-
Clifton Architectural Glass & Metal
August 19, 2026
Clifton Architectural Glass & Metal was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-08-19. Sector: Manufacturing. Country: United States of America. Website: cliftonglass.com. A company that installs double-pane windows
-
Battle Creek Public Schools
August 21, 2026
Battle Creek Public Schools was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-08-21. Sector: Education. Country: United States of America. Website: battlecreekschools.net. Battle Creek Public Schools Battle Creek Public Schools in Nebraska provides educational services for students from pre-kindergarten through 12th grade. We are pleased to present:Student records of named minors:** IEP/special-ed files, disability determination notices, discipline/suspension records.Federal funds compliance trail (ESSA/Title I application), staff health-spending claims (payflex/EHA) More
-
Gindre India
August 21, 2026
•
[ ransomware, manufacturing ]
Gindre India was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-21. Sector: Manufacturing. Country: India. Website: www.gindre.com.
-
Fairview Dental Group
August 21, 2026
•
[ ransomware, healthcare, leak ]
Fairview Dental Group was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-08-21. Sector: Healthcare. Country: United States of America. Fairview Dental Group Fairview Dental Group offers a range of dental services including family dentistry, cosmetic treatments, dental implants, and invisible braces.We are pleased to present:Full patient database, patient X-rays, scanned forms/consents/invoices, health records (PHI) of the entire practice, unencrypted. More
-
Cinépolis
August 21, 2026
•
[ ransomware, retail ]
Cinpolis was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-21. Sector: Hospitality. Country: Mexico. Website: www.cinepolis.com.
-
JC Sales
July 10, 2026
•
[ ransomware, retail, leak ]
JC Sales was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-07-10. Sector: Retail & E-Commerce. Country: United States of America. Website: jcsalesweb.com. JC Sales is a leading full-service wholesaler based in Los Angeles, California, specializing in
a vast array of wholesale products including health and beauty items, food and beverages, gene
ral merchandise, and seasonal items.
We will upload 206gb of corporate data soon. Detailed personal employee information (passports,
DLs, addresses, phones, contacts), confidential financials, contracts and agreements, client i
nformation, NDAs and so on.
-
iPic
August 21, 2026
•
[ ransomware, hospitality ]
iPic was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-21. Sector: Hospitality. Country: United States of America. Website: www.ipic.com.
-
Quaker State Mexico
August 21, 2026
•
[ ransomware, energy ]
Quaker State Mexico was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-21. Sector: Energy & Utilities. Country: Mexico. Website: www.quakerstate.com.mx.
-
Nteitalia
August 21, 2026
Nteitalia was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-08-21. Sector: Technology. Country: Italy. Website: nteitalia.it. NTE Italia, an engineering and telecommunications service provider based in Catanzaro, Italy. Sensitive thousands of documents are compromised.
-
cedarridge.org
August 1, 2026
•
[ ransomware, healthcare ]
cedarridge.org was listed as a victim on the leak site of the L Group ransomware group; the attack is estimated to have taken place on 2026-08-01. Country: United States of America. Website: cedarridge.org.
-
Victory Personal Care, Inc
July 15, 2026
Victory Personal Care, Inc was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-07-15. Sector: Retail & E-Commerce. Country: United States of America. Website: victorypersonalcare.weebly.com.
-
Meridian Logistics Group
August 22, 2026
•
[ ransomware, financial ]
Meridian Logistics Group was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-22. Sector: Transportation. Country: United States of America. Website: meridianlogisticgroup.com. Full network image staged. ERP exports, dispatch DB and payroll archives recovered. Pending final inventory before publication.
-
Everglades Boats
August 13, 2026
•
[ ransomware, manufacturing ]
Everglades Boats was listed as a victim on the leak site of the termite ransomware group; the attack is estimated to have taken place on 2026-08-13. Sector: Manufacturing. Country: United States of America. Website: www.evergladesboats.com. Founded in 2001, Everglades Boats is a manufacturer of offshore fishing boats. The company is headquartered in Edgewater, Florida.
-
CRI Electric
August 22, 2026
CRI Electric was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-08-22. Sector: Energy & Utilities. Country: United States of America. Website: crielectric.com. CRI Electric CRI Electric is a veteran-owned business based in San Antonio, providing professional electrical services since 1998. They cater to both residential and commercial clients, offering services such as emergency electrical repairs, EV charger installations, and home rewiring. We are pleased to present:Employee's federal account artifacts** (`HR-Confidential\Israel's Forms`): Login.gov personal recovery key (VA identity), TSP (retirement savings), ID.me, DoD DS Logon, PIEE (DoD contract payments)151 vendor W-9 forms** (SSN/EIN), payroll docs, HR-lawyer (privileged) correspondence, OSHA-adjacent injury/incident reports with photos.Public-sector bid pricing** (20252026: SAWS HQ EV charging, SAISD, NISD) bid-competitiveness and Davis-Bacon certified-payroll context.Corporate docs (SDVOSB certification, Articles, bylaws, stock ledgers), QuickBooks financials, a Power of Attorney More
-
Mogren, Glessner & Ahrens, P.S.
August 20, 2026
•
[ ransomware, leak, finance ]
Mogren, Glessner & Ahrens, P.S. was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-08-20. Sector: Professional Services. Country: United States of America. Website: mgrlaw.com. Services in family law
-
Island Networks
August 20, 2026
•
[ ransomware, technology ]
Island Networks was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-08-20. Sector: Technology. Country: Jamaica. Website: islandnetjm.com. Provider for Business-class Internet, Cybersecurity & Home Wi-Fi
-
Freelom
August 22, 2026
•
[ ransomware, technology ]
Freelom was listed as a victim on the leak site of the spacebears ransomware group; the attack is estimated to have taken place on 2026-08-22. Country: Czechia. Website: freelom.cz. Freelom.net s.r.o. is a Czech internet service provider and IT company based in Lomnice nad Popelkou, which has been operating since 2009 .The company's primary focus is providing wireless internet access via its own network, with services available 24 hours a day, 7 days a week.The company is led by two managing directors, Ji Plichta and Petr Mal.A priority for Freelom.net is the speed, reliability, and quality of its services , and it aims to resolve technical issues within a maximum of 24 hours-SQL Data (All client personal data) https://freelom.cz/
-
holzmarkt chemnitz
August 22, 2026
holzmarkt chemnitz was listed as a victim on the leak site of the spacebears ransomware group; the attack is estimated to have taken place on 2026-08-22. Sector: Retail & E-Commerce. Country: Germany. Website: holzmarkt-chemnitz.de. Holzmarkt Chemnitz is a specialized retail store for building materials and wood products, operating two branches in Chemnitz (Fichtestrae and Kalkstrae).They serve as a competent partner for both professional builders and private customers.-Personal information of employees and clients-Financial documents-SQL DB https://holzmarkt-chemnitz.de/
-
icnavais.com
August 22, 2026
icnavais.com was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-08-22. Country: Portugal. Website: icnavais.com. The Itagua Construes Navais S.A. known as ICN, is a Brazilian state-owned defence company special...
-
PT. Bank Perekonomian Rakyat Bintan
August 22, 2026
•
[ ransomware, finance ]
PT. Bank Perekonomian Rakyat Bintan was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-08-22. Sector: Financial Services. Country: Indonesia. [AI generated] PT. Bank Perekonomian Rakyat Bintan is an Indonesian rural bank, known as a Bank Perkreditan Rakyat or BPR, operating in the Bintan regency of Riau Islands province, Indonesia. It provides basic financial services including savings, deposits, and credit facilities primarily to local communities, small businesses, and micro-enterprises. As a rural bank, it operates under supervision of the Indonesian Financial Services Authority, OJK, serving the local economy.