-
Interim HealthCare
August 10, 2026
•
[ ransomware, healthcare ]
Interim HealthCare was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-08-10. Sector: Healthcare. Country: United States of America. Website: interimhealthcare.com. A healthcare organization dealing with elderly care services
-
FREYWILLE
August 11, 2026
FREYWILLE was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-08-11. Sector: Retail & E-Commerce. Country: Austria. [jewelry] FREYWILLE the Austrian luxury fire-enamel jewelry house with 70+ boutiques across Europe, the Americas, Middle East, Russia/CIS, and Asia-Pacific.
142+ employee files with salary statements (20242026), social security numbers (ELDA), employment contracts across 24 countries, COVID vaccination records, passport copies, visa card statements spanning a decade, and personnel files.
FREYWILLE's trade secrets complete 2025 product costing for all lines (18ct gold, plated, textiles), and the crown jewels: enamel colour recipes from the Siebdruck department. FREYWILLE's fire-enamel technique is what makes the brand unique. The formulations for SPHINX, JOYB2, and Entwurf colour systems are in the dataset.
Defence files from 40+ lawsuits across Austria, the US, China, France, Canada, Slovakia, Poland, and Belgium including a criminal proceedings file (Strafsache Grgic, Mrsic & Co).
Documentation of the 2018 webshop malware attack DSB filings, customer notification drafts, incident reports.
-
Leafwell
August 11, 2026
•
[ ransomware, healthcare ]
Leafwell was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2026-08-11. Sector: Healthcare. Country: United States of America. Website: leafwell.com. Hospitals & Physicians Clinics
-
tommer construction
August 11, 2026
•
[ ransomware, manufacturing ]
tommer construction was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-11. Sector: Manufacturing. Country: United States of America. Website: www.tommerconstruction.com.
-
Service Evaluation Concepts
August 11, 2026
•
[ ransomware, leak ]
Service Evaluation Concepts was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-11. Sector: Professional Services. Country: United States of America. Website: www.serviceevaluation.com.
-
www.apsanet.com.ar
August 11, 2026
www.apsanet.com.ar was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-08-11. Sector: Professional Services. Country: Argentina. Website: www.apsanet.com.ar. APSA Internacional S.A. is an Argentine company founded in 2001, part of Grupo Pintaluba (with Argentine and Spanish sha...
-
www.kilpi-koskinen.fi
August 11, 2026
•
[ ransomware, manufacturing ]
www.kilpi-koskinen.fi was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-08-11. Sector: Other. Country: Finland. Website: www.kilpi-koskinen.fi. Kilpi-Koskinen Oy is a Finnish family-owned company founded on February 14, 1985, headquartered in Lahti, Finland, speci...
-
Baya Technologies
August 11, 2026
•
[ ransomware, technology, manufacturing ]
Baya Technologies was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-08-11. Sector: Technology. Baya offers end-to-end solutions for complex challenges, specializing in technology and distribution services. The company operates under the brands baya-zicon technologies and baya-zicon EMS, providing a wide range of technological services and electronic manufacturing services (EMS). Their target audience includes companies seeking comprehensive solutions in technology and distribution.
-
Stücheli Architekten
August 11, 2026
•
[ ransomware, technology ]
Stcheli Architekten was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-08-11. Sector: Professional Services. Country: Switzerland. Website: stuecheli.ch. Stcheli Architekten is a renowned Swiss architectural firm founded in Zurich back in 1946. The company specializes in the design and execution of complex architectural projects, including residential buildings, office complexes, and public spaces, combining innovation with tradition and sustainable construction. It provides a full range of architectural services and frequently acts as a general planner for major projects both in Switzerland and internationally.
-
B&B Hydraulik
August 11, 2026
•
[ ransomware, manufacturing, technology ]
B&B Hydraulik was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-08-11. Sector: Manufacturing. Country: Germany. B&B Hydraulik is a German company based in Hattingen that specializes in the development and manufacturing of hydraulic systems, power units, and specialized equipment. In cooperation with partner organizations, the enterprise supplies control blocks, valves, and components for both industrial and mobile hydraulics. Its engineering solutions are widely used across construction and agricultural machinery, lifting equipment, and shipbuilding.
-
AngMar Companies
August 11, 2026
AngMar Companies was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-08-11. Website: angmarcompanies.com. AngMar is a private organization comprised of numerous corporate holdings, LLCs, and companies, operating a network of home health care facilities. They disregard the safety of their clients and the people they care for. As a result, 710 GB of confidential information about the companies they serve has been exposed. Most importantly, patient data has been leaked, including their medical records, medical histories, personal information such as Social Security numbers, home addresses and phone numbers, and much more.
-
advancedtaxsolutions.com
July 16, 2026
advancedtaxsolutions.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-07-16. Sector: Professional Services. Country: United States of America. Website: advancedtaxsolutions.com. Frank Rim & Associates: Archive of a Tax Consulting Practice PROLOGUE Every tax case. Initial cl...
-
profinrg.nl
July 21, 2026
•
[ ransomware, technology ]
profinrg.nl was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-07-21. Sector: Professional Services. Country: Netherlands. Website: profinrg.nl. How Profinergy BV Lost Control of Thousands of Files PROLOGUE: Thousands of files. The complete digi...
-
QPC Global
August 10, 2026
•
[ ransomware, retail ]
QPC Global was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-08-10. Sector: Other. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.qpcglobal.com. Quest Personal Care Global Ltd is a global company specializing in affordable beauty and personal care products, with over 30 years of experience and a presence in more than 65 countries. They offer a diverse range of innovative brands and products, including skincare, haircare, and fragrance, aimed at helping consumers look and feel their best. The company focuses on speed to market, consumer insights, and sustainable practices, ensuring high-quality products that are both effective and environmentally friendly. Their mission is to simplify beauty for everyone by providing inclusive and trend-led products to retail partners and distributors worldwide
-
Crown Group
August 11, 2026
•
[ ransomware, manufacturing ]
Crown Group was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-11. Sector: Other. Country: Pakistan. Website: www.crowngroup.com.pk.
-
G.M.A. GRANDI MARCHE AUTOMOBILI - S.R.L
August 11, 2026
•
[ ransomware, automotive ]
G.M.A. GRANDI MARCHE AUTOMOBILI - S.R.L was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-11. Sector: Transportation. Country: Italy. Website: autogma.it.
-
oligo.de
July 20, 2026
oligo.de was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-07-20. Sector: Technology. Country: Germany. Website: oligo.de. A group of companies whose luminaires illuminate Deutsche Bank, Burj Dubai, and Scout Motors' assemb...
-
flowco-inc.com
June 30, 2026
•
[ ransomware, leak, manufacturing ]
flowco-inc.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-06-30. Sector: Other. Country: United States of America. Website: flowco-inc.com. DEEP WELL: Flowco Production Solutions Documents PROLOGUE Payroll records with employee names and po...
-
firstdigital.com
July 7, 2026
•
[ ransomware, technology ]
firstdigital.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-07-07. Sector: Technology. Country: United States of America. Website: firstdigital.com. The Digital Cartel: How a Telecom Empire Robs Its Own Customers and Employees A company that sells c...
-
powdr.com
July 13, 2026
•
[ ransomware, retail ]
powdr.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-07-13. Sector: Hospitality. Country: United States of America. Website: powdr.com. Point of No Return: What the Ski Empire Is Hiding A company that sells adventure, family memories, a...