-
Strategy First International College
August 20, 2026
•
[ ransomware, education ]
Strategy First International College was listed as a victim on the leak site of the DYSPHOR1A ransomware group; the attack is estimated to have taken place on 2026-08-20. Sector: Education. Country: Myanmar. Website: strategyfirst.edu.mm. Normal Hunters operation compromising Strategy First International College (SFIC) student accounts, exposing personal information, academic records, and financial data.
-
Job Net .COM.MM
August 20, 2026
•
[ ransomware, technology, leak ]
Job Net .COM.MM was listed as a victim on the leak site of the DYSPHOR1A ransomware group; the attack is estimated to have taken place on 2026-08-20. Sector: Professional Services. Country: Myanmar. Normal Hunters operation compromising Job Net .COM.MM business data, exposing corporate information, user accounts, and business operations data.
-
Indonesian Police Database
August 20, 2026
Indonesian Police Database was listed as a victim on the leak site of the DYSPHOR1A ransomware group; the attack is estimated to have taken place on 2026-08-20. Sector: Government & Defense. Country: Indonesia. Database containing records of 52,000 Indonesian police officers including email addresses, phone numbers, first and last names, passwords, location details, and 4,000 facial photographs.
-
GUSTO College GLMS
August 20, 2026
•
[ ransomware, education, technology ]
GUSTO College GLMS was listed as a victim on the leak site of the DYSPHOR1A ransomware group; the attack is estimated to have taken place on 2026-08-20. Sector: Education. Country: Thailand. Website: gusto-education.com. Compromised user accounts from GUSTO College's GLMS (Global Learning Management System). Exposed user credentials from the Moodle platform at gusto-education.com.
-
AYUDHYA TH Insurance
August 20, 2026
AYUDHYA TH Insurance was listed as a victim on the leak site of the DYSPHOR1A ransomware group; the attack is estimated to have taken place on 2026-08-20. Sector: Financial Services. Country: Thailand. Leaked data from AYUDHYA (TH Insurance / Allianz Thailand). Internal batch-control system used within the financial/transaction batch-processing ecosystem behind the Allianz customer-facing web platform. Includes admin credentials (TBH2CASH:AAbb1234).
-
POEMA S.r.l.
August 20, 2026
POEMA S.r.l. was listed as a victim on the leak site of the titan ransomware group; the attack is estimated to have taken place on 2026-08-20. Sector: Other. Country: Italy. Website: www.poemasrl.it.
-
Tedesco & Partners STP srl
August 20, 2026
•
[ ransomware, finance ]
Tedesco & Partners STP srl was listed as a victim on the leak site of the titan ransomware group; the attack is estimated to have taken place on 2026-08-20. Sector: Professional Services. Country: Italy. Website: tedescoepartners.it.
-
Alto Calore Servizi SPA
August 20, 2026
•
[ ransomware, energy ]
Alto Calore Servizi SPA was listed as a victim on the leak site of the titan ransomware group; the attack is estimated to have taken place on 2026-08-20. Sector: Energy & Utilities. Country: Italy. Website: www.altocalore.it. [AI generated] Alto Calore Servizi SPA is an Italian public utility company operating in the Campania region of southern Italy. It is primarily engaged in the management and distribution of drinking water and sewage services. The company serves numerous municipalities in the provinces of Avellino and Benevento, handling water supply infrastructure, treatment, and distribution to residential and industrial customers.
-
CTP S.r.l.
August 20, 2026
•
[ ransomware, technology, leak ]
CTP S.r.l. was listed as a victim on the leak site of the titan ransomware group; the attack is estimated to have taken place on 2026-08-20. Country: Italy. Website: ctpsrl.it. [AI generated] CTP S.r.l. is an Italian company operating in the printing and publishing technology sector. Based in Italy, it specializes in the development and supply of software and systems for editorial production, prepress, and content management. The company serves media, publishing, and printing industries, providing workflow automation solutions that help customers manage and streamline the production of newspapers, magazines, and other printed or digital content.
-
Frisian Flag Indonesia
August 20, 2026
•
[ ransomware, manufacturing ]
Frisian Flag Indonesia was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-08-20. Sector: Agriculture and Food Production. Country: Indonesia. Frisian Flag Indonesia specializes in high-quality dairy products, including sweetened condensed milk, UHT milk, powdered milk for families, and cheese. The company aims to provide nutritious options that support the health and well-being of families, offering products enriched with vitamins and minerals. Their target clients include families, pregnant women, and children, focusing on delivering nutritional benefits through their diverse product range. Established in 1871, Frisian Flag is committed to building strong families by promoting healthy dietary habits.
-
Termotecnica Industriale S.r.l.
August 20, 2026
•
[ ransomware, manufacturing, energy ]
Termotecnica Industriale S.r.l. was listed as a victim on the leak site of the titan ransomware group; the attack is estimated to have taken place on 2026-08-20. Sector: Manufacturing. Country: Italy. Website: termotecnica.it. [AI generated] Termotecnica Industriale S.r.l. is an Italian company operating in the industrial thermal engineering sector. Based in Italy, it specializes in the design and manufacturing of heating systems, thermal equipment, and industrial burners. The company serves various industrial clients requiring customized thermal solutions for production processes. It operates primarily in the energy and industrial plant engineering market within Italy and potentially broader European markets.
-
Qualiflex Datacenter | HWZ-Studiengnge (fh-hwz.ch), myenb.ch, etc
August 20, 2026
•
[ ransomware, technology ]
Qualiflex Datacenter | HWZ-Studiengnge (fh-hwz.ch), myenb.ch, etc was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-08-20. Sector: Technology. Country: Switzerland. Website: fh-hwz.ch. Qualiflex Datacenter - data from companies such as HWZ-Studiengnge (fh-hwz.ch), myenb.ch, schelling.ch, kaelteringag.ch & kaeltebucher.ch, cbmswiss.ch, vitabad.ch, ign8.ch, etc., was stolen
-
Latoplast
August 20, 2026
•
[ ransomware, manufacturing ]
Latoplast was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-08-20. Sector: Manufacturing. Country: Latvia. Website: www.latoplast.com. Canada
-
Be Media
August 20, 2026
•
[ ransomware, technology ]
Be Media was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-08-20. Sector: Technology. Country: United States of America. Website: www.bemedia.com. United States
-
NetExam
August 20, 2026
•
[ ransomware, technology, education ]
NetExam was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-08-20. Sector: Technology. Website: netexam.com. NetExam (netexam.com) the website of NetExam LMS+, a US-based SaaS learning management system built for external audiences rather than internal employees. It helps companies train, certify, and enable their channel partners, customers, and association members, with features like certification tracking, self-paced and instructor-led courses, e-commerce, white-labeling, Salesforce integration, and AI-powered course authoring agents. Headquartered in Dallas, with clients including AMD, AT&T, Oracle, Trellix, and Sabre. [Size: 18.1 MB | Sector: Education, Retail, Other]
-
marvin
August 20, 2026
•
[ ransomware, technology ]
marvin was listed as a victim on the leak site of the iah6477 ransomware group; the attack is estimated to have taken place on 2026-08-20. Sector: Technology. Size: 2.2 TiB
-
acima
August 20, 2026
•
[ ransomware, finance ]
acima was listed as a victim on the leak site of the iah6477 ransomware group; the attack is estimated to have taken place on 2026-08-20. Sector: Financial Services. Country: United States of America. Website: acima.com. Size: 2.1 TiB
-
regencycenters
August 20, 2026
regencycenters was listed as a victim on the leak site of the iah6477 ransomware group; the attack is estimated to have taken place on 2026-08-20. Sector: Retail & E-Commerce. Country: United States of America. Website: regencycenters.com. Size: 219.5 GiB
-
Cyrus******
August 20, 2026
•
[ ransomware, technology ]
Cyrus****** was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-08-20. Sector: Technology. Country: United States of America. Website: cyrusone.com. This is a final warning to reach out by end of day 24 Aug 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 20 Aug 2026 | Warning: FINAL WARNING PAY OR LEAK
-
Ayuntamiento de Velilla de San Antonio
August 12, 2026
•
[ ransomware, government ]
Ayuntamiento de Velilla de San Antonio was listed as a victim on the leak site of the kairos ransomware group; the attack is estimated to have taken place on 2026-08-12. Sector: Government & Defense. Country: Spain. Website: ayto-velilla.es. El Ayuntamiento de Velilla de San Antonio es el organismo oficial de gobierno local y administracin del municipio de Velilla de San Antonio, situado en la Comunidad de Madrid, Espaa. Gestiona los servicios pblicos, el padrn, los impuestos locales y la vida ciudadana de la localidad.