-
HanDok
June 9, 2026
•
[ ransomware, healthcare ]
HanDok was listed as a victim on the leak site of the ULose ransomware group; the attack is estimated to have taken place on 2026-06-09. Sector: Healthcare. Country: South Korea. Website: www.handok.co.kr. We have all customer`s data of HanDok country: South Korea status: public
-
HIZE Aero
June 9, 2026
•
[ ransomware, manufacturing, technology ]
HIZE Aero was listed as a victim on the leak site of the ULose ransomware group; the attack is estimated to have taken place on 2026-06-09. Sector: Manufacturing. Country: South Korea. Website: hizeaero.com. We have all PDM Server`s data of HIZEAERO Company, partner Boeing. 1TB country: South Korea status: private
-
KyungRok
June 9, 2026
•
[ ransomware, finance ]
KyungRok was listed as a victim on the leak site of the ULose ransomware group; the attack is estimated to have taken place on 2026-06-09. Sector: Financial Services. Country: South Korea. Website: kyungrok.com. We have all customer`s data of KyungRok country: South Korea status: public
-
NRCapital
June 9, 2026
•
[ ransomware, finance ]
NRCapital was listed as a victim on the leak site of the ULose ransomware group; the attack is estimated to have taken place on 2026-06-09. Sector: Financial Services. Country: South Korea. Website: nrcapital.co.kr. We have all data of nrcapital company. 1TB. country: South Korea status: private
-
MSICapital
June 9, 2026
•
[ ransomware, finance ]
MSICapital was listed as a victim on the leak site of the ULose ransomware group; the attack is estimated to have taken place on 2026-06-09. Sector: Financial Services. Country: South Korea. Website: money-store.co.kr.
-
Cambridge Law Chambers
June 9, 2026
•
[ ransomware, finance ]
Cambridge Law Chambers was listed as a victim on the leak site of the gunra ransomware group; the attack is estimated to have taken place on 2026-06-09. Sector: Professional Services. Country: Bahamas.
-
Trevi
June 9, 2026
•
[ ransomware, manufacturing, technology ]
Trevi was listed as a victim on the leak site of the nova ransomware group; the attack is estimated to have taken place on 2026-06-09. Sector: Manufacturing. Country: Italy. The trevi.it website is the official brand portal for the Italian consumer electronics company Trevi S.p.A., which is owned by Trevidea srl - Nova Provide tree and samples from stolen data to the company when its get in touch with support department.
-
Centre Ellipse
June 9, 2026
•
[ ransomware, healthcare, leak ]
Centre Ellipse was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-06-09. Centre Ellipse Strasbourg is an ambulatory medical facility that offers personalized care pathw
ays to improve the health of patients with chronic diseases or syndromes. The center features a
multidisciplinary team that provides both physical and psychological support, focusing on card
iac rehabilitation and mental health services.
We will upload 142gb of corporate data soon. Health information for at least 500 patients, empl
oyees personal information, financials, lots of contracts, confidential agreements and so on.
-
SMPC Architects
June 9, 2026
•
[ ransomware, leak, financial ]
SMPC Architects was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-06-09. Sector: Professional Services. SMPC Architects is an architecture firm based in Albuquerque, New Mexico, specializing in creat
ing innovative and sustainable spaces. The firm focuses on community-oriented projects and coll
aborates closely with clients to meet their needs.
We will upload 163gb of corporate data soon. Employee personal information (passports, DLs, SSN
cards and so on), financials, lots of contracts and confidential settlements, NDAs, clients an
d partners information, etc.
-
Rockaway River Country Club
June 9, 2026
Rockaway River Country Club was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-06-09. Sector: Hospitality. Rockaway River Country Club is a premier country club located in Denville, NJ, offering a range
of amenities including golf, dining, and facilities for racquets and aquatics. The club has a
rich history of excellence, celebrating 100 years of service to its members.
We will upload 25gb of corporate data soon. Employee personal information (DLs and other docs,
contracts with personal information), financials, contracts and agreements, projects info, draw
ings, clients and partners information, etc.
-
Spray Equipment & Service Center
June 9, 2026
•
[ ransomware, manufacturing, leak ]
Spray Equipment & Service Center was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-06-09. Sector: Professional Services. Spray Equipment & Service Center is a leading provider of consultation, turnkey industrial fini
shing equipment, and training services for coating applications. They cater to clients seeking
efficient and high-performance coating solutions, enhancing product quality and streamlining pr
oduction processes.
We will upload 26gb of corporate data soon. Employee personal information (DLs, w-9 forms and s
o on), financials, contracts, projects info, drawings, partners information, etc.
-
airespring.com
June 9, 2026
airespring.com was listed as a victim on the leak site of the chaos ransomware group; the attack is estimated to have taken place on 2026-06-09. Sector: Technology. Country: United States of America. Website: airespring.com. Founded in 2001, AireSpring is a Managed Services Provider specializing in Unified Communications, Managed Network, and IT Services, serving thousands of businesses nationwide. AireSpring provides fully managed and connected end-to-end, next-generation solutions for multi-location enterprise custome
-
M1xchange
June 9, 2026
•
[ ransomware, technology, finance ]
M1xchange was listed as a victim on the leak site of the worldleaks ransomware group; the attack is estimated to have taken place on 2026-06-09. Sector: Technology. Country: India. Website: www.m1xchange.com. [AI generated] M1xchange is an Indian trade receivables discounting platform operated by Mynd Solutions. It functions as an online marketplace where micro, small, and medium enterprises can auction their unpaid invoices to financiers, improving cash flow and working capital access. Operating under the Reserve Bank of India's TReDS framework, it serves the MSME financing sector across India.
-
GDL Transport
June 9, 2026
•
[ ransomware, transportation, hack ]
GDL Transport was listed as a victim on the leak site of the worldleaks ransomware group; the attack is estimated to have taken place on 2026-06-09. Sector: Transportation. Country: Sweden. Website: www.gdl.se.
-
Apollo Pipes
June 9, 2026
Apollo Pipes was listed as a victim on the leak site of the worldleaks ransomware group; the attack is estimated to have taken place on 2026-06-09. Sector: Manufacturing. Country: India. Website: www.apollopipes.com. [AI generated] Apollo Pipes is an Indian manufacturer specializing in PVC and CPVC piping systems and fittings. Headquartered in India, the company serves the plumbing, irrigation, and construction sectors. It operates under the broader Apollo Group and supplies products for residential, commercial, and agricultural applications. Apollo Pipes is listed on Indian stock exchanges and distributes its products across domestic markets through an extensive dealer network.
-
Auburn Electrical Construction Company
June 3, 2026
Auburn Electrical Construction Company was listed as a victim on the leak site of the embargo ransomware group; the attack is estimated to have taken place on 2026-06-03. Sector: Energy & Utilities. Country: United States of America. Auburn Electrical Construction Company, Inc. is an innovative contracting firm that profitably provides electrical-related services to our customers. Our goal i... -
-
Spratley's
June 4, 2026
•
[ ransomware, retail ]
Spratley's was listed as a victim on the leak site of the PrinzEugen ransomware group; the attack is estimated to have taken place on 2026-06-04. Sector: Retail & E-Commerce. Hundreds of GBs of data encrypted across company file shares.
If you would like the decryption key you just need to ask.
-
nottingham.ac.uk
June 9, 2026
•
[ ransomware, leak, education ]
nottingham.ac.uk was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-06-09. Sector: Education. Country: United Kingdom of Great Britain and Northern Ireland. Website: nottingham.ac.uk. Over 40 GB of billing and payment records, credit card and payment details, student finance data, and campus portal exports from the University of Nottingham and its Malaysia and China campuses was compromised, including payer contact information, transaction amounts, IP addresses, full names, home addresses, postcodes, email addresses, phone numbers, dates of birth, and other internal campus data. | Size: 19GB+ (compressed) | Updated: 10 June 2026 | SHA256: d3aaaf06dd857deec3866072cc2876780623d880992e8d735094db4779535873
-
Spratley's of Mortimer
June 4, 2026
•
[ ransomware, retail ]
Spratley's of Mortimer was listed as a victim on the leak site of the PrinzEugen ransomware group; the attack is estimated to have taken place on 2026-06-04. Sector: Retail & E-Commerce. spratleys.co.uk
Hundreds of GBs of data encrypted across company file shares, If you would like the decryption key you just need to ask.
-
Mid-Cumberland Human Resource Agency
May 18, 2026
•
[ ransomware, healthcare, government ]
Mid-Cumberland Human Resource Agency was listed as a victim on the leak site of the insomnia ransomware group; the attack is estimated to have taken place on 2026-05-18. Sector: Professional Services. Country: United States of America. Website: www.mchra.com. MCHRA is a nonprofit promoting self-sufficiency via Meals-on-Wheels, public transit, in-home services, and community corrections. It serves adults needing care, transit users, and long-term care residents, emphasizing inclusivity and translation services.