology ]
Cytek Biosciences was listed as a victim on the leak site of the cmdorganization ransomware group; the attack is estimated to have taken place on 2026-01-25. Sector: Healthcare. Country: United States of America. Website: cytekbio.com. A biotechnology firm that develops and supplies advanced, cost-effective flow cytometry instruments and related services used worldwide by researchers and clinicians. Its compact systems and streamlined workflows enable high-throughput, single-cell analysis for applications such as cancer immunology, leukemia and lymphoma diagnosis, and transplant monitoring. Distinguished by offering high-end capabilities at lower cost, the company accelerates scientific discovery through technical innovation, exceptional customer support, and a commitment to ethical practices and community engagement. Headquartered in Fremont, California, it has been publicly traded on NASDAQ since 2021. We have 7.36 TB of downloaded data.
-
JG Stewart Construction
May 2, 2026
•
[ ransomware, manufacturing ]
JG Stewart Construction was listed as a victim on the leak site of the cmdorganization ransomware group; the attack is estimated to have taken place on 2026-05-02. Sector: Manufacturing. Country: Canada. Website: www.jgstewart.ca. JG Stewart Construction specializes in providing expert services for the quarry industry, focusing on the crushing, washing, and classifying of aggregates. They offer a wide range of equipment for rent or sale, including crushers, screening plants, and washing gear, catering to the needs of their clients in the aggregate sector. The company is committed to safety, quality, and integrity, ensuring exceptional service and products while also being community-minded. Additionally, they provide safety training seminars to enhance the skills of personnel in the industry.
-
Beyond Measure & Associates, Inc.
May 2, 2026
•
[ ransomware, technology ]
Beyond Measure & Associates, Inc. was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-05-02. Sector: Professional Services. Country: United States of America. Website: churchdesign.com. Church Design, Engineering, Financial & Construction Services
-
North Star Signs
May 2, 2026
North Star Signs was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-02. Sector: Retail & E-Commerce. Country: United States of America. Website: www.northstarsign.com.
-
Standard-Examiner
May 2, 2026
Standard-Examiner was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-02. Sector: Government & Defense. Country: United States of America. Website: www.standard.net.
-
Star Precision
May 2, 2026
•
[ ransomware, manufacturing ]
Star Precision was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-02. Sector: Manufacturing. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.starprecision.com.
-
LSM Lee
May 2, 2026
•
[ ransomware, manufacturing ]
LSM Lee was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-02. Sector: Manufacturing. Country: Canada. Website: www.golsm.com.
-
Photonic
May 2, 2026
•
[ ransomware, technology ]
Photonic was listed as a victim on the leak site of the mnt6 ransomware group; the attack is estimated to have taken place on 2026-05-02. Sector: Technology. Country: Canada. Website: photonic.com. Photonic is delivering scalable, distributed, and fault-tolerant quantum computing and networking technologies. With proven silicon spin qubits, and a native telecom networking interface, Photonic will deliver solutions for previously intractable problems and unlock solutions for tomorrows problem sets. [Revenue: $32.6M]
-
cgcsa.co.za
May 3, 2026
•
[ ransomware, leak, finance ]
cgcsa.co.za was listed as a victim on the leak site of the stormous ransomware group; the attack is estimated to have taken place on 2026-05-03. Sector: Professional Services. Country: South Africa. Website: cgcsa.co.za. endor & Corporate Data ( Name-Email-Numbers/PMS NAME ), Financial Accounting Records , sales Order Reports , Database Systems , SQL Server , Sage 200 Evolutuion SQL, operational Security Data Full Sage 200 Evolution backups including all transaction history, tax records, and payroll.CRM & Legal Archives Over 151,000 sensitive documents, contracts, and internal communications from the CRM database.Full access to GS1 South Africa SharePoint, including GDSN protocols and partnership data with global entities like Unilever, Nestle, and L'Oreal.Complete PII (Personally Identifiable Information) of administrative staff and executive members, including private emails and mobile numbers.
-
FANASA.COM
May 3, 2026
FANASA.COM was listed as a victim on the leak site of the stormous ransomware group; the attack is estimated to have taken place on 2026-05-03. Sector: Retail & E-Commerce. Country: Mexico. Website: FANASA.COM. Personally Identifiable Information (PII), Electronic Fiscal Documents (CFDI/XML), Financial Transaction Records, Commercial Invoices & Billing Data, Taxpayer Identification Numbers (RFC), Client & Vendor Database/Internal Corporate Documentation
-
or-technology.com
May 3, 2026
•
[ ransomware, technology, financial ]
or-technology.com was listed as a victim on the leak site of the stormous ransomware group; the attack is estimated to have taken place on 2026-05-03. Sector: Technology. Country: Germany. Website: or-technology.com. Financial & Sales Intelligence Sales Statistics by Quarter (Q1, Q2, Q3, Q4) Corporate & Strategic Planning SQL Project Reports
-
Fiserv
May 3, 2026
Fiserv was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-05-03. Sector: Financial Services. Country: United States of America. Website: fiserv.com. [AI generated] Fiserv is a global financial technology company headquartered in Milwaukee, Wisconsin, United States. It provides financial services technology solutions including payment processing, core banking systems, digital banking platforms, and merchant acquiring services. Serving banks, credit unions, retailers, and businesses worldwide, Fiserv operates across the fintech and banking technology industry and is one of the largest providers of financial services infrastructure globally.
-
Cushman & Wakefield Inc.
May 3, 2026
•
[ ransomware, technology ]
Cushman & Wakefield Inc. was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-05-03. Sector: Professional Services. Country: United States of America. Website: cushmanwakefield.com. Over 500k Salesforce records containing PII and other internal corporate data have been compromised. This is a final warning to reach out by 6 May 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 3 May 2026 | Warning: FINAL WARNING
-
manateeair.com
May 3, 2026
•
[ ransomware, retail ]
manateeair.com was listed as a victim on the leak site of the m3rx ransomware group; the attack is estimated to have taken place on 2026-05-03. Sector: Transportation. Country: United States of America. Website: manateeair.com. +1 9417582323 . Manatee Air Heating & Cooling Inc has been providing expert HVAC services in Manatee and Sarasota counties since 1988, specializing in heating and air conditioning installation, repair, and maintenance. The company prides itself on its commitment to quality work, customer satisfaction, and competitive pricing, offering financing options and a 1-year labor warranty. With a team of certified, licensed, and insured technicians, they ensure fast turnaround times and emergency services to keep homes and businesses comfortable year-round. Manatee Air Heating & Cooling is recognized for its reliability and community-focused approach, making it a trusted choice for HVAC solutions. Stolen: --
-
it-freitag.de
May 3, 2026
•
[ ransomware, technology ]
it-freitag.de was listed as a victim on the leak site of the m3rx ransomware group; the attack is estimated to have taken place on 2026-05-03. Sector: Technology. Country: Germany. Website: it-freitag.de. +49 493526000000 . Freitag IT GmbH specializes in providing scalable and reliable IT solutions, including cloud computing, virtualization, and managed services. Their offerings cater to agile businesses, focusing on modern technologies such as hybrid multi-cloud architectures and machine learning. The company aims to enhance productivity and efficiency through tailored IT services, including remote management, security solutions, and unified communication systems. Their target clients include organizations seeking comprehensive IT support and innovative digital transformation solutions. Stolen: --
-
emtco.com
May 3, 2026
•
[ ransomware, manufacturing ]
emtco.com was listed as a victim on the leak site of the m3rx ransomware group; the attack is estimated to have taken place on 2026-05-03. Sector: Professional Services. Country: United States of America. Website: emtco.com. +1 3169426147 . Engineered Machine Tool, Inc., based in Wichita, Kansas, specializes in providing manufacturing firms with custom machinery and tooling designed to enhance production efficiency. Since 1987, the company has developed a range of automated machines and equipment, including Automatic Storage and Retrieval Systems and Large Tool Palletizing Systems. EMT offers comprehensive services from initial concept through to complete installation, ensuring tailored solutions for their clients' specific needs. Their focus is on delivering high-performance automation tools for various industrial applications Stolen: 180gb 698k files
-
Instructure Holdings, Inc. (Canva LMS, instructure.com)
May 3, 2026
•
[ ransomware, education, technology ]
Instructure Holdings, Inc. (Canva LMS, instructure.com) was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-05-03. Sector: Education. Country: United States of America. Website: instructure.com. Nearly 9,000 schools worldwide affected. 275 million individuals data ranging from students, teachers, and other staff containing PII. Several billions of private messages among students and teachers and students and other students involved, containing personal conversations and other PII. Your Salesforce instance was also breached and a lot more other data is involved. Pay or Leak. This is a final warning to reach out by 6 May 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Size: 3.65TB+ (uncompressed) | Updated: 3 May 2026 | Warning: FINAL WARNING PAY OR LEAK
