Full List

Search

Recent Breaches

• ETNA Software August 27, 2026 • [ ransomware, technology, finance ] ETNA Software was listed as a victim on the leak site of the Eclipse ransomware group; the attack is estimated to have taken place on 2026-08-27. Sector: Technology. Country: Italy. Website: etnasoft.com. ETNA Software is a company that provides white-label online trading solutions for brokers and FinTech firms, including mobile and web trading platforms. Their products are designed to help retail broker-dealers launch trading capabilities efficiently and cost-effectively.
• Caduceus Medical Group August 28, 2026 • [ ransomware, healthcare ] Caduceus Medical Group was listed as a victim on the leak site of the anubis ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Healthcare. Predictable but dangerous data exposed in a healthcare company breach.
• tnmed.org August 27, 2026 • [ ransomware, healthcare ] tnmed.org was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-08-27. Sector: Healthcare. Country: United States of America. Website: tnmed.org. The Tennessee Medical Association is a nonprofit organization that advocates for physicians in Tenne...
• Bayview Real Estate WARNING August 28, 2026 • [ ransomware, retail ] Bayview Real Estate WARNING was listed as a victim on the leak site of the ShadowByt3$ ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Retail & E-Commerce. Country: United States of America. Website: pm.livable.com. Check your emails or we will leak the data we are not bluffing we stole 216.6 MB. compromised email: ruff@livable.com compromised site: https://pm.livable.com The following emails below check your emails or spam for proof - ruff@livable.com - ir@bayview.com - TroyGuinn-Bailey@bayview.com - MichaelMagee@bayview.com - DavidErtel@bayview.com Your company has till August 29th 2026 to respond back or it gets leaked but can get extended to monday if your company responds back and negotiates.
• Whitehouse August 28, 2026 • [ ransomware, government ] Whitehouse was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Government & Defense. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.whitehouseandco.com.
• Infinnium August 28, 2026 • [ ransomware, technology ] Infinnium was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Technology. Website: www.infinnium.com.
• Directorate-General for Education August 28, 2026 • [ ransomware, government, education ] Directorate-General for Education was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Government & Defense. Country: Portugal. Website: dgeec.medu.pt. The Direo-Geral de Estatsticas da Educao e Cincia (DGEEC) is a Portuguese government agency responsible for collecting, analyzing, and publishing official statistics on education, science, and technology.
• amzur.com August 28, 2026 amzur.com was listed as a victim on the leak site of the unsafe ransomware group; the attack is estimated to have taken place on 2026-08-28. Country: Brazil. Website: amzur.com. Revenue: $73.4 million
• Hanwha Renewables August 28, 2026 • [ ransomware, energy, financial ] Hanwha Renewables was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Energy & Utilities. Country: South Korea. The data contains really sensitive information from 4 PV projects looking for investment/financing of Hanwha. We extracted around 12GB of highly sensitive information relating to the following projects: - Bonanza Peak (3GB) - Boulder Solar III (0.7GB) - Obreron Portfolio (4.8GB) - Project Sprout (3.7GB) In the data we found highly sensitive information including: - PPAs - Financial models - Interconnection agreements - Engineering designs of the assets - Personal identifiable information - Sensitive reports, budgets, financial information Reach out to prevent the leak. Cost of litigation from counterparties for breach of confidentiality is way higher. Commercially, good luck negotiating after your practices and contracts are leak. Good luck looking for financing/investment for these assets with the data leaked. [Size: 11.7 GB | Sector: Energy]
• Cosmocolor SA de CV August 28, 2026 • [ ransomware, manufacturing ] Cosmocolor SA de CV was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Manufacturing. Country: Mexico. Website: www.cosmocolor.com.mx.
• Tramigo August 28, 2026 • [ ransomware, technology ] Tramigo was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Transportation. Country: Finland. Website: www.tramigo.com.
• DigiGround August 28, 2026 • [ ransomware, technology ] DigiGround was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Technology. Country: Australia. Website: www.digiground.com.au.
• ProCare August 28, 2026 • [ ransomware, healthcare ] ProCare was listed as a victim on the leak site of the moneymessage ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Healthcare. Country: United States of America. [AI generated] N/A ProCare is a relatively common business name used by multiple unrelated companies across different industries and countries. Without additional context such as industry sector, country, or full legal name, it is not possible to identify a specific organization with confidence and provide accurate threat intelligence relevant information.
• JRT Mechanical August 28, 2026 • [ ransomware, manufacturing ] JRT Mechanical was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Manufacturing. JRT Mechanical is a full-service mechanical contractor specializing in plumbing, HVAC, hydronic s, and mechanical insulation, serving the Pacific Northwest for over 30 years. Founded in 1992, the company has expanded from a small plumbing business to a robust team of over 160 employees , focusing primarily on commercial and industrial projects. We will upload 46gb of corporate data soon. Detailed employee personal information (SSNs, passp orts, DLs, resumes, and another personal docs scans), medical information, client information, projects, financials, confidential files, contrast and agreements, NDAs and so on.
• BEPeterson August 28, 2026 • [ ransomware, manufacturing, technology ] BEPeterson was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-08-28. BEPeterson is a full-service metal fabricator specializing in custom solutions for vessels, tan ks, and heavy-gauge metal parts since 1935. The company serves a diverse range of industries in cluding defense, medical, energy, and industrial sectors, providing high-quality products throu gh advanced manufacturing techniques. We will upload 20gb of corporate data soon. Employee personal information, client information, projects, financials, NDAs and so on.
• Berlin, Germany August 28, 2026 • [ ransomware, government, technology ] Berlin, Germany was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-08-28. Country: Germany. Berlin, Germany Total capacity 5.79 TBArchive scale: ~1.44 million files scanned; by category Maps/Geo 124,823, Legal/complaints 77,939, Financial 55,553, Contracts 46,522, HR 27,299,Government supervisory 13,142, Confidential 11,777, Infrastructure 8,110, Passwords 5,941, Health 2,738, Contacts 2,287.PII leak: 16,389 e-mails, 11,963 phone numbers, 12,076 individuals, 148 IBANs.Credentials in plaintext: GebudeAtlas, the ePayment PAYONE payment database, personal 'password safes' (danz, kramell Z_ADMIN database accounts, franssen), leadership credentials.Disciplinary proceedings: the ANDERSON case (432 files, 20252026, lawsuit at VG Berlin administrative court), the politically motivated misconduct case involving the LKA Staatsschutz (state security police), the forestry cases BLAUTH/MLLER/FIELICKE.State secrets: Bundesrat committee protocols with declassification correspondence, Geheimschutz (classified-material handling) data.Passports/IDs (recent, from personnel files and GI-Vertraulich).KRITIS: vulnerability analyses of Berlin's water supply.Mass personal data: Personalakten (personnel files) >5,000, Convotis payroll, OWi (administrative-offence) files >5,000, Postbuch SQL dumps 20202026, PST archives, leadership private data (IBANs, ID cards, Behrendt's bank card).NDA: 3,226 documentsLegal violation map (GDPR Art. 32/9/33, VSA/StGB upon VS classification confirmation, BSIG/KRITIS) More
• Alumax August 28, 2026 • [ ransomware, manufacturing, leak ] Alumax was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Manufacturing. Country: United States of America. Alumax Alumnios specializes in the distribution of aluminum and accessories for the constructi on industry, focusing on providing tailored solutions for builders and metalworkers. The compan y prides itself on its partnership with Hydro, a global leader in sustainable aluminum, allowin g them to offer high-quality products that meet the market's demanding needs. We will upload 58gb of corporate data soon. Detailed employee personal information (passports, IDs, and another personal docs scans), client information, projects, financials, confidential f iles, contrast and agreements, NDAs and so on.
• Atcomm August 26, 2026 Atcomm was listed as a victim on the leak site of the global ransomware group; the attack is estimated to have taken place on 2026-08-26. Sector: Technology. Country: China. Website: www.atcomm.cn. @comm is a Shanghaibased agency specializing in PR, digital marketing, and humanAI collaboration. It leverages data and AI to help brands grow. The company operates from Room2103, SK Building, in Pudong New Area.
• Shanghai Tunnel Engineering Co Ltd August 19, 2026 Shanghai Tunnel Engineering Co Ltd was listed as a victim on the leak site of the global ransomware group; the attack is estimated to have taken place on 2026-08-19. Sector: Transportation. Country: China. Website: www.stecs.com.sg. STECS is a leading civil engineering and construction company in Singapore, specializing in rail transit and underground projects. It has completed over 30 major projects for key clients like the Land Transport Authority and Public Utilities Board. The company prioritizes safety, environmental responsibility, and improving urban infrastructure in Southeast Asia.
• Hangzhou Qihan Biotech Co., Ltd. August 12, 2026 • [ ransomware, healthcare, technology ] Hangzhou Qihan Biotech Co., Ltd. was listed as a victim on the leak site of the global ransomware group; the attack is estimated to have taken place on 2026-08-12. Sector: Healthcare. Country: China. Website: www.qihanbio.com. Qihan Biotech is a Hangzhoubased biotech company specializing in gene editing and cell/organ therapies. It develops immuneprivileged cells and xenogeneic organs to treat cancer and organ failure. The company aims to make these therapies accessible worldwide.