Full List

Search

Recent Breaches

• Tecfi SpA June 15, 2026 • [ ransomware, manufacturing, technology ] Tecfi SpA was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-06-15. Sector: Professional Services. Country: Italy. Website: tecfi.it. Tecfi is a company specialising in the design, production and sale of fastening systems. Going into more detail, three production lines can be highlighted. Plastic and rubber moulding Sheet metal moulding with blanking Cold stamping and flatbed rolling machines
• Ralph Lauren June 16, 2026 • [ ransomware, leak, retail ] Ralph Lauren was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-06-16. Sector: Retail & E-Commerce. Country: United States of America. Website: ralphlauren.com. Over 220GB of data containing customer PII, purchase/trasnaction info, future unreleased releases from 2027 and onward, and more was compromised. The Company failed to reach an agreement with us despite our incredible patience, all the chances and offers we made. They don't care. | Size: 163GB+ (compressed) | Updated: 16 June 2026 | SHA256: 17a7af9c00ea38ce822e2f022c0ceb5149535610a15f009b866d616e70cbf7e2
• Sumitomo Electric Bordnetze June 16, 2026 Sumitomo Electric Bordnetze was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-06-16. Sector: Manufacturing. Country: Germany. [electric] *** SE (SEBN) a Wolfsburg-headquartered subsidiary of Sumitomo Electric Industries (TSE:5802, ~$31B group revenue), employing approximately 40,000 people across 14 countries. Exfiltrated 1.1 terabytes of data from five manufacturing sites. SEBN Moldova (103 GB) HR, payroll, personal tax records, competition-council litigation files, home directories SEBN Ukraine (115 GB) HR/salary, Audi B9 project data, process documentation, including displaced-worker records for Ukrainian IDPs SEBN Tunisia Fejja (191 GB + 493 GB shared) passport copies, email archives (671 MB PST), quality/FMEA data, finance SEBN Slovakia (268 GB) the crown jewel: Citibank corporate banking infrastructure including the TESTKEY authentication system, IBAN registries, daily bank statements, SAP salary-payment files, and years of department email archives The dataset contains 173,000 Excel files, 149,000 PDFs, 2,500 CAD engineering drawings, 2,500 Outlook messages, 1,500 FMEA/PPAP quality files, and 9 Outlook PST archives.
• Diamond Truck Centres June 16, 2026 • [ ransomware, leak, manufacturing ] Diamond Truck Centres was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-06-16. Sector: Transportation. Country: Canada. [dealership, trucks] *** Western Canada's largest International Trucks dealership group (9 dealer + 13 sub-dealer locations, ~$63M revenue, 250 employees). The dataset spans 17 years of unbroken operational history (20092026) and represents the full shared-drive contents of the entire company: HR, payroll, accounting, military contracts, and individual employee profiles. The exposed material includes: 53 customer Pre-Authorized Debit (PAD) forms full bank account numbers, transit numbers, institution numbers, and authorized signatures for commercial customers including the City of Saskatoon. 17 years of employee payroll data wages, SINs (implied), pension contributions, benefits, termination calculations for every employee since 2009. Biometric data ADP fingerprint timeclock enrollment records for all locations. Immigration documents for 6+ foreign workers LMIA applications, offers of employment, provincial nominee support docs. System credentials in plaintext ADP timeclock passwords, manager training logins, safe combination. Military contract documentation Diamond's Controlled Goods Security Plan (ITAR/CGP), MSVS delivery matrices, military vehicle VINs, CFB Edmonton and RCMP vehicle program data. 289 GB of daily bank deposit scans (20172026) customer cheque images with names, amounts, and account details. A complete Outlook PST archive (166 MB) years of internal email likely containing credentials and customer data.
• Allan Brothers Fruit June 16, 2026 Allan Brothers Fruit was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-06-16. Sector: Agriculture and Food Production. Country: United States of America. [food] Allan Brothers, Inc. a third-generation, family-owned tree-fruit operation headquartered in Naches, Washington. Allan Brothers packs and ships apples and cherries from a 300,000 sq ft cold-storage facility, employing roughly 45 full-time staff and up to 2,000 seasonal workers during peak harvest. Eight server volumes: 14,228 employee records from ADP Workforce Now names, dates of birth, phone numbers, gender, employment history, photos covering every person who has ever worked at Allan Brothers, including seasonal cherry pickers, H-2A visa workers, and office staff. W-2 tax filings with full Social Security Numbers for employees across eight legal entities (ALLAN, ABMEXICO, ABSAGE, ABSAGEMOOR, ABVINEYARD, ABAG, ABSHELTON, ABFROST). Direct deposit forms with bank routing numbers and account numbers for named individuals the raw ingredients for ACH fraud. H-2A visa worker tracking spreadsheets listing which workers have or are missing Social Security Numbers, plus I-9 employment eligibility audits exposing immigration status for the most vulnerable members of the workforce. A complete Oracle RMAN database backup of the Famous Software production system the company's grower settlement, customer pricing, and lot-tracking engine. 1.3 GB of employee badge photos facial images linked to names and employee IDs for hundreds of workers. COBOL-era accounting databases spanning 8 legal entities GL, AP, AR, payroll, and W-2 filing data going back years. OSHA incident logs naming workers who sustained injuries, with injury descriptions and treatment details.
• Novo Nordisk June 16, 2026 • [ ransomware, healthcare ] Novo Nordisk was listed as a victim on the leak site of the fulcrumsec ransomware group; the attack is estimated to have taken place on 2026-06-16. Sector: Healthcare. Country: Denmark. Website: novonordisk.com. [AI generated] Novo Nordisk is a Danish multinational pharmaceutical company headquartered in Bagsvrd, Denmark. Founded in 1923, it specializes in treatments for diabetes, obesity, hemophilia, and other chronic conditions. The company is a global leader in insulin production and develops drugs such as semaglutide. It operates in over 80 countries and is one of Europe's most valuable corporations by market capitalization.
• framesiprofessional.com May 22, 2026 • [ ransomware, retail, hack ] framesiprofessional.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-05-22. Sector: Professional Services. Country: United States of America. Website: framesiprofessional.com. Framesi specializes in creating and distributing professional hair products, including styling tools, color dyes, and hair treatments, exclusively for licensed stylists and salons. The company is dedicated to supporting the professional beauty industry by ensuring high-quality formulations that deliver reliable results. Framesi does not sell its products to retail chains or discount beauty outlets, maintaining a focus on professional use. Their offerings include a wide range of color products, care items, and styling solutions tailored for expert hands Employees: 200 Revenue: $25.1 Million Cosmetics, Beauty Supply & Personal Care Products Phone Number: (800) 321-9648
• jasperplastics.info June 16, 2026 • [ ransomware, manufacturing, leak ] jasperplastics.info was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-06-16. Sector: Manufacturing. Country: United States of America. Website: jasperplastics.info. Jasper Plastics Solutions specializes in providing turn-key plastic and polyurethane solutions primarily for OEM manufacturers in the RV, Marine, Automotive, and Construction industries. Their product offerings include polyurethane thermal column blocks, fiberglass components, and innovative design boards that are weather-resistant and customizable. With nearly 20 years of experience, they utilize advanced manufacturing techniques, including a new HD Digital Division for large format printing, to create high-quality parts that mimic natural materials. Jasper Plastics is committed to delivering practical and innovative solutions tailored to the specific needs of their clients. Employees: 10 Revenue: $5 Million Industry: Manufacturing Phone Number: (574) 457-2062
• Promepla June 8, 2026 • [ ransomware, manufacturing, healthcare ] Promepla was listed as a victim on the leak site of the ransomhouse ransomware group; the attack is estimated to have taken place on 2026-06-08. Sector: Manufacturing. Country: Argentina. Website: www.promepla.com. Promepla is a Contract Design Manufacturer specializing in single-use plastic medical components and devices. They offer a comprehensive range of services including product design and development, prototyping, testing, quality assurance, cleanroom manufacturing, and sterilization. Their expertise caters to various sectors within the healthcare industry, providing customized solutions for medical device manufacturers. Promepla's commitment to quality is underscored by their ISO 13485 certification, ensuring rigorous control over every aspect of design and production.
• He..t S..t. June 16, 2026 • [ ransomware, healthcare ] He..t S..t. was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-06-16.
• Gerencial May 21, 2026 • [ ransomware, finance, government ] Gerencial was listed as a victim on the leak site of the spacebears ransomware group; the attack is estimated to have taken place on 2026-05-21. Sector: Professional Services. Country: Brazil. Website: gerencialcontabil.com.br. Gerencial Contbil (Gerencial PR) is a Brazilian accounting and business advisory firm based in the state of Paran.The company provides accounting, tax, payroll, business consulting, and HR outsourcing services for small and medium-sized businesses.It also assists entrepreneurs with company formation, tax compliance, and business management.The firm operates through multiple officesacross Paran, including locations in Pato Branco, Francisco Beltro, Dois Vizinhos, Cascavel, Guarapuava, and other cities.Its services are tailored to sectors such as commerce, industry, service providers, and non-profit organizations.-personal digital certificates (amount ~ 1 000) (.pfx / .p12 files) and the corresponding passwords for accessing the Brazilian official government websites.-Clients info (tel, mail, id, passwords, etc)-600 000 + files with personal information https://***.com.br/
• He..t S..it. June 17, 2026 • [ ransomware, healthcare ] He..t S..it. was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-06-17.
• ersa.com.py June 17, 2026 ersa.com.py was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-06-17. Sector: Manufacturing. Country: Paraguay. Website: ersa.com.py. ERSA (Enrique Remmele S.A.C.I.) is a 100% Paraguayan industrial company founded in 1928, originally established for the ...
• www.courdescomptes.sn June 17, 2026 www.courdescomptes.sn was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-06-17. Sector: Government & Defense. Country: Senegal. Website: www.courdescomptes.sn. La Cour des Comptes du Sngal (The Court of Auditors of Senegal) is an independent supreme audit institution of Seneg...
• Chebib Control June 14, 2026 • [ ransomware, technology ] Chebib Control was listed as a victim on the leak site of the spacebears ransomware group; the attack is estimated to have taken place on 2026-06-14. Sector: Professional Services. Country: Brazil. Website: chebib.com.br. Chebib Control is a company specializing in the development of management systems and intelligent automation for the hospitality industry. For over 20 years, it has been helping optimize the operations of motels, hotels, and condominiums across the country.Serving over 1,000 active clients in over 500 municipalities in Brazil.Core product: Offers property management systems (PMS) and automation solutions that help automate daily operations, enhance security, and improve the guest experience.One of its key features is integration with IP cameras for photographic recording of vehicle entry and exit, which, according to customers, serves as an effective fraud prevention tool.- SQL database tables- Client data (names, booking dates, hotel names, email addresses, CPFs, phone numbers, and other metadata) https://***.com.br/
• Smith Filter June 17, 2026 • [ ransomware, manufacturing, financial ] Smith Filter was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-06-17. Sector: Manufacturing. Smith Filter is a leading manufacturer of high-quality air and grease filters, established in 1 939. They offer a wide range of products including permanent, disposable, and high-efficiency f ilters, catering to both OEM and custom orders. We will upload 10gb of corporate data soon. Employee personal information (passports, SSNs, DLs and other docs scans), credit cards information, projects info, clients information, NDAs, etc .
• Prince George County June 10, 2026 • [ ransomware, government ] Prince George County was listed as a victim on the leak site of the ransomhouse ransomware group; the attack is estimated to have taken place on 2026-06-10. Sector: Government & Defense. Country: United States of America. Website: www.princegeorgecountyva.gov. Prince George County is a local government entity focused on providing essential services and fostering community development. It offers a range of services including public safety, waste management, parks and recreation, and social services to its residents. The county aims to embrace its rural character while planning for a prosperous future. Its intended clients include local residents, businesses, and visitors seeking information and services related to the county.
• eurOptimum June 17, 2026 • [ ransomware, technology ] eurOptimum was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-06-17. Sector: Technology. Country: Germany. Website: www.europtimum.com. United States
• Integrated Technologies June 17, 2026 • [ ransomware, technology ] Integrated Technologies was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-06-17. Sector: Technology. Website: www.itc4u.com. United States
• Great Foods June 17, 2026 • [ ransomware, manufacturing, retail ] Great Foods was listed as a victim on the leak site of the lamashtu ransomware group; the attack is estimated to have taken place on 2026-06-17. Sector: Agriculture and Food Production. Country: Egypt. Website: greatfoods.com.eg. Great Foods is a major Egyptian food manufacturing and distribution company. Established in 1972 and a proud member of the El Naggar Group, it employs over 3,700 people and exports over 150 products to more than 40 countries.