-
Merge
August 10, 2026
•
[ ransomware, technology, financial ]
Merge was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2026-08-10. Sector: Technology. Country: United States of America. Website: merge.money. Financial
-
Chat Jurídico
August 10, 2026
Chat Jurdico was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2026-08-10. Sector: Professional Services. Country: Brazil. Website: chatjuridico.com.br. Law Firms & Legal Services
-
Interim HealthCare (Oklahoma and Tulsa)
August 10, 2026
•
[ ransomware, healthcare ]
Interim HealthCare (Oklahoma and Tulsa) was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-08-10. Sector: Healthcare. Country: United States of America. Website: interimhealthcare.com. A healthcare organization dealing with elderly care services
-
Consolidated Medical Practices of Memphis
August 10, 2026
•
[ ransomware, healthcare ]
Consolidated Medical Practices of Memphis was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-08-10. Sector: Healthcare. Country: United States of America. Website: medicalofmemphis.com. A healthcare organization
-
LT Group / Fortune Tobacco Corp
August 10, 2026
LT Group / Fortune Tobacco Corp was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-08-10. Sector: Manufacturing. Country: Philippines. Website: ltg.com.ph. Amount: 27 GB | Files: 14,836 They ignored our messages for 72 hours.. Now we publish the details of the breach. Data leaked: 107 Passports (MRZ) 1,712 Bank Statements (PNB + Holco USD accounts) 212 Promissory Notes (Eton Properties, PHP 2.53B debt) 231 BIR/eFPS credentials Samples: Passport_Johnny_Tan.pdf Holco_USD_Statement.pdf Eton_Debt_212.pdf Full leak: August 18. Contact: Session ID provided in emails. Pay for the data or pay for its permanent deletion. Otherwise, the full dump will be public.
-
Cleaver-Brooks
August 10, 2026
•
[ ransomware, manufacturing ]
Cleaver-Brooks was listed as a victim on the leak site of the anubis ransomware group; the attack is estimated to have taken place on 2026-08-10. Sector: Manufacturing. Country: United States of America. Website: cleaverbrooks.com. Major data breach at a leading industrial manufacturer.
-
BigSpark
August 10, 2026
•
[ ransomware, technology ]
BigSpark was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2026-08-10. Country: Anguilla. Website: bigspark.ai. Business Services
-
Interim HealthCare
August 10, 2026
•
[ ransomware, healthcare ]
Interim HealthCare was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-08-10. Sector: Healthcare. Country: United States of America. Website: interimhealthcare.com. A healthcare organization dealing with elderly care services
-
FREYWILLE
August 11, 2026
FREYWILLE was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-08-11. Sector: Retail & E-Commerce. Country: Austria. [jewelry] FREYWILLE the Austrian luxury fire-enamel jewelry house with 70+ boutiques across Europe, the Americas, Middle East, Russia/CIS, and Asia-Pacific.
142+ employee files with salary statements (20242026), social security numbers (ELDA), employment contracts across 24 countries, COVID vaccination records, passport copies, visa card statements spanning a decade, and personnel files.
FREYWILLE's trade secrets complete 2025 product costing for all lines (18ct gold, plated, textiles), and the crown jewels: enamel colour recipes from the Siebdruck department. FREYWILLE's fire-enamel technique is what makes the brand unique. The formulations for SPHINX, JOYB2, and Entwurf colour systems are in the dataset.
Defence files from 40+ lawsuits across Austria, the US, China, France, Canada, Slovakia, Poland, and Belgium including a criminal proceedings file (Strafsache Grgic, Mrsic & Co).
Documentation of the 2018 webshop malware attack DSB filings, customer notification drafts, incident reports.
-
Leafwell
August 11, 2026
•
[ ransomware, healthcare ]
Leafwell was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2026-08-11. Sector: Healthcare. Country: United States of America. Website: leafwell.com. Hospitals & Physicians Clinics
-
tommer construction
August 11, 2026
•
[ ransomware, manufacturing ]
tommer construction was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-11. Sector: Manufacturing. Country: United States of America. Website: www.tommerconstruction.com.
-
Service Evaluation Concepts
August 11, 2026
•
[ ransomware, leak ]
Service Evaluation Concepts was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-11. Sector: Professional Services. Country: United States of America. Website: www.serviceevaluation.com.
-
www.apsanet.com.ar
August 11, 2026
www.apsanet.com.ar was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-08-11. Sector: Professional Services. Country: Argentina. Website: www.apsanet.com.ar. APSA Internacional S.A. is an Argentine company founded in 2001, part of Grupo Pintaluba (with Argentine and Spanish sha...
-
www.kilpi-koskinen.fi
August 11, 2026
•
[ ransomware, manufacturing ]
www.kilpi-koskinen.fi was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-08-11. Sector: Other. Country: Finland. Website: www.kilpi-koskinen.fi. Kilpi-Koskinen Oy is a Finnish family-owned company founded on February 14, 1985, headquartered in Lahti, Finland, speci...
-
Baya Technologies
August 11, 2026
•
[ ransomware, technology, manufacturing ]
Baya Technologies was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-08-11. Sector: Technology. Baya offers end-to-end solutions for complex challenges, specializing in technology and distribution services. The company operates under the brands baya-zicon technologies and baya-zicon EMS, providing a wide range of technological services and electronic manufacturing services (EMS). Their target audience includes companies seeking comprehensive solutions in technology and distribution.
-
Stücheli Architekten
August 11, 2026
•
[ ransomware, technology ]
Stcheli Architekten was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-08-11. Sector: Professional Services. Country: Switzerland. Website: stuecheli.ch. Stcheli Architekten is a renowned Swiss architectural firm founded in Zurich back in 1946. The company specializes in the design and execution of complex architectural projects, including residential buildings, office complexes, and public spaces, combining innovation with tradition and sustainable construction. It provides a full range of architectural services and frequently acts as a general planner for major projects both in Switzerland and internationally.
-
B&B Hydraulik
August 11, 2026
•
[ ransomware, manufacturing, technology ]
B&B Hydraulik was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-08-11. Sector: Manufacturing. Country: Germany. B&B Hydraulik is a German company based in Hattingen that specializes in the development and manufacturing of hydraulic systems, power units, and specialized equipment. In cooperation with partner organizations, the enterprise supplies control blocks, valves, and components for both industrial and mobile hydraulics. Its engineering solutions are widely used across construction and agricultural machinery, lifting equipment, and shipbuilding.
-
AngMar Companies
August 11, 2026
AngMar Companies was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-08-11. Website: angmarcompanies.com. AngMar is a private organization comprised of numerous corporate holdings, LLCs, and companies, operating a network of home health care facilities. They disregard the safety of their clients and the people they care for. As a result, 710 GB of confidential information about the companies they serve has been exposed. Most importantly, patient data has been leaked, including their medical records, medical histories, personal information such as Social Security numbers, home addresses and phone numbers, and much more.
-
advancedtaxsolutions.com
July 16, 2026
advancedtaxsolutions.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-07-16. Sector: Professional Services. Country: United States of America. Website: advancedtaxsolutions.com. Frank Rim & Associates: Archive of a Tax Consulting Practice PROLOGUE Every tax case. Initial cl...
-
profinrg.nl
July 21, 2026
•
[ ransomware, technology ]
profinrg.nl was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-07-21. Sector: Professional Services. Country: Netherlands. Website: profinrg.nl. How Profinergy BV Lost Control of Thousands of Files PROLOGUE: Thousands of files. The complete digi...