-
Reliance Audit
September 25, 2026
•
[ ransomware, finance ]
Reliance Audit was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-09-25. Sector: Professional Services. [AI generated] N/A
I don't have verified, reliable information about a specific company named "Reliance Audit." This name is generic and could refer to multiple small firms or local audit/accounting practices in different countries, so I cannot confirm details about its services, industry positioning, or country of operation without risking inaccurate information.
-
Beatus Cartons
September 25, 2026
•
[ ransomware, manufacturing, hack ]
Beatus Cartons was listed as a victim on the leak site of the Wallstreet ransomware group; the attack is estimated to have taken place on 2026-09-25. Sector: Manufacturing. Country: United Kingdom of Great Britain and Northern Ireland. Website: beatuscartons.co.uk. Beatus Cartons is a UK-based, privately owned manufacturer of printed folding cartons and packaging. Established in 1940, it produces solidboard, litho-laminated, and plastic packaging for industries including confectionery, pharmaceuticals, food, health and beauty, and automotive.
-
GTFM
September 25, 2026
GTFM was listed as a victim on the leak site of the Wallstreet ransomware group; the attack is estimated to have taken place on 2026-09-25. Country: United States of America. GTFM LLC is a company operating through gtfmllc.com. Its website currently provides limited publicly accessible information, so its specific products or services could not be confirmed.
-
Ar Valve Resources
September 25, 2026
•
[ ransomware, energy, manufacturing ]
Ar Valve Resources was listed as a victim on the leak site of the Wallstreet ransomware group; the attack is estimated to have taken place on 2026-09-25. Sector: Energy & Utilities. Country: United Kingdom of Great Britain and Northern Ireland. Website: ar-resources.com. AR Valve Resources is a UK-based distributor of industrial valves, actuators, regulators, instrumentation, and spare parts. Based in Kent, the company serves national and international customers with product sourcing, technical support, testing, certification, documentation, and shipping services.
-
Tobin & Company
September 25, 2026
•
[ ransomware, finance ]
Tobin & Company was listed as a victim on the leak site of the Wallstreet ransomware group; the attack is estimated to have taken place on 2026-09-25. Sector: Financial Services. Country: United States of America. Website: tobinandco.com. Tobin & Company, CPAs is a small accounting firm based in Harrison, New York, providing accounting, tax, auditing, and business consulting services, with a particular focus on nonprofit organizations.
-
Morula IVF
September 25, 2026
•
[ ransomware, healthcare ]
Morula IVF was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-09-25. Sector: Healthcare. Country: South Africa. Website: morulaivf.co.id. [AI generated] Morula IVF is a network of fertility clinics operating in Indonesia, specializing in in vitro fertilization (IVF) and other assisted reproductive technologies. It operates within the healthcare industry, specifically reproductive medicine, offering services such as fertility consultations, egg and sperm preservation, and infertility treatments. The company has multiple clinic locations across major Indonesian cities, serving patients seeking fertility treatment options.
-
Securitas Group
September 25, 2026
•
[ ransomware, technology ]
Securitas Group was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-09-25. Sector: Professional Services. Country: Sweden. [AI generated] Securitas Group is a Swedish multinational security services company headquartered in Stockholm, Sweden. It operates in the security industry, providing guarding services, electronic security, fire and safety solutions, corporate risk management, and remote monitoring. Founded in 1934, it operates globally across dozens of countries, serving clients ranging from small businesses to large corporations, government agencies, and critical infrastructure providers.
-
Electrolux & Ontrac
September 25, 2026
•
[ ransomware, manufacturing, retail ]
Electrolux & Ontrac was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-09-25. Sector: Manufacturing. Hello Electrolux & OnTrac,
Still no response from you. When we called your IT helpdesk posing as threat researchers and asked about the breach, we were told, "We cannot talk about it."
You have one week before we release more data - starting with information on your employees.
We'd prefer to settle this directly.
Same goes for OnTrac. We recently learned that OnTrac has been paying employees as little as $14.50 an hour. As a result, we will be releasing salary information for all of their employees.
I also managed to get in touch with a former OnTrac employee, chill guy. Said his time there was horrible.
EMAIL: xdlmfao@morke.ru
SESSION: 05651c7323273b723588d47455471ee9e27feb5187a30f2933554a705aacb38358 [Sector: Retail, Manufacturing, Transportation]
-
Platinum Healthcare Staffing
September 25, 2026
•
[ ransomware, healthcare ]
Platinum Healthcare Staffing was listed as a victim on the leak site of the metaencryptor ransomware group; the attack is estimated to have taken place on 2026-09-25. Sector: Healthcare. Country: United States of America. Website: platinumhs.com. Platinum Healthcare Staffing is a healthcare staffing agency headquartered in Lafayette, USA, founded in 2005. It provides nursing and allied healthcare professionals, including RNs, LPNs, and CNAs, to hospitals, clinics, and medical facilities.
-
PKF Hadiwinata
September 25, 2026
•
[ ransomware, finance ]
PKF Hadiwinata was listed as a victim on the leak site of the metaencryptor ransomware group; the attack is estimated to have taken place on 2026-09-25. Sector: Professional Services. Country: Indonesia. Website: pkfhadiwinata.com. PKF Hadiwinata is a top-10 accounting and professional services firm in Indonesia, headquartered in the financial district of Jakarta. Founded in 1987, it is a member of PKF International and provides audit, tax, business solutions, and consulting services.
-
GE Vernova Inc.
September 25, 2026
GE Vernova Inc. was listed as a victim on the leak site of the metaencryptor ransomware group; the attack is estimated to have taken place on 2026-09-25. Sector: Energy & Utilities. Country: United States of America. Website: gevernova.com. GE Vernova Inc. is a global energy equipment manufacturing and services company headquartered in Cambridge, Massachusetts. Formed from General Electric's energy businesses, it operates across Power, Wind, and Electrification segments, with its technology helping generate roughly a quarter of the world's electricity.
-
S...
September 25, 2026
•
[ ransomware ]
S... was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-09-25. Redacted entry - full company name pending disclosure (FULL DATA TIMER active).
-
N...
September 25, 2026
•
[ ransomware ]
N... was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-09-25. Redacted entry - full company name pending disclosure (FULL DATA TIMER active).
-
Crossett
September 25, 2026
Crossett was listed as a victim on the leak site of the termite ransomware group; the attack is estimated to have taken place on 2026-09-25. Sector: Other. Country: United States of America. Website: www.crossettinc.com. Crossett Home is a leading petroleum transporter operating in major markets across the Eastern <a href="http://U.S">U.S</a>. and Ontario, Canada. Established in 1928, the company specializes in safe and reliable fuel transportation services, supported by a fleet of over 100 modern tractors and 210 trailers.
-
FTAPI Software
September 25, 2026
•
[ ransomware, technology, healthcare ]
FTAPI Software was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-25. Sector: Technology. Country: United States of America. Website: ftapi.com. ftapi.com zoominfo.com/c/ftapi-software/346927067 FTAPI (founded 2010, Munich, Germany) is a software company offering a secure, GDPR-compliant platform for exchanging sensitive business data and automating workflows encrypted email and file transfer, virtual data rooms, digital forms and no-code process automation. It serves 2,000+ organizations and over a million users, mainly in public administration, healthcare, insurance and industry, with all data hosted exclusively in Germany under strict certifications (ISO 27001, BSI C5, SOC 2) and optional zero-knowledge encryption. Its core selling point is European digital sovereignty a compliant alternative to US cloud tools like Dropbox under GDPR, NIS-2 and DORA regulations. In 2025 it raised 65 million from PE investors Armira and Tikehau Capital, which took control to fund EU expansion and acquisitions. The company employs around 150 people and targets becoming a leading European player in secure data exchange by 202829.
-
Charles Keith
September 24, 2026
Charles Keith was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-24. Sector: Retail & E-Commerce. Country: Singapore. Website: charleskeith.com. charleskeith.com zoominfo.com/c/charles--keith-pte-ltd/347827969 CHARLES & KEITH Singapore-based fashion brand founded in 1996 by brothers Charles and Keith Wong, selling women's shoes, bags, wallets and accessories. Its model is vertical integration: own designs, direct Asian factories and a fast-fashion pace of 2030 new styles a week, delivering a "luxury look at an affordable price" (shoes ~$40220, bags ~$30190). Today it runs about 700 stores across 30+ countries with revenue of roughly US$1 billion. Marketing is driven by K-pop ambassadors (ITZY, Han So Hee, Kim You Jung) and Met Gala appearances, plus lines like L'INITIAL and PEDRO. Fully family-owned (it bought back LVMH's 20% stake in 2016), it is one of Asia's biggest fashion exporters. Main weak spots: paid/slow online returns and average durability of PU-leather products.
-
Ligue se Grupo
September 24, 2026
•
[ ransomware, technology, finance ]
Ligue se Grupo was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-24. Sector: Other. Country: Portugal. Website: grupoligue-se.pt. grupoligue-se.pt Ligue-se Grupo is a Portuguese IT and business-services group founded in 2009 in Funchal, Madeira (born from the merger of accounting firm Contatlntico and IT company Enterformatic). It runs several businesses: Chip7 retail computer stores (Madeira + Lisbon) selling PCs, laptops and accessories with repair services; GoClick, a B2B IT arm handling infrastructure, cybersecurity, cloud/Microsoft 365, ERP software (Sage, PHC, ZoneSoft) and hotel-tech solutions; and Ligue.Gest, offering accounting, payroll and tax consulting. Led by CEO Ivo Herculano Caires and CFO lia Caires, it targets SMEs and private clients across Madeira and mainland Portugal. In short: one group covering everything from hardware sales and repairs to IT management and bookkeeping.
-
Pajulahti
September 21, 2026
•
[ ransomware, manufacturing, education ]
Pajulahti was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Manufacturing. Country: Finland. Website: pajulahti.com. pajulahti.com zoominfo.com/c/pajulahti/369113600 Pajulahti Sports Institute is one of Finland's oldest and largest sports institutes, founded in 1929 and located on 110 hectares by Lake Iso-Kukkanen in Nastola (Lahti), about an hour from Helsinki. It is Finland's only official Olympic and Paralympic Training Center, known for its focus on endurance sports and paralympic athletics. Since January 2025, Pajulahti has been merged with Kisakallio and the Helsinki-based Urhea campus into Kolmen kampuksen urheiluopisto the largest sports institute in Finland, with 3 campuses, ~200 employees, 73,000 m of sports facilities, 320,000 visitors per year, and ~500 students in professional sports education. The merged group generates about 26 million in annual revenue, operates on a non-profit basis (owned by foundations)
-
Crystal Glass
September 21, 2026
Crystal Glass was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Manufacturing. Country: United Kingdom of Great Britain and Northern Ireland. Website: crystalglassltd.co.uk. crystalglassltd.co.uk Crystal Glass (Leeds) Ltd is a family-owned glass company based in Leeds, West Yorkshire, UK, founded in 1962 and officially registered as a limited company in 1974. It operates 5 branches Leeds (HQ), Bradford, Harrogate, Wakefield, and Castleford covering all of West Yorkshire. Its core services are 24/7/365 emergency glazing, double glazing replacement, and custom glasswork (shower screens, shopfronts, mirrors, partitions, and commercial facades). The company runs a lean family-managed SME model with roughly 1025 employees and estimated revenue of 13 million per year
-
Craisa
September 21, 2026
•
[ ransomware, retail, manufacturing ]
Craisa was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-21. Website: craisa.com. craisa.com zoominfo.com/c/craisa/345610542 CRAISA S.A. is a Costa Rican distributor of agricultural, construction, and industrial machinery, founded in 1981 and headquartered in Heredia. It is the official exclusive dealer of CASE IH (agriculture) and CASE Construction Equipment in Costa Rica, covering the entire country through branches in Heredia, San Carlos, Gupiles, and Cartago. The company also distributes specialty brands including Antonio Carraro (Italian specialty tractors), Hangcha (forklifts), XAG agricultural drones, and precision farming systems (Raven/Trimble), while offering in-house service workshops, genuine parts supply, and equipment financing. It employs around 43 people with a highly loyal management core (many directors with 1522 years of tenure), operates under SAP Business One, and holds official "Carbono Neutral" certification from the Costa Rican government.