Recent Breaches
-
July 25, 2026 Schaad, Balass, Menzl and Partner AG was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-07-25. Sector: Professional Services. Country: Switzerland. Website: sbmp.ch. SBMP (Schaad Balass Menzl & Partner AG) is a specialized Swiss IP boutique with offices in Zurich and Winterthur, offering comprehensive services in patent law, trademark law, and design protection. With over 50 years of experience and a team of lawyers and technical experts, the firm supports companies across all industries, from filing to enforcement.
-
July 24, 2026 • Advanced Marketing was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-07-24. Sector: Professional Services. Country: Mexico. Website: advmkt.com.mx. advmkt.com.mx zoominfo.com/c/advanced-marketing/546978407 Advanced Marketing is one of Mexico's largest book distribution and publishing companies, founded in 1994. It partners with around 70 national and international publishing houses to supply major retail chains like Gandhi and Porra. Additionally, it operates "AMS Libros," an online store selling a wide variety of children's, art, culture, and health books.
-
July 25, 2026 • healthlawadvocates.org was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-07-25. Sector: Professional Services. Country: United States of America. Website: healthlawadvocates.org. Health Law Advocates (HLA), an American non-profit, public interest law firm based in Boston, Massachusetts. Founded in 1996, HLA provides free (pro bono) legal representation to low-income residents and vulnerable populations who face barriers to accessing or paying for healthcare.
-
March 8, 2026 iw steelTEC Makine San. ve Tic. A.. was listed as a victim on the leak site of the Doommageddon ransomware group; the attack is estimated to have taken place on 2026-03-08. Sector: Manufacturing. Country: Turkey. Status: leaked | Data size: 100 GB | Files: 0 files | Deadline: 2026-03-08T00:00:00Z
-
July 25, 2026 • Power Moendas was listed as a victim on the leak site of the arcusmedia ransomware group; the attack is estimated to have taken place on 2026-07-25. Sector: Other. Country: Brazil. Website: powermoendas.com.br. Based in the sugar-energy industrial hub, in the city of Sertozinho/SP, Power Empral has Deadline: 2026-08-01 21:06:00.000000
-
July 25, 2026 • Brazer Ingenierie was listed as a victim on the leak site of the arcusmedia ransomware group; the attack is estimated to have taken place on 2026-07-25. Sector: Manufacturing. Country: Morocco. Website: brazeringenierie.com. Brazer Ingnierie is a professional integrator specializing in IT and telecommunications s Deadline: 2026-08-01 21:06:00.000000
-
July 26, 2026 • UK Department for Education was listed as a victim on the leak site of the ExfilSquad ransomware group; the attack is estimated to have taken place on 2026-07-26. Sector: Government & Defense. Country: United Kingdom of Great Britain and Northern Ireland. Website: education.gov.uk. DATA SUMMARY: Help Portal (~600K records) Parent and staff contact records containing full names, email addresses, phone numbers, and job titles. Turing Portal (~7K records) Contact records containing full names, email addresses, phone numbers, and job titles.
-
July 26, 2026 • Police National Legal Database was listed as a victim on the leak site of the ExfilSquad ransomware group; the attack is estimated to have taken place on 2026-07-26. Sector: Government & Defense. Country: United Kingdom of Great Britain and Northern Ireland. DATA SUMMARY: 135k law enforcement contact records with first/last name, email, police force area, etc.
-
July 26, 2026 • Microsoft was listed as a victim on the leak site of the ExfilSquad ransomware group; the attack is estimated to have taken place on 2026-07-26. Sector: Technology. Country: United States of America. Website: microsoft.com. Revenue: $318B DATA SUMMARY: 8M~ records containing: significant PII, employee and customer contact information, authentication data, password hashes, portal identities, corporate account information, business leads, facilities management records, internal service tickets, and access permissions.
-
July 26, 2026 • Allstate was listed as a victim on the leak site of the ExfilSquad ransomware group; the attack is estimated to have taken place on 2026-07-26. Sector: Financial Services. Country: United States of America. Website: allstate.com. Revenue: $67B DATA SUMMARY: 657K~ records containing: significant PII, recruitment and licensing information, onboarding data, and internal employee account information.
-
July 26, 2026 • TaylorMade & Sun Day Red golf was listed as a victim on the leak site of the ExfilSquad ransomware group; the attack is estimated to have taken place on 2026-07-26. Sector: Retail & E-Commerce. Country: United States of America. Website: taylormadegolf.com. Revenue: $1.5B DATA SUMMARY: 2M~ records containing: significant PII, customer support history, orders, shipping information, business account data, financial/account information, internal notes, attachments, and AI support chat transcripts.
-
July 26, 2026 • Frontier Airlines was listed as a victim on the leak site of the ExfilSquad ransomware group; the attack is estimated to have taken place on 2026-07-26. Sector: Transportation. Country: United States of America. Website: flyfrontier.com. Revenue: $1.5B DATA SUMMARY: 2.4M~ records containing: significant PII, customer support cases, flight and travel information, complaint records, baggage details, and customer support email communications.
-
July 26, 2026 • Zenith Bank Plc was listed as a victim on the leak site of the ExfilSquad ransomware group; the attack is estimated to have taken place on 2026-07-26. Sector: Financial Services. Country: Nigeria. Website: zenithbank.com. Revenue: 2.3T DATA SUMMARY: 90M~ records containing: extensive PII, banking relationships, account information, financial data, government identifiers, customer contact information, and banking support cases.
-
July 26, 2026 • District of Columbia Public Schools was listed as a victim on the leak site of the ExfilSquad ransomware group; the attack is estimated to have taken place on 2026-07-26. Sector: Education. Country: United States of America. Website: dcps.dc.gov. [AI generated] District of Columbia Public Schools (DCPS) is a public school district serving Washington, D.C., USA. It operates as the primary government-run K-12 educational system for the nation's capital, overseeing dozens of schools, thousands of students, and a large workforce of educators and administrators. DCPS falls under the education sector and is governed by the D.C. government, focusing on curriculum development, student achievement, and community engagement.
-
July 26, 2026 • Newcastle University was listed as a victim on the leak site of the ExfilSquad ransomware group; the attack is estimated to have taken place on 2026-07-26. Sector: Education. Country: United Kingdom of Great Britain and Northern Ireland. Website: ncl.ac.uk. DATA SUMMARY: 440K~ records containing: applicant and student contact information, significant PII, and admissions data.
-
July 26, 2026 Viavi Solutions was listed as a victim on the leak site of the ExfilSquad ransomware group; the attack is estimated to have taken place on 2026-07-26. Sector: Technology. Country: United States of America. Website: viavisolutions.com. Revenue: $1B DATA SUMMARY: 430K~ records containing: customer and partner contact information, significant PII, and enterprise account identifiers.
-
July 26, 2026 • City of Houston was listed as a victim on the leak site of the ExfilSquad ransomware group; the attack is estimated to have taken place on 2026-07-26. Sector: Government & Defense. Country: United States of America. Website: houstontx.gov. DATA SUMMARY: 6M~ records containing: significant PII, resident contact details, service requests, complaint descriptions, addresses, location data, case/ticket metadata, department routing, service status, resolution information, and extensive CRM metadata.
-
July 26, 2026 • City of Atlanta was listed as a victim on the leak site of the ExfilSquad ransomware group; the attack is estimated to have taken place on 2026-07-26. Sector: Government & Defense. Country: United States of America. Website: atlantaga.gov. DATA SUMMARY: 3M~ records containing: significant PII, citizen service requests, addresses, municipal case history, and internal case management data.
-
July 26, 2026 • Bonava was listed as a victim on the leak site of the ExfilSquad ransomware group; the attack is estimated to have taken place on 2026-07-26. Sector: Manufacturing. Country: Sweden. Website: bonava.se. Revenue: SEK 8B DATA SUMMARY: 842K~ records containing: significant PII, property ownership/interests, warranty and repair cases, contractor information, marketing preferences, and customer service history.
-
July 26, 2026 • Analog Devices was listed as a victim on the leak site of the ExfilSquad ransomware group; the attack is estimated to have taken place on 2026-07-26. Sector: Technology. Country: United States of America. Website: analog.com. Revenue: $12.7B DATA SUMMARY: 570K~ records containing: customer PII and addresses.