-
ESB Puerto Rico Corp
August 28, 2026
•
[ ransomware, energy, automotive ]
ESB Puerto Rico Corp was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Energy & Utilities. Country: Puerto Rico. Website: esbpr.com. esbpr.com ESB Puerto Rico Corp is a distributor of automotive and industrial products that has served Puerto Rico since 1965 ("Energizando a Puerto Rico desde 1965"); it is headquartered in Carolina, PR, is a Hispanic-/minority-owned small business and a federal contractor (CAGE 3DPU1). Its portfolio spans automotive, traction and stationary/backup batteries, tires, lubricants and DEF, AUTEL diagnostics, tools, plus Hyundai and EP forklifts, warehouse equipment, rental, maintenance, OEM parts and e-commerce a "one-stop source" for material handling, automotive and industrial operations in Puerto Rico and the Virgin Islands, representing ~9 brands (including Eternity Technologies). The president is Omar Aponte; the company stays lean (under ~25 staff, ~$2M revenue) and handles ~150 sea import shipments a year, mostly from Asia.
-
Adkisson Group
August 28, 2026
Adkisson Group was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-28. Country: United States of America. Website: adkissondevelopment.com. adkissondevelopment.com Adkisson Group / Adkisson Development Group is a privately held industrial real estate development and investment firm founded in 2012 and based in Houston, Texas (4809 Westway Park Blvd / 1130 Enclave Pkwy, Houston, TX 77041). It specializes in office/warehouse, manufacturing and distribution properties development sites of 10250 acres and buildings from 6,000 to 455,000 sq ft (its largest current project is the 604,096 sq ft Willow Creek Business Park). Services span development, general contracting through its in-house Adkisson GC Partners (tilt-wall construction), design-build, build-to-suit and site planning. Managing partners are co-founders Steve Adkisson (35+ years in the industry) and Arturo Creixell, plus Anthony Sarao, who heads the GC division; the lean team of ~720 staff generates roughly $5.9M in annual revenue.
-
Thai Film Industries PCL
August 28, 2026
•
[ ransomware, manufacturing, leak ]
Thai Film Industries PCL was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Other. Country: Thailand. Website: thaifilmind.com. thaifilmind.com Thai Film Industries PCL (TFI) is a Thai film maker founded in 1983 (originally Rachadachai O.P.P. Co., Ltd.) by industrialist Prayudh Mahagitsiri Thailand's first BOPP film producer and Southeast Asia's industry pioneer, today a global top-20 BOPP manufacturer. Its portfolio covers BOPP (Thai-Lene), CPP (Thai-Cast), PET and metallized films for flexible packaging, printing, lamination, labels, adhesive tape, flower wrap and biodegradable uses. It runs two plants in Samut Prakan (Bang Phli, Bangna-Trad Km.13) and Rayong (Nikhom Pattana) with ~760 employees and exports across Asia, Europe and the Americas. Listed on the Stock Exchange of Thailand since 29 Dec 1989 (ticker TFI, paid-up capital ~THB 2.05 bn); renamed Thai Future Incorporation PCL in 2023, it is affiliated with Thai Copper Industries and Thai Film Bangladesh; CEO since 2023: Phadetkiat Imdacha.
-
SUNSEA
August 28, 2026
•
[ ransomware, manufacturing ]
SUNSEA was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Other. Country: Thailand. Website: sunsea.co.th. sunsea.co.th Sunsea Plastics P.S. Co., Ltd. is a family-owned Thai polyethylene film manufacturer founded in 1988, operating a purpose-built 13,000 sq.m factory in Bangna, Bangkok (office at Soi Lasalle 24, Sukhumvit Rd). It is Thailand's leading independent PE extruder, producing LDPE shrink film (rolls, hoods, sleeves, bags), LLDPE lamination and printing films, mLLDPE, PP/PE coex films, milk pouches and overwrap films, running 16 mono-layer plus 3-layer lines. It is the sole ExxonMobil-authorized producer of Nexxstar collation shrink film in Thailand and is ISO 9001 certified
-
Probe Test System
August 28, 2026
•
[ ransomware, technology, manufacturing ]
Probe Test System was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Technology. Country: Taiwan. Website: ptse.com.tw. ptse.com.tw Probe Test System Corp. (PTS, ) is a Taiwanese semiconductor back-end (OSAT) service provider operating since 2000, with plants in Zhunan and Toufen, Miaoli County (the former Hsinchu site was consolidated into Toufen in Q1 2024). Its services cover System Level Test (SLT), wafer chip probing (CP) on Chroma, ASL1000 and CTA8280 platforms, IC marking/remarking, Tape & Reel packaging (capacity ~150 KK units/month) plus lead/ball scan inspection. Long-term customers include Taiwan's leading chipmakers: Winbond, MediaTek, Novatek, Nuvoton and Macronix. The company is certified under ISO 9001, ISO 14001 and ANSI/ESD S20.20-2021.
-
Tecno Accion
August 28, 2026
Tecno Accion was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Technology. Country: Argentina. Website: tecnoaccion.com.ar. tecnoaccion.com.ar Tecno Accion S.A. is an Argentine IT company (founded 1988) that acts as a technology partner for lotteries "Modernizing lotteries in a digital world" with offices in Buenos Aires (Av. Rivadavia 620) and Bariloche. It develops its own hardware and software for lottery automation: 8,000+ terminals in operation, 4+ million daily wagers, serving 12 jurisdictions (half of Argentina's provinces); in Salta province it is the exclusive operator of the lottery license (900+ points of sale). It also delivered horse-racing bet capture for the Hipdromo Argentino de Palermo and completed projects in Peru, Panama, Brazil and Nigeria. Staff of ~80135; certified under ISO 9001, ISO 27001 and WLA SCS:2020; historically linked to Greece's Intralot and the Capital Markets group.
-
Ixa Systems
August 28, 2026
•
[ ransomware, technology, manufacturing ]
Ixa Systems was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Technology. Country: Switzerland. Website: ixasystems.ch. ixasystems.ch rocketreach.co/ixa-systems-sa-profile_b40f7faaffd19ede Ixa Systems SA is a Swiss security systems company founded in 2007, headquartered in Crissier (canton Vaud, near Lausanne). A small family-run firm of ~910 staff with revenue of about CHF 3.5 million, it designs and integrates surveillance solutions: video surveillance (IP/CCTV), anti-intrusion systems, intercom, access control, perimeter detection, technical building supervision (GTC) and evacuation PA systems. Since 1 April 2022 it has been majority-owned by the D.E.S Systmes de scurit SA group, with Marc Barraud as director. Its clients include police, banks, museums, schools, hospitals, prisons and railways, and it offers 24/7 maintenance contracts.
-
General Gruppo
August 28, 2026
•
[ ransomware, retail, manufacturing ]
General Gruppo was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Manufacturing. Country: Italy. Website: generalgruppo.it. generalgruppo.it rocketreach.co/general-gruppo-profile_b68428f5c6158b62 General Gruppo / General s.r.l. is a family-owned Italian retail chain founded in 1975 by Pietro Paolo Tognetti and Silvana Bonugli, headquartered in Querceta (Seravezza, Lucca, Tuscany). Historically known as IperSoap one of Italy's first home-care and personal-hygiene retail formats it reached ~250 stores in 2019 and 150 million in revenue (2018). In 2020 it began rebranding into the unified PiMe banner (merging IperSoap, Smoll and Shuki), and it also owns the historic Bacci Profumerie perfumeries (Forte dei Marmi) and the piume.it online shop. The founders' sons run the business Saverio (CEO) and Francesco; the group includes General s.r.l. and General Nord s.r.l.
-
Northwest Trophy
August 28, 2026
•
[ ransomware, leak, retail ]
Northwest Trophy was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Retail & E-Commerce. Country: United States of America. Website: nwtrophy.com. nwtrophy.com rocketreach.co/northwest-trophy-inc-profile_b59c90e0f9bc4cf5 Northwest Trophy & Awards Inc is a fourth-generation, family-owned awards business operating since 1938, with a showroom in Woodinville, WA (Seattle area). It offers personalized awards and gifts: trophies, medals, plaques, crystal and art-glass awards, acrylics, clocks, drinkware and ceremonial items. All engraving and printing (laser, rotary, full-color) is done in-house, serving sports teams, schools and businesses. It sells both through its showroom and an online Shopify store with standard 57 day production; a Seattle location was closed in 2023, leaving Woodinville (and previously Bellevue) to serve customers.
-
G R Infraprojects
August 28, 2026
•
[ ransomware, manufacturing, leak ]
G R Infraprojects was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Manufacturing. Country: India. Website: grinfra.com. grinfra.com zoominfo.com/c/g-r-infraprojects-ltd/353612422 We have taken NDA files, HR data, user data, employee data, technical drawings, models, bank statements, tax and legal documents, confidential files, photographs of work, screenshots, passport scans, VIP client data, and much more the total volume of data exceeds 531 GB. Grinfra G R Infraprojects Ltd is an Indian integrated infrastructure EPC company founded in 1995, headquartered in Udaipur and Gurugram. It builds roads, highways, bridges, metros, railways, tunnels, ropeways and power transmission lines across 23+ Indian states, with a 10,000-strong workforce and an order book of roughly 19,000+ crore ($2.3 bn). Projects are delivered under EPC, BOT, HAM and BOOT models, backed by in-house manufacturing (bitumen, paints, metal crash barriers) and ~7,500 equipment units. Listed on BSE/NSE since July 2021 (ticker GRINFRA), rated CRISIL AA / CARE AA+ (stable).
-
Glassdoor
August 28, 2026
•
[ ransomware, technology ]
Glassdoor was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Professional Services. Country: United States of America. Website: glassdoor.com. glassdoor.com is a U.S. job platform (founded 2007) where employees anonymously review companies culture, salaries, management. It's owned by Recruit Holdings/Indeed (acquired for $1.2B in 2018; legally merged into Indeed on July 1, 2026). It hosts millions of reviews for ~600,000 companies, plus salary data and job listings. Free for job seekers, monetized via employer branding tools; it also publishes the annual "Best Places to Work" awards.
-
Absolute Consultancy Services
August 30, 2026
•
[ ransomware, leak, technology ]
Absolute Consultancy Services was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-30. Sector: Professional Services. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.absolutecs.co.uk.
-
DistributionNOW (DNOW Inc.)
July 14, 2026
•
[ ransomware, manufacturing, leak ]
DistributionNOW (DNOW Inc.) was listed as a victim on the leak site of the Falcon ransomware group; the attack is estimated to have taken place on 2026-07-14. Sector: Manufacturing. Country: United States of America. Website: dnow.com. Energy & industrial distribution NYSE: DNOW - Our 344 GB extraction includes your corporate information, corporate bank statements, vendor payment instructions, detailed payroll records, employee compensation, tax documents, operational secrets, proprietary SCADA gateway backups, PLC logic programs, industrial automation project files, internal audit logs detailing unethical activity investigations, whistleblower reports regarding harassment and discrimination, employee disciplinary records, employee PII, passports, driving licenses, medical drug screen results and much more.
-
Globus Medical
August 21, 2026
Globus Medical was listed as a victim on the leak site of the Falcon ransomware group; the attack is estimated to have taken place on 2026-08-21. Sector: Healthcare. Country: United States of America. Website: globusmedical.com. Medical devices NYSE: GMED - Our 2.96 TB extraction includes your entire Microsoft PowerBi which contains over 51,000 records of your customers and more, FDA feedback, 510(k) submissions, PMA approval letters, TGA suspension proposals, product complaint logs, serious adverse event narratives, final CAPA investigation findings, merger diligence decks, integration plans, FTC antitrust review documents, combined P&L statements, deal models, budget spreadsheets, medical board of directors meeting minutes and agendas, executed NDAs, distribution contracts with named partners and medical institutions, patient demographics and history from clinical registries and much more.
-
Hospital Clnico Universidad de Chile
August 30, 2026
•
[ ransomware, healthcare ]
Hospital Clnico Universidad de Chile was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2026-08-30. Sector: Healthcare. Country: Chile. Website: redclinica.cl. Hospitals
-
Erdem Hospital
August 30, 2026
Erdem Hospital was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2026-08-30. Sector: Healthcare. Country: Turkey. Website: erdemhastahanesi.com.tr. Hospitals
-
THQ Nordic
August 30, 2026
•
[ ransomware, technology ]
THQ Nordic was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2026-08-30. Sector: Technology. Country: Sweden. Website: thqnordic.com. Multimedia,Games,Graphics Software
-
Andover
August 30, 2026
Andover was listed as a victim on the leak site of the Wallstreet ransomware group; the attack is estimated to have taken place on 2026-08-30. Sector: Education. Country: United States of America. The Town of Andover, Massachusetts, is a municipal government organization that provides public services, administration, community programs, education resources, infrastructure support, and civic information to residents and businesses in Andover.
-
AFSARD
August 30, 2026
•
[ ransomware, government, finance ]
AFSARD was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-30. Country: North Macedonia. Website: ipardpa.gov.mk.
-
bkc.org
August 31, 2026
•
[ ransomware, education ]
bkc.org was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-08-31. Sector: Professional Services. Country: Japan. Website: bkc.org. bkc.org and bethelclassical.org Mission Statement Bethel Classical Academy seeks to guide studen...