-
hoplongtech.com
May 24, 2026
•
[ ransomware, technology, manufacturing ]
hoplongtech.com was listed as a victim on the leak site of the threeam ransomware group; the attack is estimated to have taken place on 2026-05-24. Sector: Technology. Country: Vietnam. Website: hoplongtech.com. Cng ty C phn Cng Ngh Hp Long is a leading distributor of automation equipment and industrial robotics solutions in Vietnam, representing brands such as Schneider Electric, Siemens, Omron, Veichi, NiSTRO, Leipole, and Universal Robots. They o
-
agroexportavocados.com
June 12, 2026
agroexportavocados.com was listed as a victim on the leak site of the threeam ransomware group; the attack is estimated to have taken place on 2026-06-12. Sector: Agriculture and Food Production. Country: Mexico. Website: agroexportavocados.com. Agro Industrial Exportadora SA de CV (AGRIEXP) is a Mexican holding company which is engaged in the food processing sector. Through its subsidiaries, the Company purchases, processes and sells fruit and vegetables.
-
amc.org.au
June 12, 2026
•
[ ransomware, healthcare, hack ]
amc.org.au was listed as a victim on the leak site of the threeam ransomware group; the attack is estimated to have taken place on 2026-06-12. Sector: Healthcare. Country: Australia. Website: amc.org.au. The Australian Medical Council (AMC) is an independent national standards body responsible for the accreditation and assessment of medical education and training in Australia and New Zealand. Its primary purpose is to ensure that the standards of
-
consultic.be
May 17, 2026
•
[ ransomware, technology ]
consultic.be was listed as a victim on the leak site of the threeam ransomware group; the attack is estimated to have taken place on 2026-05-17. Sector: Professional Services. Country: Belgium. Website: consultic.be. ConsulTIC specializes in IT solutions, offering services such as application hosting, virtualization, telecommuting support, and security solutions. Their target clients include businesses seeking reliable, high-performance, and secure IT services
-
ws.com.br
May 13, 2026
•
[ ransomware, technology ]
ws.com.br was listed as a victim on the leak site of the threeam ransomware group; the attack is estimated to have taken place on 2026-05-13. Sector: Professional Services. Country: Brazil. Website: ws.com.br. WS Group Brasil is a Brazilian operations and business services provider engaged in logistics, technical support, contract administration, and labor-intensive service delivery. The company serves a mix of government, institutional, and commercial
-
molinoscabodi.com.ar
May 14, 2026
•
[ ransomware, manufacturing ]
molinoscabodi.com.ar was listed as a victim on the leak site of the threeam ransomware group; the attack is estimated to have taken place on 2026-05-14. Sector: Agriculture and Food Production. Country: Argentina. Website: molinoscabodi.com.ar. Molinos Cabodi Hnos. S.A. has been providing high-quality flour products since 1853, including various types of flour such as Harina 000, Harina 000 Pan de Miga, and semolina. The company serves clients across the MERCOSUR region, offering persona
-
bsynchro.com
May 14, 2026
•
[ ransomware, technology, finance ]
bsynchro.com was listed as a victim on the leak site of the threeam ransomware group; the attack is estimated to have taken place on 2026-05-14. Sector: Technology. Country: Germany. Website: bsynchro.com. BSynchro Holding is an insurtech software provider that specializes in innovative insurance solutions tailored for insurance companies, brokers, and reinsurance brokers. Their product offerings include advanced tools such as CORA for product confi
-
insamani.com.ar
May 11, 2026
•
[ ransomware, leak ]
insamani.com.ar was listed as a victim on the leak site of the threeam ransomware group; the attack is estimated to have taken place on 2026-05-11. Sector: Healthcare. Country: Argentina. Website: insamani.com.ar. INSA INDELMA S.A. is a leading agro-industrial company in Argentina specializing in peanut production, exporting 80% of its output to over 30 countries worldwide. The company emphasizes quality through a comprehensive traceability system that ensu
-
palmero.com
May 9, 2026
•
[ ransomware, manufacturing, energy ]
palmero.com was listed as a victim on the leak site of the threeam ransomware group; the attack is estimated to have taken place on 2026-05-09. Website: palmero.com. Palmero is a company dedicated to the manufacturing and marketing of capital goods, providing comprehensive solutions across various segments including energy, oil and gas, mining, agriculture, and construction. With 75 years of presence in Argent
-
jastrebarsko.hr
April 30, 2026
jastrebarsko.hr was listed as a victim on the leak site of the threeam ransomware group; the attack is estimated to have taken place on 2026-04-30. Sector: Government & Defense. Country: Croatia. Website: jastrebarsko.hr. Town of Jastrebarsko, a historic city in Central Croatia located between Zagreb and Karlovac.
-
jetmachprod.com
May 15, 2026
jetmachprod.com was listed as a victim on the leak site of the threeam ransomware group; the attack is estimated to have taken place on 2026-05-15. Sector: Manufacturing. Website: jetmachprod.com. Jet Machined Products specializes in high-performance milled and turned components for the aerospace, instrumentation, robotics, and other specialized industries. With decades of experience, they focus on precision manufacturing to meet exacting t
-
mlit.com.my
June 12, 2026
mlit.com.my was listed as a victim on the leak site of the stormous ransomware group; the attack is estimated to have taken place on 2026-06-12. Sector: Government & Defense. Country: Malaysia. Website: mlit.com.my. We have successfully breached the internal servers and network infrastructure of MLIT, gaining full unauthorized access to their active Microsoft Dynamics Management Reporter environment and local storage volumes.The compromised data includes highly sensitive internal operations and financial records. Among the leaked files are complete individual Campaign Profit and Loss (PnL) statements, detailed revenue sheets, clawbacks, and general ledger accounts for several linked entities, including Salesworks Pte Ltd Taiwan Branch and Shaves2u HK Limited. Additionally, we have extracted complete directory trees and file structures from the internal network shares and remote desktop sessions, revealing thousands of corporate folders such as JAG Group, SWGP Excel Import, and various financial databases.
-
myipo.gov.my
June 13, 2026
•
[ ransomware, government, technology ]
myipo.gov.my was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-06-13. Sector: Government & Defense. Country: Malaysia. Website: myipo.gov.my. MyIPO provides a range of intellectual property services including patents, copyrights, trademarks, geographical indications, industrial designs, and integrated circuit layout designs. The organization aims to protect the rights of creators and innovators by offering exclusive rights for inventions and creative works. MyIPO serves a diverse clientele, including authors, inventors, and businesses seeking to safeguard their intellectual property.
-
www.mbt-energy.com
June 13, 2026
•
[ ransomware, energy, technology ]
www.mbt-energy.com was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-06-13. Sector: Energy & Utilities. Country: Germany. Website: www.mbt-energy.com. Xiamen Mibet New Energy Co., Ltd. (Mibet Energy) is a Chinese high-tech enterprise specializing in the research, develop...
-
GITHUB INTERNAL
June 13, 2026
•
[ ransomware, technology, leak ]
GITHUB INTERNAL was listed as a victim on the leak site of the lapsus$ ransomware group; the attack is estimated to have taken place on 2026-06-13. Sector: Technology. Country: United States of America. Website: github.com. Everything for the main platform is there. No ransom, we do not care about extorting Github. If no buyer is found, we leak for free.
-
INGKA GROUP
June 13, 2026
INGKA GROUP was listed as a victim on the leak site of the lapsus$ ransomware group; the attack is estimated to have taken place on 2026-06-13. Sector: Retail & E-Commerce. Country: Sweden. Website: ingka.com. Full mapping of global e-commerce architecture and internal coworker platforms. Supply chain logistics, cloud infrastructure, and AI/MLOps repositories
-
Law Offices US immigrationonline.com
May 12, 2026
Law Offices US immigrationonline.com was listed as a victim on the leak site of the Triple X ransomware group; the attack is estimated to have taken place on 2026-05-12. Sector: Professional Services. Country: United States of America. Website: immigrationonline.com. https://immigrationonline.com/
1.5 terabytes of people's data in a immigrationonline law firm.
Server overload and lack of updates have caused important data to be exposed to potential leaks.
At the same time, many of these financial and tax documents also contain sensitive personal information, including full names, home addresses, Social Security numbers, banking details, and contact information.
what will leak ?
Confidential court cases : Details of lawsuits, complaints, or defenses that have not yet been filed in court.
Financial and banking information : Sensitive client accounts, contracts, or transactions.
Intellectual property documents : Such as patents, designs, or business contracts that have not yet been made public.
Private correspondence and emails : Communications between the attorney and the client that should remain strictly confidential.
what data will leak ?
24,900 passport files
sample
Tax forms of employees and colleagues
sample
ID cards and drivers licenses
sample
few sample pics:
pic 1
pic 2
pic 3
pic 4
pic 5
This is probably the right moment to point out that, at a certain stage, virtually any data breach is still a reversible situation. Companies are usually given an opportunity to contain the damage and resolve the issue albeit at a price.
But despite knowing exactly what was happening, and fully understanding that it was putting the security and privacy of its own employees at risk, the company made a calculated decision to let it happen.
And now the company will tell its employees: Sorry, weve experienced a data breach, and your passports are now publicly available online.
But they will never say: We were offered a chance to pay to prevent your passports from being published, but we decided it wasnt worth it so now theyre on the internet. Sorry.
download data link : http://6qqz6m3b6htudohg2mlf5gdcalonxy3sh5g4dix4mpyirjcgelqqufad.onion/immigrationonline.com/
-
Bni.co.id bank of indonesia free data.
May 11, 2026
•
[ ransomware, finance ]
Bni.co.id bank of indonesia free data. was listed as a victim on the leak site of the Triple X ransomware group; the attack is estimated to have taken place on 2026-05-11. Sector: Financial Services. Country: Indonesia. Website: Bni.co.id. BANK of indonesia bni.co.id
Customer information from 2024 to 2026
All customer contracts, passports, and ID cards (few pic attached)
Its strange the bank has such a severe security weakness.
full data is 2 TB
few sample pics:
pic 1
pic 2
pic 3
pic 4
pic 5
part 1 ~ 100Gig
free download : http://6qqz6m3b6htudohg2mlf5gdcalonxy3sh5g4dix4mpyirjcgelqqufad.onion/bni.co.id/
pass : bnibnibni
we will leak few days later new parts, if u wanna download full pack PM us in forums (https://forum.exploit.in/profile/240235-apt8172/) and get link.
If you want to buy the bni bank 2026 fresh data, send a private message...
-
Daechang Solution
June 8, 2026
•
[ ransomware, manufacturing, leak ]
Daechang Solution was listed as a victim on the leak site of the Black X ransomware group; the attack is estimated to have taken place on 2026-06-08. Sector: Professional Services. Country: South Korea. Website: dsol.co.kr. We possess all the core technical data of Daechang Solution. (Technical Research Institute, Valve Team, Cryogenic Team, Innovation Team, Sales Team, Finance Team, Materials Team, Quality Team, General Affairs Team, Production Team) we will sell it to only one.
-
coe.int
June 13, 2026
•
[ ransomware, government, finance ]
coe.int was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-06-13. Sector: Government & Defense. Country: France. Website: coe.int. Over 297 GB of Council of Europe HR and payroll data (429,000+ files) was compromised across the Secretariat, Directorate of Human Resources, Parliamentary Assembly, EDQM, permanent and temporary staff, interpreters, conference services, language booth units, and payroll administration, including 409,000+ payslips for 10,000+ staff from 2011 to 2026, 14,000+ CVs and 3,700+ in-house personnel files, 10,700+ per-employee document stores, contract and purchase order records, mission travel overpayments, interpreter scheduling and 2026 salary scales, Blue List rosters, absence and illness reports, bank account and URSSAF payroll data, performance evaluations, and payroll exports, covering full names, employee IDs, home addresses, phone numbers, dates of birth, salaries, bank details, tax and social security information, medical and absence records, mission references, and other internal institutional data. This is a final warning to reach out by 16 June 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 14 June 2026 | Warning: FINAL WARNING PAY OR LEAK
