-
el-group
August 22, 2026
•
[ ransomware, manufacturing ]
el-group was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-08-22. Sector: Other. Country: Switzerland. Website: el-group.ch. Unauthorized access has been gained to the company's confidential files, including client data, proprietary R&D, and financial documentation.
-
ReliaQuest, LLC
August 23, 2026
•
[ ransomware, technology ]
ReliaQuest, LLC was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-08-23. Sector: Technology. Country: United States of America. Website: reliaquest.com. This time the post is about you , not us. Let Mandiant report and advise on us accurately, go away. DISCLAIMER: This information is being provided "as is" for informational purposes only. We do not endorse any commercial entity, product, company, or service, including any entities, products, or services linked within this post. Any reference to specific commercial entities, products, processes, or services by service mark, trademark, manufacturer, or otherwise, does not constitute or imply endorsement, recommendation, or favour by us. | Updated: 23 Aug 2026
-
Volktek
August 21, 2026
Volktek was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-21. Sector: Technology. Country: Taiwan. Website: volktek.com. volktek.com zoominfo.com/c/volktek-corp/161873991 Volktek is a leading Taiwanese manufacturer established in 1994, specializing in high-performance industrial networking and Ethernet solutions.
They design and produce a wide range of robust equipment, including industrial Ethernet switches, PoE devices, and fiber optic converters.
With in-house production facilities, the company provides reliable connectivity and automation infrastructure for metro networks, surveillance, and harsh industrial environments.
-
Layher
August 21, 2026
•
[ ransomware, manufacturing, leak ]
Layher was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-21. Sector: Manufacturing. Country: Chile. Website: layher.cl. layher.cl zoominfo.com/c/layher-del-pacifico-sa--layher-chile/1319092699 Layher Chile is the local branch of the globally renowned German manufacturer specializing in scaffolding and access systems.
They supply high-quality scaffolding solutions, safety equipment, and event structures for the construction, industrial, and infrastructure sectors.
The company provides comprehensive services, including product sales, equipment rentals, custom engineering design, and technical support for complex projects across the country.
-
Espac
August 21, 2026
•
[ ransomware, technology, manufacturing ]
Espac was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-21. Sector: Technology. Country: Chile. Website: espac.cl. espac.cl zoominfo.com/c/espac/425816287 ESPAC Construccin is a leading Chilean company based in Santiago that manufactures and distributes specialized products for the building industry.
They produce high-quality construction materials, including steel shores, heavy-duty pallets, scaffolding systems, and material handling carts.
Additionally, the firm offers comprehensive rental services for formwork and structural support equipment to assist large-scale construction projects across the country.
-
Gould Sherwood Consulting
August 21, 2026
•
[ ransomware, technology ]
Gould Sherwood Consulting was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-21. Sector: Professional Services. Country: United States of America. Website: gouldsherwood.com. gouldsherwood.com zoominfo.com/c/gould-sherwood-consulting-llc/347553210 Gould-Sherwood Consulting is a boutique IT support and services firm based in Lexington, Massachusetts, serving the Greater Boston area since 2005.
They specialize in comprehensive computer and network support, including planning, maintenance, and troubleshooting for both Mac and PC environments.
The company primarily caters to small-to-medium businesses, creative professionals, and home users, ensuring their technology infrastructure runs smoothly and securely.
-
Eyecare Center of Snohomish
August 21, 2026
•
[ ransomware, healthcare ]
Eyecare Center of Snohomish was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-21. Sector: Healthcare. Country: United States of America. Website: eyecarecenterofsnohomish.com. eyecarecenterofsnohomish.com zoominfo.com/c/eyecare-center-of-snohomish/442336650 Eyecare Center of Snohomish is a trusted optometry clinic in Snohomish, Washington, proudly serving its community since 1964.
They offer comprehensive vision and medical eye exams, diagnosing and treating various eye diseases to ensure long-term ocular health.
The clinic also features a full-service optical boutique offering custom-fitted contact lenses and designer eyewear frames from top global brands.
-
AGS Cinemas
August 21, 2026
AGS Cinemas was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-21. Sector: Hospitality. Country: India. Website: agscinemas.com. agscinemas.com zoominfo.com/c/ags-cinemas-private-ltd/356074293 AGS Cinemas is a prominent multiplex chain and film exhibition company based in Chennai, India, operating under the AGS Entertainment brand.
The theaters feature state-of-the-art technical facilities, including Dolby Atmos sound systems and 4K projection for a premium viewing experience.
Their official platform allows customers to easily book tickets online and pre-order a wide variety of food and beverages for their visit.
-
Crystal Pharmatech
August 21, 2026
•
[ ransomware, healthcare, technology ]
Crystal Pharmatech was listed as a victim on the leak site of the Eclipse ransomware group; the attack is estimated to have taken place on 2026-08-21. Sector: Healthcare. Country: United States of America. Website: www.crystalpharmatech.com. Crystal Pharmatech is a technology-driven contract research organization (CRO) that focuses on materials science and engineering for drug development. Established in 2010 and have R&D centers located in Suzhou (China), New Jersey, San Francisco (USA), and Toronto (Canada). Also its key differentiator is integrated and specialized services, including API solid-state research, crystallization, preformulation, formulation development and manufacturing, clinical supply.
-
The Cecilian Bank
August 22, 2026
The Cecilian Bank was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-08-22. Sector: Financial Services. Country: United States of America. Website: thececilianbank.com. The Cecilian Bank is an FDIC-insured financial institution that offers a wide range of personal and business banking services, including checking and savings accounts, loans, and online banking. Their services cater to individuals, small businesses, and large corporations, providing competitive rates and tailored financial solutions. The bank emphasizes convenience with features like online account opening and 24/7 access to banking services. With a commitment to community support, The Cecilian Bank aims to help clients achieve financial independence and business growth.
The company headquarters is located in 104 East Main Street, Cecilia, KY 42724, United States.. 201-500 Employees
-
Schardein Mechanical
August 21, 2026
•
[ ransomware, manufacturing, healthcare ]
Schardein Mechanical was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-08-21. Sector: Manufacturing. Country: United States of America. Website: schardein.com. Schardein Mechanical is a trusted mechanical contractor providing top-of-the-line engineering services to commercial clients in Kentucky and Southern Indiana. Their offerings include design, installation, maintenance, and replacement of HVAC, plumbing, and process piping systems, with 24/7 availability for emergency services. The company caters to a diverse range of industries, including healthcare, education, and manufacturing, ensuring high-quality installations by skilled professionals. With multiple locations in Louisville, Elizabethtown, and Bowling Green, Schardein Mechanical has been delivering innovative solutions since 1984.
The company headquarters is located in 1810 Outer Loop, Louisville, KY 40219, United States.. 51-200 Employees
-
Phoenix Group of Companies
August 21, 2026
•
[ ransomware, manufacturing ]
Phoenix Group of Companies was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-08-21. Sector: Other. Country: United States of America. Website: phoenixlitho.com. The Phoenix Group of Companies is a leading single-source provider of print solutions from concept to completion that produces high quality communications to help businesses rise above the competition and overcome everyday challenges.
The company headquarters is located in 11631 Caroline Road, Philadelphia, PA 19154, United States. 201-500 Employees
-
Pinnacle Hospital
August 21, 2026
•
[ ransomware, healthcare ]
Pinnacle Hospital was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-08-21. Sector: Healthcare. Country: United States of America. Website: pinnaclehealthcare.net. Pinnacle Healthcare / Pinnacle Hospital is a physician-owned, patient-centered healthcare organization operating an 18-bed acute care hospital in Crown Point, Indiana. The company provides a wide range of medical and surgical services through a network of more than 150 physicians and medical specialists. Its services include family medicine, internal medicine, gastroenterology, general surgery, gynecology, orthopedics, pain management, urology, breast care, specialty clinics, and walk-in care. Pinnacle Healthcare focuses on delivering personalized, high-quality care in a smaller hospital environment, emphasizing patient satisfaction, efficient treatment, personal service, and respect for patients and their families.
The company headquarters is located in 9301 Connecticut Drive, Crown Point, IN 46307, United States. 201-500 Employees
-
Proveli
August 20, 2026
•
[ ransomware, technology ]
Proveli was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-08-20. Sector: Technology. Country: United States of America. Website: proveli.com. Proveli is a privately held business founded by two brothers: Reinhardt and Thomas. Proveli prides itself on having an entrepreneurial culture that encourages and rewards innovative thinking, collaboration, and ownership. The company's greatest asset is the company's passionate and dedicated team; it's their drive and passion for developing and executing strategies that have lead to the company being recognized for its accomplishments. Proveli is constantly searching for and evaluating organic and acquisition growth opportunities. If you have an investment opportunity that you feel would be a good fit for Proveli, please contact the company. The company encourage you to read about how we've cultivated a unique and dynamic culture at Proveli - one that helps the company build companies that make a difference.
The company headquarters is 1900 S Liberty Drive, Bloomington, IN 47403, United States. 51-200 Employees
-
AutoDie
August 21, 2026
•
[ ransomware, manufacturing ]
AutoDie was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-08-21. Sector: Manufacturing. Country: United States of America. Website: autodie-llc.com. Founded in 1962 and headquartered in Grand Rapids, MI, Autodie LLC is a company that specializes in design and manufacture large-scale dies for metal stamping.
The company headquarters is located in 44 Coldbrook Street NW, Grand Rapids, MI 49503, United States. 201-500 Employees
-
Ruggles Sign Company
August 20, 2026
•
[ ransomware, manufacturing ]
Ruggles Sign Company was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-08-20. Sector: Manufacturing. Country: United States of America. Website: rugglessign.com. Ruggles Sign Company is a family-owned business with over 75 years of experience in providing personalized service in the signage industry. They offer a comprehensive range of services including project management, design, manufacturing, installation, rebranding, and maintenance for global, national, and regional signage. Their clients include well-known brands such as Nike, J. Crew, and Under Armour, showcasing their capability to handle diverse signage needs. Ruggles Sign is committed to excellence and sustainability, making them a trusted partner in bringing brands into view.
The company headquarters is located in 93 Industry Drive, Versailles, KY 40383-1470, United States. 51-200 Employees
-
Clinical Associates of the Finger Lakes (CAFL)
August 23, 2026
Clinical Associates of the Finger Lakes (CAFL) was listed as a victim on the leak site of the Barracuda ransomware group; the attack is estimated to have taken place on 2026-08-23. Sector: Healthcare. Country: United States of America. Website: clinassoc.com. The company mishandled its clients' and employees' data, which is why it was leaked. We extracted all files and documents from the infrastructure. These documents included children's medical records, personal information of parents and employees, a full dump of all emails from the mail server, and much more.
Target website: https://www.clinassoc.com/
| Severity: HIGH | Size: 447 GB | Status: selling | $1000
-
Namyang Industrial Co., Ltd.
August 23, 2026
•
[ ransomware, leak, manufacturing ]
Namyang Industrial Co., Ltd. was listed as a victim on the leak site of the Barracuda ransomware group; the attack is estimated to have taken place on 2026-08-23. Sector: Manufacturing. Country: South Korea. Website: nyi.co.kr. Selling fresh full database dumps of company Namyang Industrial Co., Ltd. (renamed to Namyang Nexmo).
Infrastructure dump, not website! There information about employers, manufacturing, parts, clients, partners and etc. Total lines (csv format): 17 641 181. | Severity: HIGH | Size: 2.51 GB | Status: free | FREE
-
Skyline Implants & Periodontics
August 23, 2026
Skyline Implants & Periodontics was listed as a victim on the leak site of the Barracuda ransomware group; the attack is estimated to have taken place on 2026-08-23. Sector: Healthcare. Country: United States of America. Website: skylineperio.com. Full personal and servers files dumps from Skyline Implants & Periodontics company. The data files contain: medical documents of patients (including MRI scans of various parts of the body files with the .dcm extension), personal photos, and the personal data of the doctor, Scott Ferguson, as well as documents from the company Skyline Implants & Periodontics in particular, information on equipment and pharmaceutical procurement and other related materials. | Severity: HIGH | Size: 800 GB | Status: free | FREE
-
FactoryFive
August 23, 2026
•
[ ransomware, manufacturing, financial ]
FactoryFive was listed as a victim on the leak site of the metaencryptor ransomware group; the attack is estimated to have taken place on 2026-08-23. Sector: Manufacturing. Country: United States of America. Website: factoryfive.com. Factory Five Racing Inc kit-car manufacturer (Cobra replicas, GTM, Type 65 Coupe, 33 Hot Rod). 9 Tow Road, Wareham MA 02571-1086. ~90 employees, 158 endpoints. Revenue $5.5-6.5M/yr (credit card processing ~$4.3M, avg ticket $1245).
Exfiltrated data categories (~130GB): correspondence (PST archives), CRM contacts (GoldMine), ERP/pricing, engineering CAD (SolidWorks/Rhino), banking statements, insurance policies, tax documentation, legal contracts/NDAs, database backups. Includes detailed materials on several ongoing lawsuits parties, witnesses, testimonies, and related case files, alongside private correspondence.
Risk zones: PCI DSS (card processing $4.3M/yr), MA 201 CMR 17.00 (Massachusetts personal data protection), GDPR (EU clients), CCPA (California clients), active IRS audit, active MA Sales Tax audit, FTC Safeguards Rule. Reputational: customer warranties, partner contracts (SEMA supplier), licenses, litigation exposure. CEO: David T. Smith.
