-
midwestbit.com
September 28, 2026
midwestbit.com was listed as a victim on the leak site of the threeam ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Technology. Country: United States of America. Website: midwestbit.com. Midwest Business Technology specializes in providing customized IT solutions and services to businesses and government agencies across the U.S. Their offerings include managed IT services, software development, cybersecurity solutions, and various
-
pistonespersan.com.ar
September 28, 2026
•
[ ransomware, manufacturing ]
pistonespersan.com.ar was listed as a victim on the leak site of the threeam ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Manufacturing. Country: Argentina. Website: pistonespersan.com.ar. Pistones Persan specializes in high-performance pistons and accessories, offering over 600 products from 53 brands. The company is certified under ISO standards and INMETRO, ensuring original quality. With a presence in more than 31 countries acro
-
coosalud.com
September 28, 2026
•
[ ransomware, healthcare ]
coosalud.com was listed as a victim on the leak site of the threeam ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Healthcare. Country: Colombia. Website: coosalud.com. Coosalud EPS (Coosalud Entidad Promotora de Salud S.A.) is one of the major health promotion entities (EPS) in Colombia, primarily managing subsidized and contributory healthcare regimes with multi-million-peso operating volumes. Alongside its sub
-
safescaffolding.net
September 28, 2026
•
[ ransomware, manufacturing ]
safescaffolding.net was listed as a victim on the leak site of the threeam ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Manufacturing. Country: United Kingdom of Great Britain and Northern Ireland. Website: safescaffolding.net. Safe Scaffolding is a privately held contractor operating primarily in the commercial and residential construction industry. The company provides physical scaffolding infrastructure, materials, and equipment setup to support building and renovatio
-
bakemyday.se
September 28, 2026
•
[ ransomware, retail, leak ]
bakemyday.se was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Retail & E-Commerce. Country: Sweden. Website: bakemyday.se. Bake My Day vill erbjuda fler mnniskor hantverksmssiga, kta och genersa konditori- och bageriupplevelser! Vra rykande frska brd och bakverk r bakade frn grunden fr hand p utvalda rvaror.
Employees: 10
Revenue: $5 Million
Phone Number: 010 199 71 71
-
Arnold Center
September 28, 2026
•
[ ransomware, healthcare ]
Arnold Center was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-28. Country: United States of America. Website: www.arnoldcenter.org.
-
MinMor Industries
September 28, 2026
•
[ ransomware, manufacturing ]
MinMor Industries was listed as a victim on the leak site of the cry0 ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Manufacturing. Coming soon...
-
Precision Facades Ltd
September 29, 2026
Precision Facades Ltd was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-09-29. Sector: Manufacturing. Country: United Kingdom of Great Britain and Northern Ireland. Facade engineering and construction (UK) United Kingdom | The complete company file server of a UK facade engineering contractor: finance and accounts records, audits, bank mandates, board papers, budgets and business plans; Project and tender data: current tender workload, tender tracker and sales forecasts; Confidential commercial records: SHEQT confidential folder and the costing database; Director-level sale and management documents | [ACTIVE: deadline 2026-10-02 05:32 UTC]
-
camorim.com.br
September 28, 2026
camorim.com.br was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Retail & E-Commerce. Country: Brazil. Website: camorim.com.br. Camorim Servios Martimos has over 30 years of expertise in the maritime sector, providing a range...
-
cpacb.com
September 29, 2026
cpacb.com was listed as a victim on the leak site of the m3rx ransomware group; the attack is estimated to have taken place on 2026-09-29. Sector: Professional Services. Country: Canada. Website: cpacb.com. +1 (214) 402 -3723. Our Mission is to provide clients with One-Stop Solutions for all their Accounting, Bookkeeping and Consulting needs. The firm focuses on Experience, Expertise, Accuracy and Efficiency. We are the trusted partner of many businesses for years and are not only helping them to track income and expenses but also providing comprehensive services which help them to increase the profit, control the cost and expand their business. Our flexible package helps keeping our services cost-effective Stolen: 446 GB 814,334 Files
-
iccsi.com
September 29, 2026
•
[ ransomware, technology, leak ]
iccsi.com was listed as a victim on the leak site of the m3rx ransomware group; the attack is estimated to have taken place on 2026-09-29. Sector: Professional Services. Website: iccsi.com. +1 (781) 331-9811. Interconnect Computer Cabling Services, Inc. is a full-service telecommunications company that has been operational since 1986, providing services for a diverse range of projects including education, medical facilities, hospitality, and corporate offices. The company specializes in telecommunications solutions and has recently developed touchless wave door opening systems to address safety concerns for clients returning to office spaces. Their clientele includes local schools, national railroad services, country clubs, and various commercial establishments. Interconnect is committed to delivering high-quality services tailored to the needs of their clients. Stolen: 434 GB 341,547 File
-
noonsugar.com
September 29, 2026
noonsugar.com was listed as a victim on the leak site of the m3rx ransomware group; the attack is estimated to have taken place on 2026-09-29. Sector: Retail & E-Commerce. Country: United Arab Emirates. Website: noonsugar.com. +92 4235831462 , Noon Sugar Mills Limited is one of Pakistan's oldest and most esteemed business entities, specializing in the production of white sugar and industrial-grade ethanol. Established in 1964, the company has significantly expanded its sugarcane crushing capacity and ethanol production capabilities, reflecting its commitment to continuous improvement and environmental sustainability. The company serves a diverse clientele, including corporate clients and the agricultural community, while upholding high ethical standards and promoting social responsibility. With ISO certifications in place, Noon Sugar Mills Limited emphasizes quality and compliance in its operations. Stolen: --
-
somasolucoes.com
September 29, 2026
somasolucoes.com was listed as a victim on the leak site of the m3rx ransomware group; the attack is estimated to have taken place on 2026-09-29. Sector: Professional Services. Country: Brazil. Website: somasolucoes.com. +55 1935472050 , Soma Solues em T.I. specializes in corporate IT solutions, offering a flexible and cost-effective ERP system tailored to the unique needs of businesses. Their services include web development, mobile applications, technical support, and digital marketing, aimed at simplifying business management and reducing operational costs. The company also provides a virtual store for IT and telecommunications equipment, enhancing brand visibility online. Their target clients are businesses seeking to optimize their operations and improve efficiency through innovative technology solutions. Stolen: --
-
oterolaw.com
September 29, 2026
•
[ ransomware, finance ]
oterolaw.com was listed as a victim on the leak site of the m3rx ransomware group; the attack is estimated to have taken place on 2026-09-29. Sector: Professional Services. Country: United States of America. Website: oterolaw.com. +1 (305) 567-9000. Otero Geeza Law, P.A. is a professional service corporation that offers high-quality legal representation to individuals and business organizations in South Florida and beyond. The firm specializes in various areas of law, including real estate, corporate and business law, litigation, and estate planning. Their mission is to provide accessible, responsive, and skilled legal services while maintaining the highest ethical standards. Otero Geeza Law is dedicated to delivering prompt, personal service and excellent work products to meet the diverse needs of their clients. Stolen: 82.5 GB 106,460 Files
-
carolinaasthma.com
September 29, 2026
carolinaasthma.com was listed as a victim on the leak site of the chaos ransomware group; the attack is estimated to have taken place on 2026-09-29. Sector: Healthcare. Country: United States of America. Website: carolinaasthma.com. Company management has 24 hours to reach an agreement with us. Otherwise, 290 GB of data will be disclosed, such as Other Patient Forms (name, date of birth, MRN, Social Security number, phone number, address and so on)
Administrative and financial matters, procurement, business services,
-
Groupe Proxitel
September 29, 2026
•
[ ransomware, technology ]
Groupe Proxitel was listed as a victim on the leak site of the Vexy Ransomware ransomware group; the attack is estimated to have taken place on 2026-09-29. Sector: Technology. Country: Timor-Leste. Website: proxi.tel. French B2B technology provider offering professional Internet connectivity (fiber/DSL, 4G/5G backup), fixed and mobile telephony, cybersecurity, IT backup, collaboration, networking and computer hardware. The group is based in Avignon and serves businesses and public-sector organizations.
-
bcx.co.za
September 29, 2026
bcx.co.za was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-09-29. Sector: Technology. Country: South Africa. Website: bcx.co.za. www.bcx.co.za
BCX (Business Connexion)
https://www.zoominfo.com/c/business-connexion-pty-ltd/372844609
Total leak: 500 GB 4,224,088 Files, 596,613 Folders
The leak includes source code, technical documentation and other confidential information.
Source code:
6 fully functional business applications
15+ integration libraries/modules
10+ test and utility projects
BUSINESS APPLICATIONS
1) Cemetery Management / Cemres
2) mSCOA Posting Level Creator
3) SolarReceipting
4) PortalSSO / Solution_Menu
5) StopWatch Reports
6) ChangeRequestManager
INTEGRATION PLATFORM
1. WfService
2. SolarMenuStructure
3. AssemblyConnector
4. Purchase Requisition Connectors
5. BcxConnector
6. XMConnect
7. HelpRoutine
8. Lookup Connectors
etc
Numerous vulnerabilities have been found in current versions of business applications!
-
Paid Victim 32373FFB7AF7E725
September 29, 2026
•
[ ransomware, hack ]
Paid Victim 32373FFB7AF7E725 was listed as a victim on the leak site of the AuditTeam ransomware group; the attack is estimated to have taken place on 2026-09-29. Country: Italy. [AI generated] N/A
I don't have reliable information about a company with this specific identifier. This appears to be an anonymized or coded reference, possibly from a ransomware leak site or threat intelligence feed, rather than a verifiable company name. Without access to real-time threat intelligence databases or the original source associated with this identifier, I cannot provide factual details about its operations, industry, or country.
-
maxwell-group.com
September 29, 2026
maxwell-group.com was listed as a victim on the leak site of the BrainCipher ransomware group; the attack is estimated to have taken place on 2026-09-29. Sector: Other. Country: United Kingdom of Great Britain and Northern Ireland. Website: maxwell-group.com. [AI generated] N/A
I don't have reliable, verified information about a specific company operating at "maxwell-group.com." There are multiple businesses that use variations of "Maxwell Group" as a name across different industries and countries, and without access to current, verifiable data tied specifically to this domain, I cannot provide accurate details about its operations, industry, or country without risking providing false information.
-
wildmanbg.com
September 29, 2026
•
[ ransomware, retail ]
wildmanbg.com was listed as a victim on the leak site of the BrainCipher ransomware group; the attack is estimated to have taken place on 2026-09-29. Sector: Other. Country: Bulgaria. Website: wildmanbg.com.