-
Law Offices US immigrationonline.com
May 12, 2026
Law Offices US immigrationonline.com was listed as a victim on the leak site of the Triple X ransomware group; the attack is estimated to have taken place on 2026-05-12. Sector: Professional Services. Country: United States of America. Website: immigrationonline.com. https://immigrationonline.com/
1.5 terabytes of people's data in a immigrationonline law firm.
Server overload and lack of updates have caused important data to be exposed to potential leaks.
At the same time, many of these financial and tax documents also contain sensitive personal information, including full names, home addresses, Social Security numbers, banking details, and contact information.
what will leak ?
Confidential court cases : Details of lawsuits, complaints, or defenses that have not yet been filed in court.
Financial and banking information : Sensitive client accounts, contracts, or transactions.
Intellectual property documents : Such as patents, designs, or business contracts that have not yet been made public.
Private correspondence and emails : Communications between the attorney and the client that should remain strictly confidential.
what data will leak ?
24,900 passport files
sample
Tax forms of employees and colleagues
sample
ID cards and drivers licenses
sample
few sample pics:
pic 1
pic 2
pic 3
pic 4
pic 5
This is probably the right moment to point out that, at a certain stage, virtually any data breach is still a reversible situation. Companies are usually given an opportunity to contain the damage and resolve the issue albeit at a price.
But despite knowing exactly what was happening, and fully understanding that it was putting the security and privacy of its own employees at risk, the company made a calculated decision to let it happen.
And now the company will tell its employees: Sorry, weve experienced a data breach, and your passports are now publicly available online.
But they will never say: We were offered a chance to pay to prevent your passports from being published, but we decided it wasnt worth it so now theyre on the internet. Sorry.
download data link : http://6qqz6m3b6htudohg2mlf5gdcalonxy3sh5g4dix4mpyirjcgelqqufad.onion/immigrationonline.com/
-
Bni.co.id bank of indonesia free data.
May 11, 2026
•
[ ransomware, finance ]
Bni.co.id bank of indonesia free data. was listed as a victim on the leak site of the Triple X ransomware group; the attack is estimated to have taken place on 2026-05-11. Sector: Financial Services. Country: Indonesia. Website: Bni.co.id. BANK of indonesia bni.co.id
Customer information from 2024 to 2026
All customer contracts, passports, and ID cards (few pic attached)
Its strange the bank has such a severe security weakness.
full data is 2 TB
few sample pics:
pic 1
pic 2
pic 3
pic 4
pic 5
part 1 ~ 100Gig
free download : http://6qqz6m3b6htudohg2mlf5gdcalonxy3sh5g4dix4mpyirjcgelqqufad.onion/bni.co.id/
pass : bnibnibni
we will leak few days later new parts, if u wanna download full pack PM us in forums (https://forum.exploit.in/profile/240235-apt8172/) and get link.
If you want to buy the bni bank 2026 fresh data, send a private message...
-
Daechang Solution
June 8, 2026
•
[ ransomware, manufacturing, leak ]
Daechang Solution was listed as a victim on the leak site of the Black X ransomware group; the attack is estimated to have taken place on 2026-06-08. Sector: Professional Services. Country: South Korea. Website: dsol.co.kr. We possess all the core technical data of Daechang Solution. (Technical Research Institute, Valve Team, Cryogenic Team, Innovation Team, Sales Team, Finance Team, Materials Team, Quality Team, General Affairs Team, Production Team) we will sell it to only one.
-
coe.int
June 13, 2026
•
[ ransomware, government, finance ]
coe.int was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-06-13. Sector: Government & Defense. Country: France. Website: coe.int. Over 297 GB of Council of Europe HR and payroll data (429,000+ files) was compromised across the Secretariat, Directorate of Human Resources, Parliamentary Assembly, EDQM, permanent and temporary staff, interpreters, conference services, language booth units, and payroll administration, including 409,000+ payslips for 10,000+ staff from 2011 to 2026, 14,000+ CVs and 3,700+ in-house personnel files, 10,700+ per-employee document stores, contract and purchase order records, mission travel overpayments, interpreter scheduling and 2026 salary scales, Blue List rosters, absence and illness reports, bank account and URSSAF payroll data, performance evaluations, and payroll exports, covering full names, employee IDs, home addresses, phone numbers, dates of birth, salaries, bank details, tax and social security information, medical and absence records, mission references, and other internal institutional data. This is a final warning to reach out by 16 June 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 14 June 2026 | Warning: FINAL WARNING PAY OR LEAK
-
Charisma Media
June 14, 2026
•
[ ransomware, technology ]
Charisma Media was listed as a victim on the leak site of the securotrop ransomware group; the attack is estimated to have taken place on 2026-06-14. Sector: Technology. Country: United States of America. Website: charismamedia.com. Status: AWAITING
Size: 808 GB
-
Ink
June 14, 2026
•
[ ransomware, technology ]
Ink was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-06-14. Sector: Professional Services. Country: United Kingdom of Great Britain and Northern Ireland. Website: weareink.co.uk. (including internal documentation, counterparties, contractors, software, correspondence, and the like) INK is an award-winning production studio based in London specialising in CGI, Animation and Retouching. We combine the technical and the beautiful to bring ideas to life across film, print and interactive platforms.
-
Blue Nile Medical Center
May 27, 2026
•
[ ransomware, healthcare ]
Blue Nile Medical Center was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-05-27. Sector: Healthcare. Country: United States of America. Website: bluenilemedical.com. More than 3000+ Patient's EHR Records
-
WaxWorks Inc
May 17, 2026
WaxWorks Inc was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-05-17. Sector: Retail & E-Commerce. Country: United States of America. Website: www.twaxworks.com.
-
K****** County. Mi**e**ta
May 29, 2026
K****** County. Mi**e**ta was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-05-29. Sector: Government & Defense. Country: United States of America. Website: kcmn.us.
-
Silsbee Police Department
May 27, 2026
•
[ ransomware, government ]
Silsbee Police Department was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-05-27. Sector: Government & Defense. Country: United States of America. Website: www.silsbeeisd.org/departments/silsbee-isd-police-department. Court Information
-
Bandung
June 14, 2026
Bandung was listed as a victim on the leak site of the nova ransomware group; the attack is estimated to have taken place on 2026-06-14. Country: Indonesia. Balai Besar POM di Bandung is a regulatory body focused on the supervision of food and drugs in Indonesia. They provide various services including certification for good distribution practices, food production, and testing of food and drugs. Their intended clients include manufacturers, importers, and the general public seeking information and assistance regarding food and drug safety. The organization operates with a commitment to transparency and public information, ensuring compliance with health regulations - Nova Provide tree and samples from stolen data to the company when its get in touch with support department.
-
frey.com
June 14, 2026
frey.com was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-06-14. Sector: Technology. Country: Switzerland. Website: frey.com. FREY (Frey Brothers, Inc.) is an American eco-friendly laundry care products company founded in 2017 by brothers Erin an...
-
Sky devices
June 15, 2026
•
[ ransomware, technology, leak ]
Sky devices was listed as a victim on the leak site of the nova ransomware group; the attack is estimated to have taken place on 2026-06-15. Sector: Technology. Country: United States of America. Website: skydevices.com. SKY Devices offers a diverse range of technology products including smartphones, tablets, wearables, and laptops. Their portfolio features various series such as the ELite and Platinum series, catering to different consumer needs. The company targets a young and tech-savvy audience looking for smart and stylish devices. With a focus on innovation and quality, SKY Devices aims to provide accessible technology solutions - Nova Provide tree and samples from stolen data to the company when its get in touch with support department.
-
Divine IT
June 15, 2026
•
[ ransomware, technology, government ]
Divine IT was listed as a victim on the leak site of the nova ransomware group; the attack is estimated to have taken place on 2026-06-15. Sector: Technology. Country: Bangladesh. Website: divineit.net. Divine IT Limited is a CMMI Level 3 IT consultancy and software development company based in Bangladesh, established in 2005. The company specializes in creating ERP systems, security solutions, and various software applications for diverse industries. Their primary clients include enterprises and government organizations seeking robust IT solutions and support. With a commitment to excellence, Divine IT has received multiple awards for its innovative products, including the flagship PrismERP - Nova Provide tree and samples from stolen data to the company when its get in touch with support department.
-
theorangeblowfish.com
June 15, 2026
•
[ ransomware, technology ]
theorangeblowfish.com was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-06-15. Sector: Technology. Website: theorangeblowfish.com. The Orangeblowfish is an award-winning independent creative and branding agency founded in 2012 by Natalie Lowe, headqua...
-
NSW Government
June 15, 2026
NSW Government was listed as a victim on the leak site of the nova ransomware group; the attack is estimated to have taken place on 2026-06-15. Sector: Government & Defense. Country: Australia. NSW Government is the administrative government for the state of New South Wales, providing services including Education, Health and Planning and Environment. They are based in Sydney, Australia - we exf only sensitive data from network, contact us for deal, make sure that any leak can lead you to legal actions and trust lost, Nova Provide tree and samples from stolen data to the company when its get in touch with support department.
-
Buechel Stone
June 15, 2026
•
[ ransomware, manufacturing ]
Buechel Stone was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-06-15. Sector: Manufacturing. Country: United States of America. Website: buechelstone.com. ***.com zoominfo.com/c/buechel-stone-corp/5800461 Founded in 1964 as a family-owned business, Buechel Stone is a premier natural stone quarrier and fabricator based in Wisconsin. Specializing in over a hundred varieties of natural stone, they provide exceptional building veneers, custom cut stone, and landscape products for architectural projects. As a third-generation company with a nationwide presence, they pride themselves on delivering unparalleled expertise and a guaranteed, dependable experience in the natural stone industry
-
Maine Oxy
June 15, 2026
Maine Oxy was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-06-15. Sector: Energy & Utilities. Country: United States of America. Website: maineoxy.com. ***.com zoominfo.com/c/maine-oxy/59165071 Founded in 1929, Maine Oxy is a trusted, family-owned leader in supplying industrial, medical, and specialty gases alongside premium welding equipment.Growing from a single location in Auburn to over 20 branches across New England, they provide comprehensive industry solutions and reliable services.For nearly a century, their unwavering dedication to innovation has made them an essential, customer-focused partner for businesses across nine states
-
Cole Manufacturing
June 15, 2026
•
[ ransomware, manufacturing, leak ]
Cole Manufacturing was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-06-15. Sector: Manufacturing. Country: United States of America. Website: colemfg.com. ***.com zoominfo.com/c/cole-manufacturing-corp/344188464 Cole Manufacturing is a specialized metal fabrication and custom tooling company based in West Bend, Wisconsin, dedicated to delivering high-quality, cost-effective solutions for the metal forming industry.They offer a comprehensive range of services, including precision tool and die making, metal stamping, prototyping, and both manual and robotic welding.With versatile capabilities and advanced equipment, the company expertly handles projects of any size, providing reliable manufacturing support from custom fixtures to high-volume production runs
-
Kozminski University
June 15, 2026
•
[ ransomware, education, finance ]
Kozminski University was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-06-15. Sector: Education. Country: Poland. Website: kozminski.edu.pl. ***.edu.pl zoominfo.com/c/kozminski-university/372606592 Kozminski University, located in Warsaw, is Poland's premier private business school and a globally recognized academic institution holding the prestigious "Triple Crown" accreditation. Consistently ranked among the top European business schools by the Financial Times, it specializes in management, finance, and law. The university is dedicated to shaping future business leaders through innovative, research-driven education and strong international partnership
