-
Amazon Informatica
September 28, 2026
•
[ ransomware, technology, government ]
Amazon Informatica was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Technology. Country: Brazil. Amazon Informtica LTDA is a prominent Information Technology (IT) solutions integrator and managed services provider founded in Brazil in 1995.
Amazon Informtica's primary market focus is the public sector and government agencies, serving various state and federal entities in Brazil.To support these operations, they maintain strategic corporate offices in Braslia/DF (to service the federal government cluster) and Belm/PA. Furthermore, the company has expanded its footprint internationally with operational branches in Latin America and Europe (Portugal), where they deliver customized government tech solutions and enterprise infrastructure support to large private corporations in those regions.
Full commitment of the network having full access to infrastructure, thus ensuring full access to the databases containing confidential and financial information!
Virtual Infrastructure and Database Cluster with active administrative master credentials exposed in text clear inside get_bk.bat. Hosts compromised. The targets contain production and integration databases with sensitive PII schemas, employee registries, banking credentials, CPF, and RG data.
TOX ID: 3D6EF83C3C4517FE42B212A934D4B08579A5F20522828C4E4818EA117F53063377C4D769640B
SESSION: 052a5fe97f7b1822c2225ba884b5f719c07ec99da7d838421a20958938f54cb539 [Sector: Government, Technology]
-
PKSF — Palli Karma-Sahayak Foundation
September 28, 2026
PKSF Palli Karma-Sahayak Foundation was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Financial Services. Country: Bangladesh. Website: 08trl.exit. Organization with 13 emails extracted. Domain: 08trl.exit
-
Ever Ready First Aid
September 28, 2026
Ever Ready First Aid was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Healthcare. Country: United States of America. Website: www.everreadyfirstaidusa.com. United States
-
Starr Whitehouse Landscape Architects
September 28, 2026
•
[ ransomware, technology ]
Starr Whitehouse Landscape Architects was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Professional Services. Country: United States of America. Website: www.starrwhitehouse.com. United States
-
Chem Process Systems Pvt. Ltd.
September 28, 2026
•
[ ransomware, manufacturing ]
Chem Process Systems Pvt. Ltd. was listed as a victim on the leak site of the Doommageddon ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Manufacturing. Country: India. Status: upcoming | Deadline: 2026-10-05T00:00:00Z
-
Goodrich Logistics
September 28, 2026
•
[ ransomware, manufacturing ]
Goodrich Logistics was listed as a victim on the leak site of the Doommageddon ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Transportation. Status: upcoming | Deadline: 2026-10-05T00:00:00Z
-
stjames.wa.edu.au
September 28, 2026
•
[ ransomware, education ]
stjames.wa.edu.au was listed as a victim on the leak site of the threeam ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Education. Country: Australia. Website: stjames.wa.edu.au. St James Anglican School provides a holistic education for students from Kindergarten to Year 12, focusing on unlocking individual potential and fostering excellence across various disciplines. The school offers a diverse curriculum that includes
-
bhn-expertise.com
September 28, 2026
•
[ ransomware, finance ]
bhn-expertise.com was listed as a victim on the leak site of the threeam ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Professional Services. Country: Germany. Website: bhn-expertise.com. BHN Expertise is an accounting firm that helps businesses manage their financial records and grow smartly. With offices across Normandy in cities like Bolbec, Caen, Rouen, and Yvetot, they provide local support and personalized accounting services
-
apexus.com
September 28, 2026
•
[ ransomware, technology ]
apexus.com was listed as a victim on the leak site of the threeam ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Technology. Country: United States of America. Website: apexus.com. Apexus, founded in 2007, is a business services company that manages the 340B Prime Vendor Program supporting the 340B Drug Pricing Program. The company negotiates pricing discounts with pharmaceutical manufacturers, provides educational resources
-
midwestbit.com
September 28, 2026
midwestbit.com was listed as a victim on the leak site of the threeam ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Technology. Country: United States of America. Website: midwestbit.com. Midwest Business Technology specializes in providing customized IT solutions and services to businesses and government agencies across the U.S. Their offerings include managed IT services, software development, cybersecurity solutions, and various
-
pistonespersan.com.ar
September 28, 2026
•
[ ransomware, manufacturing ]
pistonespersan.com.ar was listed as a victim on the leak site of the threeam ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Manufacturing. Country: Argentina. Website: pistonespersan.com.ar. Pistones Persan specializes in high-performance pistons and accessories, offering over 600 products from 53 brands. The company is certified under ISO standards and INMETRO, ensuring original quality. With a presence in more than 31 countries acro
-
coosalud.com
September 28, 2026
•
[ ransomware, healthcare ]
coosalud.com was listed as a victim on the leak site of the threeam ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Healthcare. Country: Colombia. Website: coosalud.com. Coosalud EPS (Coosalud Entidad Promotora de Salud S.A.) is one of the major health promotion entities (EPS) in Colombia, primarily managing subsidized and contributory healthcare regimes with multi-million-peso operating volumes. Alongside its sub
-
safescaffolding.net
September 28, 2026
•
[ ransomware, manufacturing ]
safescaffolding.net was listed as a victim on the leak site of the threeam ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Manufacturing. Country: United Kingdom of Great Britain and Northern Ireland. Website: safescaffolding.net. Safe Scaffolding is a privately held contractor operating primarily in the commercial and residential construction industry. The company provides physical scaffolding infrastructure, materials, and equipment setup to support building and renovatio
-
bakemyday.se
September 28, 2026
•
[ ransomware, retail, leak ]
bakemyday.se was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Retail & E-Commerce. Country: Sweden. Website: bakemyday.se. Bake My Day vill erbjuda fler mnniskor hantverksmssiga, kta och genersa konditori- och bageriupplevelser! Vra rykande frska brd och bakverk r bakade frn grunden fr hand p utvalda rvaror.
Employees: 10
Revenue: $5 Million
Phone Number: 010 199 71 71
-
Arnold Center
September 28, 2026
•
[ ransomware, healthcare ]
Arnold Center was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-28. Country: United States of America. Website: www.arnoldcenter.org.
-
MinMor Industries
September 28, 2026
•
[ ransomware, manufacturing ]
MinMor Industries was listed as a victim on the leak site of the cry0 ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Manufacturing. Coming soon...
-
Precision Facades Ltd
September 29, 2026
Precision Facades Ltd was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-09-29. Sector: Manufacturing. Country: United Kingdom of Great Britain and Northern Ireland. Facade engineering and construction (UK) United Kingdom | The complete company file server of a UK facade engineering contractor: finance and accounts records, audits, bank mandates, board papers, budgets and business plans; Project and tender data: current tender workload, tender tracker and sales forecasts; Confidential commercial records: SHEQT confidential folder and the costing database; Director-level sale and management documents | [ACTIVE: deadline 2026-10-02 05:32 UTC]
-
camorim.com.br
September 28, 2026
camorim.com.br was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Retail & E-Commerce. Country: Brazil. Website: camorim.com.br. Camorim Servios Martimos has over 30 years of expertise in the maritime sector, providing a range...
-
cpacb.com
September 29, 2026
cpacb.com was listed as a victim on the leak site of the m3rx ransomware group; the attack is estimated to have taken place on 2026-09-29. Sector: Professional Services. Country: Canada. Website: cpacb.com. +1 (214) 402 -3723. Our Mission is to provide clients with One-Stop Solutions for all their Accounting, Bookkeeping and Consulting needs. The firm focuses on Experience, Expertise, Accuracy and Efficiency. We are the trusted partner of many businesses for years and are not only helping them to track income and expenses but also providing comprehensive services which help them to increase the profit, control the cost and expand their business. Our flexible package helps keeping our services cost-effective Stolen: 446 GB 814,334 Files
-
iccsi.com
September 29, 2026
•
[ ransomware, technology, leak ]
iccsi.com was listed as a victim on the leak site of the m3rx ransomware group; the attack is estimated to have taken place on 2026-09-29. Sector: Professional Services. Website: iccsi.com. +1 (781) 331-9811. Interconnect Computer Cabling Services, Inc. is a full-service telecommunications company that has been operational since 1986, providing services for a diverse range of projects including education, medical facilities, hospitality, and corporate offices. The company specializes in telecommunications solutions and has recently developed touchless wave door opening systems to address safety concerns for clients returning to office spaces. Their clientele includes local schools, national railroad services, country clubs, and various commercial establishments. Interconnect is committed to delivering high-quality services tailored to the needs of their clients. Stolen: 434 GB 341,547 File