-
lccgroup.com
August 4, 2026
•
[ ransomware, retail ]
lccgroup.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-08-04. Sector: Professional Services. Country: Philippines. Website: lccgroup.com. LCC - Liberty Commercial Center, Inc is one of the pioneering retail establishments in the Bicol Region. Based in the dynamic province of Albay, LCC primarily operates supermarkets, department stores, malls, and food establishments. LCC is also engaged in property development. Banking on the cherished Filipino trait of hospitality, LCC's corporate tagline - The company's Best For You empowers its stakeholders and corps of new - generation and seasoned managers to commit themselves to a market stewardship that puts a high premium on rewarding LCC customers for their loyalty and patronage. LCC's growth is rooted in the Filipino spirit of entrepreneurship as an agent of change and progress. Over 75 years of retailing knowhow and quality service continue to touch the lives of its Bicolano consumers and their communities
www.lcc.com.ph
-
pushidrosal.id
August 4, 2026
•
[ ransomware, government ]
pushidrosal.id was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-08-04. Sector: Other. Country: Indonesia. Website: pushidrosal.id. *
-
US Installation Group, Inc.
August 4, 2026
•
[ ransomware, manufacturing ]
US Installation Group, Inc. was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-08-04. Sector: Manufacturing. Country: United States of America. Website: us-installations.com. Founded by Bruce DeLuca in Boca Raton, Florida, USIG operates through 15+ legal entities under MRS Holdings, performing over 100,000 installations annually across 33 markets in 14 states.
-
GILDE Handwerk Macrander GmbH & Co. KG
August 4, 2026
GILDE Handwerk Macrander GmbH & Co. KG was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-08-04. Sector: Manufacturing. Country: Germany. Website: gildehandwerk.com. [wholesale] GILDE Handwerk Macrander GmbH & Co. KG is a family-owned German Mittelstand group headquartered in Bocholt, Nordrhein-Westfalen. The GILDE Gruppe operates across wholesale trade in gifts, home accessories, and furniture through brands including GILDE Handwerk, Fink Living, and HAKU Mbel, with 50+ legal entities spanning Germany, Austria, the Netherlands, France, the UK, and Hong Kong.
The exposed material includes:
148+ personal ID document scans Personalausweise (national ID cards), Reispsse (passports), Fhrerscheine (driver's licences), and Heiratsurkunden (marriage certificates) for employees, directors, and family members. Names range from warehouse staff to the CEO.
ELSTER tax certificates for 50+ entities the digital keys for filing tax returns with the German Finanzamt, plus personal certificates for directors and family members. Enables fraudulent VAT returns and income tax filings.
Full employee payroll records (20062025) tax IDs (Steuer-IDs), social security numbers, bank accounts, salary details, sick notes (Krankmeldungen), and disciplinary records for an estimated 200400 current and 200500 former employees across all entities.
20 years of consolidated financial records balance sheets, P&L statements, bank reconciliations, loan documentation, shareholder agreements, and capital contribution records for the entire group from 2004 to 2025.
1,800+ Access databases inventory valuations, customer lists, supplier terms, product pricing, and order history spanning the entire commercial operation.
-
Global Friction Products, Inc
August 3, 2026
Global Friction Products, Inc was listed as a victim on the leak site of the Orova ransomware group; the attack is estimated to have taken place on 2026-08-03. Sector: Manufacturing. Country: United States of America. Website: globalfrictionproducts.com. GLOBAL FRICTION PRODUCTS, INC is a company that manufactures, repairs, and /or re-arcs brake and clutch bands back to original drum for even wear on friction material. We specialize in the construction, mining, marine and offshore industries, i.e., cranes, draglines, clamshells, barges, dredges, ships, tugs, winches and more.
-
JK Capital Management Limited
August 3, 2026
•
[ ransomware, finance ]
JK Capital Management Limited was listed as a victim on the leak site of the Orova ransomware group; the attack is estimated to have taken place on 2026-08-03. Sector: Financial Services. Country: Hong Kong. Website: jkcapitalmanagement.com. JK Capital Management Limited is an asset management company set up in Hong Kong in 1997 and regulated by the Securities and Futures Commission of Hong Kong. We are GIPS and MIFID II compliant. Our mutual funds are all registered with CSSF, the Luxembourg regulator.
-
Conceptual Designs, Inc.
August 3, 2026
Conceptual Designs, Inc. was listed as a victim on the leak site of the Orova ransomware group; the attack is estimated to have taken place on 2026-08-03. Sector: Other. Country: United States of America. Website: www.conceptualdesignsinc.com. Conceptual Designs, Inc. proudly provides interior design services for businesses across the Quad Cities from our studio in Bettendorf, Iowa. No matter what kind of business you own, we can help make your space match your companys culture and values in a creative way. With over 35 years of experience, our team of designers can help bring your vision to life.
-
Integrated Site Management
August 2, 2026
•
[ ransomware, technology ]
Integrated Site Management was listed as a victim on the leak site of the Orova ransomware group; the attack is estimated to have taken place on 2026-08-02. Sector: Professional Services. Country: United States of America. Website: www.ism-sc.com. Integrated Site Management is a full service site consulting company with our foundation reinforced by developing partnerships with clients, vendors & suppliers. Partnerships built from professionalism, honesty, integrity, respect, and open communication. Integrated Site Management listens, researches, identifies, and then provides solutions for our clients needs.
-
Tat Fung Textile Co., Ltd.
August 1, 2026
Tat Fung Textile Co., Ltd. was listed as a victim on the leak site of the Orova ransomware group; the attack is estimated to have taken place on 2026-08-01. Sector: Manufacturing. Country: Hong Kong. Website: www.tatfung-tex.com. Tat Fung & Panther Denim is a premium woven, denim, and print fabric mill established in 1986. The company specializes in producing high-quality denim and print fabrics, focusing on sustainability and innovation.
-
Sanrio Hong Kong Co., Ltd
July 29, 2026
•
[ ransomware, retail, technology ]
Sanrio Hong Kong Co., Ltd was listed as a victim on the leak site of the Orova ransomware group; the attack is estimated to have taken place on 2026-07-29. Sector: Retail & E-Commerce. Country: Hong Kong. Website: www.sanrio.com.hk. Sanrio is the global lifestyle brand best known for Hello Kitty who was created in 1974, and home to many other beloved character brands such as My Melody, Kuromi, Little Twin Stars, Cinnamoroll, Pompompurin, gudetama, Aggretsuko, Chococat, Bad Badtz-Maru and Kerokerokeroppi.
-
SSI HOLDING (FAR EAST) LIMITED
July 27, 2026
•
[ ransomware, manufacturing, retail ]
SSI HOLDING (FAR EAST) LIMITED was listed as a victim on the leak site of the Orova ransomware group; the attack is estimated to have taken place on 2026-07-27. Sector: Other. Country: Hong Kong. Website: ssife.com/index.php. AIMING at streamlining all aspects of business, procuring excellent quality of management and strengthening connexion of our well established affilated companies, S.S.I. Holding (Far East) Limited was found in November of 1995 with association of Simex Sport GmbH, a German base corporation of over 30 years experience in sport related business when inception.
-
KINGSSON
July 23, 2026
•
[ ransomware, manufacturing, technology ]
KINGSSON was listed as a victim on the leak site of the Orova ransomware group; the attack is estimated to have taken place on 2026-07-23. Sector: Other. Country: Taiwan. Website: www.kingsson.com.tw. KINGSSON primarily operates as an OEM/ODM manufacturer, supplying customized security sealing products under customers' own brands. The company markets mainly to distributors and industrial customers rather than retail consumers.
-
Yost Home Improvements
July 17, 2026
•
[ ransomware, retail ]
Yost Home Improvements was listed as a victim on the leak site of the Orova ransomware group; the attack is estimated to have taken place on 2026-07-17. Sector: Retail & E-Commerce. Country: United States of America. Website: yosthomeimprovements.com. Yost Home Improvements is a family-owned exterior remodeling and construction company based in Waterford, Connecticut, serving the southeastern CT region for over 50 years. They specialize in installing vinyl siding, windows, doors, gutters, roofing, and sunrooms.
-
Cardiology Associates
July 10, 2026
•
[ ransomware, healthcare ]
Cardiology Associates was listed as a victim on the leak site of the Orova ransomware group; the attack is estimated to have taken place on 2026-07-10. Sector: Healthcare. Country: United States of America. Website: porthuronheartcenter.com. Serving the community for over 45 years, Cardiology Associates of Port Huron, P.C. offers the latest in cardiac procedures and technology, helping our qualified physicians to detect and provide comprehensive treatment for a wide variety of adult heart and artery conditions.
-
Ultra Fame
May 19, 2026
•
[ ransomware, technology, manufacturing ]
Ultra Fame was listed as a victim on the leak site of the Orova ransomware group; the attack is estimated to have taken place on 2026-05-19. Sector: Other. Country: Taiwan. Website: en.ufame.com.tw. As PCB design continues to evolve in complexity and customization, we believe that outstanding circuit layouts are built on a strong engineering foundation and a deep understanding of our clients needs. From simple double-layer boards to advanced multi-layer high-speed signal boards, we approach every project with professionalism and deliver reliable, high-quality layouts our clients can count on.
-
DBM Reflex
May 13, 2026
•
[ ransomware, manufacturing, technology ]
DBM Reflex was listed as a victim on the leak site of the Orova ransomware group; the attack is estimated to have taken place on 2026-05-13. Sector: Other. Country: Taiwan. Website: dbmreflex.com.tw. DBM Technology Co., Ltd. is a leading brand in electroforming mold cores in Asia, established in 1999. With a team of over 70 professionals, the company specializes in mold core design and high-quality electroformed mold production, having produced more than 9,000 sets to date. Their services include feasibility assessments, optical design, mold core structure design, product testing, and light distribution testing, making them a preferred choice in the automotive industry.
-
Agricultural Chemical Solutions
May 7, 2026
•
[ ransomware, manufacturing ]
Agricultural Chemical Solutions was listed as a victim on the leak site of the Orova ransomware group; the attack is estimated to have taken place on 2026-05-07. Sector: Agriculture and Food Production. Country: United States of America. Website: agchemicalsolutions.com. Agricultural Chemical Solutions, Inc. provides high-quality agricultural chemicals and a comprehensive marketplace aimed at enhancing farming operations. They offer a wide range of products including pesticides, herbicides, fungicides, and micro nutrients, with competitive pricing and expert recommendations.
-
SBI Manufacturing
May 3, 2026
•
[ ransomware, manufacturing ]
SBI Manufacturing was listed as a victim on the leak site of the Orova ransomware group; the attack is estimated to have taken place on 2026-05-03. Sector: Manufacturing. Country: United States of America. Website: sbimfg.com. SBI Manufacturing is a family-owned company based in Sioux Falls, SD, specializing in metal fabrication and machine welding. They provide services primarily to the agricultural, industrial, and transportation sectors.
-
University SprinklerSystems
August 4, 2026
•
[ ransomware, manufacturing ]
University SprinklerSystems was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-08-04. Sector: Manufacturing. University Sprinklers is BC's largest irrigation company, specializing in the installation of
irrigation sprinkler systems and landscape lighting for both residential and commercial client
s. With over 40 years of experience, they provide tailored irrigation solutions that ensure he
althy lawns and gardens while conserving water.
Here is the access to upload company data. Employee information (DLs and other files), client
information and and other internal files.
Click the download button.
You will find several password-free archives. Click on any of them to start the download.
-
WD Masonry & Concrete
August 4, 2026
•
[ ransomware, manufacturing ]
WD Masonry & Concrete was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-04. Sector: Other. Country: United States of America. Website: www.wdmandc.com.