-
efada.sa
September 24, 2026
efada.sa was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-09-24. Sector: Other. Country: Saudi Arabia. Website: efada.sa. efada.sa...
-
Indroj Medical Group Inc.
September 22, 2026
•
[ ransomware, healthcare ]
Indroj Medical Group Inc. was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-09-22. Sector: Healthcare. Country: United States of America. Website: npiprofile.com. The Web's Free NPI Registry Search & Provider Reference Site
-
Martin Lawrence Galleries
September 22, 2026
•
[ ransomware, retail ]
Martin Lawrence Galleries was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-09-22. Sector: Retail & E-Commerce. Country: United States of America. Website: martinlawrence.com. Premier gallery of fine art in America
-
Westside GI
September 22, 2026
•
[ ransomware, healthcare ]
Westside GI was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-09-22. Sector: Healthcare. Country: United States of America. Website: westsidegicenter.com. Ambulatory endoscopy center
-
Armada Credit Bureau
September 24, 2026
•
[ ransomware, finance ]
Armada Credit Bureau was listed as a victim on the leak site of the Spirals ransomware group; the attack is estimated to have taken place on 2026-09-24. Sector: Financial Services. Country: Uganda. Website: www.armadacrb.co.ug. Armada Credit Bureau Limited is a duly licensed credit reporting and analytics company
-
TapClicks (marketing analytics platform)
September 25, 2026
•
[ ransomware, technology ]
TapClicks (marketing analytics platform) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-09-25. Sector: Technology. Country: United States of America. Marketing analytics / SaaS United States | The complete platform source code (97,000+ commits with full history); The multi-tenant instance management system with production architecture; A customer's full marketing database: 354 advertising platform datasets, client lists, user accounts with password hashes, ad-platform connection credentials | Everything is real, complete and verifiable. | [ACTIVE: deadline 2026-09-28 01:59 UTC]
-
pharma5.ma
September 25, 2026
•
[ ransomware, healthcare, leak ]
pharma5.ma was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-09-25. Sector: Healthcare. Country: Morocco. Website: pharma5.ma. Pharma5
21, Rue des Asphodles, Marif Extension, 20100 Casablanca, Morocco
05 22 23 62 15
pharma5.ma
Leaked data: 50Gb
Corporate and financial information, data on products and their supply, quality control and certification, drug testing and related issues, employee personal data, counterparties, and much more.
-
corisricambi.it
September 24, 2026
•
[ ransomware, retail, manufacturing ]
corisricambi.it was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-09-24. Sector: Other. Country: Italy. Website: corisricambi.it. Presenti sul territorio da oltre un ventennio, la CO.R.I.S. S.r.l. cresciuta all'interno del...
-
anery.com.br
September 23, 2026
•
[ ransomware, healthcare ]
anery.com.br was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-09-23. Sector: Agriculture and Food Production. Country: Brazil. Website: anery.com.br. Somos a Anery Home Care Temos paixo por cuidar Nossa especialidade cuidar de pessoas, com todo o...
-
taspenlife.com
September 22, 2026
•
[ ransomware, leak, healthcare ]
taspenlife.com was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-09-22. Sector: Healthcare. Country: Kazakhstan. Website: taspenlife.com. Taspen Life offers a range of insurance products including health protection, group protection, and...
-
Iberia Compositech Manufacturing
September 25, 2026
•
[ ransomware, manufacturing ]
Iberia Compositech Manufacturing was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-25. Sector: Manufacturing. Country: Spain. Website: www.iberiacompositech.com.
-
Majani Insurance Brokers
September 25, 2026
•
[ ransomware, finance ]
Majani Insurance Brokers was listed as a victim on the leak site of the Vexy Ransomware ransomware group; the attack is estimated to have taken place on 2026-09-25. Sector: Financial Services. Country: Kenya. Website: majaninsure.com. Majani Insurance Brokers is an independent insurance broker serving both businesses and individuals. It arranges insurance products across areas including general business insurance, motor, medical, life, investment, marine, liability, property and agricultural-related covers
-
Breast Implant Center of Hawaii
September 25, 2026
•
[ ransomware, healthcare ]
Breast Implant Center of Hawaii was listed as a victim on the leak site of the Wallstreet ransomware group; the attack is estimated to have taken place on 2026-09-25. Sector: Healthcare. Country: United States of America. Website: breastimplantcenterofhawaii.com. Breast Implant Center of Hawaii is a plastic surgery and aesthetics clinic serving patients across Hawaii. Based in Kailua-Kona, it offers breast augmentation, implant revision, breast lifts, body contouring.
-
ETS
September 25, 2026
ETS was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-09-25. Sector: Education. [AI generated] N/A
"ETS" is too generic an identifier to reliably describethere are numerous distinct organizations using this name or acronym across different industries and countries (for example, testing and assessment organizations, engineering firms, electronic transaction services, and technology companies), and without additional context I cannot determine which specific entity is being referenced.
-
CENELEC
September 25, 2026
•
[ ransomware, technology, energy ]
CENELEC was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-09-25. Sector: Professional Services. Country: Belgium. [AI generated] CENELEC (European Committee for Electrotechnical Standardization) is a Brussels, Belgium-based standardization organization operating across Europe. It develops voluntary electrotechnical standards to support the single market, covering electrical equipment, energy, and related technologies. Working alongside CEN and ETSI, it collaborates with national committees from European countries. Its industry is standardization and technical regulation within the electrotechnical and electronics sector.
-
UNIRITA
September 25, 2026
UNIRITA was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-09-25. Sector: Technology. Country: Japan. Website: unirita.co.jp. [AI generated] UNIRITA Inc. is a Japanese IT company headquartered in Tokyo, Japan, operating in the information technology and systems software industry. It specializes in IT operations management software, system infrastructure solutions, and IT services, including its well-known product "Senju Family" for job scheduling and system operation management. UNIRITA also provides IT consulting, systems integration, and outsourcing services primarily to enterprise clients in Japan.
-
Reliance Audit
September 25, 2026
•
[ ransomware, finance ]
Reliance Audit was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-09-25. Sector: Professional Services. [AI generated] N/A
I don't have verified, reliable information about a specific company named "Reliance Audit." This name is generic and could refer to multiple small firms or local audit/accounting practices in different countries, so I cannot confirm details about its services, industry positioning, or country of operation without risking inaccurate information.
-
Beatus Cartons
September 25, 2026
•
[ ransomware, manufacturing, hack ]
Beatus Cartons was listed as a victim on the leak site of the Wallstreet ransomware group; the attack is estimated to have taken place on 2026-09-25. Sector: Manufacturing. Country: United Kingdom of Great Britain and Northern Ireland. Website: beatuscartons.co.uk. Beatus Cartons is a UK-based, privately owned manufacturer of printed folding cartons and packaging. Established in 1940, it produces solidboard, litho-laminated, and plastic packaging for industries including confectionery, pharmaceuticals, food, health and beauty, and automotive.
-
GTFM
September 25, 2026
GTFM was listed as a victim on the leak site of the Wallstreet ransomware group; the attack is estimated to have taken place on 2026-09-25. Country: United States of America. GTFM LLC is a company operating through gtfmllc.com. Its website currently provides limited publicly accessible information, so its specific products or services could not be confirmed.
-
Ar Valve Resources
September 25, 2026
•
[ ransomware, energy, manufacturing ]
Ar Valve Resources was listed as a victim on the leak site of the Wallstreet ransomware group; the attack is estimated to have taken place on 2026-09-25. Sector: Energy & Utilities. Country: United Kingdom of Great Britain and Northern Ireland. Website: ar-resources.com. AR Valve Resources is a UK-based distributor of industrial valves, actuators, regulators, instrumentation, and spare parts. Based in Kent, the company serves national and international customers with product sourcing, technical support, testing, certification, documentation, and shipping services.