-
ErgoMed
June 22, 2026
•
[ ransomware, healthcare ]
ErgoMed was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-06-22. Sector: Healthcare. Country: United Kingdom of Great Britain and Northern Ireland. Website: ergomed.net. ***.net ErgoMed Work Systems is a US-based occupational health and employment testing company that has been providing loss control programs since 1992.They specialize in physical demand simulation testing, musculoskeletal evaluations, and post-offer employment screening to help businesses and HR managers reduce workplace injuries
-
Canada Wide Media
June 22, 2026
Canada Wide Media was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-06-22. Sector: Technology. Country: Canada. Website: canadawide.com. ***.com zoominfo.com/c/canada-wide-media-ltd/24612070 Canada Wide Media is Western Canada's leading independent publishing and custom content creation company, headquartered in Burnaby, British Columbia.They produce over 48 premium print and digital publications, such as BC Business and TV Week, reaching an audience of over 6 million readers.The firm specializes in audience engagement, custom publishing, and prestige media solutions tailored for various industries
-
Rowley Properties
June 22, 2026
Rowley Properties was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-06-22. Sector: Professional Services. Country: United Kingdom of Great Britain and Northern Ireland. Website: rowleyproperties.com. ***.com zoominfo.com/c/rowley-properties/1117416022 Rowley Properties is a multi-generational, family-owned real estate company based in Issaquah, Washington, founded in 1954. The firm specializes in owning, developing, and managing approximately 80 acres of commercial and residential properties, including office spaces, apartments, and storage facilities in downtown Issaquah. They are deeply committed to local community development, focusing on long-term projects that help businesses succeed and families thrive
-
GIA Partners
June 22, 2026
•
[ ransomware, finance ]
GIA Partners was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-06-22. Sector: Professional Services. Country: United States of America. Website: giallc.com. ***.com zoominfo.com/c/gia-partners-llc/347817491 GIA Partners, LLC is a New York-based registered investment advisor specializing in fixed income strategies and credit analysis .The firm focuses on diversified portfolios, including core fixed income, high yield, and emerging market debt, leveraging the extensive experience of its investment team.With over $1 billion in assets under management, GIA emphasizes that credit risk is well-compensated and diversifiable to generate excess returns for its clients
-
Hooke Laboratories
June 22, 2026
Hooke Laboratories was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-06-22. Sector: Technology. Country: United States of America. Website: hookelabs.com. ***.com zoominfo.com/c/hooke-laboratories-inc/345976723 Hooke Laboratories is a biotechnology company based in Lawrence, Massachusetts, specializing in biological products for medical and pharmaceutical research.They are best known for their "Hooke Kits," which are ready-to-use emulsions used to induce animal models of autoimmune diseases, such as EAE, in laboratory rodents.The company operates strictly as a preclinical research supplier, working only with rodents and in vitro, and does not offer any products for human clinical use
-
CTM India Limited motherson INDIA
June 22, 2026
•
[ ransomware, manufacturing ]
CTM India Limited motherson INDIA was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-06-22. Sector: Manufacturing. Country: India. Website: dnb.com. ***.com/business-directory/company-profiles.ctm_india_limited.c67e34c4f71f7ed11aaf1dc39e0e10a6.html CTM India Limited is located in New Delhi, Delhi, India and is part of the Metalworking Machinery Manufacturing industry. CTM India Limited is associated with the global Motherson Group, focusing on producing specialized equipment and forms essential for industrial manufacturing processes. The company is led by key principal Bimal Dhar and operates within the broader machinery manufacturing sector
-
Royal Thai Navy Housing Cooperative
June 22, 2026
•
[ ransomware, government, finance ]
Royal Thai Navy Housing Cooperative was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-06-22. Sector: Government & Defense. Country: Thailand. Website: kehanavycoop.com. ***.com Royal Thai Navy Housing Cooperative Limited, a service organization based in Bangkok, Thailand.It primarily manages housing projects like "Navy Place," offering residential units for sale and rent to naval personnel and members.Additionally, the cooperative provides financial services such as member shares, loans, and deposits, alongside educational scholarships for members children
-
International Freight Services
June 22, 2026
•
[ ransomware, technology, retail ]
International Freight Services was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-06-22. Sector: Transportation. Country: United States of America. Website: ifs-sfo.com. ***.com zoominfo.com/c/ifs-sfocom/348198952 IFS (International Freight Services, Inc.) is a logistics company headquartered at San Francisco International Airport (SFO). It provides international air and ocean freight forwarding, customs brokerage, warehousing, and end-to-end supply chain solutions. With decades of experience, IFS specializes in time-critical and high-touch cargo, serving industries from technology and life sciences to automotive and retail
-
Keywest Projects
June 22, 2026
Keywest Projects was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-06-22. Sector: Professional Services. Country: Canada. Website: keywestprojects.ca. ***.ca zoominfo.com/c/keywest-projects-ltd/354074136 KeyWest Projects Ltd. is a Canadian EPCM (Engineering, Procurement, Construction Management) company headquartered in Calgary, Alberta. It specializes in full-cycle project delivery for the energy sector including oil and gas facilities, pipelines, and industrial infrastructure primarily across Western Canada. The firm is recognized for its integrated, client-driven approach that emphasizes safety, efficiency, and technical reliability on complex energy projects
-
Penticton and District Society for Community Living
July 1, 2026
Penticton and District Society for Community Living was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-07-01. Sector: Government & Defense. Country: Canada. Website: pdscl.org. Canadian charity providing disability-related services. CRA Registration: 119090686RR0001 | Penticton, British Columbia, Canada
-
Bd
July 1, 2026
•
[ ransomware, healthcare, government ]
Bd was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-07-01. Sector: Healthcare. Country: Switzerland. Website: bd.zh.ch. Organization with 772 emails extracted. Domain: bd.zh.ch
-
Dolrad
July 1, 2026
Dolrad was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-07-01. Sector: Other. Country: United Arab Emirates. Website: dolrad.ae. Organization with 69 emails extracted. Domain: dolrad.ae
-
Mairie Thiverval Grignon
July 1, 2026
Mairie Thiverval Grignon was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-07-01. Sector: Government & Defense. Country: France. Website: mairie-thiverval-grignon.fr. Organization with 162 emails extracted. Domain: mairie-thiverval-grignon.fr
-
FunkeScheid
July 1, 2026
•
[ ransomware, manufacturing, leak ]
FunkeScheid was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-07-01. Sector: Manufacturing. Country: Germany. Website: FunkeScheid.com. Notarkanzlei FunkeScheid, Kanzlei im Ostend, Frankfurt. 9755 emails. AD: Kanzlei.FunkeScheid.com
-
T Online
July 1, 2026
•
[ ransomware, technology ]
T Online was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-07-01. Sector: Technology. Country: Germany. Website: t-online.de. Organization with 823 emails extracted. Domain: t-online.de
-
Dadolighting
July 1, 2026
•
[ ransomware, manufacturing ]
Dadolighting was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-07-01. Sector: Manufacturing. Website: dadolighting.com. Organization with 17 emails extracted. Domain: dadolighting.com
-
Sgs Gmbh
July 1, 2026
•
[ ransomware, technology ]
Sgs Gmbh was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-07-01. Sector: Professional Services. Country: Germany. Website: sgs-gmbh.com. Organization with 933 emails extracted. Domain: sgs-gmbh.com
-
Karneslegal
July 1, 2026
•
[ ransomware, leak, technology ]
Karneslegal was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-07-01. Sector: Professional Services. Website: karneslegal.com. Organization with 23 emails extracted. Domain: karneslegal.com
-
Estrela
July 1, 2026
•
[ ransomware, retail ]
Estrela was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-07-01. Sector: Retail & E-Commerce. Country: Brazil. Website: estrela.ind. Organization with 11 emails extracted. Domain: estrela.ind
-
Colorado Rehabilitation and Occupational Medicine
July 1, 2026
•
[ ransomware, healthcare ]
Colorado Rehabilitation and Occupational Medicine was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-07-01. Sector: Healthcare. Country: United States of America. Website: coloradorehabilitation.com. Colorado Rehabilitation & Occupational Medicine (CROM) is a leading Denver-area physiatry practice specializing in non-surgical treatments for musculoskeletal and neurological conditions. Founded in 1992, CROM operates multiple clinics across the Front Range, focusing on helping patients recover from sports, work, and auto injuries without narcotics or surgery.