Full List

Search

Recent Breaches

• www.newyjh.com September 30, 2026 www.newyjh.com was listed as a victim on the leak site of the ULose ransomware group; the attack is estimated to have taken place on 2026-09-30. Country: South Korea. Website: newyjh.com. Country: Korea | Status: Sale
• Law Offices of R. David Williams, P.A. September 30, 2026 Law Offices of R. David Williams, P.A. was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Professional Services. Country: United States of America. Law Offices of R. David Williams, P.A. Contents. A complete dossier of the firm's criminal defense practice covering ~175+ clients: felonies (an undercover sex sting involving a minor - Ramirez; domestic violence robbery - Valderrama, involving a 4-year-old child; felony DUI - Segula; fraud - B. Williams), a core caseload of ~10 DUI matters (including an arrest at breath readings of 0.011 and SCRAM alcohol monitoring), violations of probation (VOP), FDLE expungement packets with FD-258 fingerprint cards, a 'red flag' Risk Protection Order (RPO), 2 clients in ICE custody, and a material witness under GPS monitoring for 3+ years. Attorney fees range from $750 to $25,000. The case files include complete police discovery: ~206 GB of bodycam video, 911 recordings, and jail calls, incident reports, photo line-ups, FCIC/NCIC forms, and victim and witness data (Marsy's Law). More
• clicks digital GmbH Information September 30, 2026 • [ ransomware, technology ] clicks digital GmbH Information was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Technology. Country: Germany. clicks digital GmbH Information With more than 40 employees, the agency manages national and international online projects of companies from a wide range of industries. Based in Berlin, Dresden, Munich and Cologne, has been a specialist in online marketing for more than twelve years. More
• GERLON September 30, 2026 GERLON was listed as a victim on the leak site of the lamashtu ransomware group; the attack is estimated to have taken place on 2026-09-30. Country: Germany. Website: gerlon.com. GERLON is a French company (SAS, SIREN 349008284) based in Abbeville (Somme, Hauts-de-France) manufacturing and selling steel wool (laine d'acier), brushes, abrasives, tools (outillage) and cleaning products.
• MCAP — MortgageHub commercial lending platform September 30, 2026 • [ ransomware, finance ] MCAP MortgageHub commercial lending platform was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Financial Services. Country: Canada. Mortgage securitization and servicing (Canada) Canada | The complete MortgageHub borrower database of a major Canadian mortgage company: seven years of records with social insurance numbers, dates of birth, full addresses, and complete loan and payment histories; The daily commercial servicing book: the full national portfolio of active commercial mortgages with balances, interest rates, credit scores, insurer policy numbers, arrears, and investor reporting fields; The full backup archive of the platform, 2019 through today | [ACTIVE: deadline 2026-10-03 15:00 UTC]
• Altmannshofer Sicherheits-Videotechnik September 30, 2026 • [ ransomware, manufacturing, technology ] Altmannshofer Sicherheits-Videotechnik was listed as a victim on the leak site of the lamashtu ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Manufacturing. Country: Germany. Website: altmannshofer.de. Altmannshofer Sicherheits-Videotechnik OHG is a German installer of electronic security systems from Affing near Augsburg, Bavaria. Since 1999 it plans and installs CCTV, burglar alarms (EMA), access control, electronic locks, fingerprint scanners
• PROJAHN September 30, 2026 • [ ransomware, manufacturing ] PROJAHN was listed as a victim on the leak site of the lamashtu ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Other. Country: Germany. Website: projahn.de. German manufacturer and distributor of professional precision and hand tools (drill bits, masonry/wood/steel tools, thread tools, measuring tools, sockets, wrenches, screwdrivers, pliers, flashlights, workbenches).
• Virtual Ideas September 30, 2026 • [ ransomware, technology ] Virtual Ideas was listed as a victim on the leak site of the lamashtu ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Technology. Country: Australia. Website: virtualideas.com.au. Virtual Ideas is an Australian 3D visualisation and digital content studio based in Sydney. It specialises in architectural visualisation (CGI), 3D animation, marketing films, product visualisation, shadow and visual-impact studies etc.
• Wilhelm Kühne September 30, 2026 Wilhelm Khne was listed as a victim on the leak site of the lamashtu ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Manufacturing. Country: Germany. Website: wilhelm-kuehne.de. Wilhelm Khne is a German facility services company specializing in professional cleaning and building maintenance. Founded in 1950, it serves offices, schools, healthcare facilities, and commercial properties.
• Becker Logistik September 30, 2026 • [ ransomware, manufacturing ] Becker Logistik was listed as a victim on the leak site of the lamashtu ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Transportation. Country: Germany. Website: becker-logistik.de. German logistics and transportation company specializing in national and international freight transport, particularly bulk goods. The company operates its own fleet and provides reliable transport services across Germany and Europe.
• Vinco Energy September 30, 2026 • [ ransomware, energy ] Vinco Energy was listed as a victim on the leak site of the lamashtu ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Energy & Utilities. Country: United States of America. Website: vincoenergy.com. Vinco Energy Services is a Mexican oilfield services company providing engineering and operational solutions for the oil and gas sector. The company specializes in services like wireline logging, telemetry.
• Astidental di Sabbione September 30, 2026 • [ ransomware, manufacturing ] Astidental di Sabbione was listed as a victim on the leak site of the lamashtu ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Manufacturing. Country: Italy. Website: bquadro.it. is a leading Italian distributor with over 60 years of experience specializing in dental equipment, instruments, and dental laboratory supplies. The company provides comprehensive services, including dental office turnkey design, digital workflow
• Dr Damiel Pugliese September 30, 2026 • [ ransomware, finance, healthcare ] Dr Damiel Pugliese was listed as a victim on the leak site of the lamashtu ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Healthcare. Website: pugliese.lo. Dr. Daniel P. Pugliese is a certified Argentine accountant graduated from the prestigious University of Buenos Aires (U.B.A.). He is officially registered with the Professional Council of Economic Sciences of Buenos Aires (C.P.C.E.C.A.B.A.), which
• assist2enjoy.be September 30, 2026 assist2enjoy.be was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Other. Country: Belgium. Website: assist2enjoy.be. The company was established in 2015 and operates primarily in the wholesale and retail market for electrical household appliances. Its
• econ-tec.com September 25, 2026 econ-tec.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-09-25. Sector: Technology. Country: Germany. Website: econ-tec.com. The company focuses on designing technical systems for industrial customers, combining engineering expertise with process optimization, automation and energy-efficient production
• dfiretailgroup.com September 8, 2026 • [ ransomware, leak, retail ] dfiretailgroup.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-09-08. Sector: Retail & E-Commerce. Country: United States of America. Website: dfiretailgroup.com. DFI RETAIL GROUP 27 Years of Email Archives + 397 Illegal Stores + 40,000 Medical Files Over 160 mai...
• SitePro Rentals September 30, 2026 SitePro Rentals was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Other. Website: siteprorentals.com. I have yet to hear a response from SitePro Rentals regarding the data breach. I have heard rumors that a law firm is investigating the incident(https://classlawdc.com/2026/09/28/sitepro-rentals-data-breach-investigation/). I am giving you 72 hours to contact me, otherwise I will leak the active employee details. The information includes: IsTotalItem, Department_ShortName, Employee_FirstName, Employee_LastName, EmployeeEmploymentStatus_EmployeeNumber, Employee_HireDate, EmploymentStatus_ShortName, OrgUnit_ShortName, DeptJob_ShortName, EmployeeManager_ManagerDisplayName, PayType_ShortName, PayClass_ShortName, Employee_SocialSecurityNumber, Department_ShortName2, Employee_Gender, Employee_MiddleName, PersonAddress_Address1, PersonAddress_Address2, PersonAddress_City, PersonAddress_PostalCode, PersonAddress_StateCode, Employee_BirthDate, OrgUnit_ContactBusinessPhone, OrgUnit_ContactCellPhone, EmployeeManager_ManagerEmployeeNumber, EmployeeEmploymentStatus_BaseRate, EmployeeEmploymentStatus_BaseSalary, Department_LedgerCode, Department_XRefCode, and OrgUnit_XRefCode. Contact me at xdlmfao@morke.ru Session: 05651c7323273b723588d47455471ee9e27feb5187a30f2933554a705aacb38358. [Sector: Construction]
• Buford-Thompson Company, LTD September 30, 2026 • [ ransomware, manufacturing, financial ] Buford-Thompson Company, LTD was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Manufacturing. Country: United States of America. Website: Buford-Thompson Company, LTD. [construction] Buford-Thompson Company, LTD, a Texas construction general contractor with 30+ years of history building schools for K-12 districts across the state. The exposed dataset totals 1.707 TB and includes: 5 years of W-2 EFW2 files (20212025) containing plaintext Social Security numbers, wages, and addresses for 350+ current and former employees every SSN readable without any decryption. 9.3 GB of attorney-client privileged files from the Stanton ISD v. BTC litigation legal strategy, discovery responses, and counsel communications. Complete Frost Bank infrastructure four account numbers, ACH routing credentials, line-of-credit agreements (renewed April 2026), signature cards, and monthly bank statements spanning 20222026. 36+ active school construction projects blueprints, bid estimates, cost structures, subcontractor pricing, and change orders for ISD projects across Texas. A competitor's dream dataset. 2,000+ donor records from Human Services Campus (Phoenix homeless-services nonprofit) with full PII: name, address, phone, email, employer, and donation amounts. QuickBooks company files (.QBW) from Along Side Ministries (Phoenix prison ministry) containing complete accounting, donor, and likely payroll data. Thompson family personal records owner personal insurance, loans, ranch property (Jack County), airplane ownership, bond dividends, and personal tax documents.
• Blaise C. Bender, PC September 30, 2026 • [ ransomware, leak, finance ] Blaise C. Bender, PC was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Professional Services. Country: United States of America. Website: bcbenderlaw.com. The law firm of Blaise C. Bender, PC handles confidential client tax records/working papers, mergers and acquisitions (M&A) and transaction agreements, estate/trust documents, corporate management records, and confidential attorney-client communications, and fails to maintain security. Due to this negligent mishandling, we disclose confidential information that will subject Blaise C. Bender, PC to disciplinary action by the Bar/CPA, penalties under Section 7216 of the Internal Revenue Code and the Texas Privacy Act, civil claims for professional negligence/breach of fiduciary duty/breach of contract, and serious damage to our reputation and clients.
• Orth Automobile March 6, 2024 • [ ransomware, manufacturing ] Orth Automobile was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2024-03-06. Sector: Manufacturing. Country: Germany. Website: www.orth-automobile.de. Germany