-
airespring.com
June 9, 2026
airespring.com was listed as a victim on the leak site of the chaos ransomware group; the attack is estimated to have taken place on 2026-06-09. Sector: Technology. Country: United States of America. Website: airespring.com. Founded in 2001, AireSpring is a Managed Services Provider specializing in Unified Communications, Managed Network, and IT Services, serving thousands of businesses nationwide. AireSpring provides fully managed and connected end-to-end, next-generation solutions for multi-location enterprise custome
-
M1xchange
June 9, 2026
•
[ ransomware, technology, finance ]
M1xchange was listed as a victim on the leak site of the worldleaks ransomware group; the attack is estimated to have taken place on 2026-06-09. Sector: Technology. Country: India. Website: www.m1xchange.com. [AI generated] M1xchange is an Indian trade receivables discounting platform operated by Mynd Solutions. It functions as an online marketplace where micro, small, and medium enterprises can auction their unpaid invoices to financiers, improving cash flow and working capital access. Operating under the Reserve Bank of India's TReDS framework, it serves the MSME financing sector across India.
-
GDL Transport
June 9, 2026
•
[ ransomware, transportation, hack ]
GDL Transport was listed as a victim on the leak site of the worldleaks ransomware group; the attack is estimated to have taken place on 2026-06-09. Sector: Transportation. Country: Sweden. Website: www.gdl.se.
-
Apollo Pipes
June 9, 2026
Apollo Pipes was listed as a victim on the leak site of the worldleaks ransomware group; the attack is estimated to have taken place on 2026-06-09. Sector: Manufacturing. Country: India. Website: www.apollopipes.com. [AI generated] Apollo Pipes is an Indian manufacturer specializing in PVC and CPVC piping systems and fittings. Headquartered in India, the company serves the plumbing, irrigation, and construction sectors. It operates under the broader Apollo Group and supplies products for residential, commercial, and agricultural applications. Apollo Pipes is listed on Indian stock exchanges and distributes its products across domestic markets through an extensive dealer network.
-
Auburn Electrical Construction Company
June 3, 2026
Auburn Electrical Construction Company was listed as a victim on the leak site of the embargo ransomware group; the attack is estimated to have taken place on 2026-06-03. Sector: Energy & Utilities. Country: United States of America. Auburn Electrical Construction Company, Inc. is an innovative contracting firm that profitably provides electrical-related services to our customers. Our goal i... -
-
Spratley's
June 4, 2026
•
[ ransomware, retail ]
Spratley's was listed as a victim on the leak site of the PrinzEugen ransomware group; the attack is estimated to have taken place on 2026-06-04. Sector: Retail & E-Commerce. Hundreds of GBs of data encrypted across company file shares.
If you would like the decryption key you just need to ask.
-
nottingham.ac.uk
June 9, 2026
•
[ ransomware, leak, education ]
nottingham.ac.uk was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-06-09. Sector: Education. Country: United Kingdom of Great Britain and Northern Ireland. Website: nottingham.ac.uk. Over 40 GB of billing and payment records, credit card and payment details, student finance data, and campus portal exports from the University of Nottingham and its Malaysia and China campuses was compromised, including payer contact information, transaction amounts, IP addresses, full names, home addresses, postcodes, email addresses, phone numbers, dates of birth, and other internal campus data. | Size: 19GB+ (compressed) | Updated: 10 June 2026 | SHA256: d3aaaf06dd857deec3866072cc2876780623d880992e8d735094db4779535873
-
Spratley's of Mortimer
June 4, 2026
•
[ ransomware, retail ]
Spratley's of Mortimer was listed as a victim on the leak site of the PrinzEugen ransomware group; the attack is estimated to have taken place on 2026-06-04. Sector: Retail & E-Commerce. spratleys.co.uk
Hundreds of GBs of data encrypted across company file shares, If you would like the decryption key you just need to ask.
-
Mid-Cumberland Human Resource Agency
May 18, 2026
•
[ ransomware, healthcare, government ]
Mid-Cumberland Human Resource Agency was listed as a victim on the leak site of the insomnia ransomware group; the attack is estimated to have taken place on 2026-05-18. Sector: Professional Services. Country: United States of America. Website: www.mchra.com. MCHRA is a nonprofit promoting self-sufficiency via Meals-on-Wheels, public transit, in-home services, and community corrections. It serves adults needing care, transit users, and long-term care residents, emphasizing inclusivity and translation services.
-
Cal Fresh
June 8, 2026
•
[ ransomware, leak ]
Cal Fresh was listed as a victim on the leak site of the termite ransomware group; the attack is estimated to have taken place on 2026-06-08. Sector: Agriculture and Food Production. Country: Canada. Website: calfresh.ca.gov. The California Association of Food Banks (CAFB) is committed to ending hunger in California and aims to provide clear, up-to-date information about CalFresh for people who are interested in applying. Since 2003, CAFB has partnered with food banks and other community-based organizations throughout the state to educate consumers about CalFresh and provide application assistance.
-
Lösing Filtertechnik
May 13, 2026
•
[ ransomware, leak, manufacturing ]
Lsing Filtertechnik was listed as a victim on the leak site of the spacebears ransomware group; the attack is estimated to have taken place on 2026-05-13. Sector: Manufacturing. Country: Germany. Website: loesing-filter.de. Lsing Filtertechnik (Willibrord Lsing Filtertechnik e.K.) is a leading German specialist in filtration technology with more than 70 years of experience since its founding in 1955.The company offers a wide range of high-quality filters, including oil, air, fuel, hydraulic, and water filtration solutions, along with custom-tailored products for various industries such as automotive, commercial vehicles, construction machinery, rail transport, and more.Known for its expertise with brands like SEPAR and a strong focus on innovation, Lsing develops individual solutions precisely matched to customer requirements while maintaining top quality and reliable service.Headquartered in Hattingen, Germany, the company serves both B2B clients and private customers through its online shop, emphasizing perfect filtration for every challenge. https://***.de/
-
Global Schools Foundation
June 10, 2026
•
[ ransomware, education ]
Global Schools Foundation was listed as a victim on the leak site of the fulcrumsec ransomware group; the attack is estimated to have taken place on 2026-06-10. Sector: Education. Country: Singapore. [AI generated] Global Schools Foundation is a Singapore-based non-profit organization operating in the international education sector. It manages a network of private schools across Asia and the Middle East under brands such as Global Indian International School. The foundation focuses on providing quality education with an Indian curriculum framework to students from diverse nationalities, emphasizing holistic development and academic excellence across multiple campuses worldwide.
-
Sayre Associates
June 10, 2026
•
[ ransomware, leak, technology ]
Sayre Associates was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-06-10. Sector: Professional Services. Country: United States of America. Website: sayreassociates.com. (Including clients, projects, emails and financial documents) Sayre Associates, Inc. is a civil engineering and land surveying firm based in Sioux Falls, South Dakota, established in 1969. The company offers a range of services including land development planning, parks and recreation facilities design, drainage and erosion control, and construction administration. They focus on delivering high-quality solutions through collaboration and innovation, serving clients in South Dakota, Iowa, and Minnesota. Their talented team of engineers and surveyors is dedicated to improving community efficiency and quality of life.
-
Alpha IT
June 4, 2026
•
[ ransomware, technology ]
Alpha IT was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-06-04. Sector: Technology. Country: Norway. Website: alphait.no.
-
National Health Fund
June 2, 2026
•
[ ransomware, healthcare ]
National Health Fund was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-06-02. Sector: Healthcare. Country: Jamaica. Website: nhf.org.jm. [AI generated] N/A
The name "National Health Fund" is generic and used by multiple organizations across different countries. Without more specific context such as country of origin or additional identifiers, I cannot reliably attribute this name to a single, verifiable entity and provide accurate threat intelligence information.
-
Bayou Electrical Services
June 4, 2026
•
[ ransomware, energy ]
Bayou Electrical Services was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-06-04. Sector: Energy & Utilities. Country: United States of America. Website: bayouelectrical.com.
-
K & E Distributing
June 4, 2026
•
[ ransomware, leak ]
K & E Distributing was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-06-04. Sector: Transportation. Country: United States of America. Website: kedistributing.com.
-
HDFC FUND
June 10, 2026
•
[ ransomware, finance ]
HDFC FUND was listed as a victim on the leak site of the morpheus ransomware group; the attack is estimated to have taken place on 2026-06-10. Sector: Financial Services. Country: India. **Website**: hdfcfund.com
**Revenue**: $427.8 Million
HDFC Asset Management Company Limited (HDFC AMC) is a leading publicly traded investment manager in India, operating as the asset management arm
-
Centra Sota Cooperative
June 10, 2026
•
[ ransomware, leak ]
Centra Sota Cooperative was listed as a victim on the leak site of the worldleaks ransomware group; the attack is estimated to have taken place on 2026-06-10. Sector: Agriculture and Food Production. Country: United States of America. Website: www.centrasota.com. [AI generated] Centra Sota Cooperative is an agricultural cooperative based in the United States, primarily serving farmers in Minnesota. It provides grain marketing, agronomy services, energy products, and feed solutions to its members. The cooperative supports local producers with crop inputs, precision agriculture services, and fuel supply, operating within the broader agricultural and farm services industry typical of Midwest cooperative structures.
-
First Federal Savings & Loan
April 29, 2026
•
[ ransomware, finance ]
First Federal Savings & Loan was listed as a victim on the leak site of the worldleaks ransomware group; the attack is estimated to have taken place on 2026-04-29. Sector: Financial Services. Country: United States of America. Website: www.firstwithus.com. [AI generated] First Federal Savings & Loan is a community-based financial institution operating in the United States. It provides traditional banking services including savings and checking accounts, mortgage loans, personal loans, and related financial products. Operating within the retail banking and thrift industry, it primarily serves individual consumers and local communities, functioning under federal or state regulatory oversight typical of American savings institutions.