Recent Breaches
-
May 2, 2026 • Epiq Global was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-05-02. Sector: Professional Services. Country: United States of America. Website: epiqglobal.com. [AI generated] Epiq Global is a US-based legal services company specializing in technology-driven solutions for complex legal matters. It provides services including class action and mass tort administration, bankruptcy case management, eDiscovery, document review, and legal notification. Operating across multiple countries, Epiq serves law firms, corporations, and government entities, helping manage large-scale legal proceedings efficiently.
-
May 2, 2026 • TSYS was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-05-02. Sector: Financial Services. Country: United States of America. Website: tsys.com. [AI generated] TSYS, or Total System Services, is a US-based payment solutions company headquartered in Columbus, Georgia. It operates in the financial technology and payment processing industry, providing services such as credit and debit card processing, merchant services, and payment management solutions to financial institutions, businesses, and consumers worldwide. TSYS became a subsidiary of Global Payments following a merger in 2019.
-
May 2, 2026 Symcor was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-05-02. Sector: Professional Services. Country: Canada. Website: symcor.ca. [AI generated] Symcor is a Canadian business process outsourcing company that provides payment processing, data management, and document services primarily to financial institutions. Founded in 1996 and headquartered in Mississauga, Ontario, it serves major banks and other clients across Canada. Its core services include cheque processing, statement production, and digital transaction solutions, helping organizations streamline operations and manage large volumes of financial data securely.
-
May 2, 2026 • Site Design Group was listed as a victim on the leak site of the AiLock ransomware group; the attack is estimated to have taken place on 2026-05-02. Sector: Professional Services. Country: United States of America. Website: site-design.com. Site Design Group Ltd. is a Chicago-based firm specializing in landscape architecture and urban design.
-
May 1, 2026 • arc-reins.com + fidelityunited.ae was listed as a victim on the leak site of the stormous ransomware group; the attack is estimated to have taken place on 2026-05-01. Sector: Financial Services. Country: United Arab Emirates. Website: fidelityunited.ae. We have gained full control over 700 GB of data, which includes: meticulous compliance audit data, complete Bank details for ARC, legal licenses, tax documents, and official contracts, as well as KYC and KYC TOBA files for all partners.Additionally, personal data for all employees has been extracted, including passports, ID cards, emails, career details, personal documents, and contracts for managers and internal communications. The breach also covers the marine insurance archive with all its deals in the Middle East, property insurance, civil liability, and risk insurance, in addition to monthly and annual quality control reports and collective agreements with major international partners.We have full control over administrative data, business travel logs, passwords, and DC client lists, along with all internal correspondence, digital identities, and official company signatures. The data also includes a list of major clients and thousands of personal information records for Fidelity and ARC brokers, including their full personal details. All of this and more, totaling 600 GB of secrets.
-
May 2, 2026 • Tuopu was listed as a victim on the leak site of the blackwater ransomware group; the attack is estimated to have taken place on 2026-05-02. Sector: Manufacturing. Country: China. Website: tuopu.com. Founded in 1983 and headquartered in Ningbo, China, Ningbo Tuopu Group Co., Ltd. is a multipurpose enterprise specializing in R&D, manufacturing, and sales of auto parts
-
April 30, 2026 • Compass Housing Alliance was listed as a victim on the leak site of the blackwater ransomware group; the attack is estimated to have taken place on 2026-04-30. Sector: Government & Defense. Country: United States of America. Website: compasshousingalliance.org. Compass Housing Alliance is dedicated to developing and providing essential services, shelter, and affordable housing to ensure that everyone in the community has a safe place to call home.
-
April 29, 2026 • Shenzhen Gongjin Electronics was listed as a victim on the leak site of the blackwater ransomware group; the attack is estimated to have taken place on 2026-04-29. Sector: Manufacturing. Country: China. Website: twsz.com. Shenzhen Gongjin Electronics, founded in 1998 and also known as T&W, is a telecommunications manufacturing company specializing in broadband communication technology.
-
April 17, 2026 • Grupo EBD was listed as a victim on the leak site of the blackwater ransomware group; the attack is estimated to have taken place on 2026-04-17. Sector: Professional Services. Country: Brazil. Website: ebdgrupo.com.br. All data will be published soon...
-
April 17, 2026 • Minidoka Memorial Hospital was listed as a victim on the leak site of the blackwater ransomware group; the attack is estimated to have taken place on 2026-04-17. Sector: Healthcare. Country: United States of America. Website: minidokamemorial.org. Data will be published after 7 days.
-
May 2, 2026 • Zampell was listed as a victim on the leak site of the cmdorganization ransomware group; the attack is estimated to have taken place on 2026-05-02. Sector: Manufacturing. Country: Italy. Website: www.zampell.com. Zampell Ltd is a leading provider of refractory services, offering comprehensive solutions from design to ongoing maintenance. They cater to various industries, including power generation, biomass, fossil fuel, and petrochemicals, ensuring safety and efficiency in their operations. The company specializes in both standard and bespoke refractory products, delivering tailored services to meet client needs. With a commitment to quality and safety, Zampell aims to exceed customer expectations in all aspects of their service.
-
January 25, 2026 • Cytek Biosciences was listed as a victim on the leak site of the cmdorganization ransomware group; the attack is estimated to have taken place on 2026-01-25. Sector: Healthcare. Country: United States of America. Website: cytekbio.com. A biotechnology firm that develops and supplies advanced, cost-effective flow cytometry instruments and related services used worldwide by researchers and clinicians. Its compact systems and streamlined workflows enable high-throughput, single-cell analysis for applications such as cancer immunology, leukemia and lymphoma diagnosis, and transplant monitoring. Distinguished by offering high-end capabilities at lower cost, the company accelerates scientific discovery through technical innovation, exceptional customer support, and a commitment to ethical practices and community engagement. Headquartered in Fremont, California, it has been publicly traded on NASDAQ since 2021. We have 7.36 TB of downloaded data.
-
May 2, 2026 • JG Stewart Construction was listed as a victim on the leak site of the cmdorganization ransomware group; the attack is estimated to have taken place on 2026-05-02. Sector: Manufacturing. Country: Canada. Website: www.jgstewart.ca. JG Stewart Construction specializes in providing expert services for the quarry industry, focusing on the crushing, washing, and classifying of aggregates. They offer a wide range of equipment for rent or sale, including crushers, screening plants, and washing gear, catering to the needs of their clients in the aggregate sector. The company is committed to safety, quality, and integrity, ensuring exceptional service and products while also being community-minded. Additionally, they provide safety training seminars to enhance the skills of personnel in the industry.
-
May 2, 2026 • Beyond Measure & Associates, Inc. was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-05-02. Sector: Professional Services. Country: United States of America. Website: churchdesign.com. Church Design, Engineering, Financial & Construction Services
-
May 2, 2026 North Star Signs was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-02. Sector: Retail & E-Commerce. Country: United States of America. Website: www.northstarsign.com.
-
May 2, 2026 Standard-Examiner was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-02. Sector: Government & Defense. Country: United States of America. Website: www.standard.net.
-
May 2, 2026 • Star Precision was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-02. Sector: Manufacturing. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.starprecision.com.
-
May 2, 2026 • LSM Lee was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-02. Sector: Manufacturing. Country: Canada. Website: www.golsm.com.
-
May 2, 2026 • Photonic was listed as a victim on the leak site of the mnt6 ransomware group; the attack is estimated to have taken place on 2026-05-02. Sector: Technology. Country: Canada. Website: photonic.com. Photonic is delivering scalable, distributed, and fault-tolerant quantum computing and networking technologies. With proven silicon spin qubits, and a native telecom networking interface, Photonic will deliver solutions for previously intractable problems and unlock solutions for tomorrows problem sets. [Revenue: $32.6M]
-
May 3, 2026 • cgcsa.co.za was listed as a victim on the leak site of the stormous ransomware group; the attack is estimated to have taken place on 2026-05-03. Sector: Professional Services. Country: South Africa. Website: cgcsa.co.za. endor & Corporate Data ( Name-Email-Numbers/PMS NAME ), Financial Accounting Records , sales Order Reports , Database Systems , SQL Server , Sage 200 Evolutuion SQL, operational Security Data Full Sage 200 Evolution backups including all transaction history, tax records, and payroll.CRM & Legal Archives Over 151,000 sensitive documents, contracts, and internal communications from the CRM database.Full access to GS1 South Africa SharePoint, including GDSN protocols and partnership data with global entities like Unilever, Nestle, and L'Oreal.Complete PII (Personally Identifiable Information) of administrative staff and executive members, including private emails and mobile numbers.