Recent Breaches
-
June 10, 2026 B & B Trading was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-06-10. Sector: Professional Services. Country: United States of America. Website: bandbtrading.com. Largest independent food wholesale distributors in New England
-
June 18, 2026 • Makel Companies Group was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-06-18. Sector: Manufacturing. Country: Turkey. Website: www.makel.com.tr.
-
June 18, 2026 • Lawson Roofing was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-06-18. Sector: Manufacturing. Lawson Roofing
-
June 18, 2026 • icsecurity.com was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-06-18. Sector: Technology. Country: United States of America. Website: icsecurity.com. Over 2.7 million records and other internal corporate data was compromised. This is a final warning to reach out by 22 June 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 19 June 2026 | Warning: FINAL WARNING PAY OR LEAK
-
June 18, 2026 • ATCOM Outsourcing was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-06-18. Sector: Professional Services. Country: Chile. Website: www.atcom.cl.
-
June 18, 2026 • Homes By J Anthony was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-06-18. Sector: Retail & E-Commerce. Country: United States of America. Website: www.homesbyjanthony.com.
-
June 18, 2026 • THL PROJECT MANAGEMENT SDN. BHD. was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-06-18. Sector: Professional Services. Country: Malaysia. Website: THL PROJECT MANAGEMENT SDN. BHD..
-
May 31, 2026 • dean cosmetic dentistry was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-05-31. Sector: Healthcare. Country: United States of America. Website: deancosmeticdentistry.com.
-
June 17, 2026 • legendsmn(Blue Ox, Paul Bunyan, Lumberjack Electric) was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-06-17. Sector: Energy & Utilities. Country: United States of America. Website: legendsmn.com.
-
June 18, 2026 • ra-vogeler.de was listed as a victim on the leak site of the cloak ransomware group; the attack is estimated to have taken place on 2026-06-18. Sector: Professional Services. Country: Germany. Website: ra-vogeler.de. Country: germany | Size: 1.1TB | Private | Views: 1
-
June 5, 2026 ALS Global was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-06-05. Sector: Professional Services. Country: Australia. [certification, inspection] ALS Limited (ASX:ALQ) a global testing, inspection, and certification company with AUD 3.19B revenue, 20,500+ employees, and operations in 65+ countries identified unauthorised access to its IT systems. ~400500 employee home directories personal documents, cached credentials, email settings, family photos, personal finance files for employees from Australia to Peru to Sweden to Romania. The company's 1Password team vault emergency recovery kit a single 45 KB PDF that enables total recovery of every shared credential in ALS's enterprise password vault. 291 plaintext password files including administrator credentials, FTP passwords, portal passwords, and the document control system master password. 1,018 passport and identity document scans Swedish passports, Mexican passports, Australian passports each one a 10-year identity-theft enabler. 601 bank account detail files including IBAN, SWIFT routing codes, BSB numbers, and sort codes for employees across 15+ countries, plus Russian-language SWIFT salary payment files. 1,986 salary, payroll, and compensation files named individuals, exact amounts, pay scales, negotiation records across AU, US, EU, UK, CA, BR, SE, RO. 453 medical, drug test, and workplace injury records GDPR Art. 9 special category data. 57 complete Outlook email archives (PST files) years of correspondence, attachments, privileged communications. 7,327 client laboratory results mining assay data, certificates of analysis, and geochemistry results held under NDA. 20 GB of proprietary analytical method development ALS's core competitive IP: PFAS, dioxin, acrylamide, glyphosate LC-MS/GC-MS method packages representing years and millions of AUD in R&D. For a TIC company, analytical methods are the product. 7.2 GB of Internal Research reports 68+ formal research reports (IR153IR287+) spanning 15 years, including IsaMill grinding R&D, GlyLeach joint-venture process IP (with mutual NDA), flotation, mineralogy, and QEMSCAN data. The FY20252026 innovation roadmap "ALS Environmental Innovation Priority projects for 2024-25" (10 MB PPTX) and Nordic Innovation Business Plans revealing which methods ALS plans to develop and which markets it plans to enter. 3.7 GB of Cryptosporidium water-testing methods (WA_Crypto) UKAS-accredited, DWI-regulated detection methods where few UK labs hold accreditation. QuickBooks live bookkeeping, AR aging reports, and stock sale records taken 12 days before FY26 results announcement. 111 PKI certificates with private keys corporate WiFi, TLS server certs, personal signing certificates. A compiled Chrome password extraction tool with source code credential harvesting infrastructure resident on ALS systems.
-
June 19, 2026 • Klue.com was listed as a victim on the leak site of the Icarus ransomware group; the attack is estimated to have taken place on 2026-06-19. Sector: Technology. Country: Canada. Website: Klue.com. As you've probably already heard, ***.com has been impacted by us recently. A number of other companies' Salesforce instances, which were partners to Klue, were exfiltrated. This leak/post is made to address this. We advice Klue to contact us for a swift resolution, in order not to affect the companies you work with. On the other note, if Klue doesnt want to accommodate this request, we advice the companies who want to protect their data to contact us via Session. In order to verify you're a representative of the company you claim to be, you will need to provide a certain value/field from a row on your SF. We wish for your cooperation, not your demise. Make the correct choice. Data stolen: data borrowed - not stolen
-
June 15, 2026 • Optimum First Mortgage was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-06-15. Sector: Financial Services. Country: United States of America. Website: optimumfirst.com. Providing fast and reliable mortgage solutions, including home purchases and refinancing options
-
June 19, 2026 • KTR Real Estate Advisors was listed as a victim on the leak site of the anubis ransomware group; the attack is estimated to have taken place on 2026-06-19. Sector: Financial Services. Country: United States of America. Real estate client database exposed.
-
June 19, 2026 Hagerman & Company was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-06-19. Sector: Professional Services. *** a 40-year-old Autodesk Platinum Partner headquartered in Mt. Zion, Illinois, serving 250+ enterprise customers across manufacturing, energy, defense, healthcare, and education. The exposed dataset includes: Complete proprietary source code for 15+ commercial products including the HNC Licensing System (License Generator, License Server, License Manager) enabling unlimited piracy of all Hagerman products. 8+ plaintext database credentials in .udl files, including an Oracle SYS (DBA superuser) account with password "Hagerman@1!" reused across multiple systems. Engineering vault databases for 14+ critical infrastructure entities NYPA (7 power plants including Niagara Falls), Kinder Morgan (Elba Island LNG terminal), HydroOne (Ontario electricity), Phillips 66, Chevron, and 8+ petroleum refineries. Defense/government data NASA IT Security Requirements, Lockheed Martin configurations, Boeing-SVS vault data, JPL configurations. Azure DevOps transaction logs (1.6 GB) containing complete source code version history and potentially CI/CD deployment secrets. Third-party database credentials for Michigan State University (3 databases), Cal State Long Beach, and Beth Israel Deaconess Medical Center infrastructure.
-
June 19, 2026 • Commune d'Eyguires was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-06-19. Sector: Government & Defense. Country: France. Website: www.eyguieres.org.
-
June 19, 2026 • Desert Micro was listed as a victim on the leak site of the nova ransomware group; the attack is estimated to have taken place on 2026-06-19. Sector: Technology. DesertMicro.net is a Software & Internet based company located in Jacksonville, Florida, United States with over 25 - 100 employees, data included large sums of costumers data who use the company software service, such curbside waste company invoices and Storage data, foothillsSanitation + GreenEnviromnetal + InlandService + QC + FusionSite companies the same, credit cards Details and payments billings Documents, databases backups and more - Nova Provide tree and samples from stolen data to the company when its get in touch with support department.
-
June 19, 2026 • PJ Daly Contracting was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-06-19. Sector: Manufacturing. Country: Ireland. Website: www.pjdalycontracting.com.
-
June 19, 2026 • Sparkle Pools was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-06-19. Sector: Retail & E-Commerce. Country: United States of America. Website: www.sparklepoolsinc.com.
-
June 19, 2026 • Roth Industries was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-06-19. Sector: Manufacturing. Country: Germany. Website: www.roth-industries.com.