Recent Breaches
-
September 23, 2026 • Arizona Vascular Medical Equipment, Inc was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-09-23. Sector: Healthcare. Country: United States of America. Website: arizonavascular.com. Arizona Vascular Medical Equipment, Inc. is a trusted provider of specialized medical devices, focusing primarily on compression therapy solutions and vascular care equipment. Headquartered in Mesa, Arizona, the company is dedicated to improving patient mobility and quality of life by delivering high-quality medical products and personalized customer service across the United States.
-
August 18, 2026 • amb-pvc.com was listed as a victim on the leak site of the ZaWoo ransomware group; the attack is estimated to have taken place on 2026-08-18. Sector: Manufacturing. Country: France. Website: amb-pvc.com. AMB (Ateliers de Menuiseries Bidet), also known as Atelier de Menuiseries Bidet, is a French manufacturer specializing in PVC and aluminium joinery products. The company is based in Bourguenolles, Normandy, France. Its website is amb-pvc.com.
-
August 18, 2026 • www.francare.com was listed as a victim on the leak site of the ZaWoo ransomware group; the attack is estimated to have taken place on 2026-08-18. Sector: Healthcare. Country: France. Website: www.francare.com. FRANCARE Industries is a French international technical-supply, engineering, and maintenance company, headquartered in Paris, France. The company was founded in 1988 and specializes in supplying equipment, technologies, and technical services to industrial and healthcare customers internationally
-
August 18, 2026 • agiliance.fr was listed as a victim on the leak site of the ZaWoo ransomware group; the attack is estimated to have taken place on 2026-08-18. Sector: Professional Services. Country: France. Website: agiliance.fr. Agiliance is a French accounting and business advisory group headquartered across the Haute-Sane and Doubs regions. Its website describes Agiliance as the result of bringing together 8 small-to-medium-sized accounting firms, combining their expertise and tools while retaining a local, client-oriented approach.
-
August 24, 2026 winfashion was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-08-24. Sector: Retail & E-Commerce. Website: winfashion.com. WINFASHION TECHNOLOGIES DUMP: DATA LEAK ANALYSIS OF A B2B ERP PLATFORM FOR THE FASHION INDUSTRY This is a preliminary analysis, processing of sensitive data is currently underway. Target: WinFashion Technologies (Los Angeles, USA) an international B2B provider of ERP solutions (WF125sR / Fabric ERP V.10) for 250+ fashion brands. Offices in New York, Shanghai, and India. Integrations: Shopify, Acenda, JOOR, NuORDER, CommerceHub, FashionGo. BPO/EDI processing via Inovis/QRS. DUMP VOLUME: ~205K files / ~13K directories / ~73 Gigabytes AT-RISK FILES: 125,274 (61.0%) Critical: 9,350 High: 78,174 Medium: 37,750 PRELIMINARY FINDINGS: kaktus.bak (5.64 GB) full MSSQL backup of the "Kaktus" client's ERP installation (Customer Master, Style Master, EDI, AR) 6 SSL PFX containers + EDI-VAN client certificate for ECGrid/OpenText 33,307 .shxml files WinSCP SFTP session logs (hosts, paths, sizes) 332 ASP.NET Web.config files potentially hardcoded Shopify / Authorize.Net secrets 171 files with PAN / CreditCard / Cardholder / Payment data Authorize.Net payment processing code 39 files with IBAN / SWIFT / BankAccount data bank account details 259 Invoice Register / Invoice data files Excel payment registers (up to 124 MB) CLIENT DATA (~40 BRANDS): STYLEMASTER.xlsx (48 MB) aggregated product catalog export Vendors.XLS (20 MB) + test customers.XLS (7 MB) Kaktus vendors and customers 40,621 EDI files (.edi / .850 / .856 / .810 / .997 / .852 / .832 / .846) full B2B trade lifecycle (PO, ASN, invoices, price catalogs) INTELLECTUAL PROPERTY: 8,577 .cs files integration source code (Authorize.Net, Shopify, Acenda, JOOR, NuORDER, DSCO) 5,828 .pbd files PowerBuilder WF125sR ERP core 3,398 .sql files DB schema, triggers, CLR procedures 18 .dbf / .mdf files legacy DBASE / FOXPRO / MSSQL tables without encryption HR / PII: INV EMPLOYEE ALLOWANCE YTD.xlsx (76 MB) employee HR data AR Aging 12.30.25.xls + AR Aging 12.29.25.XLS accounts receivable for Monrow and Kaktus clients REGULATORY RISKS: PCI DSS compromise of PAN processing code + Authorize Excel registers CCPA / CPRA HR-PII (76 MB), California jurisdiction FTC "total security" claims amidst PFX / DBF / Web.config compromise SEC (Regulation FD) risk for publicly traded client issuers GDPR PII of customers / vendors across ~40 brands The dump represents a cross-tenant B2B SaaS incident involving the disclosure of trade secrets for ~40 fashion brands, the compromise of the Authorize.Net payment infrastructure, and the exposure of the full ERP source code.
-
September 24, 2026 Grupo Caberj was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-09-24. Sector: Manufacturing. Country: Brazil. O Grupo Caberj, que oferece uma ampla gama de seguros, foi hackeado h 10 dias
-
September 24, 2026 • www.jonesthegrocer.com was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-09-24. Sector: Retail & E-Commerce. Country: Australia. Website: www.jonesthegrocer.com. Jones the Grocer is a premium gourmet food retail and cafe brand founded in 1996 in Sydney, Australia, originally launch...
-
September 24, 2026 • airtanzania.co.tz / airtanzania.com was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-09-24. Sector: Transportation. Country: Tanzania, United Republic of. Website: airtanzania.co.tz / airtanzania.com. Air Tanzania Company Limited (ATCL) is the national flag carrier airline of Tanzania, established on March 11, 1977 foll...
-
September 24, 2026 • Italy was listed as a victim on the leak site of the ImNotAVillain ransomware group; the attack is estimated to have taken place on 2026-09-24. Sector: Government & Defense. Country: Italy. Italy is being exposed for failing to follow proper data protection laws. Includes 85,000+ Files 150GB. Top departments, units, offices affected.
-
September 24, 2026 • Revolut was listed as a victim on the leak site of the ImNotAVillain ransomware group; the attack is estimated to have taken place on 2026-09-24. Sector: Financial Services. Country: United Kingdom of Great Britain and Northern Ireland. Website: revolut.com. Revolut data on sale. Contact information at the bottom of the page. Includes 680 high-value networth users.
-
September 24, 2026 Strack Companies was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-09-24. Sector: Manufacturing. Country: United States of America. Strack Construction is a commercial and industrial construction contractor headquartered in St. Joseph, Minnesota. Founded in 1938, the family-owned company provides design-build, general co ntracting, construction management, and real estate development services. We will upload 60gb of corporate data soon. Employee information, projects (drawings and specif ications), detailed financials, client information, NDAs and so on.
-
September 24, 2026 • GDM Pipelines was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-24. Sector: Energy & Utilities. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.gdmpipelines.com.
-
September 24, 2026 • Agora cooprative agricole was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-24. Sector: Agriculture and Food Production. Country: France. Website: coopagora.fr.
-
September 24, 2026 • Wallatec was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-09-24. Sector: Other. Wallatec creates high-performance carbonation systems for restaurants and busy kitchens. Their equipment is built to handle intense daily use, working perfectly even in the most hectic envir onments. We will upload 15gb of corporate data soon. Employee information (passports), projects, financi als, client information and so on.
-
September 24, 2026 • Zig Inge Group was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-24. Country: Australia. Website: www.prospecthillcamberwell.com.au.
-
September 24, 2026 • Inversiones Bolvar was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-24. Sector: Financial Services. Country: Colombia. Website: www.proyectosdevida.com.
-
September 24, 2026 • All Tech Machine & Engineering was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-24. Sector: Manufacturing. Country: United States of America. Website: www.alltechinc.com.
-
September 24, 2026 • Dao Group was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-24. Sector: Other. Website: www.daogroup.com.
-
September 24, 2026 • Catholic University of El Salvador was listed as a victim on the leak site of the Wallstreet ransomware group; the attack is estimated to have taken place on 2026-09-24. Sector: Education. Country: El Salvador. The Catholic University of El Salvador (UNICAES) is a private Catholic university founded in 1982 in Santa Ana, El Salvador.
-
September 24, 2026 • Prater & Ridley Attorneys At Law was listed as a victim on the leak site of the Wallstreet ransomware group; the attack is estimated to have taken place on 2026-09-24. Sector: Professional Services. Country: United States of America. Prater, Ridley & Llamas Attorneys at Law is a law firm based in Temple, Texas, United States. Established in 1993, it provides legal services in family law, criminal defense, probate, estate administration, and related civil matters for clients throughout Central Texas.