-
eggetttax.ca
June 22, 2026
eggetttax.ca was listed as a victim on the leak site of the BrainCipher ransomware group; the attack is estimated to have taken place on 2026-06-22. Sector: Agriculture and Food Production. Country: Canada. Website: eggetttax.ca.
-
graymont.com
June 22, 2026
•
[ ransomware, manufacturing, financial ]
graymont.com was listed as a victim on the leak site of the chaos ransomware group; the attack is estimated to have taken place on 2026-06-22. Sector: Manufacturing. Country: Canada. Website: graymont.com. NOTICE: Graymont Final Warning
We have successfully gained full access to the corporate infrastructure of Graymont. Our team currently holds a massive volume of highly sensitive data. The scope of our access covers the entire core of your operations, from executive financial strategy to individ
-
EON Meditech Pvt
June 22, 2026
•
[ ransomware, healthcare, technology ]
EON Meditech Pvt was listed as a victim on the leak site of the cmdorganization ransomware group; the attack is estimated to have taken place on 2026-06-22. Sector: Healthcare. Country: India. Website: www.eonmeditech.com. EON Meditech specializes in innovative medical technology solutions aimed at enhancing patient care and improving healthcare outcomes. Their product offerings include advanced medical devices and software solutions tailored for healthcare providers. The company primarily serves hospitals, clinics, and healthcare professionals looking for cutting-edge technology to streamline operations and enhance patient experiences. EON Meditech is committed to driving advancements in the medical field through research and development.
-
Cbassociations
June 22, 2026
•
[ ransomware, technology ]
Cbassociations was listed as a victim on the leak site of the Icarus ransomware group; the attack is estimated to have taken place on 2026-06-22. Sector: Professional Services. Salesforce data for this corp.
Data stolen: SF data. Compressed size.
-
Cqcrm
June 22, 2026
Cqcrm was listed as a victim on the leak site of the Icarus ransomware group; the attack is estimated to have taken place on 2026-06-22. Sector: Professional Services. Salesforce data for Cqcrm
Data stolen: SF data - compressed
-
Gms-net
June 22, 2026
•
[ ransomware, technology ]
Gms-net was listed as a victim on the leak site of the Icarus ransomware group; the attack is estimated to have taken place on 2026-06-22. Sector: Technology. Salesforce data for this corp.
Data stolen: SF data - compressed
-
HDS (Hdscorp)
June 22, 2026
•
[ ransomware, leak, technology ]
HDS (Hdscorp) was listed as a victim on the leak site of the Icarus ransomware group; the attack is estimated to have taken place on 2026-06-22. Salesforce data for this corp.
Data stolen: SF data - compressed
-
Huntress
June 22, 2026
•
[ ransomware, technology ]
Huntress was listed as a victim on the leak site of the Icarus ransomware group; the attack is estimated to have taken place on 2026-06-22. Sector: Technology. Country: United States of America. Salesforce data of Huntress.
Data stolen: SF data - Compressed
-
Schumacher Homes
June 22, 2026
•
[ ransomware, retail ]
Schumacher Homes was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-06-22. Sector: Retail & E-Commerce. Country: United States of America. Website: www.schumacherhomes.com.
-
ehg.bayern
June 22, 2026
•
[ ransomware, manufacturing ]
ehg.bayern was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-06-22. Sector: Other. Country: Germany. Website: ehg.bayern. Founded in 1991, the company has evolved from a regional waste management enterprise into a specialized provider of infrastructure operations,
-
belpointeasset.com \ belpointe.com
June 22, 2026
•
[ ransomware, finance ]
belpointeasset.com \ belpointe.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-06-22. Sector: Financial Services. Country: United States of America. 400gb
-
randa.net
June 23, 2026
randa.net was listed as a victim on the leak site of the chaos ransomware group; the attack is estimated to have taken place on 2026-06-23. Website: www.randa.net. Randa Apparel & Accessories is a global powerhouse and one of the world's leading apparel and lifestyle accessories companies, headquartered in New York City at 417 Fifth Avenue, 11th Floor. Founded in 1910, with the founder's family having been in the neckwear business since that time and the curre
-
Corporación Primax S.A.
June 23, 2026
Corporacin Primax S.A. was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-06-23. Sector: Retail & E-Commerce. Country: Peru. [distribution, fuel] ***.A. is Peru's largest fuel distribution company, operating 2,185+ stations across Peru, Ecuador, Colombia, and Uruguay with annualised revenue of approximately USD 3.4 billion (Peru alone).
The dataset spans every function of the business:
Complete financial reporting Monthly P&L, balance sheet, cash flow, and EBITDA through May 2025. GRIO (Grupo Romero Investment Office) management reporting packages. Budget 2025 vs. actuals.
Employee identity data for 15,00060,000 individuals DNI national ID numbers, bank accounts, salary amounts, pension fund details, scanned identity documents.
Live system credentials Plaintext SQL database passwords, banking SFTP credentials (Banco Bolivariano Ecuador), AD encryption master key, OSINERGMIN fuel-control system credentials.
Complete OT network map IP addresses and identifiers for 137 fuel stations on the internal 10.55.40.x network, plus JD Edwards ERP production servers.
54 GB of POS transaction data XML records of consumer fuel purchases across the entire station network.
Legal and M&A documentation Arbitration case files (PUCP/AMCHAM), UNO Corp acquisition materials (Dec 2025), bank covenant waivers.
-
FTL-Fast Transit Line
June 23, 2026
•
[ ransomware, leak, manufacturing ]
FTL-Fast Transit Line was listed as a victim on the leak site of the nova ransomware group; the attack is estimated to have taken place on 2026-06-23. Sector: Transportation. Country: Belgium. Website: ftl.be. FTL International N.V. specializes in shipping, consolidation, forwarding, and groupage services, with a strong presence in major Northern European ports and an office in Colombo, Sri Lanka. With over 25 years of experience, they offer cost-effective port-to-port and door-to-door logistics solutions, including air freight and cargo insurance. Their services cater to a wide range of clients looking for reliable shipping options across the globe. FTL is committed to exceptional personalized attention and efficient shipment handling, embodying their motto 'Experience the Difference - Data included sales data, invoices and costumers full names and phones etc; Nova Provide tree and samples from stolen data to the company when its get in touch with support department.
-
viennaairport.com
June 23, 2026
•
[ ransomware, leak ]
viennaairport.com was listed as a victim on the leak site of the apt73 ransomware group; the attack is estimated to have taken place on 2026-06-23. Sector: Transportation. Country: Austria. Website: viennaairport.com. Vienna Airport (Flughafen Wien AG) is an Austrian company, the operator of Vienna International A...
-
IH Engineers
May 29, 2026
•
[ ransomware, manufacturing ]
IH Engineers was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-05-29. Sector: Manufacturing. Country: United States of America. Website: ihengineers.com. IH Engineers, P.C. is a consulting firm with over 25 years of experience, dedicated to providin
g innovative and technically excellent services in design, construction, and structural evaluat
ion. The firm operates primarily in New Jersey, New York, and Pennsylvania, serving a diverse r
ange of clients.
We will upload 65gb of corporate data soon. Employee personal docs (passports, SSNs, DLs and ot
her HR information), confidential internal files, NDAs, projects, contracts and agreements, dra
wings and so on.
-
Leo International
May 13, 2025
•
[ ransomware, manufacturing ]
Leo International was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-05-13. Country: United States of America. Website: leointernational.com. Leo International, established in 1986, serves as a comprehensive source for the PVF, HVAC, and
Plumbing Industry. The company specializes in manufacturing products through Forging, Casting,
and Injection Molding processes.
We will upload 10gb of corporate data soon. Employee personal docs (passports, SSNs, DLs, medic
al information, phones, photos, doc scans, addresses and so on), confidential internal files an
d so on.
-
gov.br
June 23, 2026
gov.br was listed as a victim on the leak site of the apt73 ransomware group; the attack is estimated to have taken place on 2026-06-23. Sector: Government & Defense. Country: Brazil. Website: gov.br. Gov.br this is the official state digital platform and domain zone of the Brazilian Federal G...
-
kliknklik.com
June 23, 2026
•
[ ransomware, retail, technology ]
kliknklik.com was listed as a victim on the leak site of the apt73 ransomware group; the attack is estimated to have taken place on 2026-06-23. Sector: Retail & E-Commerce. Country: Indonesia. Website: kliknklik.com. KliknKlik.com a company from Indonesia, an online retailer and distributor of computer equipm...
-
Reynella East College
June 23, 2026
Reynella East College was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-06-23. Sector: Education. Country: Australia. Website: reynellaec.sa.edu.au. Reynella East College is an innovative educational institution offering a comprehensive curriculum for students from preschool to 12th grade. However, the school failed to adequately protect the privacy of its students and staff and made no attempt to do so, resulting in the leak of their sensitive personal data online. We are providing you with 600 GB of interesting files and documents, including contracts, financial reports, personal data, student and staff identification numbers, seating charts, and much more.
