-
TOA
August 14, 2026
•
[ ransomware, manufacturing ]
TOA was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-14. Country: Japan. Website: toa-const.co.jp. toa-const.co.jp zoominfo.com/c/toa-corp/425840057 TOA Corporation is a prominent Japanese general contractor specializing in marine civil engineering, land reclamation, and port infrastructure development. The company focuses on delivering high-quality, economically viable construction projects while prioritizing environmental sustainability and technological innovation. Through its corporate portal, stakeholders can access detailed information on their advanced engineering services, corporate philosophy, and investor relations.
-
Retail Business Management Systems
August 14, 2026
•
[ ransomware, retail, technology ]
Retail Business Management Systems was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-14. Sector: Retail & E-Commerce. Country: United Kingdom of Great Britain and Northern Ireland. Website: rbms.com. rbms.com zoominfo.com/c/retail-business-management-systems-inc/101712744 Retail Business Management Systems (RBMS) is a specialized technology provider that has delivered Point of Sale and retail management solutions for over 25 years. Focusing heavily on NCR Counterpoint software and hardware integrations, the company supports retail businesses of all sizes primarily across the New York and New Jersey regions. Their platform serves as a central hub for merchants seeking comprehensive tools to optimize store operations, inventory tracking, and overall customer experience.
-
Cityside Homes
August 14, 2026
•
[ ransomware, manufacturing ]
Cityside Homes was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-14. Country: United Kingdom of Great Britain and Northern Ireland. Website: citysidehomes.com. citysidehomes.com zoominfo.com/c/cityside-homes-llc/355153806 Cityside Homes is a new construction home builder based in Houston, Texas, specializing in developing homeowner-focused residential communities. Since 2011, the company has built over 100 distinct neighborhoods, offering modern living spaces tailored to local buyers. Their website serves as a primary resource for exploring floor plans, browsing model homes, and discovering available properties across the greater Houston area.
-
First Coast Heart Vascular Center
August 14, 2026
•
[ ransomware, healthcare ]
First Coast Heart Vascular Center was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-14. Sector: Healthcare. Country: United States of America. Website: firstcoastheart.com. firstcoastheart.com zoominfo.com/c/first-coast-heart--vascular-center/356606344 First Coast Heart & Vascular Center is a premier cardiovascular care provider serving patients across Northeast Florida. Their website highlights a comprehensive range of services, including expert cardiology, electrophysiology, advanced imaging, and vascular surgery. The medical center focuses on delivering innovative, evidence-based treatments and minimally invasive procedures to ensure the highest standard of heart health.
-
KFC Kosova
August 14, 2026
•
[ ransomware, retail ]
KFC Kosova was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-14. Sector: Hospitality. Website: kfckosova.com. kfckosova.com zoominfo.com/c/kfc-kosova/401225793 KFC Kosova is the official regional branch of the global fast-food chain, operating multiple restaurants across Kosovo, including a prominent location at the Albi Mall in Pristina. Their website serves as a central hub for customers to find nearby branches, check out menu options, and access delivery services. Additionally, the platform acts as a primary career portal for local job seekers to apply for various corporate and restaurant positions.
-
The Coffee Bean
August 14, 2026
•
[ ransomware, retail ]
The Coffee Bean was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-14. Sector: Retail & E-Commerce. Country: Malaysia. Website: coffeebean.com.my. coffeebean.com.my zoominfo.com/c/the-coffee-bean/425047768 The Coffee Bean & Tea Leaf Malaysia is the official digital portal for the popular cafe chain, which currently operates over 150 locations across the country. The website allows customers to easily explore the full menu, access exclusive promotions, and manage their MyCBTL loyalty app rewards. It serves as a convenient central platform for ordering premium beverages, redeeming digital vouchers, and staying updated on seasonal cafe offerings.
-
Ollies Place Kidswear
August 14, 2026
•
[ ransomware, retail ]
Ollies Place Kidswear was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-14. Sector: Retail & E-Commerce. Country: Australia. Website: olliesplace.com.au. olliesplace.com.au zoominfo.com/c/ollies-place-kidswear/359503050 Ollie's Place is an Australian retail brand specializing in high-quality, trendy, and comfortable clothing for babies and children. The company offers a unique shopping experience both online and through physical stores across Australia, featuring vibrant prints and stylish designs. They focus on providing fashionable, value-for-money pieces for kids' everyday wear and special milestones.
-
Baxter International, Inc.
August 14, 2026
•
[ ransomware, healthcare, technology ]
Baxter International, Inc. was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-08-14. Sector: Healthcare. Country: United States of America. Website: baxter.com. Over 7.1M Salesforce records containing some PII was compromised. This is a final warning to reach out by 17 Aug 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 14 Aug 2026 | Warning: FINAL WARNING PAY OR LEAK
-
Gravity Coffee
August 14, 2026
Gravity Coffee was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-14. Sector: Retail & E-Commerce. Country: United States of America. Website: gravitycoffee.com. gravitycoffee.com zoominfo.com/c/gravity-coffee-company-llc/373342412 Gravity Coffee is a premium coffee brand known for serving high-quality beverages in its physical cafes and through retail products. Their signature medium roast blends feature a bold, smooth flavor profile with popular notes of hazelnut and chocolate. The company operates multiple locations and focuses on providing an exceptional coffee experience for its customers
-
Cook Medical LLC
August 14, 2026
•
[ ransomware, healthcare ]
Cook Medical LLC was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-08-14. Sector: Healthcare. Country: United States of America. Website: cookmedical.com. Customer data, employee data, and other internal corporate data was compromised. The Company engaged with us but made several paltry offers, did not want to pay what we asked for and decided they are okay with the data leak to happen instead of increasing their offer by a little, then we'd likely have accepted and this post would not have gone up. The Company failed to reach an agreement with us despite our incredible patience, all the chances and offers we made. They don't care. | Size: 182GB+ (compressed) | Updated: 14 August 2026 | SHA256: 8a87ba511f25f20a193f05a6578a620b02302c2075a6f2dff428d1f1a826ba63
-
Gfeller Treuhand und Verwaltungs
August 13, 2026
Gfeller Treuhand und Verwaltungs was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-13. Sector: Professional Services. Country: Switzerland. Website: gfeller-treuhand.ch. gfeller-treuhand.ch zoominfo.com/c/gfeller-treuhand-und-verwaltungs-ag/372661395 Gfeller Treuhand und Verwaltungs AG is a Swiss real estate and fiduciary company based in Dbendorf, operating since 1980. They specialize in comprehensive property management, real estate sales, and leasing services. The firm provides professional administrative support, utilizing modern IT solutions to efficiently handle property maintenance and tenant relations.
-
Carhartt, Inc.
August 13, 2026
•
[ ransomware, leak, retail ]
Carhartt, Inc. was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-08-13. Sector: Retail & E-Commerce. Country: United States of America. Website: carhartt.com. Our demand for this Company was $3.3 million. The Company reached out. However, The Company did not try to negotiate. If The Company attempted to negotiate with us The Company would've ended up saving a good chunk of money. Instead they decided to do (see blow); this is also because The Company hired a very unskilled and incompetent negotiator. If The Company hired competency to negotiate for them, this post would've never been published. [21:24:22] carhartt: After careful review and internal discussions with leadership, we have decided not to move forward with negotiations or further discussions. We appreciate your patience throughout this process. There is millions of customers of data involved here. As we always say, these companies don't care. Millions of records of customer data and vast amount of sensitive information and PII containing employee, customer, customer metadata (royalty info), and other internal corporate data was compromised. The Company failed to reach an agreement with us despite our incredible patience, all the chances and offers we made. They don't care. | Size: 50GB+ (compressed) | Updated: 13 August 2026 | SHA256: 6b37f770382ce82bfa4677466cc51d9269e5a70436eecf101fae6fa9d5d8e8ac
-
IPS
August 13, 2026
•
[ ransomware, manufacturing ]
IPS was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-13. Country: Italy. Website: ipssrl.com. ipssrl.com zoominfo.com/c/ips-srl/372710487 I.P.S. Srl is an Italian company founded in 2005 that specializes in the recovery and recycling of inert waste from construction and demolition activities. They provide environmental services, supply recycled aggregates, and manufacture "Wastile," a 100% ecological and infinitely recyclable thermoplastic tile. The company has received national awards for its rapid revenue growth and high financial reliability in the environmental sector.
-
Sharecare, Inc.
August 13, 2026
Sharecare, Inc. was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-08-13. Sector: Healthcare. Country: United States of America. Website: sharecare.com. This Company data was published due to them hiring a very incompetent and unskilled negotiator. If you choose incompetency to negotiate for you, that is on you. We will be publishing companies data who are negotiating with us, without a warning if negotiators continue to take us as misinformed individuals and BS us. Over 3.4 million Salesforce records containing some PII and 28GB+ of internal corporate data was compromised. The Company failed to reach an agreement with us despite our incredible patience, all the chances and offers we made. They don't care. | Size: 25GB+ (compressed) | Updated: 13 August 2026 | SHA256: 195842b8a53e8d7fe63238dbed753c1c28a86034ca98f99527ef743528b6cc45
-
Metabase
August 12, 2026
•
[ ransomware, technology ]
Metabase was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-08-12. Sector: Technology. Country: United States of America. Website: metabase.com. :P | Updated: 12 August 2026 | SHA256: 84daf8f33954a0b03238a1e0da3ee109d5bc32acc134cfdddfac36b4b75d2480
-
Southern Metals Company
August 10, 2026
•
[ ransomware, manufacturing ]
Southern Metals Company was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-08-10. Sector: Manufacturing. Country: United States of America. Website: southernmetalscompany.com. Southern Metals Company, based in Charlotte, NC, specializes in the recycling of ferrous and non-ferrous metals, including steel, brass, copper, aluminum, and automobile bodies. Established in 1938, the company is committed to responsible recycling, superior customer service, and providing exceptional value for recyclable products. Serving a diverse clientele throughout the Carolinas, Southern Metals has built a reputation for integrity and efficiency over its long history. The company continues to uphold the principles set by its founders while adapting to modern recycling needs.
The company headquarters is located in 2200 Donald Ross Road, Charlotte, NC 28208, United States. 51-200 Employees
-
Integra Castings
August 11, 2026
Integra Castings was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-08-11. Sector: Manufacturing. Country: Canada. Website: thectdgroup.com. Integra Castings is an ISO 9001:2015 certified gray and ductile iron foundry that specializes in melting, molding, and core-making a variety of materials. As a division of The CTD Group, they focus on producing customized solutions for clients while adhering to strict quality assurance guidelines. Their capabilities include high production No-Bake lines for castings weighing up to 4,500 lbs and advanced quality control processes. Integra Castings serves industries requiring high-quality iron castings, including those needing specific material grades for structural and high tensile strength applications.
The company headquarters is located in 200 Pacific Street, Winkler, MB R6W 0K2, Canada. 51-200 Employees
-
Tapper Cuddy LLP
August 11, 2026
•
[ ransomware, leak ]
Tapper Cuddy LLP was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-08-11. Sector: Professional Services. Country: Canada. Website: tappercuddy.com. Tapper Cuddy LLP is a full-service law firm based in Manitoba, specializing in civil litigation, family law, and commercial law. With over 40 years of experience, the firm is dedicated to providing personalized legal representation in a clear and understandable manner. They prioritize client relationships, viewing clients as people rather than cases, and aim to serve a diverse range of legal needs across more than 20 specialized practice areas. Tapper Cuddy LLP is committed to reconciliation and collaboration with Indigenous communities, reflecting their respect for the traditional territories they operate on.
The company headquarters is located in 1000330 St. Mary Avenue, Winnipeg, MB R3C 3Z5, Canada. 51-200 Employees
-
Canadian Mental Health Association
August 11, 2026
Canadian Mental Health Association was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-08-11. Sector: Healthcare. Country: Canada. Website: cmha.ca. The Canadian Mental Health Association provides mental health services and support. The Association offers advocacy, education, research, and services to persons experiencing mental illness throughout Canada and is headquartered in Toronto, Ontario.
The company headquarters is located in 595 Montreal Road, Suite 303, Ottawa, ON K1K 4L2 Canada and 250 Dundas Street West, Suite 401, Toronto, ON, M5T 2Z5 Canada. 5K - 10K Employees
-
Rood & Riddle Equine Hospital
August 11, 2026
Rood & Riddle Equine Hospital was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-08-11. Sector: Healthcare. Country: United States of America. Website: roodandriddle.com. Rood & Riddle Equine Hospital was established in Lexington, Kentucky in 1986 as a partnership between veterinarians William Rood and Thomas Riddle. The facility offers a range of services for the treatment of horses. They have cared for many famous Thoroughbreds both at the racetrack and on the farm. They also provide support for other equine sporting events such as the 2010 FEI World Equestrian Games held in Lexington. Rood & Riddle operates branches in Saratoga Springs, New York and Wellington, Florida.
The company headquarters is located in 2150 Georgetown Road, Lexington, KY 40511, United States. 201-500 Employees
