-
Nintendo Company
June 12, 2026
•
[ ransomware, technology, leak ]
Nintendo Company was listed as a victim on the leak site of the ShadowByt3$ ransomware group; the attack is estimated to have taken place on 2026-06-12. Sector: Technology. Country: Japan. Website: Nintendo.com. proof: https://mega.nz/folder/3kBzQKgR#rIhDePsPMeFpfEGTPopDVQ We are ShadowByt3$ a extortion as a service group. We stole close enough to 1gb. You have 48 hours to contact us nintendo or all data gets leaked. If you contact us we give you an extra day to think this through. We are demanding a ransom payment of 2 million dollars. Check your inbox if you work for nintendo and use TINYpulse or go login to tinypulse if the url in the leak looks familiar. You have 48 hours from this announcement then it gets leaked. You have till June 15 2026. size: 859.0MB Close enough to 1GB it contains the following: -full name first name, last name, email of employees -analytics - surveys - all reports exported - all bank statements of payment pdf and w9 forms with employee ids - all cheers exported - all wins dashboard and wall of wins exported - all progress plans exported - Reports from 2016 to up to date 2026 - Analytics of Employees contain conversations and personal feelings about work and more - Content library of personal questions and engagement analytics - TINYpulse and Nintendo top employees of Nintendo based on engagement
-
Cambridge Mobile Telematics
June 12, 2026
•
[ ransomware, technology ]
Cambridge Mobile Telematics was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-06-12. Sector: Technology. Country: United States of America. [AI generated] Cambridge Mobile Telematics (CMT) is an American telematics technology company headquartered in Cambridge, Massachusetts. It provides mobile-based driving analytics and safety solutions to insurers, rideshares, fleets, and enterprises. Using smartphone sensors and AI, CMT measures driving behavior to help reduce accidents and improve road safety. Its DriveWell platform is widely used in the insurance telematics industry globally.
-
Demand.io
June 12, 2026
•
[ ransomware, technology, retail ]
Demand.io was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-06-12. Sector: Technology. Country: United States of America. Website: Demand.io. [AI generated] Demand.io is a technology company based in the United States that operates in the e-commerce and artificial intelligence space. It develops AI-powered shopping tools and browser extensions designed to help consumers find deals, coupons, and product recommendations while shopping online. The company focuses on enhancing the online shopping experience through data-driven insights and personalized assistance for retail consumers.
-
mgrlaw.com
June 12, 2026
•
[ ransomware, leak ]
mgrlaw.com was listed as a victim on the leak site of the threeam ransomware group; the attack is estimated to have taken place on 2026-06-12. Sector: Professional Services. Country: United States of America. Website: mgrlaw.com. Mogren, Glessner & Ahrens Law Firm is a full-service law firm located in King County, specializing in family law, divorce, probate, wills, criminal defense, personal injury, and adoption. Established in 1942, the firm is dedicated to providing com
-
hoplongtech.com
May 24, 2026
•
[ ransomware, technology, manufacturing ]
hoplongtech.com was listed as a victim on the leak site of the threeam ransomware group; the attack is estimated to have taken place on 2026-05-24. Sector: Technology. Country: Vietnam. Website: hoplongtech.com. Cng ty C phn Cng Ngh Hp Long is a leading distributor of automation equipment and industrial robotics solutions in Vietnam, representing brands such as Schneider Electric, Siemens, Omron, Veichi, NiSTRO, Leipole, and Universal Robots. They o
-
agroexportavocados.com
June 12, 2026
agroexportavocados.com was listed as a victim on the leak site of the threeam ransomware group; the attack is estimated to have taken place on 2026-06-12. Sector: Agriculture and Food Production. Country: Mexico. Website: agroexportavocados.com. Agro Industrial Exportadora SA de CV (AGRIEXP) is a Mexican holding company which is engaged in the food processing sector. Through its subsidiaries, the Company purchases, processes and sells fruit and vegetables.
-
amc.org.au
June 12, 2026
•
[ ransomware, healthcare, hack ]
amc.org.au was listed as a victim on the leak site of the threeam ransomware group; the attack is estimated to have taken place on 2026-06-12. Sector: Healthcare. Country: Australia. Website: amc.org.au. The Australian Medical Council (AMC) is an independent national standards body responsible for the accreditation and assessment of medical education and training in Australia and New Zealand. Its primary purpose is to ensure that the standards of
-
consultic.be
May 17, 2026
•
[ ransomware, technology ]
consultic.be was listed as a victim on the leak site of the threeam ransomware group; the attack is estimated to have taken place on 2026-05-17. Sector: Professional Services. Country: Belgium. Website: consultic.be. ConsulTIC specializes in IT solutions, offering services such as application hosting, virtualization, telecommuting support, and security solutions. Their target clients include businesses seeking reliable, high-performance, and secure IT services
-
ws.com.br
May 13, 2026
•
[ ransomware, technology ]
ws.com.br was listed as a victim on the leak site of the threeam ransomware group; the attack is estimated to have taken place on 2026-05-13. Sector: Professional Services. Country: Brazil. Website: ws.com.br. WS Group Brasil is a Brazilian operations and business services provider engaged in logistics, technical support, contract administration, and labor-intensive service delivery. The company serves a mix of government, institutional, and commercial
-
molinoscabodi.com.ar
May 14, 2026
•
[ ransomware, manufacturing ]
molinoscabodi.com.ar was listed as a victim on the leak site of the threeam ransomware group; the attack is estimated to have taken place on 2026-05-14. Sector: Agriculture and Food Production. Country: Argentina. Website: molinoscabodi.com.ar. Molinos Cabodi Hnos. S.A. has been providing high-quality flour products since 1853, including various types of flour such as Harina 000, Harina 000 Pan de Miga, and semolina. The company serves clients across the MERCOSUR region, offering persona
-
bsynchro.com
May 14, 2026
•
[ ransomware, technology, finance ]
bsynchro.com was listed as a victim on the leak site of the threeam ransomware group; the attack is estimated to have taken place on 2026-05-14. Sector: Technology. Country: Germany. Website: bsynchro.com. BSynchro Holding is an insurtech software provider that specializes in innovative insurance solutions tailored for insurance companies, brokers, and reinsurance brokers. Their product offerings include advanced tools such as CORA for product confi
-
insamani.com.ar
May 11, 2026
•
[ ransomware, leak ]
insamani.com.ar was listed as a victim on the leak site of the threeam ransomware group; the attack is estimated to have taken place on 2026-05-11. Sector: Healthcare. Country: Argentina. Website: insamani.com.ar. INSA INDELMA S.A. is a leading agro-industrial company in Argentina specializing in peanut production, exporting 80% of its output to over 30 countries worldwide. The company emphasizes quality through a comprehensive traceability system that ensu
-
palmero.com
May 9, 2026
•
[ ransomware, manufacturing, energy ]
palmero.com was listed as a victim on the leak site of the threeam ransomware group; the attack is estimated to have taken place on 2026-05-09. Website: palmero.com. Palmero is a company dedicated to the manufacturing and marketing of capital goods, providing comprehensive solutions across various segments including energy, oil and gas, mining, agriculture, and construction. With 75 years of presence in Argent
-
jastrebarsko.hr
April 30, 2026
jastrebarsko.hr was listed as a victim on the leak site of the threeam ransomware group; the attack is estimated to have taken place on 2026-04-30. Sector: Government & Defense. Country: Croatia. Website: jastrebarsko.hr. Town of Jastrebarsko, a historic city in Central Croatia located between Zagreb and Karlovac.
-
jetmachprod.com
May 15, 2026
jetmachprod.com was listed as a victim on the leak site of the threeam ransomware group; the attack is estimated to have taken place on 2026-05-15. Sector: Manufacturing. Website: jetmachprod.com. Jet Machined Products specializes in high-performance milled and turned components for the aerospace, instrumentation, robotics, and other specialized industries. With decades of experience, they focus on precision manufacturing to meet exacting t
-
mlit.com.my
June 12, 2026
mlit.com.my was listed as a victim on the leak site of the stormous ransomware group; the attack is estimated to have taken place on 2026-06-12. Sector: Government & Defense. Country: Malaysia. Website: mlit.com.my. We have successfully breached the internal servers and network infrastructure of MLIT, gaining full unauthorized access to their active Microsoft Dynamics Management Reporter environment and local storage volumes.The compromised data includes highly sensitive internal operations and financial records. Among the leaked files are complete individual Campaign Profit and Loss (PnL) statements, detailed revenue sheets, clawbacks, and general ledger accounts for several linked entities, including Salesworks Pte Ltd Taiwan Branch and Shaves2u HK Limited. Additionally, we have extracted complete directory trees and file structures from the internal network shares and remote desktop sessions, revealing thousands of corporate folders such as JAG Group, SWGP Excel Import, and various financial databases.
-
myipo.gov.my
June 13, 2026
•
[ ransomware, government, technology ]
myipo.gov.my was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-06-13. Sector: Government & Defense. Country: Malaysia. Website: myipo.gov.my. MyIPO provides a range of intellectual property services including patents, copyrights, trademarks, geographical indications, industrial designs, and integrated circuit layout designs. The organization aims to protect the rights of creators and innovators by offering exclusive rights for inventions and creative works. MyIPO serves a diverse clientele, including authors, inventors, and businesses seeking to safeguard their intellectual property.
-
www.mbt-energy.com
June 13, 2026
•
[ ransomware, energy, technology ]
www.mbt-energy.com was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-06-13. Sector: Energy & Utilities. Country: Germany. Website: www.mbt-energy.com. Xiamen Mibet New Energy Co., Ltd. (Mibet Energy) is a Chinese high-tech enterprise specializing in the research, develop...
-
GITHUB INTERNAL
June 13, 2026
•
[ ransomware, technology, leak ]
GITHUB INTERNAL was listed as a victim on the leak site of the lapsus$ ransomware group; the attack is estimated to have taken place on 2026-06-13. Sector: Technology. Country: United States of America. Website: github.com. Everything for the main platform is there. No ransom, we do not care about extorting Github. If no buyer is found, we leak for free.
-
INGKA GROUP
June 13, 2026
INGKA GROUP was listed as a victim on the leak site of the lapsus$ ransomware group; the attack is estimated to have taken place on 2026-06-13. Sector: Retail & E-Commerce. Country: Sweden. Website: ingka.com. Full mapping of global e-commerce architecture and internal coworker platforms. Supply chain logistics, cloud infrastructure, and AI/MLOps repositories