-
Agrimac
August 26, 2026
•
[ ransomware, manufacturing, technology ]
Agrimac was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-08-26. Sector: Agriculture and Food Production. Country: Australia. Website: agri-mac.com.au. Agrimac achieves Australian first - Agrimac is the first agricultural dealership in Australia to be awarded the AFS Certification in up to the minute GPS technology by global leaders CaseIH technology company, Trimble. Advanced Farming Systems or AFS as it's referred to, is rapidly becoming a critical area if local farmers are to be and remain at the top of their class in the world of farming.
The company headquarters is located in 92 Caramut Road, Warrnambool, VIC 3280, Australia. 51-200 Employees
-
Globalport Terminals
August 27, 2026
Globalport Terminals was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-27. Sector: Transportation. Country: Philippines. Website: www.globalports.com.ph.
-
Ne...n M...
August 27, 2026
Ne...n M... was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-08-27. Redacted entry - full company name pending disclosure (FULL DATA TIMER active).
-
singleton.com
August 27, 2026
•
[ ransomware, finance ]
singleton.com was listed as a victim on the leak site of the chaos ransomware group; the attack is estimated to have taken place on 2026-08-27. Country: Australia. Website: singleton.com. Founded in 1986, Singleton Reynolds is a law firm. They are headquartered in Vancouver, British Columbia.
-
ETNA Software
August 27, 2026
•
[ ransomware, technology, finance ]
ETNA Software was listed as a victim on the leak site of the Eclipse ransomware group; the attack is estimated to have taken place on 2026-08-27. Sector: Technology. Country: Italy. Website: etnasoft.com. ETNA Software is a company that provides white-label online trading solutions for brokers and FinTech firms, including mobile and web trading platforms. Their products are designed to help retail broker-dealers launch trading capabilities efficiently and cost-effectively.
-
Caduceus Medical Group
August 28, 2026
•
[ ransomware, healthcare ]
Caduceus Medical Group was listed as a victim on the leak site of the anubis ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Healthcare. Predictable but dangerous data exposed in a healthcare company breach.
-
tnmed.org
August 27, 2026
•
[ ransomware, healthcare ]
tnmed.org was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-08-27. Sector: Healthcare. Country: United States of America. Website: tnmed.org. The Tennessee Medical Association is a nonprofit organization that advocates for physicians in Tenne...
-
Bayview Real Estate WARNING
August 28, 2026
•
[ ransomware, retail ]
Bayview Real Estate WARNING was listed as a victim on the leak site of the ShadowByt3$ ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Retail & E-Commerce. Country: United States of America. Website: pm.livable.com. Check your emails or we will leak the data we are not bluffing we stole 216.6 MB.
compromised email: ruff@livable.com
compromised site: https://pm.livable.com
The following emails below check your emails or spam for proof
- ruff@livable.com
- ir@bayview.com
- TroyGuinn-Bailey@bayview.com
- MichaelMagee@bayview.com
- DavidErtel@bayview.com
Your company has till August 29th 2026 to respond back or it gets leaked but can get extended to monday if your company responds back and negotiates.
-
Whitehouse
August 28, 2026
•
[ ransomware, government ]
Whitehouse was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Government & Defense. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.whitehouseandco.com.
-
Infinnium
August 28, 2026
•
[ ransomware, technology ]
Infinnium was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Technology. Website: www.infinnium.com.
-
Directorate-General for Education
August 28, 2026
•
[ ransomware, government, education ]
Directorate-General for Education was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Government & Defense. Country: Portugal. Website: dgeec.medu.pt. The Direo-Geral de Estatsticas da Educao e Cincia (DGEEC) is a Portuguese government agency responsible for collecting, analyzing, and publishing official statistics on education, science, and technology.
-
amzur.com
August 28, 2026
amzur.com was listed as a victim on the leak site of the unsafe ransomware group; the attack is estimated to have taken place on 2026-08-28. Country: Brazil. Website: amzur.com. Revenue: $73.4 million
-
Hanwha Renewables
August 28, 2026
•
[ ransomware, energy, financial ]
Hanwha Renewables was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Energy & Utilities. Country: South Korea. The data contains really sensitive information from 4 PV projects looking for investment/financing of Hanwha.
We extracted around 12GB of highly sensitive information relating to the following projects:
- Bonanza Peak (3GB)
- Boulder Solar III (0.7GB)
- Obreron Portfolio (4.8GB)
- Project Sprout (3.7GB)
In the data we found highly sensitive information including:
- PPAs
- Financial models
- Interconnection agreements
- Engineering designs of the assets
- Personal identifiable information
- Sensitive reports, budgets, financial information
Reach out to prevent the leak.
Cost of litigation from counterparties for breach of confidentiality is way higher. Commercially, good luck negotiating after your practices and contracts are leak. Good luck looking for financing/investment for these assets with the data leaked. [Size: 11.7 GB | Sector: Energy]
-
Cosmocolor SA de CV
August 28, 2026
•
[ ransomware, manufacturing ]
Cosmocolor SA de CV was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Manufacturing. Country: Mexico. Website: www.cosmocolor.com.mx.
-
Tramigo
August 28, 2026
•
[ ransomware, technology ]
Tramigo was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Transportation. Country: Finland. Website: www.tramigo.com.
-
DigiGround
August 28, 2026
•
[ ransomware, technology ]
DigiGround was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Technology. Country: Australia. Website: www.digiground.com.au.
-
ProCare
August 28, 2026
•
[ ransomware, healthcare ]
ProCare was listed as a victim on the leak site of the moneymessage ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Healthcare. Country: United States of America. [AI generated] N/A
ProCare is a relatively common business name used by multiple unrelated companies across different industries and countries. Without additional context such as industry sector, country, or full legal name, it is not possible to identify a specific organization with confidence and provide accurate threat intelligence relevant information.
-
JRT Mechanical
August 28, 2026
•
[ ransomware, manufacturing ]
JRT Mechanical was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Manufacturing. JRT Mechanical is a full-service mechanical contractor specializing in plumbing, HVAC, hydronic
s, and mechanical insulation, serving the Pacific Northwest for over 30 years. Founded in 1992,
the company has expanded from a small plumbing business to a robust team of over 160 employees
, focusing primarily on commercial and industrial projects.
We will upload 46gb of corporate data soon. Detailed employee personal information (SSNs, passp
orts, DLs, resumes, and another personal docs scans), medical information, client information,
projects, financials, confidential files, contrast and agreements, NDAs and so on.
-
BEPeterson
August 28, 2026
•
[ ransomware, manufacturing, technology ]
BEPeterson was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-08-28. BEPeterson is a full-service metal fabricator specializing in custom solutions for vessels, tan
ks, and heavy-gauge metal parts since 1935. The company serves a diverse range of industries in
cluding defense, medical, energy, and industrial sectors, providing high-quality products throu
gh advanced manufacturing techniques.
We will upload 20gb of corporate data soon. Employee personal information, client information,
projects, financials, NDAs and so on.
-
Berlin, Germany
August 28, 2026
•
[ ransomware, government, technology ]
Berlin, Germany was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-08-28. Country: Germany. Berlin, Germany Total capacity 5.79 TBArchive scale: ~1.44 million files scanned; by category Maps/Geo 124,823, Legal/complaints 77,939, Financial 55,553, Contracts 46,522, HR 27,299,Government supervisory 13,142, Confidential 11,777, Infrastructure 8,110, Passwords 5,941, Health 2,738, Contacts 2,287.PII leak: 16,389 e-mails, 11,963 phone numbers, 12,076 individuals, 148 IBANs.Credentials in plaintext: GebudeAtlas, the ePayment PAYONE payment database, personal 'password safes' (danz, kramell Z_ADMIN database accounts, franssen), leadership credentials.Disciplinary proceedings: the ANDERSON case (432 files, 20252026, lawsuit at VG Berlin administrative court), the politically motivated misconduct case involving the LKA Staatsschutz (state security police), the forestry cases BLAUTH/MLLER/FIELICKE.State secrets: Bundesrat committee protocols with declassification correspondence, Geheimschutz (classified-material handling) data.Passports/IDs (recent, from personnel files and GI-Vertraulich).KRITIS: vulnerability analyses of Berlin's water supply.Mass personal data: Personalakten (personnel files) >5,000, Convotis payroll, OWi (administrative-offence) files >5,000, Postbuch SQL dumps 20202026, PST archives, leadership private data (IBANs, ID cards, Behrendt's bank card).NDA: 3,226 documentsLegal violation map (GDPR Art. 32/9/33, VSA/StGB upon VS classification confirmation, BSIG/KRITIS) More