-
Lloyd Coils Europe
August 17, 2026
•
[ ransomware, manufacturing, technology ]
Lloyd Coils Europe was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-08-17. Sector: Manufacturing. Country: United Kingdom of Great Britain and Northern Ireland. Website: lloydcoils.eu. [manufacturer] 4 Coils Technology s.r.o. (trading as Lloyd Coils Europe) is a Czech-headquartered manufacturer of custom heat exchangers for the HVAC&R industry, with offices in Germany, France, and the United Kingdom. They serve 200+ OEM customers across 39 countries names like Carrier, Daikin, Trane, Systemair, Remak, GEA, Swegon, and VTS.
Their competitive advantage comes from two things: decades of thermodynamic engineering expertise embodied in their MyCoil selection software (licensed to OEM customers worldwide), and a manufacturing capability for custom heat exchangers. Approximately 200 employees work across four countries.
-
Doimo Cucine
August 17, 2026
Doimo Cucine was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-08-17. Sector: Manufacturing. Country: Italy. Website: doimocucine.com. Doimo Cucine specializes in modern, customizable designer kitchens that blend beauty and harmony. The company emphasizes a holistic approach to kitchen design, offering a versatile system called All-arounD for creating personalized spaces. With a commitment to quality and innovation, all production is carried out in Italy, ensuring high standards and craftsmanship. Their target clients are those seeking stylish and functional kitchen solutions that nourish the soul.
-
Castilla La Mancha
August 17, 2026
•
[ ransomware, government ]
Castilla La Mancha was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-08-17. Sector: Government & Defense. Country: Spain. Website: castillalamancha.es. The Government of Castilla-La Mancha provides a wide range of services and information related to public administration, economy, education, health, and social services. It aims to support various sectors including agriculture, tourism, and employment, while also addressing issues like sustainability and equality. The intended clients include residents of Castilla-La Mancha, businesses, and individuals seeking assistance in various life situations. The government also promotes transparency and participation through its digital platforms.
-
Natco Home Group
August 17, 2026
Natco Home Group was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-08-17. Sector: Retail & E-Commerce. Country: United States of America. Website: natcohome.com. [manufacturer] Natco Home Group a fourth-generation, family-owned home furnishings manufacturer headquartered in West Warwick, Rhode Island, with ~800 employees, ~$100M annual revenue, and facilities across seven US states.
The exfiltrated dataset spans the company's entire corporate history and includes:
Social Security numbers in plaintext for 100120 legacy employees dating back to 1979 in an unencrypted PayUSA payroll database, plus 10 years of ADP payroll data (20172026) covering 7001,000 current and former employees pay stubs, W-2s, W-4s, 401k records, drug test results, background checks, and medical leave records.
Years of divisional financial statements, income tax records, customer credit data for major retailers, 18 years of bad-debt reserve calculations, and acquisition-related materials.
-
Eva AI Limited
August 17, 2026
•
[ ransomware, technology ]
Eva AI Limited was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2026-08-17. Sector: Technology. Country: United Kingdom of Great Britain and Northern Ireland. Website: eva.ai. Human Resources
-
Mighty Kingdom
August 17, 2026
•
[ ransomware, technology ]
Mighty Kingdom was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2026-08-17. Sector: Technology. Country: Australia. Website: mightykingdom.com. Multimedia, Games
-
Rx Networks
July 21, 2026
•
[ ransomware, technology ]
Rx Networks was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-07-21. Sector: Technology. Country: Canada. [AI generated] Rx Networks is a Canadian technology company headquartered in Vancouver, British Columbia. It specializes in positioning and location technologies, providing GPS and GNSS assistance data solutions. The company serves the mobile and connected devices industry, offering services that improve location acquisition speed and accuracy. Its clients include device manufacturers, chipset vendors, and mobile network operators worldwide.
-
Wishfully Studios
August 17, 2026
•
[ ransomware, technology ]
Wishfully Studios was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2026-08-17. Sector: Technology. Country: Sweden. Website: wishfully.se. Games
-
Arizona State University (ASU)
August 17, 2026
Arizona State University (ASU) was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2026-08-17. Sector: Education. Country: United States of America. Website: asu.edu. Colleges,Universities
-
Planungsgruppe M+M AG
August 17, 2026
•
[ ransomware, leak, technology ]
Planungsgruppe M+M AG was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-08-17. Sector: Professional Services. Country: Germany. Website: dieplanungsgruppe.de. Planungsgruppe M+M AG is a German Aktiengesellschaft headquartered in Bblingen, Baden-Wrttemberg, with approximately 432 employees across 10 offices (Bblingen, Stuttgart, Mnchen, Nrnberg, Regensburg, Ingolstadt, Augsburg, Esslingen, Mannheim, Frankfurt). Annual revenue: approximately 52 million. The firm provides architecture, urban planning, structural engineering, building physics, fire protection, BIM, landscape planning, and interior design services. Over 5,200 projects completed across decades of operation.
The exfiltrated dataset spans two complete file servers (MMBB04, MMBB05), plus the DATEV financial processing archives, SFirm banking software databases, the ELO document management system, Outlook email archives (PSTs), and payroll/HR data a total of 268 GB across approximately 124,000 files, covering 2006 to 2026.
-
4M REALTY COMPANY
August 17, 2026
•
[ ransomware, retail, leak ]
4M REALTY COMPANY was listed as a victim on the leak site of the Global Secret Group ransomware group; the attack is estimated to have taken place on 2026-08-17. Sector: Retail & E-Commerce. Country: United States of America. Website: 4mrealty.com. Country: Texas, US |
Website: 4mrealty.com |
Revenue: $5 Million |
Industry: Real Estate Brokerage, Real Estate Sales, Property Sales, Commercial Real Estate |
Employees: 20-50 |
Properties: 237 GB (54,995 Files, 4,600 Folders)
-
DL E&C
August 17, 2026
•
[ ransomware, manufacturing ]
DL E&C was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-08-17. Sector: Manufacturing. Country: South Korea. Website: dlenc.co.kr. DL E&C Co., Ltd. is a major South Korean construction and engineering company, founded in 1939, specializing in building, infrastructure, housing, and industrial/energy plant projects worldwide.
-
The Rubber Group
August 17, 2026
•
[ ransomware, manufacturing ]
The Rubber Group was listed as a victim on the leak site of the Global Secret Group ransomware group; the attack is estimated to have taken place on 2026-08-17. Sector: Manufacturing. Country: United States of America. Website: www.rubber-group.com. Country: New Hampshire,US |
Website: www.rubber-group.com |
Revenue: $19.4 Million |
Industry: Plastics Manufacturing, Tires & Rubber, Manufacturing |
Employees: 50-100 |
Properties: 162 GB (207,203 Files, 21,624 Folders)
-
Lansing Urgent Care
August 16, 2026
•
[ ransomware, healthcare ]
Lansing Urgent Care was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-08-16. Sector: Healthcare. Country: United States of America. Lansing Urgent Care provides a range of urgent care services for both adults and children, including on-site medications, lab tests, and X-rays. Their facilities are designed for quick visits, with an average wait time of under one hour, and they offer telemedicine options for added convenience. The company caters to patients seeking immediate medical attention, sports physicals, and occupational health services. With multiple locations in Lansing, Okemos, and surrounding areas, they aim to deliver friendly and efficient healthcare.
-
BMW Group
August 17, 2026
•
[ ransomware, manufacturing ]
BMW Group was listed as a victim on the leak site of the xpl0itrs ransomware group; the attack is estimated to have taken place on 2026-08-17. Sector: Manufacturing. Country: Germany. Website: bmwgroup.com. German multinational luxury vehicles
-
Woodhaven Association
August 17, 2026
Woodhaven Association was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-08-17. Sector: Other. Country: United States of America. Website: www.woodhavenassociation.com. United States
-
Sam Pack Auto Group
August 17, 2026
•
[ ransomware, retail ]
Sam Pack Auto Group was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-08-17. Sector: Retail & E-Commerce. Country: United States of America. Website: www.sampack.com. United States
-
Bridgeport Capital Services
August 17, 2026
•
[ ransomware, finance ]
Bridgeport Capital Services was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-08-17. Sector: Financial Services. Country: United States of America. Website: www.bridgeportcapital.com. United States
-
EmpireWorks
August 17, 2026
EmpireWorks was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-17. Sector: Other. Website: www.empireworks.com.
-
The University of the West Indies
August 17, 2026
•
[ ransomware, education ]
The University of the West Indies was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-17. Sector: Education. Country: Trinidad & Tobago. Website: www.uwi.edu.