-
EKEPIS
August 14, 2026
•
[ ransomware, leak, government ]
EKEPIS was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-14. Country: Greece. Website: ekepis.gr. ekepis.gr rocketreach.co/ekepis-ethniko-kentro-pistopoiisis-domon-profile_b6d46b6ac7408ffe EKEPIS was Greece's National Centre for the Accreditation of Continuing Vocational Training, responsible for certifying adult educators and lifelong learning providers. The organization no longer exists, as its accreditation and certification duties were absorbed by EOPPEP (), the National Organisation for the Certification of Qualifications and Vocational Guidance. Today, anyone looking for their services must go through EOPPEP or the official Greek government portal, since the old ekepis.gr domain is no longer an official resource.
-
Avanta Maroc Ex Adecco
August 14, 2026
Avanta Maroc Ex Adecco was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-14. Sector: Professional Services. Country: Morocco. Website: avanta.ma. avanta.ma rocketreach.co/avanta-maroc-ex-adecco-profile_b7352c87c4297b95
Avanta Maroc, formerly known as Adecco Maroc, is a prominent human resources and recruitment agency based in Casablanca, Morocco. The company specializes in connecting job seekers with top employers by offering tailored workforce solutions and staffing services. Their platform serves as a vital hub for career opportunities, professional development, and corporate HR management across various industries in the region.
-
Plaza Auto Mall
August 14, 2026
Plaza Auto Mall was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-14. Sector: Retail & E-Commerce. Country: Mexico. Website: plazaautomall.com. plazaautomall.com zoominfo.com/c/plaza-auto-mall/194512238 Plaza Auto Mall is a family-owned dealership group based in Brooklyn, New York, that has been serving local drivers since 1975. They offer an extensive inventory of over 1,000 new, used, and certified pre-owned vehicles across multiple automotive brands all in one location. The platform also provides comprehensive automotive services, including financing options, vehicle maintenance, parts sales, and a dedicated body shop.
-
Tempel
August 14, 2026
Tempel was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-14. Sector: Other. Country: Germany. Website: tempel.com. tempel.com zoominfo.com/c/tempel/87867666 Tempel Steel Company, a division of Worthington Steel, is a leading global manufacturer of high-precision electrical steel laminations. Established in 1945, the company provides essential components for motors, generators, and transformers used across the automotive, eMobility, and energy sectors. Their platform showcases advanced precision metal stamping and overmolding services designed to improve product performance and efficiency.
-
TOA
August 14, 2026
•
[ ransomware, manufacturing ]
TOA was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-14. Country: Japan. Website: toa-const.co.jp. toa-const.co.jp zoominfo.com/c/toa-corp/425840057 TOA Corporation is a prominent Japanese general contractor specializing in marine civil engineering, land reclamation, and port infrastructure development. The company focuses on delivering high-quality, economically viable construction projects while prioritizing environmental sustainability and technological innovation. Through its corporate portal, stakeholders can access detailed information on their advanced engineering services, corporate philosophy, and investor relations.
-
Retail Business Management Systems
August 14, 2026
•
[ ransomware, retail, technology ]
Retail Business Management Systems was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-14. Sector: Retail & E-Commerce. Country: United Kingdom of Great Britain and Northern Ireland. Website: rbms.com. rbms.com zoominfo.com/c/retail-business-management-systems-inc/101712744 Retail Business Management Systems (RBMS) is a specialized technology provider that has delivered Point of Sale and retail management solutions for over 25 years. Focusing heavily on NCR Counterpoint software and hardware integrations, the company supports retail businesses of all sizes primarily across the New York and New Jersey regions. Their platform serves as a central hub for merchants seeking comprehensive tools to optimize store operations, inventory tracking, and overall customer experience.
-
Cityside Homes
August 14, 2026
•
[ ransomware, manufacturing ]
Cityside Homes was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-14. Country: United Kingdom of Great Britain and Northern Ireland. Website: citysidehomes.com. citysidehomes.com zoominfo.com/c/cityside-homes-llc/355153806 Cityside Homes is a new construction home builder based in Houston, Texas, specializing in developing homeowner-focused residential communities. Since 2011, the company has built over 100 distinct neighborhoods, offering modern living spaces tailored to local buyers. Their website serves as a primary resource for exploring floor plans, browsing model homes, and discovering available properties across the greater Houston area.
-
First Coast Heart Vascular Center
August 14, 2026
•
[ ransomware, healthcare ]
First Coast Heart Vascular Center was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-14. Sector: Healthcare. Country: United States of America. Website: firstcoastheart.com. firstcoastheart.com zoominfo.com/c/first-coast-heart--vascular-center/356606344 First Coast Heart & Vascular Center is a premier cardiovascular care provider serving patients across Northeast Florida. Their website highlights a comprehensive range of services, including expert cardiology, electrophysiology, advanced imaging, and vascular surgery. The medical center focuses on delivering innovative, evidence-based treatments and minimally invasive procedures to ensure the highest standard of heart health.
-
KFC Kosova
August 14, 2026
•
[ ransomware, retail ]
KFC Kosova was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-14. Sector: Hospitality. Website: kfckosova.com. kfckosova.com zoominfo.com/c/kfc-kosova/401225793 KFC Kosova is the official regional branch of the global fast-food chain, operating multiple restaurants across Kosovo, including a prominent location at the Albi Mall in Pristina. Their website serves as a central hub for customers to find nearby branches, check out menu options, and access delivery services. Additionally, the platform acts as a primary career portal for local job seekers to apply for various corporate and restaurant positions.
-
The Coffee Bean
August 14, 2026
•
[ ransomware, retail ]
The Coffee Bean was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-14. Sector: Retail & E-Commerce. Country: Malaysia. Website: coffeebean.com.my. coffeebean.com.my zoominfo.com/c/the-coffee-bean/425047768 The Coffee Bean & Tea Leaf Malaysia is the official digital portal for the popular cafe chain, which currently operates over 150 locations across the country. The website allows customers to easily explore the full menu, access exclusive promotions, and manage their MyCBTL loyalty app rewards. It serves as a convenient central platform for ordering premium beverages, redeeming digital vouchers, and staying updated on seasonal cafe offerings.
-
Ollies Place Kidswear
August 14, 2026
•
[ ransomware, retail ]
Ollies Place Kidswear was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-14. Sector: Retail & E-Commerce. Country: Australia. Website: olliesplace.com.au. olliesplace.com.au zoominfo.com/c/ollies-place-kidswear/359503050 Ollie's Place is an Australian retail brand specializing in high-quality, trendy, and comfortable clothing for babies and children. The company offers a unique shopping experience both online and through physical stores across Australia, featuring vibrant prints and stylish designs. They focus on providing fashionable, value-for-money pieces for kids' everyday wear and special milestones.
-
Baxter International, Inc.
August 14, 2026
•
[ ransomware, healthcare, technology ]
Baxter International, Inc. was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-08-14. Sector: Healthcare. Country: United States of America. Website: baxter.com. Over 7.1M Salesforce records containing some PII was compromised. This is a final warning to reach out by 17 Aug 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 14 Aug 2026 | Warning: FINAL WARNING PAY OR LEAK
-
Gravity Coffee
August 14, 2026
Gravity Coffee was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-14. Sector: Retail & E-Commerce. Country: United States of America. Website: gravitycoffee.com. gravitycoffee.com zoominfo.com/c/gravity-coffee-company-llc/373342412 Gravity Coffee is a premium coffee brand known for serving high-quality beverages in its physical cafes and through retail products. Their signature medium roast blends feature a bold, smooth flavor profile with popular notes of hazelnut and chocolate. The company operates multiple locations and focuses on providing an exceptional coffee experience for its customers
-
Cook Medical LLC
August 14, 2026
•
[ ransomware, healthcare ]
Cook Medical LLC was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-08-14. Sector: Healthcare. Country: United States of America. Website: cookmedical.com. Customer data, employee data, and other internal corporate data was compromised. The Company engaged with us but made several paltry offers, did not want to pay what we asked for and decided they are okay with the data leak to happen instead of increasing their offer by a little, then we'd likely have accepted and this post would not have gone up. The Company failed to reach an agreement with us despite our incredible patience, all the chances and offers we made. They don't care. | Size: 182GB+ (compressed) | Updated: 14 August 2026 | SHA256: 8a87ba511f25f20a193f05a6578a620b02302c2075a6f2dff428d1f1a826ba63
-
Gfeller Treuhand und Verwaltungs
August 13, 2026
Gfeller Treuhand und Verwaltungs was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-13. Sector: Professional Services. Country: Switzerland. Website: gfeller-treuhand.ch. gfeller-treuhand.ch zoominfo.com/c/gfeller-treuhand-und-verwaltungs-ag/372661395 Gfeller Treuhand und Verwaltungs AG is a Swiss real estate and fiduciary company based in Dbendorf, operating since 1980. They specialize in comprehensive property management, real estate sales, and leasing services. The firm provides professional administrative support, utilizing modern IT solutions to efficiently handle property maintenance and tenant relations.
-
Carhartt, Inc.
August 13, 2026
•
[ ransomware, leak, retail ]
Carhartt, Inc. was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-08-13. Sector: Retail & E-Commerce. Country: United States of America. Website: carhartt.com. Our demand for this Company was $3.3 million. The Company reached out. However, The Company did not try to negotiate. If The Company attempted to negotiate with us The Company would've ended up saving a good chunk of money. Instead they decided to do (see blow); this is also because The Company hired a very unskilled and incompetent negotiator. If The Company hired competency to negotiate for them, this post would've never been published. [21:24:22] carhartt: After careful review and internal discussions with leadership, we have decided not to move forward with negotiations or further discussions. We appreciate your patience throughout this process. There is millions of customers of data involved here. As we always say, these companies don't care. Millions of records of customer data and vast amount of sensitive information and PII containing employee, customer, customer metadata (royalty info), and other internal corporate data was compromised. The Company failed to reach an agreement with us despite our incredible patience, all the chances and offers we made. They don't care. | Size: 50GB+ (compressed) | Updated: 13 August 2026 | SHA256: 6b37f770382ce82bfa4677466cc51d9269e5a70436eecf101fae6fa9d5d8e8ac
-
IPS
August 13, 2026
•
[ ransomware, manufacturing ]
IPS was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-13. Country: Italy. Website: ipssrl.com. ipssrl.com zoominfo.com/c/ips-srl/372710487 I.P.S. Srl is an Italian company founded in 2005 that specializes in the recovery and recycling of inert waste from construction and demolition activities. They provide environmental services, supply recycled aggregates, and manufacture "Wastile," a 100% ecological and infinitely recyclable thermoplastic tile. The company has received national awards for its rapid revenue growth and high financial reliability in the environmental sector.
-
Sharecare, Inc.
August 13, 2026
Sharecare, Inc. was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-08-13. Sector: Healthcare. Country: United States of America. Website: sharecare.com. This Company data was published due to them hiring a very incompetent and unskilled negotiator. If you choose incompetency to negotiate for you, that is on you. We will be publishing companies data who are negotiating with us, without a warning if negotiators continue to take us as misinformed individuals and BS us. Over 3.4 million Salesforce records containing some PII and 28GB+ of internal corporate data was compromised. The Company failed to reach an agreement with us despite our incredible patience, all the chances and offers we made. They don't care. | Size: 25GB+ (compressed) | Updated: 13 August 2026 | SHA256: 195842b8a53e8d7fe63238dbed753c1c28a86034ca98f99527ef743528b6cc45
-
Metabase
August 12, 2026
•
[ ransomware, technology ]
Metabase was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-08-12. Sector: Technology. Country: United States of America. Website: metabase.com. :P | Updated: 12 August 2026 | SHA256: 84daf8f33954a0b03238a1e0da3ee109d5bc32acc134cfdddfac36b4b75d2480
-
Southern Metals Company
August 10, 2026
•
[ ransomware, manufacturing ]
Southern Metals Company was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-08-10. Sector: Manufacturing. Country: United States of America. Website: southernmetalscompany.com. Southern Metals Company, based in Charlotte, NC, specializes in the recycling of ferrous and non-ferrous metals, including steel, brass, copper, aluminum, and automobile bodies. Established in 1938, the company is committed to responsible recycling, superior customer service, and providing exceptional value for recyclable products. Serving a diverse clientele throughout the Carolinas, Southern Metals has built a reputation for integrity and efficiency over its long history. The company continues to uphold the principles set by its founders while adapting to modern recycling needs.
The company headquarters is located in 2200 Donald Ross Road, Charlotte, NC 28208, United States. 51-200 Employees
