-
acemacon.org
June 28, 2026
•
[ ransomware, education ]
acemacon.org was listed as a victim on the leak site of the threeam ransomware group; the attack is estimated to have taken place on 2026-06-28. Country: Mexico. Website: acemacon.org. The Academy for Classical Education is dedicated to fostering knowledge and critical thinking skills in children, preparing them to be independent learners for life. It offers a comprehensive educational experience that includes fine arts, athleti
-
lifevantage.com
June 4, 2026
•
[ ransomware, retail, leak ]
lifevantage.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-06-04. Sector: Retail & E-Commerce. Country: United States of America. Website: lifevantage.com. THE NEUTRALIZING FACTOR: How LifeVantage Corporation Profits from Hope and Buries the Truth PROLOGUE...
-
turbodata.com
June 17, 2026
turbodata.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-06-17. Sector: Technology. Country: United States of America. Website: turbodata.com. TICKET ISSUED: How Turbo Data Systems Built a Dossier on Half of California From a Slip of Paper Und...
-
qdi.com
June 11, 2026
qdi.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-06-11. Sector: Technology. Country: United States of America. Website: qdi.com. HOW QUALITY DINING CONVERTS LOSS INTO PROFIT PROLOGUE: ONE STORY ABOUT FINANCIAL ADJUSTMENTS Quality...
-
dystar.com
June 11, 2026
•
[ ransomware, manufacturing ]
dystar.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-06-11. Sector: Manufacturing. Country: Singapore. Website: dystar.com. The Complete Digital Archive of DyStar PROLOGUE: WHAT WE HAVE IN OUR HANDS 1.3 terabytes of data f...
-
pchome.com.tw
June 10, 2026
pchome.com.tw was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-06-10. Sector: Retail & E-Commerce. Country: Taiwan. Website: pchome.com.tw. HOW A TAIWANESE GIANT SOLD OUT ITS CUSTOMERS A payment company sells trust, security, and reliabilit...
-
va-glass.com
June 9, 2026
va-glass.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-06-09. Sector: Manufacturing. Country: Vatican City. Website: va-glass.com. THE TRANSPARENT MIRROR A company that sells people glass and reflections failed to protect its own r...
-
tmscentral.com
June 9, 2026
•
[ ransomware, manufacturing ]
tmscentral.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-06-09. Sector: Transportation. Country: United States of America. Website: tmscentral.com. A SIGNAL WITH NO BACKUP: How Total Monitoring Services Sells Multi-Channel Protection and Routes the...
-
doosan.com
June 8, 2026
doosan.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-06-08. Sector: Manufacturing. Country: South Korea. Website: doosan.com. How Doosan / Geith / Bobcat Buries Defects and Protects Its Secrets PROLOGUE: 3.27 TERABYTES OF FILE...
-
hmcfarms.com
June 4, 2026
•
[ ransomware, manufacturing ]
hmcfarms.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-06-04. Sector: Agriculture and Food Production. Country: United States of America. Website: hmcfarms.com. THE HMC GROUP: OPEN FIELD A California Central Valley agricultural holding feeds America peaches. It...
-
conduril.pt
June 2, 2026
•
[ ransomware, manufacturing ]
conduril.pt was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-06-02. Sector: Manufacturing. Country: Portugal. Website: conduril.pt. CONDURIL: WHAT THE COMPANY THAT BUILDS EVERYTHING IS BUILDING PROLOGUE: A FOUNDATION OF PAPER Condur...
-
canopybrands.us
June 2, 2026
•
[ ransomware, retail, manufacturing ]
canopybrands.us was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-06-02. Sector: Retail & E-Commerce. Country: Canada. Website: canopybrands.us. Limit of Travel A holding company that sells people safety at height failed to keep its own data saf...
-
Transcore
June 28, 2026
Transcore was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-06-28. Sector: Transportation. Country: United States of America. Website: www.transcore.com.
-
1-800-dentist
June 28, 2026
•
[ ransomware, retail, healthcare ]
1-800-dentist was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-06-28. Sector: Retail & E-Commerce. Country: United States of America. Website: www.1800dentist.com.
-
Driving School Software
May 21, 2026
•
[ ransomware, education, financial ]
Driving School Software was listed as a victim on the leak site of the PrinzEugen ransomware group; the attack is estimated to have taken place on 2026-05-21. Sector: Education. Hundreds of driving schools impacted.
16 Million rows of SQL, 8000 FULL credit cards, and more.
Full leak post + data available on the new PRINZ EUGEN site.
prinzkpn6d3itrgcytmsmlcpt5mgwn3ihpck2hsed5cezlbtbi3wklid.onion
-
Official Statement: Protecting palatineschool.org Infrastructure
June 28, 2026
•
[ ransomware, education, misconfiguration ]
Official Statement: Protecting palatineschool.org Infrastructure was listed as a victim on the leak site of the stormous ransomware group; the attack is estimated to have taken place on 2026-06-28. Sector: Education. During our routine network security audits, our team discovered critical structural vulnerabilities within Palatine School, which granted us full, unrestricted access to their central server (PALDC2020). We had the technical capacity to access every directory, including pupil databases ( StudentData NHS NO ) , Pupil Admin - Users -FocusIT) and staff records Personnel.We want to announce that we have locked down this operation and decided to leak absolutely nothing.This is an institution dedicated to children and special needs education. Unlike corporate thieves or ruthless threat actors, we operate with a strict code of ethics: we do not target children, schools, or healthcare facilities.Instead of destroying them, we have chosen to act as an uninvited security audit. We are using our platform to publicly invite the administration of Palatine School to contact us privately. We will provide them with the full technical details of the critical vulnerabilities we discovered and guide them on how to patch their system for free, ensuring they are protected from other ruthless cyber criminals.
-
monoprix.tn
June 28, 2026
•
[ ransomware, retail ]
monoprix.tn was listed as a victim on the leak site of the stormous ransomware group; the attack is estimated to have taken place on 2026-06-28. Sector: Retail & E-Commerce. Country: Tunisia. Website: monoprix.tn. Data description: Pending update
-
eshacloudqa.com
June 28, 2026
eshacloudqa.com was listed as a victim on the leak site of the stormous ransomware group; the attack is estimated to have taken place on 2026-06-28. Sector: Technology. Country: United States of America. Website: eshacloudqa.com. We have breached ESHA Research / ESHA Cloud Services and compromised their core product development databases. The exfiltrated data includes highly confidential industry secrets and formulation data Complete intellectual property containing secret product designs, manufacturing blueprints, and recipes (SupplementFormula, PureFood, FoodGroup).Deep laboratory data, nutritional testing breakdowns, and allergen classification records (SupplementIngredient, Analysis, AllergenGroup, Sensitive registries containing client profiles, user metrics, and market consumer data (Consumer, Activity).
-
eogb.co.uk
June 28, 2026
eogb.co.uk was listed as a victim on the leak site of the stormous ransomware group; the attack is estimated to have taken place on 2026-06-28. Sector: Energy & Utilities. Country: United Kingdom of Great Britain and Northern Ireland. Website: eogb.co.uk. Deep access to Microsoft Dynamics GP containing complete corporate accounting, invoices, vendor details, and commercial transactions.Access to internal legal documents, partnership agreements, and customer contracts (such as CBIF OSMO agreements).Exfiltration of operational spreadsheets, financial reports, and executive documents via corporate
-
HIGUCHI USA, INC
June 28, 2026
•
[ ransomware, manufacturing, technology ]
HIGUCHI USA, INC was listed as a victim on the leak site of the stormous ransomware group; the attack is estimated to have taken place on 2026-06-28. Sector: Manufacturing. Country: United States of America. Website: higuchiinc.com. (Dallas - HongKong - LosAngeles ) Comprehensive financial statements including Balance Sheets, Asset records, Liabilities, Capital, Accounts Receivable (A/R), and Accounts Payable (A/P) database backups from Sage 50 (formerly Peachtree Accounting software), indicated by the .ptb file extension Corporate data detailing domestic and international inventory tracking, trade checking, and business operations.
