-
galmack.com.ec
July 21, 2026
galmack.com.ec was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-07-21. Sector: Other. Country: Ecuador. Website: galmack.com.ec. GALMACK S.A.: Internal Documents of an Ecuadorian Auto Dealership Holding PROLOGUE Inside: monthly b...
-
WEBA Meubelen
August 16, 2026
WEBA Meubelen was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-16. Sector: Retail & E-Commerce. Country: Belgium. Website: www.weba.be.
-
Mulino Padano
August 16, 2026
•
[ ransomware, manufacturing ]
Mulino Padano was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-16. Sector: Agriculture and Food Production. Country: Italy. Website: www.mulinopadano.it.
-
Moscord
August 14, 2026
•
[ ransomware, technology ]
Moscord was listed as a victim on the leak site of the Eclipse ransomware group; the attack is estimated to have taken place on 2026-08-14. Country: Singapore. Website: moscord.com. Moscord is a digital marketplace that connects buyers and sellers in the maritime industry, offering a platform for various suppliers to aggregate and present their products. The company aims to enhance business operations for its clients by providing innovative solutions in procurement, logistics, and eCommerce. Targeting maritime and oil & gas sectors, Moscord serves a global clientele through its extensive network of ports and offices across multiple countries. With a focus on improving user experience and operational efficiency, Moscord leverages advanced technology and industry expertise to facilitate seamless transactions.
-
SAGASTA sro
August 16, 2026
•
[ ransomware, technology ]
SAGASTA sro was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-08-16. Country: Czechia. Website: sagasta.cz. SAGASTA is a design and engineering company specializing in modern construction, offering comprehensive design, engineering, and consulting services in the fields of railway, road, bridge, and water management construction.
-
Spoonful of Comfort
August 16, 2026
•
[ ransomware, retail ]
Spoonful of Comfort was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-16. Sector: Hospitality. Country: United States of America. Website: www.spoonfulofcomfort.com.
-
Coface
August 16, 2026
Coface was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-16. Sector: Financial Services. Country: Italy. Website: www.coface.it.
-
AGUNSA
August 16, 2026
•
[ ransomware, manufacturing ]
AGUNSA was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-16. Sector: Transportation. Country: Chile. Website: www.agunsa.com.
-
Teikoku USA
August 16, 2026
•
[ ransomware, manufacturing ]
Teikoku USA was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-16. Sector: Manufacturing. Country: United States of America. Website: www.teikokuusa.com.
-
Albania's Official National Teacher Training Portal
August 16, 2026
•
[ ransomware, leak, education ]
Albania's Official National Teacher Training Portal was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-08-16. Sector: Education. Country: Albania. Albanias official national teacher training portal provides centralized professional development resources and accredited programs for educators nationwide.
This leak include data such as;
Roughly ~100k Full national ID numbers, full names and teacher certificates in PDF. [Size: 5.9 GB | Sector: Education, Government]
-
Moores
August 17, 2026
•
[ ransomware, retail, manufacturing ]
Moores was listed as a victim on the leak site of the bravox ransomware group; the attack is estimated to have taken place on 2026-08-17. Sector: Retail & E-Commerce. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.moores.co.uk. Kitchen solutions provider for housing developers.
-
Vermont XCenter
August 17, 2026
•
[ ransomware, technology ]
Vermont XCenter was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-08-17. Country: Brazil. Website: vermont.com.br. A Vermont coloca seus clientes estrategicamente no Centro das Decises, pois entende que o cliente deve estar no Centro das Atenes. Com isso estabelecido, a companhia acredita que mais simples interpretar o mercado a partir dos desejos e perspectivas do mesmo. Vermont XCenter: Centro de interAes modernas que promovem experincias em relacionamento. Solues de Contact Center que contam com um avano tecnolgico do atendimento e que se adaptam s necessidades de um consumidor cada vez mais exigente e conectado; Solues de Tecnologia: Pensada por meio de um portflio que vai desde fbrica de software, mapeamento e modelagem dos processos de negcios (BPM) at Service e Help Desk. Com Skills tcnicos e avanadas linguagens de programao.
-
Otter Tail County, Minnesota
August 11, 2026
•
[ ransomware, government ]
Otter Tail County, Minnesota was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-08-11. Sector: Government & Defense. Country: United States of America. Website: ottertailcounty.gov. https://ottertailcounty.gov/
-
Lloyd Coils Europe
August 17, 2026
•
[ ransomware, manufacturing, technology ]
Lloyd Coils Europe was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-08-17. Sector: Manufacturing. Country: United Kingdom of Great Britain and Northern Ireland. Website: lloydcoils.eu. [manufacturer] 4 Coils Technology s.r.o. (trading as Lloyd Coils Europe) is a Czech-headquartered manufacturer of custom heat exchangers for the HVAC&R industry, with offices in Germany, France, and the United Kingdom. They serve 200+ OEM customers across 39 countries names like Carrier, Daikin, Trane, Systemair, Remak, GEA, Swegon, and VTS.
Their competitive advantage comes from two things: decades of thermodynamic engineering expertise embodied in their MyCoil selection software (licensed to OEM customers worldwide), and a manufacturing capability for custom heat exchangers. Approximately 200 employees work across four countries.
-
Doimo Cucine
August 17, 2026
Doimo Cucine was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-08-17. Sector: Manufacturing. Country: Italy. Website: doimocucine.com. Doimo Cucine specializes in modern, customizable designer kitchens that blend beauty and harmony. The company emphasizes a holistic approach to kitchen design, offering a versatile system called All-arounD for creating personalized spaces. With a commitment to quality and innovation, all production is carried out in Italy, ensuring high standards and craftsmanship. Their target clients are those seeking stylish and functional kitchen solutions that nourish the soul.
-
Castilla La Mancha
August 17, 2026
•
[ ransomware, government ]
Castilla La Mancha was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-08-17. Sector: Government & Defense. Country: Spain. Website: castillalamancha.es. The Government of Castilla-La Mancha provides a wide range of services and information related to public administration, economy, education, health, and social services. It aims to support various sectors including agriculture, tourism, and employment, while also addressing issues like sustainability and equality. The intended clients include residents of Castilla-La Mancha, businesses, and individuals seeking assistance in various life situations. The government also promotes transparency and participation through its digital platforms.
-
Natco Home Group
August 17, 2026
Natco Home Group was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-08-17. Sector: Retail & E-Commerce. Country: United States of America. Website: natcohome.com. [manufacturer] Natco Home Group a fourth-generation, family-owned home furnishings manufacturer headquartered in West Warwick, Rhode Island, with ~800 employees, ~$100M annual revenue, and facilities across seven US states.
The exfiltrated dataset spans the company's entire corporate history and includes:
Social Security numbers in plaintext for 100120 legacy employees dating back to 1979 in an unencrypted PayUSA payroll database, plus 10 years of ADP payroll data (20172026) covering 7001,000 current and former employees pay stubs, W-2s, W-4s, 401k records, drug test results, background checks, and medical leave records.
Years of divisional financial statements, income tax records, customer credit data for major retailers, 18 years of bad-debt reserve calculations, and acquisition-related materials.
-
Eva AI Limited
August 17, 2026
•
[ ransomware, technology ]
Eva AI Limited was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2026-08-17. Sector: Technology. Country: United Kingdom of Great Britain and Northern Ireland. Website: eva.ai. Human Resources
-
Mighty Kingdom
August 17, 2026
•
[ ransomware, technology ]
Mighty Kingdom was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2026-08-17. Sector: Technology. Country: Australia. Website: mightykingdom.com. Multimedia, Games
-
Rx Networks
July 21, 2026
•
[ ransomware, technology ]
Rx Networks was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-07-21. Sector: Technology. Country: Canada. [AI generated] Rx Networks is a Canadian technology company headquartered in Vancouver, British Columbia. It specializes in positioning and location technologies, providing GPS and GNSS assistance data solutions. The company serves the mobile and connected devices industry, offering services that improve location acquisition speed and accuracy. Its clients include device manufacturers, chipset vendors, and mobile network operators worldwide.
