-
Digitall Graphics
May 11, 2026
Digitall Graphics was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-05-11. Sector: Technology. Country: Canada. Website: www.digitallgraphics.ca. Canada
-
Champaign-Urbana Public Health District
June 1, 2026
•
[ ransomware, healthcare, government ]
Champaign-Urbana Public Health District was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-06-01. Sector: Government & Defense. Country: United States of America. Champaign Urbana Public Health District provides a wide range of health services including dental care, nutrition assistance, mental health support, and food safety inspections. Their programs cater to various demographics, including adolescents, women, infants, and families, focusing on preventive health and education. The district also offers resources for substance abuse treatment, sexual health, and community food initiatives. Their intended clients include residents of Champaign County seeking health services, food assistance, and educational resources.
-
Bradley law firm
June 1, 2026
Bradley law firm was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-06-01. Sector: Professional Services. Country: United States of America. Bradley Law Personal Injury Lawyers is a law firm dedicated to representing clients who have suffered injuries due to accidents, medical malpractice, and other forms of negligence. With over 30 years of experience, they have successfully recovered more than $100 million in settlements and verdicts for their clients across Missouri and Illinois. Their services include free case consultations and a commitment to fight for maximum compensation on behalf of accident victims. The firm is known for its expertise in personal injury law, including vehicle accidents, workplace injuries, and wrongful death cases.
-
Panorama BPO
May 30, 2026
•
[ ransomware, leak, technology ]
Panorama BPO was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-05-30. Sector: Professional Services. Country: Philippines. Website: www.panoramabpo.com. Panorama BPO is a large international company specializing in business process outsourcing (BPO) and providing comprehensive operational services for businesses.
-
Taos Mountain Casino
May 30, 2026
•
[ ransomware, leak ]
Taos Mountain Casino was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-05-30. Sector: Hospitality. Country: United States of America. Website: taosmountaincasino.com. Taos Mountain Casino is a Native American gaming casino located in Taos, New Mexico. It is owned and operated by the Taos Pueblo, a federally recognized tribe known for its ancient, historic adobe pueblo.
-
School Facility Consultants
June 1, 2026
•
[ ransomware, education, government ]
School Facility Consultants was listed as a victim on the leak site of the abyss ransomware group; the attack is estimated to have taken place on 2026-06-01. Sector: Professional Services. School Facility Consultants (SFC) is a full-service company that provides expert guidance in school facility planning and funding for School Districts, County Offices of Education, and Charter Schools across California.
-
Synex International Pvt Ltd
May 30, 2026
•
[ ransomware, technology, manufacturing ]
Synex International Pvt Ltd was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-05-30. Sector: Technology. Country: Sri Lanka. Website: www.synexint.com. Mechanical, Electrical, and Plumbing (MEP) systems, Extra Low Voltage (ELV) solutions, and Solar energy.
-
squamish.net
June 1, 2026
•
[ ransomware, technology ]
squamish.net was listed as a victim on the leak site of the BrainCipher ransomware group; the attack is estimated to have taken place on 2026-06-01. Sector: Other. Country: Canada. Website: squamish.net. [AI generated] squamish.net appears to be an internet service provider and telecommunications company operating in Squamish, British Columbia, Canada. It offers broadband internet connectivity and related services to residential and business customers in the Squamish region. The company serves as a local ISP, providing connectivity solutions to the Sea-to-Sky Corridor area of British Columbia, positioning itself within the Canadian telecommunications and internet services industry.
-
Mortensenlawoffices
July 28, 2025
•
[ ransomware, leak ]
Mortensenlawoffices was listed as a victim on the leak site of the kairos ransomware group; the attack is estimated to have taken place on 2025-07-28. Sector: Professional Services. Country: United States of America. Mortensen Law Offices, PLLC
offers legal services, particularly bankruptcy, and provides consultations via Zoom, phone, or in-office for clients in the Phoenix/Mesa and Tucson areas, focusing on clear, empathetic guidance.
-
compactmould.com
June 1, 2026
•
[ ransomware, manufacturing ]
compactmould.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-06-01. Sector: Manufacturing. Country: Canada. Website: compactmould.com. Founded in 1978 and headquartered in Woodbridge, Ontario, the company has grown into one of North Americas major suppliers of
-
verzolla.com
June 1, 2026
verzolla.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-06-01. Sector: Retail & E-Commerce. Country: Italy. Website: verzolla.com. Founded in 1958 (with the current corporate structure established in 2007), the company specializes in supplying industrial components, automation systems,
-
lcnet.eu
June 1, 2026
•
[ ransomware, technology ]
lcnet.eu was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-06-01. Sector: Technology. Country: Germany. Website: lcnet.eu. The network was established to provide integrated cross-border transport solutions, allowing member companies to coordinate freight movements efficiently throughout Europe.
-
soraris.it
June 1, 2026
•
[ ransomware, technology ]
soraris.it was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-06-01. Sector: Technology. Country: Italy. Website: soraris.it. Founded in 1983, the company specializes in the collection, transportation, treatment, and management of municipal solid waste and recyclable materials.
-
parsa-beauty.de
June 1, 2026
•
[ ransomware, retail ]
parsa-beauty.de was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-06-01. Sector: Retail & E-Commerce. Country: Germany. Website: parsa-beauty.de. Founded in 1986, the company has become one of Europes leading manufacturers and distributors of hair, beauty, and personal care
-
tavolaspa.com
June 1, 2026
•
[ ransomware, retail, manufacturing ]
tavolaspa.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-06-01. Sector: Hospitality. Country: Italy. Website: tavolaspa.com. Over more than seventy years of operation, the company has evolved from an import-export business into a diversified manufacturer, distributor,
-
Power & Tel
June 1, 2026
•
[ ransomware, technology ]
Power & Tel was listed as a victim on the leak site of the anubis ransomware group; the attack is estimated to have taken place on 2026-06-01. Sector: Technology. Data breach exposes ecommerce platforms dirty laundry.
-
Cropwise (Syngenta Group)
June 2, 2026
Cropwise (Syngenta Group) was listed as a victim on the leak site of the ShadowByt3$ ransomware group; the attack is estimated to have taken place on 2026-06-02. Sector: Agriculture and Food Production. Country: Switzerland. We have breached you and gained access to the following portals: https://operations.cropwise.com/d/users/sign_in https://accounts.cropwise.com/signin proof: https://mega.nz/folder/25hkSLgY#ELjJaFie-TfES9Z_47KFZA company url: https://operations.cropwise.com/ We are ShadowByt3$ a Extortion as a service group. You have been breached and 10.4MB was stolen. It may seem small but it can affect you every way imaginable. Don't believe us the following below was stolen: User Identities and Access Credentials - Account Directory Data: Full names, corporate email addresses, and phone numbers of registered agronomists, regional farm managers, and field staff. - Authentication Metadata: Encrypted password hashes, session tokens, or configured API keys utilized to link automated machinery data feeds to the web dashboard. Precision Agronomy and Farm Metrics - Geospatial Boundaries: High-resolution GIS boundary files detailing the exact shapes, coordinates, and property lines of privately owned or leased commercial fields. - Vegetation and Scouting Analyses: Historical NDVI satellite imagery datasets [CWO: Tools for effective monitoring of your crops' condition syngenta.co.za], past growth tracking matrices, field problem zone flags, and yield prediction models. - Operational Treatment Records: Deep operational histories documenting exact pesticide or fertilizer applications, crop types, seeding timelines, and harvesting schedules. Telematics and Fleet Diagnostics - Machinery Tracking Logs: Real-time and archived GPS location paths generated by connected tractors, combines, or sprayers. These logs map out the specific work shifts, operational speeds, and field locations of individual machine drivers. If you contact us then we won't leak it and show proof that we deleted it. Also we will tell you how to secure your company so you don't get breached again. We are giving you 48 hours (approx 3 days) to contact us which would be by June 4th 2026. If you fail to reach out to us we will maximize damage by giving it to news outlets, swatting victims, and we will email everyone affected and you would be the next headline. All you have to do is pay 1 million in bitcoin or monero and it goes away.
-
Clinica Maitenes
June 2, 2026
•
[ ransomware, healthcare ]
Clinica Maitenes was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-06-02. Sector: Healthcare. Country: Chile. Website: www.clinicamaitenes.cl.
-
Wonjin Plastic Surgery
April 7, 2026
•
[ ransomware, healthcare, leak ]
Wonjin Plastic Surgery was listed as a victim on the leak site of the Black X ransomware group; the attack is estimated to have taken place on 2026-04-07. Sector: Healthcare. Country: South Korea. Website: www.k-wonjin.co.kr. WJ Wonjin's medical staff work to achieve the optimal effect according to each individual patient's condition and desired result. Our medical services are provided by specialist doctors on-site, and our interpreting coordinators assist throughout the whole process. Safest Anesthesia System by Exclusive Anesthesiologists. We value our patients' safety during their surgery using cutting edge anesthesia system. Fully equipped with specialized medical facilities and system from the very beginning, we value safety for our patients.
-
case.law
October 1, 2025
case.law was listed as a victim on the leak site of the Black X ransomware group; the attack is estimated to have taken place on 2025-10-01. Sector: Professional Services. Country: Philippines. Website: correction.org. Since incorporation in 1972, CRS has delivered services to a diverse group of clients, primarily in the corrections and detention fields, at the local, regional, state, and national levels. We stole passport data from over 300 customers at CRS.
