Recent Breaches
-
June 17, 2026 • Greg Crosslin was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-06-17. Sector: Professional Services. Country: United States of America. Website: www.destinlegal.com. United States
-
June 17, 2026 • gut-heckenhof.de was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-06-17. Sector: Agriculture and Food Production. Country: Germany. Website: gut-heckenhof.de. Established in 1992, the company operates a four-star hotel and one of the largest golf facilities in the region. The
-
June 17, 2026 • brscappuccio.it was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-06-17. Sector: Retail & E-Commerce. Country: Italy. Website: brscappuccio.it. Headquartered in Casandrino, near Naples in the Campania region, the company specializes in the distribution and supply of medical devices,
-
June 17, 2026 • zaunsysteme.de was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-06-17. Sector: Manufacturing. Country: Germany. Website: zaunsysteme.de. Operating within Germanys construction materials and perimeter security sector, the company provides a wide range of products, including double-wire mesh
-
June 17, 2026 • harcourts.net was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-06-17. Sector: Retail & E-Commerce. Country: Australia. Website: harcourts.net. Founded in 1888 in Wellington, New Zealand, the company has grown from a local real estate agency into a global
-
June 17, 2026 • seinordovest.it was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-06-17. Sector: Other. Country: Italy. Website: seinordovest.it. Headquartered in the Piedmont region, the company operates as a public utility serving numerous municipalities in northwestern Italy. Its mission
-
June 16, 2026 • The Associated Builders and Contractors of Indiana/Kentucky was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-06-16. Sector: Professional Services. Country: United States of America. Website: abcindianakentucky.org. A trade association
-
June 16, 2026 • United Personnel (a division of Masis Staffing Solutions) was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-06-16. Sector: Professional Services. Country: United States of America. Website: msastaffing.org. A provider of staffing services
-
June 17, 2026 • neuwoges.de was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-06-17. Sector: Other. Country: Germany. Website: neuwoges.de. The Neubrandenburger Wohnungsgesellschaft mbH (NEUWOGES), a municipal housing company and subsidiary of the Vier-Tore-Stadt Neubrandenburg in Mecklenburg-Western Pomerania, Germany. It is one of the largest regional housing providers, managing around 12,000 apartments alongside commercial units and care facilities. Its no secret that the company was subjected to a cyberattack and that data was stolen. But lets pull back the curtain a bit. At first, the companys leadership cut costs on proper IT infrastructure, and after the attack they continued to do sothis time at the expense of the security of their clients, employees, vendors, etc. Relying on the supervisory board, they attempted to obtain more information about the compromised data in order to protect themselves. Now youre learning about this for free. Stay tuned.
-
June 18, 2026 • NAIC.org was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-06-18. Sector: Professional Services. Country: United States of America. Website: NAIC.org. Over 3.1 terabytes of National Association of Insurance Commissioners data (105,000+ files) was compromised across the INSData statistical platform, Vision credit rating feeds, SERFF, OPTINS, UCAA, EDP, RDC, and state insurance department reporting systems (NAIC, all fifty state insurance departments, and thousands of licensed insurers), including 2.1 million insurer regulatory filing PDFs, 40,000 quarterly statistical CSVs with federal EINs and company data, 45,000+ licensed rating agency files from Moody's, Fitch, S&P, Kroll, DBRS, and AM Best with CUSIP and ISIN identifiers, statutory annual and quarterly financial statements, premium and loss statistics, and HR Ratings master data. This is a final warning to reach out by 22 June 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 18 June 2026 | Warning: FINAL WARNING PAY OR LEAK
-
June 18, 2026 • Amazon owned OneMedical.com was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-06-18. Sector: Healthcare. Country: United States of America. Website: OneMedical.com. Over 8.8TB of data was compromised. This is a final warning to reach out by 22 June 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 18 June 2026 | Warning: FINAL WARNING PAY OR LEAK
-
June 18, 2026 www.wolfconstruction.net was listed as a victim on the leak site of the lynx ransomware group; the attack is estimated to have taken place on 2026-06-18. Sector: Manufacturing. Country: United States of America. Website: www.wolfconstruction.net. Wolf Construction Services, Inc specializes in commercial wood framing, framing carpentry, wood trims, trim carpentry, and pitched roofing. The company also offers residential re-roofing services in Des Moines and Central Iowa. Their intended clients include both commercial and residential property owners seeking quality construction services. Wolf Construction is currently hiring to expand their team.
-
June 18, 2026 • Horizon Family Medical Group was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-06-18. Sector: Healthcare. Country: United States of America. Horizon Family Medical Group A deep dive into 7 terabytes of internal data: from patient records to QuickBooks financial databases In the modern world, data is the new oil. For a medical organization like Horizon Family Medical Group, it is also the foundation of trust between doctor and patient. We have conducted an independent and complete audit of this organization's data security. The results are catastrophic. We are in possession of the company's entire digital footprint, totaling **7 terabytes**, which includes 1TB of file data and 6TB of mission-critical SQL and QuickBooks databases. The management of Horizon Family Medical Group was notified of their complete loss of data control. They chose silence. This blog exists to illuminate what they are desperately trying to hide. We will not be publishing the files. Yet. Instead, we will explain exactly what this data contains, so that every patient, employee, and partner can appreciate the full scale of the threat. The Patient, Dissected. What We Know About You Horizon Family Medical Group prides itself on a wide range of services, from primary care to specialized treatments. This range of services has now become a detailed vulnerability map for every single patient. Our data includes, but is not limited to: Primary Care: Complete visit histories, diagnoses, prescriptions, lab results, and physicians' private notes about your lifestyle, habits, and family status. Women's Health: Detailed information on gynecological exams, pregnancies, abortions, Pap smear results, STD diagnoses, and prescribed treatments. Everything you trusted only to your doctor. Behavioral Health: The most sensitive category. Diagnoses related to depression, anxiety disorders, bipolar disorder, and addiction. Full session notes from psychotherapists. Every antidepressant and antipsychotic prescription. This information can destroy careers, families, and social standing. Allergy and Immunology: Data on all your allergies, including reactions to specific medications. What happens when this information is lost or altered in your official medical file? Ophthalmology & Nutrition: Your eyeglass prescriptions, diagnoses like glaucoma and cataracts, as well as all your attempts to manage weight, documented eating disorders, and private recommendations from nutritionists. This isn't just 'data'. This is your life, cataloged and ready for use. Anatomy of a Business. A Financial Teardown of Horizon Family Medical Group It's a paradox that clinics, while collecting mountains of information, often fail to see the real picture of their own business. We see it. The 6 terabytes of SQL and QuickBooks databases represent the complete financial and operational model of Horizon Family Medical Group. We have analyzed: SQL Databases: These contain complete patient information, doctor schedules, office utilization, patient flow, average revenue per department and per doctor. We know which doctor is profitable and which is a liability. We see every operational metric management uses to make decisions. QuickBooks Databases: This is the financial heart of the company. Every transaction, employee salaries (including hidden executive bonuses), tax reports, debts, loans, and settlements with insurance companies and suppliers. We can see the true profit margin of every service, the customer acquisition cost (CAC), and their lifetime value (LTV). Horizon's management hasn't just lost patient data. They have lost complete control of their business. Any competitor with this information could dismantle their company by poaching their most profitable doctors and patients. Eternal Memory. Why This Data Will Never Disappear. Some believe a data breach is a temporary problem. In this case, it is not. We drew inspiration from the Arctic Code Vault project, where humanity's most critical code is preserved in permafrost for a thousand years. Your 7 terabytes of data are no longer just files on a server. They have been prepared for archival and distributed storage. They will become a digital monument to the negligence of Horizon Family Medical Group. This data cannot be 'deleted'. It will exist forever, as proof that the company's leadership failed to protect what is most sacredyour health and your privacy. To the management of Horizon Family Medical Group, we remind you: the clock is ticking. Your silence only magnifies the damage. Contact us. Your patients and your business deserve it.
-
June 18, 2026 • www.eastersealsia.org was listed as a victim on the leak site of the lynx ransomware group; the attack is estimated to have taken place on 2026-06-18. Sector: Healthcare. Country: United States of America. Website: www.eastersealsia.org. Easterseals Iowa provides an Assistive Technology Program that supports Iowans of all ages with disabilities, including the aging population, in finding and utilizing assistive technology to enhance their daily lives. Their services include personalized consultations, a demonstration center, a lending library, and access to durable medical equipment. They also offer education and training opportunities, both in-person and online, to help individuals understand and obtain the necessary devices. The program aims to promote independence and improve the quality of life for individuals with disabilities across Iowa.
-
June 18, 2026 • www.someco.com was listed as a victim on the leak site of the lynx ransomware group; the attack is estimated to have taken place on 2026-06-18. Website: www.someco.com. Southern Mechanical Contractors is a merit shop mechanical and industrial construction firm with over 35 years of experience. They specialize in the design, installation, and service of HVAC, plumbing, process piping, and sheet metal systems for commercial and industrial clients. The company is dedicated to providing operational flexibility and cost-efficiency, ensuring high-quality service at competitive prices. Based in Atlanta, Georgia, they support clients throughout the Southeastern United States with comprehensive project assistance from design to maintenance.
-
June 18, 2026 • Apptricity was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-06-18. Sector: Professional Services. Country: United States of America. Apptricity Corporation is a global enterprise software provider for Supply Chain and Spend Mana gement. Apptricity differs from other manufacturers by offering platform-agnostic, secure solut ions that optimize inventory, asset and expense tracking processes while still being easily int egrated with existing systems. We will upload 12gb of corporate data soon. Employee personal docs (passports, SSNs, DLs, w9s, and other personal information), lots of projects, source codes, NDAs, client and partner file s, agreements and so on.
-
June 18, 2026 • Berg Lilly was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-06-18. Berg Lilly PC is a trusted law firm based in Bozeman, Montana, with over 60 years of experience providing quality legal representation to both local and national clients. The firm specialize s in various areas of law, including business entity law, civil litigation, commercial transact ions, construction law, employment law, estate planning, personal injury, and real estate law. We will upload 50gb of corporate data soon. Clients personal information (passports, SSNs, DLs, addresses, phones, confidential files, medical information, financials and so on), court heari ngs, police reports and other legal documents.
-
June 18, 2026 • SELECT WINES was listed as a victim on the leak site of the bravox ransomware group; the attack is estimated to have taken place on 2026-06-18. Sector: Agriculture and Food Production. Country: Canada. Website: www.selectwines.ca. The company is engaged in importing and distributing premium wines, supplying restaurants, hotels, and retail, and representing international wine brands in the Canadian market.
-
June 10, 2026 Kirbor Homes was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-06-10. Sector: Retail & E-Commerce. Country: United States of America. Website: kirbor.com. Kirbor Homes is a reputable home builder located in the Mid-Atlantic region
-
June 10, 2026 • Release Marine, Inc. was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-06-10. Sector: Transportation. Country: United States of America. Website: releasemarine.com. Handmade sport fishing equipment and yacht furnishings