-
Official Statement: Protecting palatineschool.org Infrastructure
June 28, 2026
•
[ ransomware, education, misconfiguration ]
Official Statement: Protecting palatineschool.org Infrastructure was listed as a victim on the leak site of the stormous ransomware group; the attack is estimated to have taken place on 2026-06-28. Sector: Education. During our routine network security audits, our team discovered critical structural vulnerabilities within Palatine School, which granted us full, unrestricted access to their central server (PALDC2020). We had the technical capacity to access every directory, including pupil databases ( StudentData NHS NO ) , Pupil Admin - Users -FocusIT) and staff records Personnel.We want to announce that we have locked down this operation and decided to leak absolutely nothing.This is an institution dedicated to children and special needs education. Unlike corporate thieves or ruthless threat actors, we operate with a strict code of ethics: we do not target children, schools, or healthcare facilities.Instead of destroying them, we have chosen to act as an uninvited security audit. We are using our platform to publicly invite the administration of Palatine School to contact us privately. We will provide them with the full technical details of the critical vulnerabilities we discovered and guide them on how to patch their system for free, ensuring they are protected from other ruthless cyber criminals.
-
monoprix.tn
June 28, 2026
•
[ ransomware, retail ]
monoprix.tn was listed as a victim on the leak site of the stormous ransomware group; the attack is estimated to have taken place on 2026-06-28. Sector: Retail & E-Commerce. Country: Tunisia. Website: monoprix.tn. Data description: Pending update
-
eshacloudqa.com
June 28, 2026
eshacloudqa.com was listed as a victim on the leak site of the stormous ransomware group; the attack is estimated to have taken place on 2026-06-28. Sector: Technology. Country: United States of America. Website: eshacloudqa.com. We have breached ESHA Research / ESHA Cloud Services and compromised their core product development databases. The exfiltrated data includes highly confidential industry secrets and formulation data Complete intellectual property containing secret product designs, manufacturing blueprints, and recipes (SupplementFormula, PureFood, FoodGroup).Deep laboratory data, nutritional testing breakdowns, and allergen classification records (SupplementIngredient, Analysis, AllergenGroup, Sensitive registries containing client profiles, user metrics, and market consumer data (Consumer, Activity).
-
eogb.co.uk
June 28, 2026
eogb.co.uk was listed as a victim on the leak site of the stormous ransomware group; the attack is estimated to have taken place on 2026-06-28. Sector: Energy & Utilities. Country: United Kingdom of Great Britain and Northern Ireland. Website: eogb.co.uk. Deep access to Microsoft Dynamics GP containing complete corporate accounting, invoices, vendor details, and commercial transactions.Access to internal legal documents, partnership agreements, and customer contracts (such as CBIF OSMO agreements).Exfiltration of operational spreadsheets, financial reports, and executive documents via corporate
-
HIGUCHI USA, INC
June 28, 2026
•
[ ransomware, manufacturing, technology ]
HIGUCHI USA, INC was listed as a victim on the leak site of the stormous ransomware group; the attack is estimated to have taken place on 2026-06-28. Sector: Manufacturing. Country: United States of America. Website: higuchiinc.com. (Dallas - HongKong - LosAngeles ) Comprehensive financial statements including Balance Sheets, Asset records, Liabilities, Capital, Accounts Receivable (A/R), and Accounts Payable (A/P) database backups from Sage 50 (formerly Peachtree Accounting software), indicated by the .ptb file extension Corporate data detailing domestic and international inventory tracking, trade checking, and business operations.
-
higuchi-inc.co.jp
June 28, 2026
•
[ ransomware, manufacturing, financial ]
higuchi-inc.co.jp was listed as a victim on the leak site of the stormous ransomware group; the attack is estimated to have taken place on 2026-06-28. Sector: Manufacturing. Country: Japan. Website: higuchi-inc.co.jp. (Dallas - HongKong - LosAngeles ) Comprehensive financial statements including Balance Sheets, Asset records, Liabilities, Capital, Accounts Receivable (A/R), and Accounts Payable (A/P) database backups from Sage 50 (formerly Peachtree Accounting software), indicated by the .ptb file extension Corporate data detailing domestic and international inventory tracking, trade checking, and business operations.
-
NASCO
June 29, 2026
NASCO was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-06-29. Sector: Agriculture and Food Production. Country: United States of America. Website: www.nasco.com.
-
Axionlog
June 29, 2026
•
[ ransomware, technology ]
Axionlog was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-06-29. Sector: Technology. Country: Czechia. Website: www.axionlog.com.
-
Villea Hotels in AttanaHo
June 29, 2026
Villea Hotels in AttanaHo was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-06-29. Sector: Hospitality.
-
ccic.com.tw
June 29, 2026
ccic.com.tw was listed as a victim on the leak site of the Blackfield ransomware group; the attack is estimated to have taken place on 2026-06-29. Sector: Manufacturing. Country: Taiwan. Website: ccic.com.tw. Nidec Chaun-Choung Technology Corporation (CCIC) is a Taiwan-based company specializing in the d...
-
METCO Services, Metco Southeast
June 29, 2026
•
[ ransomware, technology ]
METCO Services, Metco Southeast was listed as a victim on the leak site of the cmdorganization ransomware group; the attack is estimated to have taken place on 2026-06-29. Sector: Professional Services. Country: United States of America. Website: www.metcoservices.com. Metco Services is a multi-disciplined consulting firm specializing in engineering services for the water and wastewater industry. They provide study, design, and construction engineering services to publicly owned water and wastewater collection and treatment systems. With over 100 years of combined industry experience, their team focuses on efficient system utilization to optimize value. Their clientele includes municipalities in Michigan, Ohio, Pennsylvania, and Florida.
-
medipakpharma.com
June 28, 2026
•
[ ransomware, healthcare, manufacturing ]
medipakpharma.com was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-06-28. Sector: Healthcare. Country: Pakistan. Website: medipakpharma.com. The Pakistani pharmaceutical company Medipak Limited (***.com) specializes in the manufacture of infusion solutions, medical devices, and pharmaceutical products.
-
GDN AR(Dorinka)
June 29, 2026
•
[ ransomware, retail ]
GDN AR(Dorinka) was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-06-29. Sector: Other. Country: Argentina. Dorinka S.R.L. is based in Argentina, with the head office in Cidade Autonoma De Buenos Aires. The enterprise operates in the Grocery Stores industry. Dorinka S.R.L. was incorporated on June 29, 2026. There are currently 8,000 (2024) people employed by Dorinka S.R.L..
-
vipimaging
June 28, 2026
•
[ ransomware, healthcare ]
vipimaging was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-06-28. Sector: Healthcare. Country: United States of America. Website: vipimaging.com. VIP Imaging is the largest mobile nuclear imaging company in Southern California, specializing in cardiac PET/CT and SPECT studies for cardiologists. The company is employee-owned and prides itself on having the best technicians and technology in the industry, ensuring high-quality patient care and support for proper billing.
-
stni.co.kr
June 28, 2026
•
[ ransomware, technology, manufacturing ]
stni.co.kr was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-06-28. Country: South Korea. Website: stni.co.kr. Creating accurate virtual replicas involves production facilities, workshops, and equipment for modeling, testing, and optimizing technological processes.
-
agroprime
June 28, 2026
•
[ ransomware, technology ]
agroprime was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-06-28. Sector: Agriculture and Food Production. Country: Brazil. Website: agroprime.com. development of specialized software (SaaS) for automating agribusiness management and monitoring field personnel
-
hwaseng
June 28, 2026
hwaseng was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-06-28. Sector: Manufacturing. Country: Taiwan. Website: hwaseng.com.tw. A Taiwanese manufacturer with forty years of experience, specializing in the high-precision production of metal fasteners, precision-machined parts, and components for the electronics and automotive industries.
-
Abans Finserv
June 29, 2026
•
[ ransomware, finance, technology ]
Abans Finserv was listed as a victim on the leak site of the blacknevas ransomware group; the attack is estimated to have taken place on 2026-06-29. Sector: Retail & E-Commerce. Country: India. Website: abansfinserv.com. The Abans Group is a globally diversified organization engaged in Investment Management, Trading, Broking, Gold Refining, Non-Banking Financial Services, Agricultural Trading, Software Development, and Real Estate Development.We are globally diversified organisation engaged in Financial Services, Gold Refining, Jewellery, Commodities Trading, Agricultural Trading and Warehousing, Pharmaceuticals Distribution, Software Development and Real Estate. The group is founded by young entrepreneur - Mr. Abhishek Bansal who leads a global team of over 300 people operating growing businesses from multiple locations including India, United Kingdom, Dubai, Shanghai, Hong kong, Mauritius and Singapore.Our Company represents the financial services arm of the Abans Group. We operate a diversified global financial services business, headquartered in India, providing NBFC services, multi-asset global institutional trading in equities,Since the inception of our Company in 2009-10, we have grown from being a commodities trading company into a diversified multi-asset and multi-national financial services company having varied financial services businesses which are mainly organised under:NBFC Business: We are a Non Banking Financial Company registered with RBI and having a Total Loan Book of 35,263 lakhs as on March 31, 2021.Our NBFC business is primarily focused on lending to private traders and other small and medium businesses involved in the commodities trading market.Agency Business: We are SEBI registered Stock and Commodity Exchange Brokers with memberships across all the major stock exchanges in India, including BSE, NSE, MSEI, MCX, NCDEX, ICEX and IIEL and further we have memberships in various international exchanges like DGCX (Dubai), LME (London), INE (Shanghai) and DCE (China). We are also a SEBI Registered Portfolio Management company as well as a SEBI Registered Category-I FPI and Category-III AIF. We offer various client-based institutional trading services, wealth management and private client brokerage services, mainly in equity, commodities and foreign exchange.Capital and other Business: Our Capital Business includes our internal treasury operations which manage our excess capital funds. We do so by investing our capital in what we believe to be low / medium risk strategies, maintaining positions in physical as well as exchange traded commodities and other instruments which we can liquidate economically within a specified days based on our strategy of short term or long term holding. We structure our treasury investments to maintain sufficient liquidity in our portfolio to support the capital needs of our other businesses. Further we provide Warehousing Services to commodity market participants.
-
Gsma
June 29, 2026
•
[ ransomware, technology ]
Gsma was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-06-29. Sector: Technology. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.gsmarchitects.net.
-
Bristol Place
June 29, 2026
•
[ ransomware, hack ]
Bristol Place was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-06-29. Sector: Other. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.bristolplace.net.