-
ORA Group Information
June 23, 2026
•
[ ransomware, retail ]
ORA Group Information was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-06-23. Sector: Professional Services. Country: France. Website: groupe-ora.com. Specializing in retail and the point-of-sale experience
-
Spector and Lenz, PC
June 22, 2026
•
[ ransomware, healthcare, finance ]
Spector and Lenz, PC was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-06-22. Sector: Professional Services. Country: United States of America. Website: spectorandlenz.com. Firm provides legal representation to clients facing disability, injury, or serious illness
-
Hemmersbach GmbH & Co. KG
June 30, 2026
•
[ ransomware, technology ]
Hemmersbach GmbH & Co. KG was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-06-30. Sector: Professional Services. Country: Germany. Website: www.hemmersbach.com.
-
Chamco
June 30, 2026
•
[ ransomware, manufacturing ]
Chamco was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-06-30. Sector: Manufacturing. Website: www.chamco.com.
-
wilfley.com
June 24, 2026
•
[ ransomware, manufacturing, technology ]
wilfley.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-06-24. Sector: Professional Services. Country: United States of America. Website: wilfley.com. SEAL FAILURE A company that builds pumps for chemical and defense production and undertakes to con...
-
joyconstructionnyc.com
June 24, 2026
•
[ ransomware, manufacturing ]
joyconstructionnyc.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-06-24. Sector: Manufacturing. Country: United States of America. Website: joyconstructionnyc.com. Joy Construction Corp: $1.3 Billion in Affordable Housing and $8.7 Million to a Shareholder in Six...
-
clc-tn.com
June 26, 2026
•
[ ransomware, retail, manufacturing ]
clc-tn.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-06-26. Country: United States of America. Website: clc-tn.com. City Lumber Company: Building Materials in Tennessee What Lies Behind the Small Sign PROLOGUE In o...
-
https://sza.it/
June 30, 2026
•
[ ransomware, leak ]
https://sza.it/ was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-06-30. Sector: Professional Services. Country: Italy. Website: sza.it. client, contracts, personal, NDA and other
-
orion4value.com
June 25, 2026
orion4value.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-06-25. Sector: Professional Services. Country: Germany. Website: orion4value.com. THE CERTIFICATE AS A VULNERABILITY: Documents of Orion Registrar Inc. PROLOGUE Financial reports and...
-
petradiamonds.com
June 24, 2026
•
[ ransomware, energy ]
petradiamonds.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-06-24. Sector: Energy & Utilities. Country: United Kingdom of Great Britain and Northern Ireland. Website: petradiamonds.com. THE DIAMOND ARCHIVE: Petra Diamonds Limited Documents PROLOGUE A complete employee directory with na...
-
Brooklyn Defender Services
June 23, 2026
Brooklyn Defender Services was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-06-23. Sector: Professional Services. Country: United States of America. Website: .. A legal organization dedicated to safeguard the rights of its clients
-
paipharma.com
June 13, 2026
paipharma.com was listed as a victim on the leak site of the BrainCipher ransomware group; the attack is estimated to have taken place on 2026-06-13. Sector: Healthcare. Country: Brazil. Website: paipharma.com.
-
universalplant.com
June 30, 2026
•
[ ransomware, financial ]
universalplant.com was listed as a victim on the leak site of the chaos ransomware group; the attack is estimated to have taken place on 2026-06-30. Sector: Agriculture and Food Production. Country: United States of America. Website: universalplant.com. FINAL NOTICE: UNIVERSAL PLANT SERVICES (UPS)
We are in possession of 315 GB of your corporate, financial, and operational data. Our analysis confirms that this archive contains highly sensitive information, including:
Financial & Accounting: Full audits, tax filings (ADP), payroll, bank transa
-
Western Construction
June 30, 2026
•
[ ransomware, manufacturing ]
Western Construction was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-06-30. Sector: Manufacturing. Country: United States of America. Website: www.wciboise.com. United States
-
Primed Halberstadt Medizintechnik
June 30, 2026
Primed Halberstadt Medizintechnik was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-06-30. Sector: Healthcare. Country: Germany. [manufacturer] *** GmbH a German manufacturer of medical devices founded in 1946 and now part of the PE-backed PP Medtech group (Wiesmann & Co. KG).
The exfiltration captured four entire server volumes:
Daten (883 GB) File server: 289 employee home directories (547 GB), Czech subsidiary data (66 GB), production processes (162 GB), machine configurations (81 GB)
EE (807 GB) Enterprise system: Apollo ERP, VBANK banking (8 accounts), complete database backup (100.6 GB, dated June 3), product images
WINDVSW1 (344 GB) Windows server: DATEV accounting (115+ data directories including LODAS payroll), bank transfers, DMS exports
dmsscan (12 GB) Scanned documents from 51+ employee DMS mailboxes
A database backup (spiel.zip.001010, 100.6 GB) was created on 2026-06-03
-
Colorado Dental Wellness Center
May 1, 2026
Colorado Dental Wellness Center was listed as a victim on the leak site of the anubis ransomware group; the attack is estimated to have taken place on 2026-05-01. Sector: Healthcare. Country: United States of America. Website: coloradodentalwellness.com. Clients medical data breach.
-
The Country Club of Darien
April 25, 2026
•
[ ransomware, manufacturing, technology ]
The Country Club of Darien was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-04-25. Sector: Hospitality. Country: United States of America. - Sales / agent / commercial operations- Industrial / manufacturing / tooling business data- Research & development / technical project data- Business admin / office operations- Software / digital assets / branding
-
bridgeway-consulting.co.uk
May 1, 2026
•
[ ransomware, technology ]
bridgeway-consulting.co.uk was listed as a victim on the leak site of the BrainCipher ransomware group; the attack is estimated to have taken place on 2026-05-01. Sector: Professional Services. Country: United Kingdom of Great Britain and Northern Ireland. Website: bridgeway-consulting.co.uk.
-
eworldme.com
May 1, 2026
•
[ ransomware, retail ]
eworldme.com was listed as a victim on the leak site of the BrainCipher ransomware group; the attack is estimated to have taken place on 2026-05-01. Sector: Retail & E-Commerce. Country: United Arab Emirates. Website: eworldme.com.
-
endeavourautomotive.co.uk
May 1, 2026
endeavourautomotive.co.uk was listed as a victim on the leak site of the BrainCipher ransomware group; the attack is estimated to have taken place on 2026-05-01. Sector: Transportation. Country: United Kingdom of Great Britain and Northern Ireland. Website: endeavourautomotive.co.uk. [AI generated] Endeavour Automotive is a UK-based car dealership group operating across England. The company sells new and used vehicles from multiple mainstream and premium brands, including Ford, Nissan, and others. It also provides vehicle servicing, parts, and aftersales support. Operating within the automotive retail industry, Endeavour Automotive runs several dealership locations primarily in the south and east of England.
