-
paipharma.com
June 13, 2026
paipharma.com was listed as a victim on the leak site of the BrainCipher ransomware group; the attack is estimated to have taken place on 2026-06-13. Sector: Healthcare. Country: Brazil. Website: paipharma.com.
-
universalplant.com
June 30, 2026
•
[ ransomware, financial ]
universalplant.com was listed as a victim on the leak site of the chaos ransomware group; the attack is estimated to have taken place on 2026-06-30. Sector: Agriculture and Food Production. Country: United States of America. Website: universalplant.com. FINAL NOTICE: UNIVERSAL PLANT SERVICES (UPS)
We are in possession of 315 GB of your corporate, financial, and operational data. Our analysis confirms that this archive contains highly sensitive information, including:
Financial & Accounting: Full audits, tax filings (ADP), payroll, bank transa
-
Western Construction
June 30, 2026
•
[ ransomware, manufacturing ]
Western Construction was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-06-30. Sector: Manufacturing. Country: United States of America. Website: www.wciboise.com. United States
-
Primed Halberstadt Medizintechnik
June 30, 2026
Primed Halberstadt Medizintechnik was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-06-30. Sector: Healthcare. Country: Germany. [manufacturer] *** GmbH a German manufacturer of medical devices founded in 1946 and now part of the PE-backed PP Medtech group (Wiesmann & Co. KG).
The exfiltration captured four entire server volumes:
Daten (883 GB) File server: 289 employee home directories (547 GB), Czech subsidiary data (66 GB), production processes (162 GB), machine configurations (81 GB)
EE (807 GB) Enterprise system: Apollo ERP, VBANK banking (8 accounts), complete database backup (100.6 GB, dated June 3), product images
WINDVSW1 (344 GB) Windows server: DATEV accounting (115+ data directories including LODAS payroll), bank transfers, DMS exports
dmsscan (12 GB) Scanned documents from 51+ employee DMS mailboxes
A database backup (spiel.zip.001010, 100.6 GB) was created on 2026-06-03
-
Colorado Dental Wellness Center
May 1, 2026
Colorado Dental Wellness Center was listed as a victim on the leak site of the anubis ransomware group; the attack is estimated to have taken place on 2026-05-01. Sector: Healthcare. Country: United States of America. Website: coloradodentalwellness.com. Clients medical data breach.
-
The Country Club of Darien
April 25, 2026
•
[ ransomware, manufacturing, technology ]
The Country Club of Darien was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-04-25. Sector: Hospitality. Country: United States of America. - Sales / agent / commercial operations- Industrial / manufacturing / tooling business data- Research & development / technical project data- Business admin / office operations- Software / digital assets / branding
-
bridgeway-consulting.co.uk
May 1, 2026
•
[ ransomware, technology ]
bridgeway-consulting.co.uk was listed as a victim on the leak site of the BrainCipher ransomware group; the attack is estimated to have taken place on 2026-05-01. Sector: Professional Services. Country: United Kingdom of Great Britain and Northern Ireland. Website: bridgeway-consulting.co.uk.
-
eworldme.com
May 1, 2026
•
[ ransomware, retail ]
eworldme.com was listed as a victim on the leak site of the BrainCipher ransomware group; the attack is estimated to have taken place on 2026-05-01. Sector: Retail & E-Commerce. Country: United Arab Emirates. Website: eworldme.com.
-
endeavourautomotive.co.uk
May 1, 2026
endeavourautomotive.co.uk was listed as a victim on the leak site of the BrainCipher ransomware group; the attack is estimated to have taken place on 2026-05-01. Sector: Transportation. Country: United Kingdom of Great Britain and Northern Ireland. Website: endeavourautomotive.co.uk. [AI generated] Endeavour Automotive is a UK-based car dealership group operating across England. The company sells new and used vehicles from multiple mainstream and premium brands, including Ford, Nissan, and others. It also provides vehicle servicing, parts, and aftersales support. Operating within the automotive retail industry, Endeavour Automotive runs several dealership locations primarily in the south and east of England.
-
soundinsurance.ca
May 1, 2026
soundinsurance.ca was listed as a victim on the leak site of the BrainCipher ransomware group; the attack is estimated to have taken place on 2026-05-01. Sector: Financial Services. Country: Canada. Website: soundinsurance.ca.
-
exceldor.ca
May 1, 2026
•
[ ransomware, manufacturing ]
exceldor.ca was listed as a victim on the leak site of the BrainCipher ransomware group; the attack is estimated to have taken place on 2026-05-01. Sector: Agriculture and Food Production. Country: Canada. Website: exceldor.ca. [AI generated] Exceldor is a Canadian agricultural cooperative specializing in poultry production and processing. headquartered in Quebec, Canada, the company produces and distributes chicken and turkey products under various brands. It operates processing facilities across Quebec and Ontario, supplying retail, foodservice, and industrial customers throughout Canada. Exceldor is one of the largest poultry cooperatives in the country, known for its focus on quality and sustainable farming practices.
-
westonconsulting.com
May 1, 2026
•
[ ransomware, technology ]
westonconsulting.com was listed as a victim on the leak site of the BrainCipher ransomware group; the attack is estimated to have taken place on 2026-05-01. Sector: Professional Services. Country: United States of America. Website: westonconsulting.com.
-
liteline.com
May 1, 2026
•
[ ransomware, technology, manufacturing ]
liteline.com was listed as a victim on the leak site of the BrainCipher ransomware group; the attack is estimated to have taken place on 2026-05-01. Sector: Technology. Country: United States of America. Website: liteline.com. [AI generated] Liteline is a Canadian lighting manufacturer and distributor based in Ontario, Canada. The company specializes in designing and supplying innovative LED lighting solutions for residential and commercial applications. Its product portfolio includes recessed lighting, track lighting, and decorative fixtures. Liteline is known for combining energy-efficient technology with modern design, serving contractors, architects, and consumers across North America through various retail and wholesale channels.
-
nwlr.ca
May 1, 2026
•
[ ransomware, technology ]
nwlr.ca was listed as a victim on the leak site of the BrainCipher ransomware group; the attack is estimated to have taken place on 2026-05-01. Sector: Technology. Country: Canada. Website: nwlr.ca.
-
kisnet.co.jp
May 1, 2026
kisnet.co.jp was listed as a victim on the leak site of the BrainCipher ransomware group; the attack is estimated to have taken place on 2026-05-01. Sector: Technology. Country: Japan. Website: kisnet.co.jp. [AI generated] Kisnet Co., Ltd. is a Japanese internet service provider based in Japan. The company offers broadband and network connectivity services primarily to residential and business customers. Operating within the telecommunications and ISP industry, Kisnet provides internet access solutions in the Japanese market. The company is part of Japan's regional ISP sector, delivering reliable network infrastructure and related services to its subscriber base.
-
flbgroup.com
May 1, 2026
•
[ ransomware, manufacturing, retail ]
flbgroup.com was listed as a victim on the leak site of the BrainCipher ransomware group; the attack is estimated to have taken place on 2026-05-01. Sector: Professional Services. Country: United Kingdom of Great Britain and Northern Ireland. Website: flbgroup.com.
-
Fox Broermann Pediatric Dentistry of Tulsa
April 22, 2026
•
[ ransomware, healthcare ]
Fox Broermann Pediatric Dentistry of Tulsa was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-04-22. Sector: Healthcare. Country: United States of America. Website: foxbroermann.com. Pediatric dentistry of Tulsa
-
Mesquite Plumbing Inc.
May 1, 2026
•
[ ransomware, leak ]
Mesquite Plumbing Inc. was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-05-01. Sector: Professional Services. Country: United States of America. Website: mesquiteplumbing.com. Plumbing Experts
-
Kinsmen TeleMiracle
April 9, 2026
•
[ ransomware, retail, leak ]
Kinsmen TeleMiracle was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-04-09. Sector: Retail & E-Commerce. Country: Canada. Website: telemiracle.com. Charitable organization that hosts an annual telethon to raise funds for the Kinsmen Foundation
-
Roger D. Mason II, P.A.
April 16, 2026
•
[ ransomware, legal, finance ]
Roger D. Mason II, P.A. was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-04-16. Sector: Professional Services. Country: United States of America. Website: flautolawyer.com. Florida Auto Dealership Fraud Attorney
