Recent Breaches
-
June 8, 2026 • Cal Fresh was listed as a victim on the leak site of the termite ransomware group; the attack is estimated to have taken place on 2026-06-08. Sector: Agriculture and Food Production. Country: Canada. Website: calfresh.ca.gov. The California Association of Food Banks (CAFB) is committed to ending hunger in California and aims to provide clear, up-to-date information about CalFresh for people who are interested in applying. Since 2003, CAFB has partnered with food banks and other community-based organizations throughout the state to educate consumers about CalFresh and provide application assistance.
-
May 13, 2026 • Lsing Filtertechnik was listed as a victim on the leak site of the spacebears ransomware group; the attack is estimated to have taken place on 2026-05-13. Sector: Manufacturing. Country: Germany. Website: loesing-filter.de. Lsing Filtertechnik (Willibrord Lsing Filtertechnik e.K.) is a leading German specialist in filtration technology with more than 70 years of experience since its founding in 1955.The company offers a wide range of high-quality filters, including oil, air, fuel, hydraulic, and water filtration solutions, along with custom-tailored products for various industries such as automotive, commercial vehicles, construction machinery, rail transport, and more.Known for its expertise with brands like SEPAR and a strong focus on innovation, Lsing develops individual solutions precisely matched to customer requirements while maintaining top quality and reliable service.Headquartered in Hattingen, Germany, the company serves both B2B clients and private customers through its online shop, emphasizing perfect filtration for every challenge. https://***.de/
-
June 10, 2026 • Global Schools Foundation was listed as a victim on the leak site of the fulcrumsec ransomware group; the attack is estimated to have taken place on 2026-06-10. Sector: Education. Country: Singapore. [AI generated] Global Schools Foundation is a Singapore-based non-profit organization operating in the international education sector. It manages a network of private schools across Asia and the Middle East under brands such as Global Indian International School. The foundation focuses on providing quality education with an Indian curriculum framework to students from diverse nationalities, emphasizing holistic development and academic excellence across multiple campuses worldwide.
-
June 10, 2026 • Sayre Associates was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-06-10. Sector: Professional Services. Country: United States of America. Website: sayreassociates.com. (Including clients, projects, emails and financial documents) Sayre Associates, Inc. is a civil engineering and land surveying firm based in Sioux Falls, South Dakota, established in 1969. The company offers a range of services including land development planning, parks and recreation facilities design, drainage and erosion control, and construction administration. They focus on delivering high-quality solutions through collaboration and innovation, serving clients in South Dakota, Iowa, and Minnesota. Their talented team of engineers and surveyors is dedicated to improving community efficiency and quality of life.
-
June 4, 2026 • Alpha IT was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-06-04. Sector: Technology. Country: Norway. Website: alphait.no.
-
June 2, 2026 • National Health Fund was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-06-02. Sector: Healthcare. Country: Jamaica. Website: nhf.org.jm. [AI generated] N/A The name "National Health Fund" is generic and used by multiple organizations across different countries. Without more specific context such as country of origin or additional identifiers, I cannot reliably attribute this name to a single, verifiable entity and provide accurate threat intelligence information.
-
June 4, 2026 • Bayou Electrical Services was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-06-04. Sector: Energy & Utilities. Country: United States of America. Website: bayouelectrical.com.
-
June 4, 2026 • K & E Distributing was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-06-04. Sector: Transportation. Country: United States of America. Website: kedistributing.com.
-
June 10, 2026 • HDFC FUND was listed as a victim on the leak site of the morpheus ransomware group; the attack is estimated to have taken place on 2026-06-10. Sector: Financial Services. Country: India. **Website**: hdfcfund.com **Revenue**: $427.8 Million HDFC Asset Management Company Limited (HDFC AMC) is a leading publicly traded investment manager in India, operating as the asset management arm
-
June 10, 2026 • Centra Sota Cooperative was listed as a victim on the leak site of the worldleaks ransomware group; the attack is estimated to have taken place on 2026-06-10. Sector: Agriculture and Food Production. Country: United States of America. Website: www.centrasota.com. [AI generated] Centra Sota Cooperative is an agricultural cooperative based in the United States, primarily serving farmers in Minnesota. It provides grain marketing, agronomy services, energy products, and feed solutions to its members. The cooperative supports local producers with crop inputs, precision agriculture services, and fuel supply, operating within the broader agricultural and farm services industry typical of Midwest cooperative structures.
-
April 29, 2026 • First Federal Savings & Loan was listed as a victim on the leak site of the worldleaks ransomware group; the attack is estimated to have taken place on 2026-04-29. Sector: Financial Services. Country: United States of America. Website: www.firstwithus.com. [AI generated] First Federal Savings & Loan is a community-based financial institution operating in the United States. It provides traditional banking services including savings and checking accounts, mortgage loans, personal loans, and related financial products. Operating within the retail banking and thrift industry, it primarily serves individual consumers and local communities, functioning under federal or state regulatory oversight typical of American savings institutions.
-
May 24, 2026 • Tata Electronics was listed as a victim on the leak site of the worldleaks ransomware group; the attack is estimated to have taken place on 2026-05-24. Sector: Manufacturing. Country: India. Website: www.tataelectronics.com. [AI generated] Tata Electronics is an Indian manufacturing company and a subsidiary of the Tata Group. It operates in the electronics manufacturing and precision engineering industry, producing components for consumer electronics, including iPhone parts for Apple. The company has facilities across India and plays a significant role in advancing the country's domestic electronics manufacturing capabilities and supply chain.
-
June 10, 2026 • Associated Investor Services was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-06-10. Sector: Financial Services. Associated Financial Consultants & Investor Services is an independent boutique firm dedicated to creating, growing, and protecting wealth since 1972. They offer a range of services includin g wealth management, life planning, retirement planning, and insurance for families and individ uals, as well as customized retirement and employee benefit plans for businesses. We will upload 77gb of corporate data soon. Employee personal information (passports, DLs, SSNs and so on), financials, confidential legal documents, client and partners information, NDAs, e tc.
-
June 10, 2026 • The Midland Theatre was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-06-10. Sector: Hospitality. Country: United Kingdom of Great Britain and Northern Ireland. The Midland Theatre originally opened in December of 1928 in Newark, Ohio. The theatre draws te ns of thousands of visitors each year to a wide array of programming from family-friendly event s and holiday specials to top artists in every genre. We will upload corporate data soon. Employee personal information (w-9 forms and other docs), f inancials, credit cards, client, partners and guests information, NDAs, etc.
-
June 10, 2026 • FIZA was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-06-10. Sector: Manufacturing. Country: Czechia. FIZA, a.s. is an established, medium-sized auditing and consulting company with a good capital base enabling its further development. Its roots go back to the very beginning of the 1990s, when it provided its services in the form of its legal predecessor, the association of individuals Ing. Ji Ficbauer, civilingenjr. FIZA. The current joint-stock company was established in 2001. We specialize in auditing, economic-organizational and tax consulting. We approach every job and every client carefully and responsibly. We want to become your long-term and trustworthy partner. We will be happy to accommodate you even in the case of one-off cooperation. Laek: 100GB WE HAS COLLECTED SUCH DATA AS: - Confidential documents - Clients Data - NDA - Financial data - Operations - Corporate data - Business Agreements - Development - Financial databases, all transactions, all clients And a lot of other VERY IMPORTANT information!
-
May 18, 2026 • Cattani was listed as a victim on the leak site of the spacebears ransomware group; the attack is estimated to have taken place on 2026-05-18. Sector: Manufacturing. Country: Italy. Website: www.cattani.it/en. Established in 1967, Cattani S.p.A. is now a leader in the dental field, exporting its range of products to all continents. After becoming a publicly limited company in 1981,Cattani S.p.A. founded the division Esam in 1984, extending the groups business activities into the industrial field. In 2003 Cattani S.p.A. launched Magnolia,a chemical company specialising in the production of detergent disinfectant products for surgery instruments and, in particular, dental aspiration systems.The Cattani group designed and manufactured one of the scientific components in the famous NASA space shuttle. Due to our reputation for reliability,Ferrari Engineering (supplier of the European Space Agency) chose us as one of its prestigious suppliers for the production of a 180 gram compressor,which reached a pressure of 38 bar. The group has also taken part in the Eurostar project, the pride of the Italian railway system, producing the trains pressurization system.-Personal information of employees and clients -Financial documents- 200 000 + other files https://www.***.it/en/
-
June 10, 2026 Port Air Express was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-06-10. Sector: Transportation. Website: portairexpress.com. Port Air Express Inc. specializes in reliable logistics and transport solutions, negotiating co mpetitive rates with airlines and shipping companies globally. Their services include domestic and international shipping, containerized shipping, breakbulk cargo handling, heavy lift operat ions, and customs clearance. We will upload 15gb of corporate data soon. Employee personal information (passports, DL scans, SSN cards and more), financial information payment details, credit cards, etc.
-
June 10, 2026 • Rainbow Distributors USA was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-06-10. Sector: Retail & E-Commerce. Country: United States of America. Website: www.rainbowdistributorsusa.com. United States
-
June 10, 2026 • Mundt and Associates was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-06-10. Sector: Professional Services. Country: United States of America. Website: www.mundtinc.com. United States
-
June 10, 2026 • PROBE, S.A. DE C.V was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-06-10. Country: Mexico. Website: PROBE, S.A. DE C.V. ***.A. DE C.V. is a Salvadoran family-owned company founded in 1978, headquartered in San Salvador, El Salvador. It...