-
Altmannshofer Sicherheits-Videotechnik
September 30, 2026
•
[ ransomware, manufacturing, technology ]
Altmannshofer Sicherheits-Videotechnik was listed as a victim on the leak site of the lamashtu ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Manufacturing. Country: Germany. Website: altmannshofer.de. Altmannshofer Sicherheits-Videotechnik OHG is a German installer of electronic security systems from Affing near Augsburg, Bavaria. Since 1999 it plans and installs CCTV, burglar alarms (EMA), access control, electronic locks, fingerprint scanners
-
PROJAHN
September 30, 2026
•
[ ransomware, manufacturing ]
PROJAHN was listed as a victim on the leak site of the lamashtu ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Other. Country: Germany. Website: projahn.de. German manufacturer and distributor of professional precision
and hand tools (drill bits, masonry/wood/steel tools, thread tools, measuring tools, sockets, wrenches, screwdrivers, pliers, flashlights, workbenches).
-
Virtual Ideas
September 30, 2026
•
[ ransomware, technology ]
Virtual Ideas was listed as a victim on the leak site of the lamashtu ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Technology. Country: Australia. Website: virtualideas.com.au. Virtual Ideas is an Australian 3D visualisation and digital content studio based in
Sydney. It specialises in architectural visualisation (CGI), 3D animation, marketing
films, product visualisation, shadow and visual-impact studies etc.
-
Wilhelm Kühne
September 30, 2026
Wilhelm Khne was listed as a victim on the leak site of the lamashtu ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Manufacturing. Country: Germany. Website: wilhelm-kuehne.de. Wilhelm Khne is a German facility services company specializing in professional cleaning and building maintenance. Founded in 1950, it serves offices, schools, healthcare facilities, and commercial properties.
-
Becker Logistik
September 30, 2026
•
[ ransomware, manufacturing ]
Becker Logistik was listed as a victim on the leak site of the lamashtu ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Transportation. Country: Germany. Website: becker-logistik.de. German logistics and transportation company specializing in national and international freight transport, particularly bulk goods. The company operates its own fleet and provides reliable transport services across Germany and Europe.
-
Vinco Energy
September 30, 2026
•
[ ransomware, energy ]
Vinco Energy was listed as a victim on the leak site of the lamashtu ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Energy & Utilities. Country: United States of America. Website: vincoenergy.com. Vinco Energy Services is a Mexican oilfield services company providing engineering and operational solutions for the oil and gas sector. The company specializes in services like wireline logging, telemetry.
-
Astidental di Sabbione
September 30, 2026
•
[ ransomware, manufacturing ]
Astidental di Sabbione was listed as a victim on the leak site of the lamashtu ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Manufacturing. Country: Italy. Website: bquadro.it. is a leading Italian distributor with over 60 years of experience specializing in dental equipment, instruments, and dental laboratory supplies. The company provides comprehensive services, including dental office turnkey design, digital workflow
-
Dr Damiel Pugliese
September 30, 2026
•
[ ransomware, finance, healthcare ]
Dr Damiel Pugliese was listed as a victim on the leak site of the lamashtu ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Healthcare. Website: pugliese.lo. Dr. Daniel P. Pugliese is a certified Argentine accountant graduated from the prestigious University of Buenos Aires (U.B.A.). He is officially registered with the Professional Council of Economic Sciences of Buenos Aires (C.P.C.E.C.A.B.A.), which
-
assist2enjoy.be
September 30, 2026
assist2enjoy.be was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Other. Country: Belgium. Website: assist2enjoy.be. The company was established in 2015 and operates primarily in the wholesale and retail market for electrical household appliances. Its
-
econ-tec.com
September 25, 2026
econ-tec.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-09-25. Sector: Technology. Country: Germany. Website: econ-tec.com. The company focuses on designing technical systems for industrial customers, combining engineering expertise with process optimization, automation and energy-efficient production
-
dfiretailgroup.com
September 8, 2026
•
[ ransomware, leak, retail ]
dfiretailgroup.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-09-08. Sector: Retail & E-Commerce. Country: United States of America. Website: dfiretailgroup.com. DFI RETAIL GROUP 27 Years of Email Archives + 397 Illegal Stores + 40,000 Medical Files Over 160 mai...
-
SitePro Rentals
September 30, 2026
SitePro Rentals was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Other. Website: siteprorentals.com. I have yet to hear a response from SitePro Rentals regarding the data breach. I have heard rumors that a law firm is investigating the incident(https://classlawdc.com/2026/09/28/sitepro-rentals-data-breach-investigation/). I am giving you 72 hours to contact me, otherwise I will leak the active employee details.
The information includes:
IsTotalItem, Department_ShortName, Employee_FirstName, Employee_LastName, EmployeeEmploymentStatus_EmployeeNumber, Employee_HireDate, EmploymentStatus_ShortName, OrgUnit_ShortName, DeptJob_ShortName, EmployeeManager_ManagerDisplayName, PayType_ShortName, PayClass_ShortName, Employee_SocialSecurityNumber, Department_ShortName2, Employee_Gender, Employee_MiddleName, PersonAddress_Address1, PersonAddress_Address2, PersonAddress_City, PersonAddress_PostalCode, PersonAddress_StateCode, Employee_BirthDate, OrgUnit_ContactBusinessPhone, OrgUnit_ContactCellPhone, EmployeeManager_ManagerEmployeeNumber, EmployeeEmploymentStatus_BaseRate, EmployeeEmploymentStatus_BaseSalary, Department_LedgerCode, Department_XRefCode, and OrgUnit_XRefCode.
Contact me at xdlmfao@morke.ru
Session: 05651c7323273b723588d47455471ee9e27feb5187a30f2933554a705aacb38358. [Sector: Construction]
-
Buford-Thompson Company, LTD
September 30, 2026
•
[ ransomware, manufacturing, financial ]
Buford-Thompson Company, LTD was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Manufacturing. Country: United States of America. Website: Buford-Thompson Company, LTD. [construction] Buford-Thompson Company, LTD, a Texas construction general contractor with 30+ years of history building schools for K-12 districts across the state.
The exposed dataset totals 1.707 TB and includes:
5 years of W-2 EFW2 files (20212025) containing plaintext Social Security numbers, wages, and addresses for 350+ current and former employees every SSN readable without any decryption.
9.3 GB of attorney-client privileged files from the Stanton ISD v. BTC litigation legal strategy, discovery responses, and counsel communications.
Complete Frost Bank infrastructure four account numbers, ACH routing credentials, line-of-credit agreements (renewed April 2026), signature cards, and monthly bank statements spanning 20222026.
36+ active school construction projects blueprints, bid estimates, cost structures, subcontractor pricing, and change orders for ISD projects across Texas. A competitor's dream dataset.
2,000+ donor records from Human Services Campus (Phoenix homeless-services nonprofit) with full PII: name, address, phone, email, employer, and donation amounts.
QuickBooks company files (.QBW) from Along Side Ministries (Phoenix prison ministry) containing complete accounting, donor, and likely payroll data.
Thompson family personal records owner personal insurance, loans, ranch property (Jack County), airplane ownership, bond dividends, and personal tax documents.
-
Blaise C. Bender, PC
September 30, 2026
•
[ ransomware, leak, finance ]
Blaise C. Bender, PC was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Professional Services. Country: United States of America. Website: bcbenderlaw.com. The law firm of Blaise C. Bender, PC handles confidential client tax records/working papers, mergers and acquisitions (M&A) and transaction agreements, estate/trust documents, corporate management records, and confidential attorney-client communications, and fails to maintain security. Due to this negligent mishandling, we disclose confidential information that will subject Blaise C. Bender, PC to disciplinary action by the Bar/CPA, penalties under Section 7216 of the Internal Revenue Code and the Texas Privacy Act, civil claims for professional negligence/breach of fiduciary duty/breach of contract, and serious damage to our reputation and clients.
-
Orth Automobile
March 6, 2024
•
[ ransomware, manufacturing ]
Orth Automobile was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2024-03-06. Sector: Manufacturing. Country: Germany. Website: www.orth-automobile.de. Germany
-
Airtech Mechanical Services
September 30, 2026
Airtech Mechanical Services was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Professional Services. Country: United States of America. Website: www.airtechnc.com. United States
-
Titus
September 30, 2026
•
[ ransomware, leak, technology ]
Titus was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Technology. Country: Germany. Website: www.titus.de. Germany
-
Le Centre National de l'Expertise Hospitalière (CNEH)
September 30, 2026
•
[ ransomware, healthcare, hack ]
Le Centre National de l'Expertise Hospitalire (CNEH) was listed as a victim on the leak site of the kairos ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Healthcare. Country: France. Website: cneh.fr. Le Centre National de l'Expertise Hospitalire (CNEH) est une cole de rfrence et un organisme franais fond en 1974 qui accompagne les professionnels de sant et les tablissements sanitaires et mdico-sociaux.
-
wolfusofsky.de
September 30, 2026
•
[ ransomware, manufacturing ]
wolfusofsky.de was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-09-30. Country: Germany. Website: wolfusofsky.de. The group provides a broad range of construction and infrastructure services to public and private clients in Rhineland-Palatinate, Saarland, neighboring
-
Summit Electric Supply
September 30, 2026
Summit Electric Supply was listed as a victim on the leak site of the Vexy Ransomware ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Energy & Utilities. Country: United States of America. Website: summit.com. Summit Electric Supply supplies electrical products and solutions for commercial, industrial, construction, OEM, institutional, and marine applications. Its website allows customers to browse products, check availability, manage orders, view invoices, and purchase online.