-
Fidelity Pension Managers
May 31, 2026
Fidelity Pension Managers was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-05-31. Sector: Financial Services. Country: Nigeria. Website: www.fidelitypensionmanagers.com. Fidelity Pension Managers Limited regulated by PenCom in Nigeria, is a licensed Pension Fund Administrator (PFA) established in 2004 to manage retirement savings accounts (RSA). The company offers investment portfolio management and digital services, including the iPension portal and FidApp Plus, to facilitate RSA contributions.
-
CAD93
May 22, 2026
•
[ ransomware, manufacturing ]
CAD93 was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-05-22. Sector: Manufacturing. Country: Italy. Website: www.cad93.it. C.A.D. 93 S.r.l. is a Prato-based firm of authorized customs brokers specializing in international trade, compliance, and import/export documentation. The agency provides comprehensive consulting services from its headquarters in Italy.
-
SECiL
May 22, 2026
SECiL was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-05-22. Sector: Manufacturing. Country: Turkey. Website: www.seciltr.com. Seil Kauuk is a Turkish manufacturer, founded in 1983, specializing in rubber gaskets, sealing profiles, and industrial molded parts for sectors including construction, automotive, and infrastructure. Operating from a 70,000-square-meter facility in Tarsus, the company exports to over 50 countries and maintains an official R&D center for product testing.
-
Sheraton Miramar Resort El Gouna
June 2, 2026
•
[ ransomware, retail ]
Sheraton Miramar Resort El Gouna was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-06-02. Sector: Hospitality. Country: Egypt. Website: www.elgouna.com/hotels/sheraton-miramar-resort-el-gouna.
-
hoodriversheriff.com
June 15, 2026
•
[ ransomware, government ]
hoodriversheriff.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-06-15. Sector: Government & Defense. Country: United States of America. Website: hoodriversheriff.com. Headquartered in Hood River, the organization provides a broad range of services, including patrol operations, criminal investigations, emergency communications, search
-
aquaclean.com
June 15, 2026
aquaclean.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-06-15. Sector: Retail & E-Commerce. Country: Spain. Website: aquaclean.com. The company operates as part of Interfabrics S.L. and has more than 50 years of experience in the textile industry.
-
bautz-maschinenbau.de
June 15, 2026
bautz-maschinenbau.de was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-06-15. Sector: Manufacturing. Country: Germany. Website: bautz-maschinenbau.de. Founded in 1960 by Alfred Bautz, the family-owned enterprise has developed over three generations into a specialized supplier of precision
-
musenet.co.jp
June 15, 2026
•
[ ransomware, technology ]
musenet.co.jp was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-06-15. Sector: Technology. Country: Japan. Website: musenet.co.jp. Founded in the twentieth century, the company serves as an intermediary between publishers and music retailers throughout Japan. Its online
-
kawaius.com
June 15, 2026
•
[ ransomware, manufacturing, retail ]
kawaius.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-06-15. Country: United States of America. Website: kawaius.com. Founded in Japan in 1927 by Koichi Kawai, the company has established a reputation for combining traditional Japanese craftsmanship with
-
tokyocivil.co.jp
June 15, 2026
tokyocivil.co.jp was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-06-15. Sector: Professional Services. Country: Japan. Website: tokyocivil.co.jp. Established in 2020, the company specializes in public infrastructure and civil engineering projects, serving primarily the Tokyo metropolitan area and
-
hughstirling.co.uk
May 5, 2026
•
[ ransomware, technology ]
hughstirling.co.uk was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Professional Services. Country: Germany. Website: hughstirling.co.uk. Headquartered in Goslar, Lower Saxony, the firm has been operating since 1975 and has expanded its presence through additional offices
-
glendale.edu
June 15, 2026
•
[ ransomware, education, leak ]
glendale.edu was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-06-15. Sector: Education. Country: United States of America. Website: glendale.edu. Over 62 gigabytes of Glendale Community College data (304,000+ files) was compromised across PeopleSoft Campus Solutions (GCC, integrations, financial aid, and admission processing), including 150,000+ student records with names, dates of birth, and @student.glendale.edu emails, login and enrollment mapping files, new student enrollment CSVs, immunization compliance logs, admission checklist reports, financial aid batch exports, and transcript PDFs spanning September 2020 through June 2026. This is a final warning to reach out by 18 June 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 16 June 2026 | Warning: FINAL WARNING PAY OR LEAK
-
moody.edu
June 15, 2026
•
[ ransomware, education, technology ]
moody.edu was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-06-15. Sector: Education. Country: United States of America. Website: moody.edu. Over 23 gigabytes of Moody Bible Institute data (1,300+ files, tens of millions of records) was compromised across enrollment, donor relations, payroll, and communications systems (MBI, EDC/Salesforce leads, PeopleSoft PS_COMMUNICATION, Horizon SIS, WHPD donor database, and Cadence admissions), including 46 million communication records, 2.2 million enrollment lead records, 108,000 biodemographic master files with addresses and birthdates, 3.3 gigabytes of donor gift data, employee payroll XML with home addresses and earnings, 1,100+ admissions outreach files, and student housing assignment records. This is a final warning to reach out by 18 June 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 16 June 2026 | Warning: FINAL WARNING PAY OR LEAK
-
icc.edu
June 15, 2026
icc.edu was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-06-15. Sector: Education. Country: United States of America. Website: icc.edu. Over 28 gigabytes of Illinois Central College data (122,000+ files) was compromised across PeopleSoft Campus Solutions and Human Resources (ICC, SURS pension reporting, Workday costing, and ICCB curriculum systems), including 9,200+ employee payslip PDFs, 500+ SURS payroll files with Social Security numbers, direct deposit records with bank account and routing numbers, student financial aid and grade roster exports, enrollment CSVs with @icc.edu accounts, and Workday salary allocation data spanning 2021 through June 2026. This is a final warning to reach out by 18 June 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 16 June 2026 | Warning: FINAL WARNING PAY OR LEAK
-
smithassociatescpa.com
June 15, 2026
•
[ ransomware, finance, hack ]
smithassociatescpa.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-06-15. Sector: Professional Services. Country: United States of America. Website: smithassociatescpa.com. smithassociatescpa.com
Smith and Associates is a Certified Public Accounting Firm based in Maine, offering a comprehensive range of services including accounting, auditing, tax planning, and management advisory services. The firm caters to a diverse clientele, including individuals, corporations, partnerships, and non-profits in Maine and New Hampshire. They provide specialized support for business start-ups and QuickBooks, along with professional consulting in various areas of tax and accounting practices. Established in 1987, Smith and Associates is committed to being personable, knowledgeable, and responsive to their clients' needs.
-
Kedah
June 16, 2026
•
[ ransomware, government ]
Kedah was listed as a victim on the leak site of the nova ransomware group; the attack is estimated to have taken place on 2026-06-16. Country: Malaysia. The Kedah State Government operates an official corporate portal that provides information and services to the public, businesses, and tourists. It offers various services including online transactions, customer satisfaction surveys, and updates on government policies. The portal also features sections dedicated to tourism, education, and corporate financing, aiming to enhance the quality of life for residents and visitors. Its intended clients include citizens of Kedah, local businesses, and tourists seeking information about the state - Nova Provide tree and samples from stolen data to the company when its get in touch with support department.
-
Q Link Wireless
June 16, 2026
•
[ ransomware, technology ]
Q Link Wireless was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-06-16. Sector: Technology. Country: United States of America. Website: www.qlinkwireless.com.
-
Misericórdia de Santo Tirso
June 16, 2026
•
[ ransomware, healthcare ]
Misericrdia de Santo Tirso was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-06-16. Sector: Healthcare. Country: Portugal. Website: www.iscmst.pt.
-
ECOVACS
June 1, 2026
•
[ ransomware, retail, technology ]
ECOVACS was listed as a victim on the leak site of the spacebears ransomware group; the attack is estimated to have taken place on 2026-06-01. Sector: Retail & E-Commerce. Country: China. Website: www.ecovacs.com. ECOVACS is a highly successful Chinese robotics company founded in 1998 in Suzhou. It has grown into a global leader in smart home cleaning solutions, with its products sold in over 145 countries and trusted by tens of millions of users worldwide.The company is best known for its award-winning DEEBOT robot vacuums, WINBOT window cleaners, GOAT robotic lawn mowers, and other intelligent cleaning devices powered by advanced AI and navigation technologies.Driven by the vision Robotics for All, ECOVACS continues to innovate and expand rapidly, making premium home robotics accessible and effective for everyday consumers.About 2 TB of stolen data. https://www.***.com/
-
SPORTON International Inc.
June 16, 2026
•
[ ransomware, manufacturing, technology ]
SPORTON International Inc. was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-06-16. Sector: Manufacturing. Country: Taiwan. Website: sporton.com.tw. Founded in 1986 and headquartered in Taiwan, Sporton International is a Taiwan-based company principally engaged in the provision of testing and certification services for wireless communications and mobile communications products.