-
Probe Test System
August 28, 2026
•
[ ransomware, technology, manufacturing ]
Probe Test System was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Technology. Country: Taiwan. Website: ptse.com.tw. ptse.com.tw Probe Test System Corp. (PTS, ) is a Taiwanese semiconductor back-end (OSAT) service provider operating since 2000, with plants in Zhunan and Toufen, Miaoli County (the former Hsinchu site was consolidated into Toufen in Q1 2024). Its services cover System Level Test (SLT), wafer chip probing (CP) on Chroma, ASL1000 and CTA8280 platforms, IC marking/remarking, Tape & Reel packaging (capacity ~150 KK units/month) plus lead/ball scan inspection. Long-term customers include Taiwan's leading chipmakers: Winbond, MediaTek, Novatek, Nuvoton and Macronix. The company is certified under ISO 9001, ISO 14001 and ANSI/ESD S20.20-2021.
-
Tecno Accion
August 28, 2026
Tecno Accion was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Technology. Country: Argentina. Website: tecnoaccion.com.ar. tecnoaccion.com.ar Tecno Accion S.A. is an Argentine IT company (founded 1988) that acts as a technology partner for lotteries "Modernizing lotteries in a digital world" with offices in Buenos Aires (Av. Rivadavia 620) and Bariloche. It develops its own hardware and software for lottery automation: 8,000+ terminals in operation, 4+ million daily wagers, serving 12 jurisdictions (half of Argentina's provinces); in Salta province it is the exclusive operator of the lottery license (900+ points of sale). It also delivered horse-racing bet capture for the Hipdromo Argentino de Palermo and completed projects in Peru, Panama, Brazil and Nigeria. Staff of ~80135; certified under ISO 9001, ISO 27001 and WLA SCS:2020; historically linked to Greece's Intralot and the Capital Markets group.
-
Ixa Systems
August 28, 2026
•
[ ransomware, technology, manufacturing ]
Ixa Systems was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Technology. Country: Switzerland. Website: ixasystems.ch. ixasystems.ch rocketreach.co/ixa-systems-sa-profile_b40f7faaffd19ede Ixa Systems SA is a Swiss security systems company founded in 2007, headquartered in Crissier (canton Vaud, near Lausanne). A small family-run firm of ~910 staff with revenue of about CHF 3.5 million, it designs and integrates surveillance solutions: video surveillance (IP/CCTV), anti-intrusion systems, intercom, access control, perimeter detection, technical building supervision (GTC) and evacuation PA systems. Since 1 April 2022 it has been majority-owned by the D.E.S Systmes de scurit SA group, with Marc Barraud as director. Its clients include police, banks, museums, schools, hospitals, prisons and railways, and it offers 24/7 maintenance contracts.
-
General Gruppo
August 28, 2026
•
[ ransomware, retail, manufacturing ]
General Gruppo was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Manufacturing. Country: Italy. Website: generalgruppo.it. generalgruppo.it rocketreach.co/general-gruppo-profile_b68428f5c6158b62 General Gruppo / General s.r.l. is a family-owned Italian retail chain founded in 1975 by Pietro Paolo Tognetti and Silvana Bonugli, headquartered in Querceta (Seravezza, Lucca, Tuscany). Historically known as IperSoap one of Italy's first home-care and personal-hygiene retail formats it reached ~250 stores in 2019 and 150 million in revenue (2018). In 2020 it began rebranding into the unified PiMe banner (merging IperSoap, Smoll and Shuki), and it also owns the historic Bacci Profumerie perfumeries (Forte dei Marmi) and the piume.it online shop. The founders' sons run the business Saverio (CEO) and Francesco; the group includes General s.r.l. and General Nord s.r.l.
-
Northwest Trophy
August 28, 2026
•
[ ransomware, leak, retail ]
Northwest Trophy was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Retail & E-Commerce. Country: United States of America. Website: nwtrophy.com. nwtrophy.com rocketreach.co/northwest-trophy-inc-profile_b59c90e0f9bc4cf5 Northwest Trophy & Awards Inc is a fourth-generation, family-owned awards business operating since 1938, with a showroom in Woodinville, WA (Seattle area). It offers personalized awards and gifts: trophies, medals, plaques, crystal and art-glass awards, acrylics, clocks, drinkware and ceremonial items. All engraving and printing (laser, rotary, full-color) is done in-house, serving sports teams, schools and businesses. It sells both through its showroom and an online Shopify store with standard 57 day production; a Seattle location was closed in 2023, leaving Woodinville (and previously Bellevue) to serve customers.
-
G R Infraprojects
August 28, 2026
•
[ ransomware, manufacturing, leak ]
G R Infraprojects was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Manufacturing. Country: India. Website: grinfra.com. grinfra.com zoominfo.com/c/g-r-infraprojects-ltd/353612422 We have taken NDA files, HR data, user data, employee data, technical drawings, models, bank statements, tax and legal documents, confidential files, photographs of work, screenshots, passport scans, VIP client data, and much more the total volume of data exceeds 531 GB. Grinfra G R Infraprojects Ltd is an Indian integrated infrastructure EPC company founded in 1995, headquartered in Udaipur and Gurugram. It builds roads, highways, bridges, metros, railways, tunnels, ropeways and power transmission lines across 23+ Indian states, with a 10,000-strong workforce and an order book of roughly 19,000+ crore ($2.3 bn). Projects are delivered under EPC, BOT, HAM and BOOT models, backed by in-house manufacturing (bitumen, paints, metal crash barriers) and ~7,500 equipment units. Listed on BSE/NSE since July 2021 (ticker GRINFRA), rated CRISIL AA / CARE AA+ (stable).
-
Glassdoor
August 28, 2026
•
[ ransomware, technology ]
Glassdoor was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Professional Services. Country: United States of America. Website: glassdoor.com. glassdoor.com is a U.S. job platform (founded 2007) where employees anonymously review companies culture, salaries, management. It's owned by Recruit Holdings/Indeed (acquired for $1.2B in 2018; legally merged into Indeed on July 1, 2026). It hosts millions of reviews for ~600,000 companies, plus salary data and job listings. Free for job seekers, monetized via employer branding tools; it also publishes the annual "Best Places to Work" awards.
-
Absolute Consultancy Services
August 30, 2026
•
[ ransomware, leak, technology ]
Absolute Consultancy Services was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-30. Sector: Professional Services. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.absolutecs.co.uk.
-
DistributionNOW (DNOW Inc.)
July 14, 2026
•
[ ransomware, manufacturing, leak ]
DistributionNOW (DNOW Inc.) was listed as a victim on the leak site of the Falcon ransomware group; the attack is estimated to have taken place on 2026-07-14. Sector: Manufacturing. Country: United States of America. Website: dnow.com. Energy & industrial distribution NYSE: DNOW - Our 344 GB extraction includes your corporate information, corporate bank statements, vendor payment instructions, detailed payroll records, employee compensation, tax documents, operational secrets, proprietary SCADA gateway backups, PLC logic programs, industrial automation project files, internal audit logs detailing unethical activity investigations, whistleblower reports regarding harassment and discrimination, employee disciplinary records, employee PII, passports, driving licenses, medical drug screen results and much more.
-
Globus Medical
August 21, 2026
Globus Medical was listed as a victim on the leak site of the Falcon ransomware group; the attack is estimated to have taken place on 2026-08-21. Sector: Healthcare. Country: United States of America. Website: globusmedical.com. Medical devices NYSE: GMED - Our 2.96 TB extraction includes your entire Microsoft PowerBi which contains over 51,000 records of your customers and more, FDA feedback, 510(k) submissions, PMA approval letters, TGA suspension proposals, product complaint logs, serious adverse event narratives, final CAPA investigation findings, merger diligence decks, integration plans, FTC antitrust review documents, combined P&L statements, deal models, budget spreadsheets, medical board of directors meeting minutes and agendas, executed NDAs, distribution contracts with named partners and medical institutions, patient demographics and history from clinical registries and much more.
-
Hospital Clnico Universidad de Chile
August 30, 2026
•
[ ransomware, healthcare ]
Hospital Clnico Universidad de Chile was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2026-08-30. Sector: Healthcare. Country: Chile. Website: redclinica.cl. Hospitals
-
Erdem Hospital
August 30, 2026
Erdem Hospital was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2026-08-30. Sector: Healthcare. Country: Turkey. Website: erdemhastahanesi.com.tr. Hospitals
-
THQ Nordic
August 30, 2026
•
[ ransomware, technology ]
THQ Nordic was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2026-08-30. Sector: Technology. Country: Sweden. Website: thqnordic.com. Multimedia,Games,Graphics Software
-
Andover
August 30, 2026
Andover was listed as a victim on the leak site of the Wallstreet ransomware group; the attack is estimated to have taken place on 2026-08-30. Sector: Education. Country: United States of America. The Town of Andover, Massachusetts, is a municipal government organization that provides public services, administration, community programs, education resources, infrastructure support, and civic information to residents and businesses in Andover.
-
AFSARD
August 30, 2026
•
[ ransomware, government, finance ]
AFSARD was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-30. Country: North Macedonia. Website: ipardpa.gov.mk.
-
bkc.org
August 31, 2026
•
[ ransomware, education ]
bkc.org was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-08-31. Sector: Professional Services. Country: Japan. Website: bkc.org. bkc.org and bethelclassical.org Mission Statement Bethel Classical Academy seeks to guide studen...
-
allsteelproducts.nl
August 28, 2026
•
[ ransomware, manufacturing ]
allsteelproducts.nl was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Manufacturing. Country: Netherlands. Website: allsteelproducts.nl. All Steel Products is a wholesale supplier specializing in hydraulic products, offering a wide range...
-
vkj.nl
August 28, 2026
•
[ ransomware, hack ]
vkj.nl was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Other. Country: Netherlands. Website: vkj.nl. Van Kessel & Janssen begeleidt huisvestingsprojecten met deskundig advies en projectmanagement. Van...
-
bartelsbv.nl
April 28, 2026
•
[ ransomware, manufacturing ]
bartelsbv.nl was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-04-28. Sector: Manufacturing. Country: Netherlands. Website: bartelsbv.nl. Bartels BV is reeds 40 jaar een toonaangevend bedrijf op het gebied van metalen gevels, daken en lic...
-
Ishbia & Gagleard, P.C.
August 31, 2026
•
[ ransomware, healthcare, finance ]
Ishbia & Gagleard, P.C. was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-08-31. Sector: Professional Services. Country: United States of America. Website: iglawfirm.com. [law] Ishbia & Gagleard, P.C. a boutique law firm in Birmingham, Michigan, founded in 1999 by Jeffrey A. Ishbia and Michael A. Gagleard. The firm practises real estate, corporate, estate planning, personal injury, medical malpractice, and commercial litigation for high-net-worth individuals and closely held entities.
The exposed material includes:
360+ client/matter folders the complete attorney-client privilege corpus: litigation strategy memos, settlement agreements, case assessments, deposition notes, correspondence with opposing counsel.
Full Social Security Numbers for 25+ identified individuals trust beneficiaries, family members, employees of client businesses, and a scanned Social Security card.
Protected Health Information hospital admission records from Oakwood Hospital, University of Michigan Hospital, and William Beaumont Hospital. Also: 55+ employee files from a sexual health clinic client with SSN searches and scanned SS cards.
100+ client tax returns spanning 20032024, each containing SSNs, EINs, and income data.
11 email archive files (PST/OST) containing years of unfiltered attorney correspondence.
Personal legal matters of Mat Ishbia CEO of publicly-traded UWM Holdings Corp. (NYSE: UWMC), the largest wholesale mortgage lender in the United States.
