Full List

Search

Recent Breaches

• ProCare August 28, 2026 • [ ransomware, healthcare ] ProCare was listed as a victim on the leak site of the moneymessage ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Healthcare. Country: United States of America. [AI generated] N/A ProCare is a relatively common business name used by multiple unrelated companies across different industries and countries. Without additional context such as industry sector, country, or full legal name, it is not possible to identify a specific organization with confidence and provide accurate threat intelligence relevant information.
• JRT Mechanical August 28, 2026 • [ ransomware, manufacturing ] JRT Mechanical was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Manufacturing. JRT Mechanical is a full-service mechanical contractor specializing in plumbing, HVAC, hydronic s, and mechanical insulation, serving the Pacific Northwest for over 30 years. Founded in 1992, the company has expanded from a small plumbing business to a robust team of over 160 employees , focusing primarily on commercial and industrial projects. We will upload 46gb of corporate data soon. Detailed employee personal information (SSNs, passp orts, DLs, resumes, and another personal docs scans), medical information, client information, projects, financials, confidential files, contrast and agreements, NDAs and so on.
• BEPeterson August 28, 2026 • [ ransomware, manufacturing, technology ] BEPeterson was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-08-28. BEPeterson is a full-service metal fabricator specializing in custom solutions for vessels, tan ks, and heavy-gauge metal parts since 1935. The company serves a diverse range of industries in cluding defense, medical, energy, and industrial sectors, providing high-quality products throu gh advanced manufacturing techniques. We will upload 20gb of corporate data soon. Employee personal information, client information, projects, financials, NDAs and so on.
• Berlin, Germany August 28, 2026 • [ ransomware, government, technology ] Berlin, Germany was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-08-28. Country: Germany. Berlin, Germany Total capacity 5.79 TBArchive scale: ~1.44 million files scanned; by category Maps/Geo 124,823, Legal/complaints 77,939, Financial 55,553, Contracts 46,522, HR 27,299,Government supervisory 13,142, Confidential 11,777, Infrastructure 8,110, Passwords 5,941, Health 2,738, Contacts 2,287.PII leak: 16,389 e-mails, 11,963 phone numbers, 12,076 individuals, 148 IBANs.Credentials in plaintext: GebudeAtlas, the ePayment PAYONE payment database, personal 'password safes' (danz, kramell Z_ADMIN database accounts, franssen), leadership credentials.Disciplinary proceedings: the ANDERSON case (432 files, 20252026, lawsuit at VG Berlin administrative court), the politically motivated misconduct case involving the LKA Staatsschutz (state security police), the forestry cases BLAUTH/MLLER/FIELICKE.State secrets: Bundesrat committee protocols with declassification correspondence, Geheimschutz (classified-material handling) data.Passports/IDs (recent, from personnel files and GI-Vertraulich).KRITIS: vulnerability analyses of Berlin's water supply.Mass personal data: Personalakten (personnel files) >5,000, Convotis payroll, OWi (administrative-offence) files >5,000, Postbuch SQL dumps 20202026, PST archives, leadership private data (IBANs, ID cards, Behrendt's bank card).NDA: 3,226 documentsLegal violation map (GDPR Art. 32/9/33, VSA/StGB upon VS classification confirmation, BSIG/KRITIS) More
• Alumax August 28, 2026 • [ ransomware, manufacturing, leak ] Alumax was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Manufacturing. Country: United States of America. Alumax Alumnios specializes in the distribution of aluminum and accessories for the constructi on industry, focusing on providing tailored solutions for builders and metalworkers. The compan y prides itself on its partnership with Hydro, a global leader in sustainable aluminum, allowin g them to offer high-quality products that meet the market's demanding needs. We will upload 58gb of corporate data soon. Detailed employee personal information (passports, IDs, and another personal docs scans), client information, projects, financials, confidential f iles, contrast and agreements, NDAs and so on.
• Atcomm August 26, 2026 Atcomm was listed as a victim on the leak site of the global ransomware group; the attack is estimated to have taken place on 2026-08-26. Sector: Technology. Country: China. Website: www.atcomm.cn. @comm is a Shanghaibased agency specializing in PR, digital marketing, and humanAI collaboration. It leverages data and AI to help brands grow. The company operates from Room2103, SK Building, in Pudong New Area.
• Shanghai Tunnel Engineering Co Ltd August 19, 2026 Shanghai Tunnel Engineering Co Ltd was listed as a victim on the leak site of the global ransomware group; the attack is estimated to have taken place on 2026-08-19. Sector: Transportation. Country: China. Website: www.stecs.com.sg. STECS is a leading civil engineering and construction company in Singapore, specializing in rail transit and underground projects. It has completed over 30 major projects for key clients like the Land Transport Authority and Public Utilities Board. The company prioritizes safety, environmental responsibility, and improving urban infrastructure in Southeast Asia.
• Hangzhou Qihan Biotech Co., Ltd. August 12, 2026 • [ ransomware, healthcare, technology ] Hangzhou Qihan Biotech Co., Ltd. was listed as a victim on the leak site of the global ransomware group; the attack is estimated to have taken place on 2026-08-12. Sector: Healthcare. Country: China. Website: www.qihanbio.com. Qihan Biotech is a Hangzhoubased biotech company specializing in gene editing and cell/organ therapies. It develops immuneprivileged cells and xenogeneic organs to treat cancer and organ failure. The company aims to make these therapies accessible worldwide.
• Vigilia August 6, 2026 • [ ransomware, technology, healthcare ] Vigilia was listed as a victim on the leak site of the global ransomware group; the attack is estimated to have taken place on 2026-08-06. Sector: Technology. Country: Uruguay. Website: vigilia.com.uy. VIGILIA is a company that provides support and care services for people. It offers assistance in medical facilities, home care, ambulance transportation, and related administrative support. The company also provides insurance policies and helps coordinate medical consultations and tests.
• Valley Health Team August 28, 2026 Valley Health Team was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Healthcare. Valley Health Team 9,056,196 files3.28 TBLarge SQL databases containing the clinic's entire lifetime of information.Major databases:160,870 patients4.18 million diagnoses7.6 million unencrypted EHR scansSSN, passports, and other personal data.Financial statements, salaries, taxes.Dear customers, please submit your requeststhere are plenty of files here that can be monetized. More
• Newton County School System August 28, 2026 • [ ransomware, education ] Newton County School System was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Education. Country: United States of America. Website: www.newtoncountyschools.org.
• macallister.com August 28, 2026 • [ ransomware, leak ] macallister.com was listed as a victim on the leak site of the chaos ransomware group; the attack is estimated to have taken place on 2026-08-28. Country: United Kingdom of Great Britain and Northern Ireland. Website: macallister.com. MacAllister (macallister.com) Countdown to Publication Management at MacAllister has chosen to completely ignore all attempts to establish a constructive dialogue regarding their security breach. Silence will not make this situation go away. Since leadership refuses to engage, we are moving fo
• corematerials.com August 28, 2026 • [ ransomware, manufacturing ] corematerials.com was listed as a victim on the leak site of the chaos ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Manufacturing. Country: United States of America. Website: corematerials.com. Core Materials (corematerials.com) Countdown to Publication Management at Core Materials has chosen to completely ignore all attempts to establish a constructive dialogue regarding their security breach. Silence will not make this situation go away. Since leadership refuses to engage, we are m
• Alter Consultores Legales August 28, 2026 Alter Consultores Legales was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Professional Services. Country: Spain. Website: www.alterconsultores.es.
• H.W. Lochner August 3, 2026 H.W. Lochner was listed as a victim on the leak site of the payoutsking ransomware group; the attack is estimated to have taken place on 2026-08-03. Sector: Professional Services. Country: United States of America. Website: hwlochner.com. [AI generated] H.W. Lochner is a US-based civil engineering and infrastructure consulting firm. Founded in 1944 and headquartered in Chicago, Illinois, the company specializes in transportation planning, highway design, bridge engineering, environmental services, and construction management. It primarily serves state and local government clients across the United States, supporting public infrastructure projects including roads, transit systems, and related civil works.
• Jack Henry & Associates August 28, 2026 Jack Henry & Associates was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Financial Services. Country: United States of America. This is a final warning to reach out by 1 Sep 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 29 Aug 2026 | Warning: FINAL WARNING
• Elekta AB August 28, 2026 • [ ransomware, healthcare, leak ] Elekta AB was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Healthcare. Country: Sweden. This is a final warning to reach out by 1 Sep 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 29 Aug 2026 | Warning: FINAL WARNING
• Akpera Gayrimenkul Yatırım A.Ş. August 28, 2026 • [ ransomware, retail ] Akpera Gayrimenkul Yatrm A.. was listed as a victim on the leak site of the Doommageddon ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Other. Country: Turkey. Status: upcoming | Data size: | Files: 0 files | Deadline: 2026-09-15T00:00:00Z
• SITTNAK Lojistik A.Ş. August 28, 2026 • [ ransomware, manufacturing ] SITTNAK Lojistik A.. was listed as a victim on the leak site of the Doommageddon ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Transportation. Country: Turkey. Status: upcoming | Data size: | Files: 0 files | Deadline: 2026-09-15T00:00:00Z
• McKesson Corporation August 28, 2026 McKesson Corporation was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Healthcare. Country: United States of America. Hundreds of millions of records/rows of data was compromised containing very sensitive information spanning from PII to PHI. We urge you to reach out. Read our emails. We will provide a substanial discount. Failure to engage with us will result in the full publication of data taken from you and we very much intend to carry that out if you do not engage with us. This is a final warning to reach out by 1 Sep 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 29 Aug 2026 | Warning: FINAL WARNING