-
Majani Insurance Brokers
September 25, 2026
•
[ ransomware, finance ]
Majani Insurance Brokers was listed as a victim on the leak site of the Vexy Ransomware ransomware group; the attack is estimated to have taken place on 2026-09-25. Sector: Financial Services. Country: Kenya. Website: majaninsure.com. Majani Insurance Brokers is an independent insurance broker serving both businesses and individuals. It arranges insurance products across areas including general business insurance, motor, medical, life, investment, marine, liability, property and agricultural-related covers
-
Breast Implant Center of Hawaii
September 25, 2026
•
[ ransomware, healthcare ]
Breast Implant Center of Hawaii was listed as a victim on the leak site of the Wallstreet ransomware group; the attack is estimated to have taken place on 2026-09-25. Sector: Healthcare. Country: United States of America. Website: breastimplantcenterofhawaii.com. Breast Implant Center of Hawaii is a plastic surgery and aesthetics clinic serving patients across Hawaii. Based in Kailua-Kona, it offers breast augmentation, implant revision, breast lifts, body contouring.
-
ETS
September 25, 2026
ETS was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-09-25. Sector: Education. [AI generated] N/A
"ETS" is too generic an identifier to reliably describethere are numerous distinct organizations using this name or acronym across different industries and countries (for example, testing and assessment organizations, engineering firms, electronic transaction services, and technology companies), and without additional context I cannot determine which specific entity is being referenced.
-
CENELEC
September 25, 2026
•
[ ransomware, technology, energy ]
CENELEC was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-09-25. Sector: Professional Services. Country: Belgium. [AI generated] CENELEC (European Committee for Electrotechnical Standardization) is a Brussels, Belgium-based standardization organization operating across Europe. It develops voluntary electrotechnical standards to support the single market, covering electrical equipment, energy, and related technologies. Working alongside CEN and ETSI, it collaborates with national committees from European countries. Its industry is standardization and technical regulation within the electrotechnical and electronics sector.
-
UNIRITA
September 25, 2026
UNIRITA was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-09-25. Sector: Technology. Country: Japan. Website: unirita.co.jp. [AI generated] UNIRITA Inc. is a Japanese IT company headquartered in Tokyo, Japan, operating in the information technology and systems software industry. It specializes in IT operations management software, system infrastructure solutions, and IT services, including its well-known product "Senju Family" for job scheduling and system operation management. UNIRITA also provides IT consulting, systems integration, and outsourcing services primarily to enterprise clients in Japan.
-
Reliance Audit
September 25, 2026
•
[ ransomware, finance ]
Reliance Audit was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-09-25. Sector: Professional Services. [AI generated] N/A
I don't have verified, reliable information about a specific company named "Reliance Audit." This name is generic and could refer to multiple small firms or local audit/accounting practices in different countries, so I cannot confirm details about its services, industry positioning, or country of operation without risking inaccurate information.
-
Beatus Cartons
September 25, 2026
•
[ ransomware, manufacturing, hack ]
Beatus Cartons was listed as a victim on the leak site of the Wallstreet ransomware group; the attack is estimated to have taken place on 2026-09-25. Sector: Manufacturing. Country: United Kingdom of Great Britain and Northern Ireland. Website: beatuscartons.co.uk. Beatus Cartons is a UK-based, privately owned manufacturer of printed folding cartons and packaging. Established in 1940, it produces solidboard, litho-laminated, and plastic packaging for industries including confectionery, pharmaceuticals, food, health and beauty, and automotive.
-
GTFM
September 25, 2026
GTFM was listed as a victim on the leak site of the Wallstreet ransomware group; the attack is estimated to have taken place on 2026-09-25. Country: United States of America. GTFM LLC is a company operating through gtfmllc.com. Its website currently provides limited publicly accessible information, so its specific products or services could not be confirmed.
-
Ar Valve Resources
September 25, 2026
•
[ ransomware, energy, manufacturing ]
Ar Valve Resources was listed as a victim on the leak site of the Wallstreet ransomware group; the attack is estimated to have taken place on 2026-09-25. Sector: Energy & Utilities. Country: United Kingdom of Great Britain and Northern Ireland. Website: ar-resources.com. AR Valve Resources is a UK-based distributor of industrial valves, actuators, regulators, instrumentation, and spare parts. Based in Kent, the company serves national and international customers with product sourcing, technical support, testing, certification, documentation, and shipping services.
-
Tobin & Company
September 25, 2026
•
[ ransomware, finance ]
Tobin & Company was listed as a victim on the leak site of the Wallstreet ransomware group; the attack is estimated to have taken place on 2026-09-25. Sector: Financial Services. Country: United States of America. Website: tobinandco.com. Tobin & Company, CPAs is a small accounting firm based in Harrison, New York, providing accounting, tax, auditing, and business consulting services, with a particular focus on nonprofit organizations.
-
Morula IVF
September 25, 2026
•
[ ransomware, healthcare ]
Morula IVF was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-09-25. Sector: Healthcare. Country: South Africa. Website: morulaivf.co.id. [AI generated] Morula IVF is a network of fertility clinics operating in Indonesia, specializing in in vitro fertilization (IVF) and other assisted reproductive technologies. It operates within the healthcare industry, specifically reproductive medicine, offering services such as fertility consultations, egg and sperm preservation, and infertility treatments. The company has multiple clinic locations across major Indonesian cities, serving patients seeking fertility treatment options.
-
Securitas Group
September 25, 2026
•
[ ransomware, technology ]
Securitas Group was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-09-25. Sector: Professional Services. Country: Sweden. [AI generated] Securitas Group is a Swedish multinational security services company headquartered in Stockholm, Sweden. It operates in the security industry, providing guarding services, electronic security, fire and safety solutions, corporate risk management, and remote monitoring. Founded in 1934, it operates globally across dozens of countries, serving clients ranging from small businesses to large corporations, government agencies, and critical infrastructure providers.
-
Electrolux & Ontrac
September 25, 2026
•
[ ransomware, manufacturing, retail ]
Electrolux & Ontrac was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-09-25. Sector: Manufacturing. Hello Electrolux & OnTrac,
Still no response from you. When we called your IT helpdesk posing as threat researchers and asked about the breach, we were told, "We cannot talk about it."
You have one week before we release more data - starting with information on your employees.
We'd prefer to settle this directly.
Same goes for OnTrac. We recently learned that OnTrac has been paying employees as little as $14.50 an hour. As a result, we will be releasing salary information for all of their employees.
I also managed to get in touch with a former OnTrac employee, chill guy. Said his time there was horrible.
EMAIL: xdlmfao@morke.ru
SESSION: 05651c7323273b723588d47455471ee9e27feb5187a30f2933554a705aacb38358 [Sector: Retail, Manufacturing, Transportation]
-
Platinum Healthcare Staffing
September 25, 2026
•
[ ransomware, healthcare ]
Platinum Healthcare Staffing was listed as a victim on the leak site of the metaencryptor ransomware group; the attack is estimated to have taken place on 2026-09-25. Sector: Healthcare. Country: United States of America. Website: platinumhs.com. Platinum Healthcare Staffing is a healthcare staffing agency headquartered in Lafayette, USA, founded in 2005. It provides nursing and allied healthcare professionals, including RNs, LPNs, and CNAs, to hospitals, clinics, and medical facilities.
-
PKF Hadiwinata
September 25, 2026
•
[ ransomware, finance ]
PKF Hadiwinata was listed as a victim on the leak site of the metaencryptor ransomware group; the attack is estimated to have taken place on 2026-09-25. Sector: Professional Services. Country: Indonesia. Website: pkfhadiwinata.com. PKF Hadiwinata is a top-10 accounting and professional services firm in Indonesia, headquartered in the financial district of Jakarta. Founded in 1987, it is a member of PKF International and provides audit, tax, business solutions, and consulting services.
-
GE Vernova Inc.
September 25, 2026
GE Vernova Inc. was listed as a victim on the leak site of the metaencryptor ransomware group; the attack is estimated to have taken place on 2026-09-25. Sector: Energy & Utilities. Country: United States of America. Website: gevernova.com. GE Vernova Inc. is a global energy equipment manufacturing and services company headquartered in Cambridge, Massachusetts. Formed from General Electric's energy businesses, it operates across Power, Wind, and Electrification segments, with its technology helping generate roughly a quarter of the world's electricity.
-
S...
September 25, 2026
•
[ ransomware ]
S... was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-09-25. Redacted entry - full company name pending disclosure (FULL DATA TIMER active).
-
N...
September 25, 2026
•
[ ransomware ]
N... was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-09-25. Redacted entry - full company name pending disclosure (FULL DATA TIMER active).
-
Crossett
September 25, 2026
Crossett was listed as a victim on the leak site of the termite ransomware group; the attack is estimated to have taken place on 2026-09-25. Sector: Other. Country: United States of America. Website: www.crossettinc.com. Crossett Home is a leading petroleum transporter operating in major markets across the Eastern <a href="http://U.S">U.S</a>. and Ontario, Canada. Established in 1928, the company specializes in safe and reliable fuel transportation services, supported by a fleet of over 100 modern tractors and 210 trailers.
-
FTAPI Software
September 25, 2026
•
[ ransomware, technology, healthcare ]
FTAPI Software was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-25. Sector: Technology. Country: United States of America. Website: ftapi.com. ftapi.com zoominfo.com/c/ftapi-software/346927067 FTAPI (founded 2010, Munich, Germany) is a software company offering a secure, GDPR-compliant platform for exchanging sensitive business data and automating workflows encrypted email and file transfer, virtual data rooms, digital forms and no-code process automation. It serves 2,000+ organizations and over a million users, mainly in public administration, healthcare, insurance and industry, with all data hosted exclusively in Germany under strict certifications (ISO 27001, BSI C5, SOC 2) and optional zero-knowledge encryption. Its core selling point is European digital sovereignty a compliant alternative to US cloud tools like Dropbox under GDPR, NIS-2 and DORA regulations. In 2025 it raised 65 million from PE investors Armira and Tikehau Capital, which took control to fund EU expansion and acquisitions. The company employs around 150 people and targets becoming a leading European player in secure data exchange by 202829.