Recent Breaches
-
September 30, 2026 • Becker Logistik was listed as a victim on the leak site of the lamashtu ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Transportation. Country: Germany. Website: becker-logistik.de. German logistics and transportation company specializing in national and international freight transport, particularly bulk goods. The company operates its own fleet and provides reliable transport services across Germany and Europe.
-
September 30, 2026 • Vinco Energy was listed as a victim on the leak site of the lamashtu ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Energy & Utilities. Country: United States of America. Website: vincoenergy.com. Vinco Energy Services is a Mexican oilfield services company providing engineering and operational solutions for the oil and gas sector. The company specializes in services like wireline logging, telemetry.
-
September 30, 2026 • Astidental di Sabbione was listed as a victim on the leak site of the lamashtu ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Manufacturing. Country: Italy. Website: bquadro.it. is a leading Italian distributor with over 60 years of experience specializing in dental equipment, instruments, and dental laboratory supplies. The company provides comprehensive services, including dental office turnkey design, digital workflow
-
September 30, 2026 • Dr Damiel Pugliese was listed as a victim on the leak site of the lamashtu ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Healthcare. Website: pugliese.lo. Dr. Daniel P. Pugliese is a certified Argentine accountant graduated from the prestigious University of Buenos Aires (U.B.A.). He is officially registered with the Professional Council of Economic Sciences of Buenos Aires (C.P.C.E.C.A.B.A.), which
-
September 30, 2026 assist2enjoy.be was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Other. Country: Belgium. Website: assist2enjoy.be. The company was established in 2015 and operates primarily in the wholesale and retail market for electrical household appliances. Its
-
September 25, 2026 econ-tec.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-09-25. Sector: Technology. Country: Germany. Website: econ-tec.com. The company focuses on designing technical systems for industrial customers, combining engineering expertise with process optimization, automation and energy-efficient production
-
September 8, 2026 • dfiretailgroup.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-09-08. Sector: Retail & E-Commerce. Country: United States of America. Website: dfiretailgroup.com. DFI RETAIL GROUP 27 Years of Email Archives + 397 Illegal Stores + 40,000 Medical Files Over 160 mai...
-
September 30, 2026 SitePro Rentals was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Other. Website: siteprorentals.com. I have yet to hear a response from SitePro Rentals regarding the data breach. I have heard rumors that a law firm is investigating the incident(https://classlawdc.com/2026/09/28/sitepro-rentals-data-breach-investigation/). I am giving you 72 hours to contact me, otherwise I will leak the active employee details. The information includes: IsTotalItem, Department_ShortName, Employee_FirstName, Employee_LastName, EmployeeEmploymentStatus_EmployeeNumber, Employee_HireDate, EmploymentStatus_ShortName, OrgUnit_ShortName, DeptJob_ShortName, EmployeeManager_ManagerDisplayName, PayType_ShortName, PayClass_ShortName, Employee_SocialSecurityNumber, Department_ShortName2, Employee_Gender, Employee_MiddleName, PersonAddress_Address1, PersonAddress_Address2, PersonAddress_City, PersonAddress_PostalCode, PersonAddress_StateCode, Employee_BirthDate, OrgUnit_ContactBusinessPhone, OrgUnit_ContactCellPhone, EmployeeManager_ManagerEmployeeNumber, EmployeeEmploymentStatus_BaseRate, EmployeeEmploymentStatus_BaseSalary, Department_LedgerCode, Department_XRefCode, and OrgUnit_XRefCode. Contact me at xdlmfao@morke.ru Session: 05651c7323273b723588d47455471ee9e27feb5187a30f2933554a705aacb38358. [Sector: Construction]
-
September 30, 2026 • Buford-Thompson Company, LTD was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Manufacturing. Country: United States of America. Website: Buford-Thompson Company, LTD. [construction] Buford-Thompson Company, LTD, a Texas construction general contractor with 30+ years of history building schools for K-12 districts across the state. The exposed dataset totals 1.707 TB and includes: 5 years of W-2 EFW2 files (20212025) containing plaintext Social Security numbers, wages, and addresses for 350+ current and former employees every SSN readable without any decryption. 9.3 GB of attorney-client privileged files from the Stanton ISD v. BTC litigation legal strategy, discovery responses, and counsel communications. Complete Frost Bank infrastructure four account numbers, ACH routing credentials, line-of-credit agreements (renewed April 2026), signature cards, and monthly bank statements spanning 20222026. 36+ active school construction projects blueprints, bid estimates, cost structures, subcontractor pricing, and change orders for ISD projects across Texas. A competitor's dream dataset. 2,000+ donor records from Human Services Campus (Phoenix homeless-services nonprofit) with full PII: name, address, phone, email, employer, and donation amounts. QuickBooks company files (.QBW) from Along Side Ministries (Phoenix prison ministry) containing complete accounting, donor, and likely payroll data. Thompson family personal records owner personal insurance, loans, ranch property (Jack County), airplane ownership, bond dividends, and personal tax documents.
-
September 30, 2026 • Blaise C. Bender, PC was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Professional Services. Country: United States of America. Website: bcbenderlaw.com. The law firm of Blaise C. Bender, PC handles confidential client tax records/working papers, mergers and acquisitions (M&A) and transaction agreements, estate/trust documents, corporate management records, and confidential attorney-client communications, and fails to maintain security. Due to this negligent mishandling, we disclose confidential information that will subject Blaise C. Bender, PC to disciplinary action by the Bar/CPA, penalties under Section 7216 of the Internal Revenue Code and the Texas Privacy Act, civil claims for professional negligence/breach of fiduciary duty/breach of contract, and serious damage to our reputation and clients.
-
March 6, 2024 • Orth Automobile was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2024-03-06. Sector: Manufacturing. Country: Germany. Website: www.orth-automobile.de. Germany
-
September 30, 2026 Airtech Mechanical Services was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Professional Services. Country: United States of America. Website: www.airtechnc.com. United States
-
September 30, 2026 • Titus was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Technology. Country: Germany. Website: www.titus.de. Germany
-
September 30, 2026 • Le Centre National de l'Expertise Hospitalire (CNEH) was listed as a victim on the leak site of the kairos ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Healthcare. Country: France. Website: cneh.fr. Le Centre National de l'Expertise Hospitalire (CNEH) est une cole de rfrence et un organisme franais fond en 1974 qui accompagne les professionnels de sant et les tablissements sanitaires et mdico-sociaux.
-
September 30, 2026 • wolfusofsky.de was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-09-30. Country: Germany. Website: wolfusofsky.de. The group provides a broad range of construction and infrastructure services to public and private clients in Rhineland-Palatinate, Saarland, neighboring
-
September 30, 2026 Summit Electric Supply was listed as a victim on the leak site of the Vexy Ransomware ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Energy & Utilities. Country: United States of America. Website: summit.com. Summit Electric Supply supplies electrical products and solutions for commercial, industrial, construction, OEM, institutional, and marine applications. Its website allows customers to browse products, check availability, manage orders, view invoices, and purchase online.
-
September 30, 2026 • The Japan Times was listed as a victim on the leak site of the Eclipse ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Other. Country: Japan. Website: www.japantimes.co.jp. The Japan Times is a leading English-language news outlet that provides comprehensive coverage of Japan's business, politics, culture, sports, and entertainment. It offers various subscription options, including digital and print formats, catering to a diverse audience interested in Japanese news and insights. The company also features specialized services such as academic and business subscriptions, as well as access to its digital archives. Its intended clients include local and international readers seeking reliable information about Japan and its global interactions.
-
September 14, 2026 • Software Answers, a Banyan Software Company was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Technology. Country: United States of America. Website: softwareanswers.com. Software company serving the long-term stay accommodation industry, including corporate housing and serviced apartments
-
September 30, 2026 • Houston Thyroid & Endocrine Specialists was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Healthcare. Country: United States of America. Healthcare - Endocrinology (US) Houston, Texas | 14,441 patient document scans from a Houston endocrinology practice: lab results, medical summaries, diagnoses, insurance records, day sheets; Protected health information of thousands of patients including SSNs, dates of birth, and clinical data; Billing and claims records with financial data | [ACTIVE: deadline 2026-10-04 12:00 UTC]
-
August 1, 2026 • Xs Cad was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-08-01. Sector: Technology.