-
hanan-hov.co.il
August 3, 2026
hanan-hov.co.il was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-08-03. Sector: Other. Country: Israel. Website: hanan-hov.co.il. Headquartered in Neve Yamin, Israel, the company provides comprehensive logistics support for construction, infrastructure, industrial, and commercial projects throughout the
-
simonrack.com
August 3, 2026
•
[ ransomware, manufacturing ]
simonrack.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-08-03. Sector: Manufacturing. Country: Spain. Website: simonrack.com. Headquartered in Alfamn, Zaragoza, Spain, the company has been manufacturing metal shelving since 1964 and has become one of Europe's
-
new-point.it
August 3, 2026
•
[ ransomware, technology ]
new-point.it was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-08-03. Sector: Technology. Country: Italy. Website: new-point.it. Headquartered in Signa, Florence, Italy, the company was founded in 2006 and has grown into one of Italy's established suppliers
-
naskdoorinc.com
August 3, 2026
naskdoorinc.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-08-03. Sector: Manufacturing. Country: United States of America. Website: naskdoorinc.com. Headquartered in West Chester, Pennsylvania, the company has served customers throughout southeastern Pennsylvania and northern Delaware for several decades. Although
-
pradotuylaw.com
August 3, 2026
•
[ ransomware, leak, finance ]
pradotuylaw.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-08-03. Sector: Professional Services. Country: United States of America. Website: pradotuylaw.com. The firm focuses on practice areas including personal injury, wrongful death, workplace harassment, business litigation, civil settlements, and environmental litigation.
-
Oleoductos del Valle
August 3, 2026
•
[ ransomware, energy, financial ]
Oleoductos del Valle was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-08-03. Sector: Energy & Utilities. Country: Argentina. Website: oldelval.com. During the analysis of data obtained from Oldelval, we have compiled information covering key aspects of the company's operations. The materials include:
1.HR documentation: full payroll data, bank account details (CBU), employee health insurance records (OSDE, SWISS MEDICAL), as well as severance calculations and compensation agreements.
2.Financial and regulatory reports filed with CNV and BYMA, including documents related to rating agencies (Moody's) and internal shareholder agreements.
3.Tax declarations and reports submitted to AFIP (Sicore, Ganancias, DDJJ IVA).
4.Documents related to tariff policy and SEN interactions, including WACC and TIR calculations used in tariff reviews.
5.Incident reports and environmental documentation, including reports on spills in Catriel and Medanito, as well as Rosen OSSR technical reports on pipeline conditions.
6.Confidentiality agreements with key partners, including Halliburton, Horizon, YPF, Otasa, McKinsey, and KPMG.
7.Internal whistleblower channel materials (Ley 27.401), including internal complaints and compliance reports.
8.Documents related to dividend payments and banking transactions.
9.Personal data of directors, candidates, and key employees, including ID numbers and CVs.
-
clintonhealthaccess.org
August 3, 2026
clintonhealthaccess.org was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-08-03. Sector: Healthcare. Country: United States of America. Website: clintonhealthaccess.org. This Clinton foundation sponsors the sterilization of women in Africa and South America.
With the help of this foundation, organs harvested criminally by transplant surgeons from people in Third World countries are legalized to improve the quality of life of the rich in capitalist countries, including the United States.
We have irrefutable evidence of their secret accounts, including transactions in cryptocurrency, from which transplanted organs were purchased to replace Bill Clinton's wife, Hillary Clinton.
-
https://geleximco.vn/
August 4, 2026
https://geleximco.vn/ was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-08-04. Sector: Manufacturing. Country: Vietnam. Website: geleximco.vn. 200gb data
-
lccgroup.com
August 4, 2026
•
[ ransomware, retail ]
lccgroup.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-08-04. Sector: Professional Services. Country: Philippines. Website: lccgroup.com. LCC - Liberty Commercial Center, Inc is one of the pioneering retail establishments in the Bicol Region. Based in the dynamic province of Albay, LCC primarily operates supermarkets, department stores, malls, and food establishments. LCC is also engaged in property development. Banking on the cherished Filipino trait of hospitality, LCC's corporate tagline - The company's Best For You empowers its stakeholders and corps of new - generation and seasoned managers to commit themselves to a market stewardship that puts a high premium on rewarding LCC customers for their loyalty and patronage. LCC's growth is rooted in the Filipino spirit of entrepreneurship as an agent of change and progress. Over 75 years of retailing knowhow and quality service continue to touch the lives of its Bicolano consumers and their communities
www.lcc.com.ph
-
pushidrosal.id
August 4, 2026
•
[ ransomware, government ]
pushidrosal.id was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-08-04. Sector: Other. Country: Indonesia. Website: pushidrosal.id. *
-
US Installation Group, Inc.
August 4, 2026
•
[ ransomware, manufacturing ]
US Installation Group, Inc. was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-08-04. Sector: Manufacturing. Country: United States of America. Website: us-installations.com. Founded by Bruce DeLuca in Boca Raton, Florida, USIG operates through 15+ legal entities under MRS Holdings, performing over 100,000 installations annually across 33 markets in 14 states.
-
GILDE Handwerk Macrander GmbH & Co. KG
August 4, 2026
GILDE Handwerk Macrander GmbH & Co. KG was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-08-04. Sector: Manufacturing. Country: Germany. Website: gildehandwerk.com. [wholesale] GILDE Handwerk Macrander GmbH & Co. KG is a family-owned German Mittelstand group headquartered in Bocholt, Nordrhein-Westfalen. The GILDE Gruppe operates across wholesale trade in gifts, home accessories, and furniture through brands including GILDE Handwerk, Fink Living, and HAKU Mbel, with 50+ legal entities spanning Germany, Austria, the Netherlands, France, the UK, and Hong Kong.
The exposed material includes:
148+ personal ID document scans Personalausweise (national ID cards), Reispsse (passports), Fhrerscheine (driver's licences), and Heiratsurkunden (marriage certificates) for employees, directors, and family members. Names range from warehouse staff to the CEO.
ELSTER tax certificates for 50+ entities the digital keys for filing tax returns with the German Finanzamt, plus personal certificates for directors and family members. Enables fraudulent VAT returns and income tax filings.
Full employee payroll records (20062025) tax IDs (Steuer-IDs), social security numbers, bank accounts, salary details, sick notes (Krankmeldungen), and disciplinary records for an estimated 200400 current and 200500 former employees across all entities.
20 years of consolidated financial records balance sheets, P&L statements, bank reconciliations, loan documentation, shareholder agreements, and capital contribution records for the entire group from 2004 to 2025.
1,800+ Access databases inventory valuations, customer lists, supplier terms, product pricing, and order history spanning the entire commercial operation.
-
Global Friction Products, Inc
August 3, 2026
Global Friction Products, Inc was listed as a victim on the leak site of the Orova ransomware group; the attack is estimated to have taken place on 2026-08-03. Sector: Manufacturing. Country: United States of America. Website: globalfrictionproducts.com. GLOBAL FRICTION PRODUCTS, INC is a company that manufactures, repairs, and /or re-arcs brake and clutch bands back to original drum for even wear on friction material. We specialize in the construction, mining, marine and offshore industries, i.e., cranes, draglines, clamshells, barges, dredges, ships, tugs, winches and more.
-
JK Capital Management Limited
August 3, 2026
•
[ ransomware, finance ]
JK Capital Management Limited was listed as a victim on the leak site of the Orova ransomware group; the attack is estimated to have taken place on 2026-08-03. Sector: Financial Services. Country: Hong Kong. Website: jkcapitalmanagement.com. JK Capital Management Limited is an asset management company set up in Hong Kong in 1997 and regulated by the Securities and Futures Commission of Hong Kong. We are GIPS and MIFID II compliant. Our mutual funds are all registered with CSSF, the Luxembourg regulator.
-
Conceptual Designs, Inc.
August 3, 2026
Conceptual Designs, Inc. was listed as a victim on the leak site of the Orova ransomware group; the attack is estimated to have taken place on 2026-08-03. Sector: Other. Country: United States of America. Website: www.conceptualdesignsinc.com. Conceptual Designs, Inc. proudly provides interior design services for businesses across the Quad Cities from our studio in Bettendorf, Iowa. No matter what kind of business you own, we can help make your space match your companys culture and values in a creative way. With over 35 years of experience, our team of designers can help bring your vision to life.
-
Integrated Site Management
August 2, 2026
•
[ ransomware, technology ]
Integrated Site Management was listed as a victim on the leak site of the Orova ransomware group; the attack is estimated to have taken place on 2026-08-02. Sector: Professional Services. Country: United States of America. Website: www.ism-sc.com. Integrated Site Management is a full service site consulting company with our foundation reinforced by developing partnerships with clients, vendors & suppliers. Partnerships built from professionalism, honesty, integrity, respect, and open communication. Integrated Site Management listens, researches, identifies, and then provides solutions for our clients needs.
-
Tat Fung Textile Co., Ltd.
August 1, 2026
Tat Fung Textile Co., Ltd. was listed as a victim on the leak site of the Orova ransomware group; the attack is estimated to have taken place on 2026-08-01. Sector: Manufacturing. Country: Hong Kong. Website: www.tatfung-tex.com. Tat Fung & Panther Denim is a premium woven, denim, and print fabric mill established in 1986. The company specializes in producing high-quality denim and print fabrics, focusing on sustainability and innovation.
-
Sanrio Hong Kong Co., Ltd
July 29, 2026
•
[ ransomware, retail, technology ]
Sanrio Hong Kong Co., Ltd was listed as a victim on the leak site of the Orova ransomware group; the attack is estimated to have taken place on 2026-07-29. Sector: Retail & E-Commerce. Country: Hong Kong. Website: www.sanrio.com.hk. Sanrio is the global lifestyle brand best known for Hello Kitty who was created in 1974, and home to many other beloved character brands such as My Melody, Kuromi, Little Twin Stars, Cinnamoroll, Pompompurin, gudetama, Aggretsuko, Chococat, Bad Badtz-Maru and Kerokerokeroppi.
-
SSI HOLDING (FAR EAST) LIMITED
July 27, 2026
•
[ ransomware, manufacturing, retail ]
SSI HOLDING (FAR EAST) LIMITED was listed as a victim on the leak site of the Orova ransomware group; the attack is estimated to have taken place on 2026-07-27. Sector: Other. Country: Hong Kong. Website: ssife.com/index.php. AIMING at streamlining all aspects of business, procuring excellent quality of management and strengthening connexion of our well established affilated companies, S.S.I. Holding (Far East) Limited was found in November of 1995 with association of Simex Sport GmbH, a German base corporation of over 30 years experience in sport related business when inception.
-
KINGSSON
July 23, 2026
•
[ ransomware, manufacturing, technology ]
KINGSSON was listed as a victim on the leak site of the Orova ransomware group; the attack is estimated to have taken place on 2026-07-23. Sector: Other. Country: Taiwan. Website: www.kingsson.com.tw. KINGSSON primarily operates as an OEM/ODM manufacturer, supplying customized security sealing products under customers' own brands. The company markets mainly to distributors and industrial customers rather than retail consumers.