-
Southeastern Oklahoma State University
July 31, 2026
•
[ ransomware, leak, education ]
Southeastern Oklahoma State University was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-07-31. Sector: Education. Country: United States of America. Website: se.edu. Southeastern Oklahoma State University is a public, four-year university located in Durant, Oklahoma. A data breach exposed student educational records (including names, contact information, Social Security numbers, grades, enrollment data, financial aid information, disciplinary records, and medical information contained in educational records). This breach violates the Family Educational Rights and Privacy Act (FERPA), the HIPAA Privacy Rule, and students' common-law privacy rights. The breach affected employee personal data and injury information, including employee name, date of birth, date of injury, as well as Social Security number, Medicare card, and child custody/consent status. More than 90,000 student names, Social Security numbers, and student identification numbers, as well as Forms 1095-C and more than 490 documents.
-
DL HOLDINGS GROUP
August 19, 2026
•
[ ransomware, finance, leak ]
DL HOLDINGS GROUP was listed as a victim on the leak site of the Orova ransomware group; the attack is estimated to have taken place on 2026-08-19. Sector: Other. Country: Hong Kong. Website: www.dl-holdings.com/en. Our team has taken:
1. Confidential financial records, including unaudited earnings reports, tax filings, and executive compensation details.
2. Internal communications (emails, database, etc.) revealing potential regulatory violations, undisclosed partnerships.
3. Customer and employee PII (Personally Identifiable Information), including passport scans, employment contracts, and NDA-protected agreements.
4. Board meeting minutes and strategic planning documents.
5. Cryptocurrency Investment Plans and progress reports
-
***********
August 19, 2026
*********** was listed as a victim on the leak site of the insomnia ransomware group; the attack is estimated to have taken place on 2026-08-19. Country: United States of America. Website: www.***********.com. A private company offering fluid system solutions for the oil, gas, chemical, and semiconductor sectors. It employs 3,600+ people across 10 factories, three tech centers, and about 100 sales and service locations in 50 different countries.
-
Aurora Health Management
July 27, 2026
•
[ ransomware, healthcare ]
Aurora Health Management was listed as a victim on the leak site of the insomnia ransomware group; the attack is estimated to have taken place on 2026-07-27. Sector: Healthcare. Country: United States of America. Website: www.aurorahealthmgt.com. Aurora Health Management, LLC operates a skilled nursing and rehab center in Frederick, MD. With nearly 25 years in long-term care, it improves troubled facilities through comprehensive management, programs, and Medicare/Medicaid standards.
-
Ericksen Krentel
August 19, 2026
•
[ ransomware, leak, finance ]
Ericksen Krentel was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-08-19. Sector: Professional Services. Website: ericksenkrentel.com. Ericksen Krentel CPAs and Consultants is a New Orleans-based CPA firm offering a wide range of
services including tax, accounting, audit, advisory, and consulting for both businesses and ind
ividuals. Their expertise spans various industries such as construction, healthcare, hospitalit
y, maritime, and nonprofit sectors.
We will upload 30gb of corporate data soon. Detailed client and employee personal information (
passports, DLs, SSNs, addresses and other information), detailed financials, confidential docum
ents, contracts and agreements, NDAs and so on.
-
Advanced Engineering Consultants
August 19, 2026
•
[ ransomware, technology ]
Advanced Engineering Consultants was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-08-19. Sector: Professional Services. Website: aec-group.org.
-
Crowe
August 19, 2026
Crowe was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-08-19. Sector: Professional Services. Country: United States of America. [AI generated] Crowe is a public accounting, consulting, and technology firm headquartered in the United States. It provides audit, tax, advisory, risk, and performance services to clients across various industries, including financial services, healthcare, and government. Crowe operates globally through its membership in Crowe Global, a network of independent accounting and advisory firms spanning over 140 countries.
-
sunsea.co.th
August 19, 2026
sunsea.co.th was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-08-19. Sector: Other. Country: Thailand. Website: sunsea.co.th. Sunsea Plastics P.S. Co., Ltd. is a Thai family-owned company established in 1988, headquartered in Bang Na, Bangkok, Th...
-
Mihuru
August 19, 2026
•
[ ransomware, finance ]
Mihuru was listed as a victim on the leak site of the xpl0itrs ransomware group; the attack is estimated to have taken place on 2026-08-19. Sector: Hospitality. Website: mihuru.com. Consumer travel financing
-
makfreight.com
August 11, 2026
•
[ ransomware, leak ]
makfreight.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-08-11. Sector: Transportation. Country: Canada. Website: makfreight.com. M.A.K. Freight Systems: Seven Vulnerabilities of a Canadian Freight Broker PROLOGUE We have in our p...
-
grecosteel.com
July 9, 2026
•
[ ransomware, manufacturing, financial ]
grecosteel.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-07-09. Sector: Manufacturing. Country: Greece. Website: grecosteel.com. How Greco Steel Products Lost Control of Finances and Payroll PROLOGUE: 19 document categories. A co...
-
am-bition.jp
August 5, 2026
•
[ ransomware, leak, finance ]
am-bition.jp was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-08-05. Sector: Other. Country: Japan. Website: am-bition.jp. Internal Documents of the AMBITION Group and Its Insurance Partner Hope SSI PROLOGUE AMBITION Co., L...
-
alphanumeric.com
August 4, 2026
alphanumeric.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-08-04. Country: United States of America. Website: alphanumeric.com. ALPHANUMERIC SYSTEMS, INC.: Internal Documents of an American IT Company PROLOGUE Internal documents...
-
wcmanagement.info
July 27, 2026
•
[ ransomware, leak, finance ]
wcmanagement.info was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-07-27. Sector: Other. Website: wcmanagement.info. Documents of West Coast Management and Realty PROLOGUE Over 1,000 debt collection records with names...
-
Global Terminal Services
August 19, 2026
•
[ ransomware, energy, manufacturing ]
Global Terminal Services was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-08-19. Sector: Transportation. Country: Turkey. Website: globalterminal-tr.com. GTS legally registered as Global Terminal Hizmetleri A.. It is the largest independent storage terminal for liquid fuels and oil in the entire Mediterranean region. 470gb
-
UFOC
August 19, 2026
•
[ ransomware, technology, manufacturing ]
UFOC was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-08-19. Country: Taiwan. Website: www.ufoc.com.tw/en/company. United Fiber Optic Communication Inc. (UFOC) is an established, publicly traded telecommunications company from Taiwan. The company acts as a total solution provider for communication networks and specializes in the manufacture of fiber optic cables and the provision of integrated technological systems.
-
Delek US
August 19, 2026
Delek US was listed as a victim on the leak site of the Helix ransomware group; the attack is estimated to have taken place on 2026-08-19. Sector: Energy & Utilities. Country: United States of America. Website: delekus.com. Delek US is live. T1 unlocks in 12 hours, then 24 hours per remaining tier.
-
Semana
August 19, 2026
•
[ ransomware, leak ]
Semana was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-19. Sector: Other. Country: Spain. Website: www.semana.es.
-
Target
August 20, 2026
Target was listed as a victim on the leak site of the xpl0itrs ransomware group; the attack is estimated to have taken place on 2026-08-20. Sector: Retail & E-Commerce. Country: United States of America. Website: target.com. General merchandise retail
-
Capgemini Engineering
August 20, 2026
Capgemini Engineering was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-08-20. Sector: Professional Services. Country: France. Website: capgemini.com. [AI generated] Capgemini Engineering is a global technology and engineering services company headquartered in France. It provides R&D and engineering outsourcing services across industries including aerospace, automotive, telecommunications, energy, and semiconductors. Operating in over 30 countries, it combines software, hardware, and connected systems expertise to help clients design, develop, and deploy innovative products and digital solutions.