Recent Breaches
-
June 2, 2026 • Cold Front Distribution was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-06-02. Sector: Transportation. Country: United States of America. Website: https:coldfrontdist.com. Cold Front Distribution is a leading DSD supplier specializing in grocery and foodservice supply chain solutions across a fifteen-state region. Due to their negligence in the area of security, we are providing you with a complete set of confidential documents, specifically the pricing grids of major partners sold through the Cold Front system, discount agreements, information on new product launches, and other confidential partner documents, as well as personal information about employees and the companys financial status...
-
June 2, 2026 • www.transbras.com.gt was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-06-02. Sector: Transportation. Country: Guatemala. Website: www.transbras.com.gt. Founded in 1974, started its activities in Road Transport, eventually expanding its services to several other areas, fir...
-
May 30, 2026 activ88-interim.com was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-05-30. Sector: Professional Services. Country: Germany. Website: activ88-interim.com. Activ'Interim 88 was founded in 2008 with the aim of connecting job seekers with the best opportunities available in the...
-
June 2, 2026 • Nova Medical Products was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-06-02. Sector: Healthcare. Country: United States of America. Website: www.novajoy.com.
-
May 21, 2026 • iql-nog.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-05-21. Country: Spain. Website: iql-nog.com. Founded in 1947, the company specializes in the production of oleochemical products, particularly fatty acid esters and specialty chemicals derived
-
May 28, 2026 • trrac.net was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-05-28. Sector: Transportation. Country: United States of America. Website: trrac.net. 150gb
-
June 2, 2026 • katholiekamersfoort.nl was listed as a victim on the leak site of the stormous ransomware group; the attack is estimated to have taken place on 2026-06-02. Sector: Education. Country: Netherlands. Website: katholiekamersfoort.nl. The church website's network (katholiekamersfoort.nl/) has been breached, resulting in the exfiltration of over 10 GB of data. This data pertains to donors, staff, and the personal information of a large number of individuals. The compromised data includes: Databases and Personally Identifiable Information (PII), internal network shares and document, contact lists, board and committee data, as well as system metadata.
-
June 3, 2026 • Lead Company (Leadership Boulevard) was listed as a victim on the leak site of the ShadowByt3$ ransomware group; the attack is estimated to have taken place on 2026-06-03. Sector: Professional Services. Company Site: leadschool.in size: 765.9MB This is will be quick. The following schools are affected: The specific schools explicitly named in the exfiltrated folders include: - Arya Vidyapith - Aakarsh International Public School - Students High School - Rainbow International Matric Hr. Sec. School - Vignan Private School The following info was stolen: 1. Personally Identifiable Information (PII) of Students - Full Names and Demographics: Complete names of children sorted by gender and admission numbers. - Academic Progression: Exact tracking of student grade levels (e.g., SKG, Class 1, Class 2) and division assignments - Age and Vital Records: Exact dates of birth (DOB) for all enrolled students. - Physical Locations: Full residential addresses, cities/districts (such as Nampally, Telangana), and exact localized postal pincodes 2. Guardian and Parent Contact Registries - Parent Identity: Full names of both fathers and mothers linked directly to their children. - Direct Contact Methods: Active personal mobile numbers for parents, creating a severe vulnerability for automated spam or voice-phishing attacks. - Digital Contact: Parent email addresses intended for formal school updates. - Student Led Events - Teacher Certificates - gac-reports - Assessments 3. Proprietary LEAD School Academic Metrics - ELGA Placement Data: Internal academic tracking metrics, showing specific curriculum tiers like "ELGA Class" (e.g., ELGA02, ELGA06) and "ELGA Division" for individual students. - Classroom Analytics: Operational performance data exfiltrated directly from the nucleus.leadschool.in administrative portal. - Teacher Resources: Lesson plans, training modules, and classroom resources that form the core commercial assets of the LEAD platform.
-
June 3, 2026 • acehospital.in was listed as a victim on the leak site of the killsec ransomware group; the attack is estimated to have taken place on 2026-06-03. Sector: Healthcare. Country: India. Website: acehospital.in. Price ??? Disclosures 0/1
-
June 3, 2026 • csinsurance.mx was listed as a victim on the leak site of the killsec ransomware group; the attack is estimated to have taken place on 2026-06-03. Sector: Financial Services. Country: Mexico. Website: csinsurance.mx. Price ??? Disclosures 0/1
-
June 3, 2026 • MEISA - Sines was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-06-03. Sector: Energy & Utilities. Country: Portugal. Website: www.meisa-e.com.
-
June 3, 2026 • Eat Salad was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-06-03. Sector: Agriculture and Food Production. Country: Brazil. Website: www.eatsalad.com.
-
June 3, 2026 • MarketJoy was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-06-03. Sector: Retail & E-Commerce. Website: www.marketjoy.com.
-
June 3, 2026 • JNP ENG was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-06-03. Sector: Manufacturing. Country: South Korea. Website: www.jnpeng.co.kr.
-
June 3, 2026 • smarty.arpinet.am was listed as a victim on the leak site of the apt73 ransomware group; the attack is estimated to have taken place on 2026-06-03. Sector: Technology. Country: Armenia. Website: smarty.arpinet.am. ***.am - it is an online platform for managing real estate data in the Armenian market, provi...
-
June 3, 2026 • Oztugotomotiv was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-06-03. Sector: Manufacturing. Country: Turkey. ztu Otomotiv & Endstri is a Turkish company established in 1990 in Bursa, specializing in the production of high-precision components for the automotive, industrial, defense, and aerospace sectors. The company offers comprehensive services including design, mold manufacturing, and serial production of plastic, metal, and rubber parts, as well as industrial seals and vibration dampers. ztu Otomotiv utilizes modern equipment (high-tonnage presses, progressive dies) and adheres to international quality standards, including a zero-defect principle and compliance with OEM standards. Financial performance (not publicly disclosed, but the company positions itself as a stable business): As of 2025, the company reports over 35 years of successful operations, more than 300 employees, and three production facilities with a total enclosed area of 12,000 m. Structure and facilities: The company operates three production sites in Hasantla, Nilfer (Bursa), and Adapazar. As of 2025, the workforce comprises over 300 specialists. Production capabilities include plastic injection, metal forming, and rubber molding lines. Laek: 100GB WE HAS COLLECTED SUCH DATA AS: - Confidential documents - Clients Data - NDA - Financial data - Operations - Corporate data - Business Agreements - Development - Financial databases, all transactions, all clients And a lot of other VERY IMPORTANT information!
-
June 3, 2026 • Hal Otey Financial was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-06-03. Sector: Financial Services. Hal Otey Financial offers a range of financial services including wealth management, financial planning, retirement planning, investment management, estate planning, and tax planning. We will upload corporate data soon. Lots client data (passports, DLs, social security numbers, health and insurance files and so on), contracts and agreements, detailed financials, projects, etc.
-
June 3, 2026 Factors Western was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-06-03. Sector: Professional Services. Factors Western specializes in providing factoring services to businesses across various indust ries, helping them convert receivables into cash for improved cash flow and business growth. We will upload corporate data soon. Lots of employee and client data (name, phones, passports), hockey players personal information (Connor McDavid and others), contracts and agreements, fin ancials, projects, etc.
-
June 3, 2026 Cherokee Distributing Co was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-06-03. Sector: Transportation. Country: United States of America. Cherokee Distributing Company offers the leading brands of beer and other nonalcoholic beverage s. In addition to their headquarters in Knoxville, they manage distribution centers in Chattano oga, Cookeville, Kingsport, Pulaski and Tullahoma. We will upload 40gb of corporate data soon. Employee personal docs (passports, DLs, SSNs), cont racts and agreements, partner and client files, detailed financials, projects, NDAs, confidenti al files, etc.
-
June 1, 2026 • Colina Financial Advisors was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-06-01. Sector: Financial Services. Country: Bahamas. Colina Financial Advisors Limited (CFAL) is a prominent, independent wealth management and investment advisory firm based in Nassau, The Bahamas. Established in 1997, it serves as the investment arm of Colina Holdings Ltd.. The firm provides diverse financial services to both individual and institutional clients. While customers continue to entrust the company with their money, senior executives are actively working to cover up a major data breach involving approximately 500 GB of highly confidential data. The leak includes, but is not limited to: 1. Client Personally Identifiable Information (PII) 2. Client Financial Profiles & Asset Data 3. Proprietary Business Intel & System Data 4. Holistic Estate & Legal Planning 5. Regulatory & Compliance Records Stay tuned for further updates.