-
Cqcrm
June 22, 2026
Cqcrm was listed as a victim on the leak site of the Icarus ransomware group; the attack is estimated to have taken place on 2026-06-22. Sector: Professional Services. Salesforce data for Cqcrm
Data stolen: SF data - compressed
-
Gms-net
June 22, 2026
•
[ ransomware, technology ]
Gms-net was listed as a victim on the leak site of the Icarus ransomware group; the attack is estimated to have taken place on 2026-06-22. Sector: Technology. Salesforce data for this corp.
Data stolen: SF data - compressed
-
HDS (Hdscorp)
June 22, 2026
•
[ ransomware, leak, technology ]
HDS (Hdscorp) was listed as a victim on the leak site of the Icarus ransomware group; the attack is estimated to have taken place on 2026-06-22. Salesforce data for this corp.
Data stolen: SF data - compressed
-
Huntress
June 22, 2026
•
[ ransomware, technology ]
Huntress was listed as a victim on the leak site of the Icarus ransomware group; the attack is estimated to have taken place on 2026-06-22. Sector: Technology. Country: United States of America. Salesforce data of Huntress.
Data stolen: SF data - Compressed
-
Schumacher Homes
June 22, 2026
•
[ ransomware, retail ]
Schumacher Homes was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-06-22. Sector: Retail & E-Commerce. Country: United States of America. Website: www.schumacherhomes.com.
-
ehg.bayern
June 22, 2026
•
[ ransomware, manufacturing ]
ehg.bayern was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-06-22. Sector: Other. Country: Germany. Website: ehg.bayern. Founded in 1991, the company has evolved from a regional waste management enterprise into a specialized provider of infrastructure operations,
-
belpointeasset.com \ belpointe.com
June 22, 2026
•
[ ransomware, finance ]
belpointeasset.com \ belpointe.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-06-22. Sector: Financial Services. Country: United States of America. 400gb
-
randa.net
June 23, 2026
randa.net was listed as a victim on the leak site of the chaos ransomware group; the attack is estimated to have taken place on 2026-06-23. Website: www.randa.net. Randa Apparel & Accessories is a global powerhouse and one of the world's leading apparel and lifestyle accessories companies, headquartered in New York City at 417 Fifth Avenue, 11th Floor. Founded in 1910, with the founder's family having been in the neckwear business since that time and the curre
-
Corporación Primax S.A.
June 23, 2026
Corporacin Primax S.A. was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-06-23. Sector: Retail & E-Commerce. Country: Peru. [distribution, fuel] ***.A. is Peru's largest fuel distribution company, operating 2,185+ stations across Peru, Ecuador, Colombia, and Uruguay with annualised revenue of approximately USD 3.4 billion (Peru alone).
The dataset spans every function of the business:
Complete financial reporting Monthly P&L, balance sheet, cash flow, and EBITDA through May 2025. GRIO (Grupo Romero Investment Office) management reporting packages. Budget 2025 vs. actuals.
Employee identity data for 15,00060,000 individuals DNI national ID numbers, bank accounts, salary amounts, pension fund details, scanned identity documents.
Live system credentials Plaintext SQL database passwords, banking SFTP credentials (Banco Bolivariano Ecuador), AD encryption master key, OSINERGMIN fuel-control system credentials.
Complete OT network map IP addresses and identifiers for 137 fuel stations on the internal 10.55.40.x network, plus JD Edwards ERP production servers.
54 GB of POS transaction data XML records of consumer fuel purchases across the entire station network.
Legal and M&A documentation Arbitration case files (PUCP/AMCHAM), UNO Corp acquisition materials (Dec 2025), bank covenant waivers.
-
FTL-Fast Transit Line
June 23, 2026
•
[ ransomware, leak, manufacturing ]
FTL-Fast Transit Line was listed as a victim on the leak site of the nova ransomware group; the attack is estimated to have taken place on 2026-06-23. Sector: Transportation. Country: Belgium. Website: ftl.be. FTL International N.V. specializes in shipping, consolidation, forwarding, and groupage services, with a strong presence in major Northern European ports and an office in Colombo, Sri Lanka. With over 25 years of experience, they offer cost-effective port-to-port and door-to-door logistics solutions, including air freight and cargo insurance. Their services cater to a wide range of clients looking for reliable shipping options across the globe. FTL is committed to exceptional personalized attention and efficient shipment handling, embodying their motto 'Experience the Difference - Data included sales data, invoices and costumers full names and phones etc; Nova Provide tree and samples from stolen data to the company when its get in touch with support department.
-
viennaairport.com
June 23, 2026
•
[ ransomware, leak ]
viennaairport.com was listed as a victim on the leak site of the apt73 ransomware group; the attack is estimated to have taken place on 2026-06-23. Sector: Transportation. Country: Austria. Website: viennaairport.com. Vienna Airport (Flughafen Wien AG) is an Austrian company, the operator of Vienna International A...
-
IH Engineers
May 29, 2026
•
[ ransomware, manufacturing ]
IH Engineers was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-05-29. Sector: Manufacturing. Country: United States of America. Website: ihengineers.com. IH Engineers, P.C. is a consulting firm with over 25 years of experience, dedicated to providin
g innovative and technically excellent services in design, construction, and structural evaluat
ion. The firm operates primarily in New Jersey, New York, and Pennsylvania, serving a diverse r
ange of clients.
We will upload 65gb of corporate data soon. Employee personal docs (passports, SSNs, DLs and ot
her HR information), confidential internal files, NDAs, projects, contracts and agreements, dra
wings and so on.
-
Leo International
May 13, 2025
•
[ ransomware, manufacturing ]
Leo International was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-05-13. Country: United States of America. Website: leointernational.com. Leo International, established in 1986, serves as a comprehensive source for the PVF, HVAC, and
Plumbing Industry. The company specializes in manufacturing products through Forging, Casting,
and Injection Molding processes.
We will upload 10gb of corporate data soon. Employee personal docs (passports, SSNs, DLs, medic
al information, phones, photos, doc scans, addresses and so on), confidential internal files an
d so on.
-
gov.br
June 23, 2026
gov.br was listed as a victim on the leak site of the apt73 ransomware group; the attack is estimated to have taken place on 2026-06-23. Sector: Government & Defense. Country: Brazil. Website: gov.br. Gov.br this is the official state digital platform and domain zone of the Brazilian Federal G...
-
kliknklik.com
June 23, 2026
•
[ ransomware, retail, technology ]
kliknklik.com was listed as a victim on the leak site of the apt73 ransomware group; the attack is estimated to have taken place on 2026-06-23. Sector: Retail & E-Commerce. Country: Indonesia. Website: kliknklik.com. KliknKlik.com a company from Indonesia, an online retailer and distributor of computer equipm...
-
Reynella East College
June 23, 2026
Reynella East College was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-06-23. Sector: Education. Country: Australia. Website: reynellaec.sa.edu.au. Reynella East College is an innovative educational institution offering a comprehensive curriculum for students from preschool to 12th grade. However, the school failed to adequately protect the privacy of its students and staff and made no attempt to do so, resulting in the leak of their sensitive personal data online. We are providing you with 600 GB of interesting files and documents, including contracts, financial reports, personal data, student and staff identification numbers, seating charts, and much more.
-
cloudquantum
June 23, 2026
•
[ ransomware, technology ]
cloudquantum was listed as a victim on the leak site of the nova ransomware group; the attack is estimated to have taken place on 2026-06-23. Sector: Technology. Country: Colombia. Website: cloudquantum.co. cloudquantum.co - software company that builds and delivers software solutions and products, such as an app for organizing activities and tools for automatically processing information from documents and media - Nova Provide tree and samples from stolen data to the company when its get in touch with support department.
-
Coldstat Refrigeration
June 23, 2026
•
[ ransomware, retail, manufacturing ]
Coldstat Refrigeration was listed as a victim on the leak site of the cmdorganization ransomware group; the attack is estimated to have taken place on 2026-06-23. Sector: Agriculture and Food Production. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.coldstat.com. Coldstat Refrigeration offers a full range of industry-proven refrigeration services. From large restaurant chains to individual stores and cafesColdstat is ready to meet all your needs. The companys qualified staff will help you determine the best solution based on your individual needs. Coldstats refrigeration services include: sales of commercial refrigeration equipment, installation, maintenance and repair, layout planning, custom system design, and removal of old equipment.Translated with DeepL.com (free version)
-
AYA BANK
June 23, 2026
AYA BANK was listed as a victim on the leak site of the lapsus$ ransomware group; the attack is estimated to have taken place on 2026-06-23. Sector: Financial Services. Country: Myanmar. Website: ayabank.com. Everything for the main platform is there. Full dump and PII data's. If AYA Bank dont contact us or pay the ransom we will start sale
-
Lee International
June 23, 2026
•
[ ransomware, manufacturing ]
Lee International was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-06-23. Sector: Manufacturing. Country: South Korea. Website: www.leeinternational.com.