-
Magnetos y Refacciones
September 21, 2026
•
[ ransomware, manufacturing, retail ]
Magnetos y Refacciones was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Manufacturing. Country: Mexico. Website: magnetos.com.mx. magnetos.com.mx zoominfo.com/c/magnetos-y-refacciones-sa-de-cv/1288761434 Magnetos y Refacciones, S.A. de C.V. is a Mexican trading and service company founded in 1977 and headquartered in Guadalajara, Jalisco. Its core business is supplying magnet wire, bearings, insulating varnishes, electric motors, and spare parts for motor repair wholesale and retail, serving customers across all 32 Mexican states. Its second key business is a nationwide network of authorized service centers performing warranty and post-warranty repair for Groupe SEB brands (Krups, T-Fal, Rowenta, Moulinex) and Taurus in 810 Mexican cities. The company employs around 129 people and is part of a small group operated by Corporacin Rodaja. It also exports to Central America (mainly El Salvador), with about US$4.2 million in shipments over the last five years. Despite nearly 50 years on the market, it has virtually no digital presence its website is an empty placeholder.
-
Hell Helmut GmbH
September 21, 2026
Hell Helmut GmbH was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Manufacturing. Country: Austria. Website: fachhandel-hell.at. fachhandel-hell.at Hell Helmut GmbH is a small family-owned B2B wholesale company based in Hall in Tirol, Austria, operating for over 20 years and specialized in sanitary and heating supplies. The company positions itself as a system supplier for underfloor heating, serving professional installers across Tyrol, Vorarlberg, and Salzburg. It sources directly from leading manufacturers primarily IMI Heimeier (thermostatic and balancing valves) and Uponor (underfloor heating and drinking water systems) guaranteeing original quality. Its key differentiator is in-house prefabrication: ready-made manifold stations and water metering stations built exclusively from IMI and Uponor components. The business is 100% owned and personally managed by its founder Helmut Hell, with a lean team of about 56 people. Overall, it is a classic regional specialist wholesaler: small, owner-run, and focused on system-based project supply rather than retail.
-
StMicroelectronics
September 21, 2026
•
[ ransomware, technology, manufacturing ]
StMicroelectronics was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Technology. Country: Italy. Website: st.com. st.com zoominfo.com/c/stmicroelectronics/114508234 Revenue $13.1 Billion STMicroelectronics (ST) is one of the world's largest semiconductor companies and Europe's biggest chipmaker, headquartered in Geneva, Switzerland. Formed in 1987 through the merger of Italian and French state-owned chip companies, it is a fully integrated manufacturer it designs, produces, and sells its own chips. Its core products are microcontrollers (the flagship STM32 family), sensors, analog and power chips, silicon carbide devices for electric vehicles, and chips for data centers and satellites. The company serves over 200,000 customers worldwide including Apple, Tesla, Bosch, Samsung, and SpaceX supplying components for cars, smartphones, industrial equipment, and data centers. It operates 14 manufacturing plants across Europe and Asia, employs about 49,000 people, and invests roughly 17% of its revenue in R&D.
-
Magna Legal Services
September 24, 2026
•
[ ransomware, technology, finance ]
Magna Legal Services was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-09-24. Sector: Professional Services. Country: United States of America. Website: magnals.com. Magna Legal Services is a nationwide provider of comprehensive litigation support and legal services, serving law firms, corporations, insurance companies, and government organizations. Founded in 2007 and headquartered in Philadelphia, Pennsylvania, the company supports clients throughout the entire litigation process. Its services include court reporting, deposition services, medical record retrieval, jury consulting, trial presentation, legal graphics, video production, investigations, service of process, interpreting and translation, and virtual proceedings. Magna combines legal expertise with technology to help attorneys manage complex cases efficiently. The company has expanded its national presence through strategic acquisitions and currently operates across numerous locations throughout the United States.
The company headquarters is located in 1635 Market Street, 8th Floor, Philadelphia, PA 19103, United States. 501-1000 Employees
-
Metalware Corporation
September 21, 2026
Metalware Corporation was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Manufacturing. Country: Canada. Website: metalware.ca. metalware.ca zoominfo.com/c/metalware-corp/57640606 Metalware Corporation is a Canadian manufacturer of industrial steel shelving and storage systems, based in Montreal, Quebec, and in business since the early 1950s. The company is best known as the inventor of boltless ("No-Bolt") shelving, patented in 1954 by founders Irving and Ben Levitt a design that became the industry standard for order-picking warehouses. Still family-owned and led by second/third-generation owners (President Mark Levitt), Metalware produces its flagship Interlok No-Bolt line, E-Series widespan shelving, multi-tier/high-bay systems, shelf-supported mezzanines, and modular drawer solutions at its Montreal plant, selling through a network of authorized distributors across North America. Its reference clients include the Government of Canada (Canada Revenue Agency, Department of National Defence), Porsche, and Walmart
-
Guardrisk
September 21, 2026
Guardrisk was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Financial Services. Country: South Africa. Website: guardrisk.co.za. guardrisk.co.za rocketreach.co/guardrisk-insurance-company-ltd-profile_b5a52494f9c62c8e Guardrisk is a South African specialist insurance group, founded in 1993 and widely recognized as the pioneer and market leader of cell captive insurance in Africa a model that allows companies to run their own "branded" insurance business under Guardrisk's licensed infrastructure instead of building a full insurer themselves. Headquartered in Sandton, Johannesburg, the group operates licensed insurers for life, non-life, and microinsurance, plus international cells in Mauritius and Gibraltar, and employs around 530 people. It has been wholly owned since 201314 by Momentum Group (JSE: MTN-listed MTM), which acquired it for R1.6 billion. For the financial year ended 30 June 2025, Guardrisk managed total assets of R68 billion and over 240 active cells, generating net revenue of ~R2 billion and pre-tax trading profit of ~R1 billion
-
Applied Composites
September 24, 2026
•
[ ransomware, manufacturing, technology ]
Applied Composites was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-09-24. Sector: Manufacturing. Country: United States of America. Website: appliedcomposites.com. Applied Composites is a leading U.S. manufacturer specializing in advanced composite components, assemblies, engineering, and tooling for the aerospace, defense, and space industries. The company provides highly engineered composite structures for aircraft, engines, missiles, unmanned aerial vehicles (UAVs), satellites, and launch vehicles. Its vertically integrated capabilities include design, tooling, manufacturing, machining, assembly, testing, and engineering support. Applied Composites operates multiple specialized facilities equipped with autoclaves, CNC machining centers, clean rooms, and advanced testing equipment. The company serves major aerospace and defense organizations and focuses on delivering lightweight, durable, high-performance composite solutions for demanding commercial, military, and space applications.
The company headquarters is located in 25671 Commercentre Drive, Lake Forest, CA 92630, United States. 501-1000 Employees
-
Apollo 21 – Quality Truck, Bus & Trailer Spare Parts South Africa
September 19, 2026
•
[ ransomware, manufacturing, retail ]
Apollo 21 Quality Truck, Bus & Trailer Spare Parts South Africa was listed as a victim on the leak site of the BlackLocks ransomware group; the attack is estimated to have taken place on 2026-09-19. Sector: Transportation. Country: South Africa. Website: apollo21.co.za. Views: 985
-
International Chemical Co.
September 26, 2026
•
[ ransomware, manufacturing, leak ]
International Chemical Co. was listed as a victim on the leak site of the Barracuda ransomware group; the attack is estimated to have taken place on 2026-09-26. Sector: Manufacturing. International Chemical Company (ICC) manufactures specialty metalworking fluids, industrial cleaners, rust preventatives, and custom chemical formulations.
We have extracted the most important files from their main file server and possess data on their sales, formulas, patents, manufacturing, contracts, and partners.
For example, we possess the full formulation and manufacturing instructions for I.C.C.s patented Biodraulic hydraulic oil. And even more than that. It is available for sale to competitors.
Victim website: https://e-icc.com | Severity: HIGH | Size: 90 GB | Status: selling | $50,000
-
cipher.systems
September 26, 2026
•
[ ransomware, technology ]
cipher.systems was listed as a victim on the leak site of the m3rx ransomware group; the attack is estimated to have taken place on 2026-09-26. Sector: Technology. Country: United States of America. Website: cipher.systems. +1 703-672-0051 , At Cipher Systems, we specialize in delivering enterprise-grade IT solutions designed to help businesses evolve, secure, and scale in a rapidly changing digital world. From future-proof cloud infrastructures to next-gen cybersecurity and AI-powered intelligence, our solutions are engineered for performance and built for growth. With deep expertise in software engineering, IT consulting, and data science, we turn complex challenges into streamlined outcomesensuring that your systems are secure, your data is insightful, and your technology is always a step ahead. Stolen: --
-
ARCA UNLIMITED Architects
September 22, 2026
•
[ ransomware, leak ]
ARCA UNLIMITED Architects was listed as a victim on the leak site of the BlackLocks ransomware group; the attack is estimated to have taken place on 2026-09-22. Sector: Professional Services. Country: South Africa. Views: 49
-
Car Service Abschlepp
September 27, 2026
Car Service Abschlepp was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-09-27. Sector: Transportation. Country: Germany. CSA Car Service Abschlepp- & Bergungsdienst GmbH
Genslerstrae 72, 13055 Berlin
Archived personal and corporate data of employees and customers
Here are the most important documents [Sector: Transportation]
-
Pantaneiro Capas
September 27, 2026
•
[ ransomware, manufacturing ]
Pantaneiro Capas was listed as a victim on the leak site of the arcusmedia ransomware group; the attack is estimated to have taken place on 2026-09-27. Sector: Manufacturing. Country: Brazil. www.pantaneirocapas.com.brPantaneiro Capas has been in the waterproof products market for Deadline: 2026-10-04 11:32:00.000000
-
Willatt & Flickinger
September 27, 2026
•
[ ransomware, finance ]
Willatt & Flickinger was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-27. Country: United States of America. Website: www.wfaustin.com.
-
Revenga Smart Solutions
September 27, 2026
•
[ ransomware, technology ]
Revenga Smart Solutions was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-27. Sector: Technology. Country: Spain. Website: www.gruporevenga.com.
-
Island
September 27, 2026
•
[ ransomware, technology ]
Island was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-27. Sector: Technology. Country: Canada. Website: www.island.ca.
-
XICO
September 27, 2026
XICO was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-27. Country: Mexico. Website: www.xicoled.com.
-
First Secure Bank Group
September 27, 2026
•
[ ransomware, finance ]
First Secure Bank Group was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-09-27. Sector: Financial Services. Country: United States of America. First Secure Bank Group is a U.S.-based financial services organization focused on providing community-oriented banking solutions to individuals, families, and businesses. The group operates through affiliated banking institutions, including First Secure Bank and The State Bank Group. Its services include personal and business checking and savings accounts, commercial and consumer lending, mortgages, online banking, treasury services, and other financial products. First Secure Bank Group emphasizes personalized customer service, long-term relationships, and supporting the financial growth of the communities it serves. Through its network of banking institutions, the group provides accessible financial solutions while maintaining a strong focus on local businesses, community development, and responsible banking practices.
The company headquarters is located in 2175 Oneida St, Joliet, IL 60435, USA. 51-200 Employees
-
Ressources Si
September 27, 2026
•
[ ransomware ]
Ressources Si was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-09-27. Sector: Professional Services. Country: France. Website: ressources-si.com. Ressources Si is a company that operates in the Movie Theaters industry. It employs 10to19 people and has 1Mto5M of revenue.
-
Asesoría FAR
September 27, 2026
•
[ ransomware, finance ]
Asesora FAR was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-09-27. Sector: Professional Services. Asesora FAR is a Barcelona-based firm providing property management, accounting, tax, and business advisory services.