Full List

Search

Recent Breaches

• Drinks Wines Spirits September 29, 2026 • [ ransomware, retail ] Drinks Wines Spirits was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-29. Sector: Retail & E-Commerce. Country: Taiwan. Website: drinks.com.tw. drinks.com.tw zoominfo.com/c/drinks-wines--spirits-co-ltd/425924055 DRINKS / Oak Barrel (, Drinks Wines & Spirits Co., Ltd.) (founded 1993, Taipei) is Taiwan's largest liquor retail and import chain 3335 stores nationwide with about NT$2 billion (US$60M) annual revenue and 200300 staff. Founded by "godfather of imported liquor" Chen Chun-an (died February 2026 at 80), it pioneered the wine-tasting culture in Taiwan through its Wine Party magazine, six tasting classrooms and a discount-store format with near-franchise store-manager economics. Beyond retail, it holds exclusive Taiwan agency rights for major whisky brands (Arran, Bladnoch, Raasay, Benromach, Paul John, Lauder's) and wines (Mouton Cadet, Lanson, Santa Rita), and releases exclusive single-cask bottlings for the local market. A 2008 attempt to expand into Shanghai failed within six months, and a pricing war with rival JT Mall made headlines. Since December 2025 the chairman has been Wu Mei-ling, leading a family-own
• Groupe APROSEP September 29, 2026 • [ ransomware, leak, technology ] Groupe APROSEP was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-29. Sector: Other. Country: Senegal. Website: groupe-aprosep.com. groupe-aprosep.com guyanasso.org Groupe APROSEP (founded 1994, Cayenne, French Guiana) is a solidarity-economy network (groupement d'conomie solidaire) that unites and professionalizes associations across the region, focusing on employment insertion, training and social innovation. It runs several affiliated structures LIANE (job integration), OFA Guyane (training), GEIQ Jeun'ESS and GEPSL (shared employers for sports/youth/childcare jobs) and the Conciergerie Solidaire all housed in "L'Accordeur," a 1,600 m PTCE-labeled cooperative hub in downtown Cayenne supporting about 500 jobs and 240 associations. Led since 1997 by director Jean-David Poquet under president Jos Othily, the group celebrated its 30th anniversary in June 2025 and runs flagship projects like an AVIP integration crche (30 places), the EVA illiteracy-assessment center and the social enterprise Tisanes de Camopi. Its partner network spans France Travail, ANLCI, Orange
• Telrad Networks September 29, 2026 Telrad Networks was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-29. Sector: Technology. Country: Israel. Website: telrad.com. telrad.com zoominfo.com/c/telrad-networks-ltd/131956879 Telrad Networks (founded 1951 in Israel as The Consolidated Telephone & Radio Company) is a 75-year-old developer of wireless broadband equipment TD-LTE/5G base stations, subscriber CPE, point-to-multipoint backhaul radios and private-network solutions for WISPs, telcos, industry and governments in 100+ countries. Its flagship BreezeCOMPACT base stations use software-defined radio (upgradable from WiMAX to LTE, 22 to 44 without new hardware) and its "LTE-in-a-Box" puts a full core network inside one compact unit; the newer BreezeAIR AXE line delivers 2+ Gbps links in the 6 GHz band. The company rose to prominence by buying Alvarion's broadband wireless division in 2013 ($6M) and went public on the Tel Aviv exchange in 2017 ($121M revenue) before being fully acquired and delisted in August 2022 by Liquid Intelligent Technologies / Cassava Technologies ($58M) the pan-African tech group of billionaire Strive Masiyiwa.
• Europrim September 29, 2026 • [ ransomware, healthcare ] Europrim was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-29. Sector: Healthcare. Country: France. Website: euro-prim.com. euro-prim.com zoominfo.com/c/europrim/1128488637 EURO-PRIM (founded 1998, Grenoble, France) is a local digital printing and reprographics company working together with its sister firm CINRA (est. 2003) as "Europrim & CINRA" two production sites, ~25 staff, serving students, SMEs, large regional companies and property-management firms. Services cover digital color/B&W printing up to A3+, large-format scanning up to A0, graphic design, finishing, personalized mass mailings (including for homeowners' association meetings) and prefecture-approved numbered event tickets. The business was taken over in 2016 by Fleur Henno and Philippe Baffert-Rey, who modernized the equipment and pushed an online store with 200+ products; it holds a solid 4.2/5 rating on 222 Google reviews. However, on 2 July 2025 the Grenoble commercial court opened redressement judiciaire (receivership)
• QUALITY SPORT Topsport Italia September 29, 2026 • [ ransomware, retail ] QUALITY SPORT Topsport Italia was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-29. Sector: Retail & E-Commerce. Country: Italy. Website: topsportitalia.it. topsportitalia.it qualitysport.com Topsport Italia (founded 1972, Savigliano, Piedmont) and Quality Sport Italia S.r.l. (registered 2009, same address) are two sides of one B2B sports-equipment operator in Italy, run today by director Dario Valsania after being spun out of the larger Bongiovanni Sport group. Topsport designs and installs sports facilities "turnkey" courts, suspended ceilings, partitions, bleachers and lighting while Quality Sport sells and services fitness machines, gymnastics gear and accessories to sports schools, associations and public bodies via its qualitysport.com platform. Their model is full-service: consulting, equipment selection, installation, training and after-sales, backed by their own warehouse in Savigliano. The two brands share one multilingual e-commerce platform (6 languages) and a combined catalog. They are a solid mid-sized niche player with 50+ years of heritage
• Auren September 29, 2026 • [ ransomware, finance ] Auren was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-29. Sector: Professional Services. Country: Spain. Website: auren.es. auren.es zoominfo.com/c/auren/1115886722 AUREN (founded 1998, Madrid) is Spain's leading home-grown multidisciplinary professional-services firm audit, legal/tax advisory, consulting and corporate finance with 104 million revenue in Spain and 1,100+ staff in 15 offices (2,500+ people and 62 offices worldwide). Founded and chaired by Mario Alonso Ayala, it sells an integrated "Big Four-style" service portfolio to mid-market companies with a "humanist, close-to-client" culture, plus standout niches in forensic/expert-witness work, public-sector audit and M&A. In March 2025, Dutch private equity fund Waterland took a 49% stake the first PE investment in a Spanish professional-services firm giving it firepower for acquisitions. Revenue is split roughly Legal 42M, Consulting 35M, Audit 24M, Corporate Finance 3.4M, and the firm is now on a buy-and-build spree (1518 deals planned for 2026, its largest being the absorption of Moore Espaa's Madrid and Barcelona offices).
• Solaria September 29, 2026 Solaria was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-29. Sector: Agriculture and Food Production. Country: Indonesia. Website: solariaresto.co.id. solariaresto.co.id zoominfo.com/c/solaria-restaurant/547046417 Solaria (founded 1991 in Cikarang by Aliuyanto, a UGM economics graduate) is one of Indonesia's biggest family restaurant chains 200+ outlets in 55 cities across 31 provinces, employing thousands of people. It serves affordable Asian-Indonesian comfort food (fried rice, noodles, kwetiau, chicken and seafood dishes) famous for huge "jumbo" portions at Rp23k55k, targeting middle-class families and mall shoppers. Its key differentiator is that it is 100% company-owned under PT Sinar Solaria no franchises at all which keeps taste and service standards consistent nationwide. The company holds halal certification from both MUI and NU (recovering from a 2015 pork-enzyme scare in Balikpapan that was later disproven by DNA testing) and has won brand-protection lawsuits against copycat names. Revenues are private and undisclosed, but the founder's wealth is media-estimated at trillions of rupiah; the main risks are inconsisten
• Webb Electric Company of Florida September 29, 2026 Webb Electric Company of Florida was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-29. Sector: Energy & Utilities. Country: United States of America. Website: webbelectric.com. webbelectric.com Webb Electric Company of Florida (founded 1957, Cantonment/Pensacola, FL) is a veteran-owned specialty electrical contractor focused on underground power distribution from 600V to 35kV, substation replacements, medium-voltage upgrades and airfield lighting systems. It works almost exclusively for the U.S. government Navy, Air Force, Army Corps of Engineers, VA, USDA and FDA with 1,000+ federal projects completed nationwide (including Cuba and Hawaii) and roughly $96.6 million in defense contracts awarded between 2000 and 2020. Led by founder Jerry T. Webb and his children (President Daniel Webb, VP/Treasurer Melinda Schwartz), the company books $1015 million a year and self-performs 98% of its work with its own crews. Landmark projects include a $16.7M runway lighting overhaul at Scott AFB and $15.4M in electrical work at Sheppard AFB. It competes on "best value" past performance and a strong safety record (OSHA-trained crews).
• Datacomm Services September 29, 2026 • [ ransomware, technology, government ] Datacomm Services was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-29. Sector: Technology. Country: United States of America. Website: dscdatacomm.com. dscdatacomm.com zoominfo.com/c/datacomm-services-corp/347799114 Datacomm Services Corporation (DSC) (operating since 1988, Memphis, Tennessee) is a low-voltage systems contractor serving the Memphis/Mid-South region (TN, MS, AR) for nearly 40 years. It designs and installs structured cabling (Cat 5eCat 6A and fiber optics), outside-plant networks, access control, CCTV, intrusion alarms and paging/AV systems acting as a single point of contact for all low-voltage building systems. Led by President Allen Hendry and EVP/CEO Chuck Jennings, it runs a lean ~22-person team with two certified RCDD designers on staff and revenue around $10 million/year. Clients range from small service tickets to $1M+ projects offices, industrial sites and especially school systems and government buyers (it holds TIPS purchasing contracts through 2028). It carries an A+ BBB rating and clean legal record, with strong reviews for workmanship and service. Main limits: purely regional footprint and dependence
• Defencebit September 29, 2026 • [ ransomware, technology, government ] Defencebit was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-29. Sector: Government & Defense. Country: United Kingdom of Great Britain and Northern Ireland. Website: defencebit.com. defencebit.com zoominfo.com/c/defencebit/532842616 DefenceBit (founded 2018, Lisbon) is a boutique cybersecurity consulting firm self-described "hackers, but the good ones" spun off from Bullray-CIT, an Angolan-government-focused critical-systems integrator. It provides offensive-security services: penetration testing, vulnerability assessments, hardening, source-code and web/API audits, mobile app audits, social-engineering tests and full Red Team engagements, working to PTES/OWASP/OSSTMM standards with manual verification. The team holds top certifications (CEH, CISSP, PMP, Checkpoint CCSE, ISO 27001) and its co-founder later moved to a senior role at the NATO Communications and Information Agency. A notable credential is its contract with Portugal's National Cybersecurity Centre (CNCS) to run the "Cidado Ciberseguro" course for government workers on the state NAU platform. It remains a very small company (110 staff)
• Edcon September 29, 2026 Edcon was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-29. Sector: Manufacturing. Country: South Africa. Website: edcon.co.za. edcon.co.za zoominfo.com/c/edcon/36900910 Edcon (roots from 1929, Johannesburg) was South Africa's largest non-food retailer owner of iconic chains Edgars, Jet, CNA and Boardmans, with ~1,200 stores across Southern Africa, ~19,000 staff, revenue of R25+ billion and four million private-label credit cards. It was crippled by Bain Capital's 2007 leveraged buyout (~R25 billion), losing market share to discounters before COVID-19 lockdown wiped out R2 billion in sales and forced business rescue in April 2020. The group was then broken up: Jet was sold to The Foschini Group (~R480m), Edgars to Retailability (~R350m, 5,200 jobs saved), CNA and credit books to other buyers. The Edcon holding company itself no longer trades edcon.co.za is now a business-rescue notice board where practitioners Marsden and Schapiro distribute sale proceeds to creditors (payments started September 2024, proceedings still open as of 2025).
• Samwumed September 29, 2026 • [ ransomware, healthcare, finance ] Samwumed was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-29. Sector: Healthcare. Country: South Korea. Website: samwumed.org. samwumed.org zoominfo.com/c/samwumed/346685548 SAMWUMED (founded 1952, Cape Town) is a closed, self-administered medical aid scheme serving South African municipal workers roughly 35,000 members and 73,000 covered lives. It collects about R1.9 billion/year in contributions, kept reserves over R1.3 billion and posted a R14.3 million surplus in 2024 (solvency 68% vs the 25% legal minimum). Plans are income-banded and cheap (from ~R750/month with a 60% employer subsidy), covering hospitals, doctors, medication, dentistry and optics. Led by Principal Officer Francina Mosoeu with a union-appointed board, it administers benefits with Medscheme across a network of private hospital groups. Key problems right now: membership shrinking ~15%/year as young people leave, and an ongoing court battle with the Melomed hospital group over contract exclusions plus the long-term threat of national health insurance reform.
• LegalWise September 29, 2026 LegalWise was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-29. Sector: Professional Services. Country: South Africa. Website: legalwise.co.za. legalwise.co.za zoominfo.com/c/legalwise/429691676 LegalWise (founded 1984, Johannesburg) is South Africa's leading legal-expenses insurance provider, with 350,000+ members and 1.1 million people covered across the country. For a monthly fee starting at ~R151 ($8), members get 24/7 legal advice, court-cost coverage up to R405,000 per case, and access to a network of 220+ partner law firms helping ordinary people afford lawyers for labour, criminal, family and municipal disputes. The company has 400800 staff, offices in all nine provinces plus Botswana and Namibia, and handles 125,000+ consultations and ~70,000 new cases a year. It sits inside the LEGA insurance group (with insurer LEZA), where 62% was bought by black-owned investment firm Sithega in 2023 while Hollard kept 38%; group gross premiums run ~R800850 million/year. Led by CEO Siva Gengan
• Gardeners' Guild September 30, 2026 • [ ransomware, leak ] Gardeners' Guild was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Agriculture and Food Production. Country: United States of America. Website: gardenersguild.com. Gardeners' Guild is a full-service landscaping company based in the SF Bay Area, specializing in both interior and exterior landscape maintenance and construction. Founded in 1972 and employee-owned, they offer a range of services including irrigation repair, sustainable landscaping, and fire fuel reduction. Their clients include multi-family communities, commercial buildings, business parks, hospitality venues, and residential properties. The company is dedicated to transforming and maintaining landscapes while promoting water conservation and drought-tolerant designs. The company headquarters is located in 2780 Goodrick Avenue, Richmond, CA 94801, United States. 51-200 Employees
• West County Health Centers September 30, 2026 • [ ransomware, healthcare ] West County Health Centers was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Healthcare. Country: United States of America. West County Health Centers provides comprehensive, quality and accessible health care services to the communities of western Sonoma County.The company is a cohesive team of health care providers, support staff and volunteers dedicated to wellness, compassion, affordability and excellence of care. The company believes in non-judgmental and equal care for all members of the company's diverse community. The company headquarters is located in 14045 Mill Street, Guerneville, CA 95446, United States. 51-200 Employees
• www.newyjh.com September 30, 2026 www.newyjh.com was listed as a victim on the leak site of the ULose ransomware group; the attack is estimated to have taken place on 2026-09-30. Country: South Korea. Website: newyjh.com. Country: Korea | Status: Sale
• Law Offices of R. David Williams, P.A. September 30, 2026 Law Offices of R. David Williams, P.A. was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Professional Services. Country: United States of America. Law Offices of R. David Williams, P.A. Contents. A complete dossier of the firm's criminal defense practice covering ~175+ clients: felonies (an undercover sex sting involving a minor - Ramirez; domestic violence robbery - Valderrama, involving a 4-year-old child; felony DUI - Segula; fraud - B. Williams), a core caseload of ~10 DUI matters (including an arrest at breath readings of 0.011 and SCRAM alcohol monitoring), violations of probation (VOP), FDLE expungement packets with FD-258 fingerprint cards, a 'red flag' Risk Protection Order (RPO), 2 clients in ICE custody, and a material witness under GPS monitoring for 3+ years. Attorney fees range from $750 to $25,000. The case files include complete police discovery: ~206 GB of bodycam video, 911 recordings, and jail calls, incident reports, photo line-ups, FCIC/NCIC forms, and victim and witness data (Marsy's Law). More
• clicks digital GmbH Information September 30, 2026 • [ ransomware, technology ] clicks digital GmbH Information was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Technology. Country: Germany. clicks digital GmbH Information With more than 40 employees, the agency manages national and international online projects of companies from a wide range of industries. Based in Berlin, Dresden, Munich and Cologne, has been a specialist in online marketing for more than twelve years. More
• GERLON September 30, 2026 GERLON was listed as a victim on the leak site of the lamashtu ransomware group; the attack is estimated to have taken place on 2026-09-30. Country: Germany. Website: gerlon.com. GERLON is a French company (SAS, SIREN 349008284) based in Abbeville (Somme, Hauts-de-France) manufacturing and selling steel wool (laine d'acier), brushes, abrasives, tools (outillage) and cleaning products.
• MCAP — MortgageHub commercial lending platform September 30, 2026 • [ ransomware, finance ] MCAP MortgageHub commercial lending platform was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Financial Services. Country: Canada. Mortgage securitization and servicing (Canada) Canada | The complete MortgageHub borrower database of a major Canadian mortgage company: seven years of records with social insurance numbers, dates of birth, full addresses, and complete loan and payment histories; The daily commercial servicing book: the full national portfolio of active commercial mortgages with balances, interest rates, credit scores, insurer policy numbers, arrears, and investor reporting fields; The full backup archive of the platform, 2019 through today | [ACTIVE: deadline 2026-10-03 15:00 UTC]