Full List

Search

Recent Breaches

• Chernyy & Associates August 24, 2026 • [ ransomware, leak ] Chernyy & Associates was listed as a victim on the leak site of the Booba Project ransomware group; the attack is estimated to have taken place on 2026-08-24. Sector: Professional Services. Country: Russian Federation. Website: www.chernyy-law.com. Law Practice Stolen data: 67 GB.
• Davroc August 24, 2026 • [ ransomware, technology, manufacturing ] Davroc was listed as a victim on the leak site of the Booba Project ransomware group; the attack is estimated to have taken place on 2026-08-24. Sector: Technology. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.davroc.co.uk. Furniture and Home Furnishings Manufacturing Stolen data: 15 GB.
• Bihl August 24, 2026 Bihl was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-08-24. Sector: Other. Country: Germany. Boustead International Heaters (BIH) is a leading global designer and supplier of thermal proce ss equipment, including direct fired heaters, waste heat recovery units (WHRUs), and heat recov ery steam generators (HRSGs). We will upload 392gb of corporate data soon. Huge amount of detailed personal employee informat ion (passports, DLs, addresses, SSNs, death/birth certs, phones, contacts), confidential financ ials and agreements and contracts, client information, NDAs and so on.
• Wozair August 24, 2026 • [ ransomware, manufacturing, energy ] Wozair was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-08-24. Sector: Other. Country: United Arab Emirates. Website: wozair.com. Wozair specializes in the design, manufacture, and installation of heavy-duty heating, ventilating, and air conditioning (HVAC) products for various sectors including Marine, Naval, Military, Nuclear, Oil and Gas, Powergen, and Renewables. Their product range includes air handling units, dampers, filtration solutions, and refrigeration systems. Wozair also offers services such as system design, project management, manufacturing, commissioning, and maintenance. The company aims to provide bespoke solutions to meet specific client requirements while ensuring a safe working environment.
• Brookview Financial August 24, 2026 • [ ransomware, finance ] Brookview Financial was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-08-24. Sector: Financial Services. Country: Canada. Website: www.brookviewfinancial.com. (data of many thousands of customers, including credit reports, SSNs, addresses, etc.) Brookview Financial is a boutique private lender specializing in quick-close financing solutions for real estate projects. Established in 1992, the company has served as a trusted capital partner for thousands of real estate investors across the nation. They offer a range of loan programs, including commercial bridge loans, fix & flip loans, and special situation financing, with amounts ranging from $75,000 to over $50 million. Known for their personal service and flexible terms, Brookview can close deals in as little as 7 days.
• FFKR Architects January 9, 2026 • [ ransomware, technology, healthcare ] FFKR Architects was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-01-09. Sector: Professional Services. Country: United States of America. Website: ffkr.com. FFKR Architects is a leading architecture and interior design firm based in Utah, with additional offices in Arizona and Idaho. They offer a wide range of services including architecture, landscape architecture, interior design, and environmental graphic design. The firm is known for its design excellence and commitment to environmental leadership, serving various sectors such as healthcare, education, hospitality, and commercial projects. With a team of over 170 professionals, FFKR empowers clients through innovative visualization techniques, ensuring informed decision-making.
• Criba August 24, 2026 • [ ransomware, financial, technology ] Criba was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-08-24. Sector: Technology. Country: Argentina. Website: criba.com.ar. (release includes data on Argentina, Uruguay, and other countries, as well as financial documents and client documentation, including a vast amount of information not intended for public disclosure) CRIBA Empresa Constructora Argentina specializes in providing comprehensive solutions for every stage of construction projects, leveraging over 70 years of experience. The company focuses on quality, efficiency, and safety, ensuring that they can execute even the most ambitious architectural designs. Their portfolio includes a variety of projects such as commercial offices, healthcare facilities, and residential buildings. CRIBA is committed to maintaining a zero-accident policy, prioritizing the safety of their workforce.
• Frato August 24, 2026 • [ ransomware, retail ] Frato was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-08-24. Sector: Other. Country: Brazil. Website: frato.com. (release includes data for the entire group of companies across all countries of operation, financial documentation, shareholder information, personal data of employees and clients, and much more) FRATO is recognized for its commitment to quality and style, merging traditional craftsmanship with innovative design. Drawing inspiration from diverse cultures and breathtaking locations worldwide, the brand creates a unique international aesthetic. It offers an exceptional interior lifestyle concept through its flagship stores located across America, Europe, and the Middle East. FRATO's intended clients are those seeking sophistication and inspiration for their living spaces.
• Furnished Quarters August 24, 2026 Furnished Quarters was listed as a victim on the leak site of the Dark Project ransomware group; the attack is estimated to have taken place on 2026-08-24. Sector: Hospitality. Country: United States of America. Website: www.furnishedquarters.com. About Furnished Quarters Headquartered in New York City, New York, Furnished Quarters, is to deliver exceptional residential experiences with passion, reliability and integrity always innovating and putting people first. They consider this in everything they do and every guest and client experience they deliver. The company "Furnished Quarters" was the victim of a successful cyberattack, as a result of which the companys confidential data was stolen. The volume of data stolen amounts to 155 GB. The data stolen included the companys customer details, as well as documents containing banking and financial information. Currently, around 198,000 files are no longer under the control of "Furnished Quarters".
• Design-Aire Engineering, INC August 24, 2026 • [ ransomware, manufacturing, leak ] Design-Aire Engineering, INC was listed as a victim on the leak site of the Dark Project ransomware group; the attack is estimated to have taken place on 2026-08-24. Sector: Manufacturing. Country: United States of America. Website: www.daengineering.com. About Design-Aire Engineering, INC Design-Aire Engineering specializes in mechanical, electrical, plumbing, and energy engineering services. They focus on providing innovative and sustainable solutions for their clients. The company serves a diverse range of clients, including those in the public and private sectors. With a commitment to green engineering practices, they aim to enhance energy efficiency and environmental sustainability. Design-Aire Engineering, INC has suffered a cyberattack on its service systems, resulting in the theft of approximately 377GB of sensitive data. The breached information includes employees' personal data and detailed architectural plans of clients' buildings.
• Jones, Little & Co., CPAs, LLP August 24, 2026 • [ ransomware, finance, leak ] Jones, Little & Co., CPAs, LLP was listed as a victim on the leak site of the Dark Project ransomware group; the attack is estimated to have taken place on 2026-08-24. Sector: Professional Services. Country: United States of America. Website: www.jonesandlittle.com. About Jones, Little & Co., CPAs, LLP Jones, Little & Co., CPAs, LLP is a professional accounting firm that offers a wide range of services including business accounting, tax preparation, and IRS problem resolution. They cater to small businesses, non-profit organizations, and specialized industries such as auto dealers and retailers. At least 100 gigabytes of company dataincluding financial records, internal files, and employee personal informationwere stolen in a cyberattack. Hackers encrypted the firm's systems after exfiltrating the documents, leaving operations paralyzed.
• The Liberty Group August 24, 2026 • [ ransomware, retail, financial ] The Liberty Group was listed as a victim on the leak site of the Dark Project ransomware group; the attack is estimated to have taken place on 2026-08-24. Country: United States of America. Website: libertygrp.com. About The Liberty Group Companys offerings include local, long distance, and international moving, lab relocation services, and logistics solutions. They cater to a diverse range of clients, providing professional and comprehensive assistance to both residential and commercial customers. Investigators are working to identify the perpetrators and assess the full scope of the damage. A company has suffered a major cyberattack resulting in the theft of approximately 27,000 internal files. The leaked documents include financial records, internal working materials, and personal data of employees. Attackers encrypted the company's systems following the breach, severely disrupting operations
• lagegepesca.it August 24, 2026 • [ ransomware, retail ] lagegepesca.it was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-08-24. Sector: Agriculture and Food Production. Country: Italy. Website: lagegepesca.it. Based in Lallio, near Bergamo in Lombardy, the company traces its origins to 1957, when Santo Gavazzi established a small
• FBC August 24, 2026 FBC was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-08-24. Country: South Africa. Website: furnbed.co.za. Furniture Bargaining Council in South Africa. This is the tariff council for the furniture, mattress and upholstery industry.The platform serves employers and employees in the industry in regions such as Gauteng, North West, Mpumalanga, Limpopo and the Free State to handle legal and administrative processes.
• SHAHEEN LAW GROUP PLC - Richmond, Virginia, USA August 24, 2026 • [ ransomware, leak, finance ] SHAHEEN LAW GROUP PLC - Richmond, Virginia, USA was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-08-24. Sector: Professional Services. Country: United States of America. Website: slgjustice.com. Family law firm, established 1995 by Victor A. Shaheen (2025 - the General Assembly of Virginia honored him with a resolution; google it, it is touching). Now run by his three sons. 48 employees across four offices: Richmond, Midlothian, Virginia Beach, Newport News. What do they do? They close 150+ real estate transactions EVERY MONTH for some of the largest corporate relocation programs in America. When a Fortune-500 moves an employee to Virginia, this firm holds that employee's Social Security Number, bank wiring details, home address, family identities, and sometimes their medical clearance. They hold everyone's future in a shared folder. We now hold the folder. WHAT WE TOOK 36,788 files 27GB 21,789 fully read 67,000+ SSN patterns (their own dedup says 6,017 real people we will let their customers decide which number to believe) EVIDENCE SERIES PREVIEW (from their actual files) - S1 DEEDS WITH SOCIAL SECURITY NUMBERS File: "5053815 - Unsigned Deed.docx" (verbatim from their server): "***-**-XXXX B H Social Security Number ***-**-XXXX J H Social Security Number 10356 Ashburn Road, North Chesterfield, VA 23235" File: "Kelley 5042085 - DEED.docx": "PURCHASER(S): N S SELLER'S NAME: S E. K SS#: ***-**-XXXX ...including the withholding of twenty percent (20%) of the sales proceeds." FIRPTA: foreign sellers. IRS will want this list. We have it. Thousands of these. Every deed folder = a name, a number, an address, a transaction. Their client roster IS the leak. - S3 INSIDE THEIR BANKING & THEIR NETWORK File: "shared_Accounting/Banking/Other Banking/Shaheen DDA Statements SunTrust DDA" (email from SunTrustOnlineCourier to their own staff headers verbatim): Received: from barracuda.shaheenlaw.com ([10.0.0.6]) by ricdcex1.shaheenlaw.com ... X-ASG-Debug-ID: 1291233029-... for ; Wed, 1 Dec 2010 Why we publish an email HEADER: their internal map is in it. Barracuda at 10.0.0.6. Exchange "ricdcex1". Domain SHAHEENWORLD. We did not forget how to enter. Neither will the next group, when we sell the map. 150 banking statement attachments ride along in this folder. - S5 THE CLIENT LIST, WRITTEN IN FOLDERNAMES They named folders after their customers. Verbatim paths: shared_PENDING_SALE/HENNY/Closed Files/ Wisniewski-Markel, Suzanne_5027384_12263 Eagle ... Merza, Jamal & Adrienne_5027826_811 Woodberry ... Name, file number, STREET ADDRESS in the path itself. Marketing lists sell for money. This one is annotated with purchase history. Relocation buyers are premium leads. - S2 MEDICAL - S4 LITIGATION Held. 120 medical files exist (their own audit counted them). Litigation: we confirm their December escrow dispute is public (Porchlight Homes v. Almeida & Shaheen, Henrico google it, BizSense covered it). Virginia residents: 18.2-186.6. Illinois relocations: BIPA. Opposing counsel and journalists: samples on request. Media & researchers: samples on request, we answer fast We keep our word to everyone who pays. We keep it also to everyone who does not.
• Consultores de Seguros August 24, 2026 • [ ransomware, finance ] Consultores de Seguros was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-24. Sector: Financial Services. Website: www.consegsa.com.
• Cosmon August 19, 2026 • [ ransomware, technology ] Cosmon was listed as a victim on the leak site of the beast ransomware group; the attack is estimated to have taken place on 2026-08-19. Sector: Technology. Country: United States of America. Website: www.cosmon.com. Cosmon develops agentic artificial intelligence software for mechanical engineering workflows, centered on its Nexus product for CAD, CAE, simulation, and PLM tasks. Its website presents the company as a software provider whose platform automates drawing creation, simulation setup, troubleshooting, design validation, and product lifecycle data tasks while integrating directly with major engineering tools. Although the offering is deeply technical and tailored to engineering environments, the core business shown is the development and delivery of proprietary engineering software rather than providing outsourced engineering services or general consulting. https://cosmon.com https://www.zoominfo.com/c/cosmon/5000578320
• Dentist in New Britain, CT August 25, 2026 • [ ransomware, healthcare, leak ] Dentist in New Britain, CT was listed as a victim on the leak site of the Dark Project ransomware group; the attack is estimated to have taken place on 2026-08-25. Sector: Healthcare. Country: United States of America. Website: dentistinnewbritain.com. About Dentist in New Britain, CT Dentist in New Britain has spent over a decade caring for families across New Britainpairing modern technology with the kind of warmth you don't expect from a dental office. As a result of the attack, the following were compromised: the entire customer database, consisting of just over 8,000 files, as well as a small number of records containing Social Security numbers
• Pump Engineering Company August 25, 2026 • [ ransomware, manufacturing, leak ] Pump Engineering Company was listed as a victim on the leak site of the Dark Project ransomware group; the attack is estimated to have taken place on 2026-08-25. Sector: Manufacturing. Country: United States of America. Website: www.pumpengineering.net. About Pump Engineering Company Pump Engineering Company is a full-service distributor and supplier of industrial pumps, parts, and fluid handling systems, serving Southern California since 1946. During the cyberattack, 120,000 files (115 GB) were stolen, including an extensive customer database, insurance documents, confidential financial documents, and a vast number of project drawings.
• AGROLAND S.A. August 25, 2026 • [ ransomware, manufacturing ] AGROLAND S.A. was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-25. Sector: Agriculture and Food Production. Country: Romania. Website: www.agroland.com.