-
Yuditec S.A.
June 30, 2026
•
[ ransomware, technology ]
Yuditec S.A. was listed as a victim on the leak site of the gunra ransomware group; the attack is estimated to have taken place on 2026-06-30. Sector: Technology. Country: Uruguay. Website: yuditec.com.
-
on-us
June 30, 2026
•
[ ransomware, technology ]
on-us was listed as a victim on the leak site of the gunra ransomware group; the attack is estimated to have taken place on 2026-06-30. Sector: Technology. Country: Hong Kong. Website: on-us.com.
-
Pirámide Seguros
June 30, 2026
•
[ ransomware, finance ]
Pirmide Seguros was listed as a victim on the leak site of the gunra ransomware group; the attack is estimated to have taken place on 2026-06-30. Sector: Financial Services. Country: Venezuela (Bolivarian Republic of). Website: segurospiramide.com.
-
Sociedad Latina
June 25, 2026
•
[ ransomware, education ]
Sociedad Latina was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-06-25. Sector: Other. Country: United States of America. Website: sociedadlatina.org. Support in education, civic engagement, workforce development, and arts and culture, specifically tailored for multilingual learners
-
ORA Group Information
June 23, 2026
•
[ ransomware, retail ]
ORA Group Information was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-06-23. Sector: Professional Services. Country: France. Website: groupe-ora.com. Specializing in retail and the point-of-sale experience
-
Spector and Lenz, PC
June 22, 2026
•
[ ransomware, healthcare, finance ]
Spector and Lenz, PC was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-06-22. Sector: Professional Services. Country: United States of America. Website: spectorandlenz.com. Firm provides legal representation to clients facing disability, injury, or serious illness
-
Hemmersbach GmbH & Co. KG
June 30, 2026
•
[ ransomware, technology ]
Hemmersbach GmbH & Co. KG was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-06-30. Sector: Professional Services. Country: Germany. Website: www.hemmersbach.com.
-
Chamco
June 30, 2026
•
[ ransomware, manufacturing ]
Chamco was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-06-30. Sector: Manufacturing. Website: www.chamco.com.
-
wilfley.com
June 24, 2026
•
[ ransomware, manufacturing, technology ]
wilfley.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-06-24. Sector: Professional Services. Country: United States of America. Website: wilfley.com. SEAL FAILURE A company that builds pumps for chemical and defense production and undertakes to con...
-
joyconstructionnyc.com
June 24, 2026
•
[ ransomware, manufacturing ]
joyconstructionnyc.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-06-24. Sector: Manufacturing. Country: United States of America. Website: joyconstructionnyc.com. Joy Construction Corp: $1.3 Billion in Affordable Housing and $8.7 Million to a Shareholder in Six...
-
clc-tn.com
June 26, 2026
•
[ ransomware, retail, manufacturing ]
clc-tn.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-06-26. Country: United States of America. Website: clc-tn.com. City Lumber Company: Building Materials in Tennessee What Lies Behind the Small Sign PROLOGUE In o...
-
https://sza.it/
June 30, 2026
•
[ ransomware, leak ]
https://sza.it/ was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-06-30. Sector: Professional Services. Country: Italy. Website: sza.it. client, contracts, personal, NDA and other
-
orion4value.com
June 25, 2026
orion4value.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-06-25. Sector: Professional Services. Country: Germany. Website: orion4value.com. THE CERTIFICATE AS A VULNERABILITY: Documents of Orion Registrar Inc. PROLOGUE Financial reports and...
-
petradiamonds.com
June 24, 2026
•
[ ransomware, energy ]
petradiamonds.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-06-24. Sector: Energy & Utilities. Country: United Kingdom of Great Britain and Northern Ireland. Website: petradiamonds.com. THE DIAMOND ARCHIVE: Petra Diamonds Limited Documents PROLOGUE A complete employee directory with na...
-
Brooklyn Defender Services
June 23, 2026
Brooklyn Defender Services was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-06-23. Sector: Professional Services. Country: United States of America. Website: .. A legal organization dedicated to safeguard the rights of its clients
-
paipharma.com
June 13, 2026
paipharma.com was listed as a victim on the leak site of the BrainCipher ransomware group; the attack is estimated to have taken place on 2026-06-13. Sector: Healthcare. Country: Brazil. Website: paipharma.com.
-
universalplant.com
June 30, 2026
•
[ ransomware, financial ]
universalplant.com was listed as a victim on the leak site of the chaos ransomware group; the attack is estimated to have taken place on 2026-06-30. Sector: Agriculture and Food Production. Country: United States of America. Website: universalplant.com. FINAL NOTICE: UNIVERSAL PLANT SERVICES (UPS)
We are in possession of 315 GB of your corporate, financial, and operational data. Our analysis confirms that this archive contains highly sensitive information, including:
Financial & Accounting: Full audits, tax filings (ADP), payroll, bank transa
-
Western Construction
June 30, 2026
•
[ ransomware, manufacturing ]
Western Construction was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-06-30. Sector: Manufacturing. Country: United States of America. Website: www.wciboise.com. United States
-
Primed Halberstadt Medizintechnik
June 30, 2026
Primed Halberstadt Medizintechnik was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-06-30. Sector: Healthcare. Country: Germany. [manufacturer] *** GmbH a German manufacturer of medical devices founded in 1946 and now part of the PE-backed PP Medtech group (Wiesmann & Co. KG).
The exfiltration captured four entire server volumes:
Daten (883 GB) File server: 289 employee home directories (547 GB), Czech subsidiary data (66 GB), production processes (162 GB), machine configurations (81 GB)
EE (807 GB) Enterprise system: Apollo ERP, VBANK banking (8 accounts), complete database backup (100.6 GB, dated June 3), product images
WINDVSW1 (344 GB) Windows server: DATEV accounting (115+ data directories including LODAS payroll), bank transfers, DMS exports
dmsscan (12 GB) Scanned documents from 51+ employee DMS mailboxes
A database backup (spiel.zip.001010, 100.6 GB) was created on 2026-06-03
-
Colorado Dental Wellness Center
May 1, 2026
Colorado Dental Wellness Center was listed as a victim on the leak site of the anubis ransomware group; the attack is estimated to have taken place on 2026-05-01. Sector: Healthcare. Country: United States of America. Website: coloradodentalwellness.com. Clients medical data breach.
