-
theLender
September 22, 2026
theLender was listed as a victim on the leak site of the termite ransomware group; the attack is estimated to have taken place on 2026-09-22. Sector: Financial Services. Country: United States of America. Website: thelender.com. theLender was created to make a difference. As a group of proven industry leaders who recently founded one of the largest and fastest growing Wholesale mortgage companies in the United States, the company aims to change the stagnant landscape of Wholesale mortgage - one partnership, one loan, and one day at a time.
-
TruAmerica Multifamily
September 22, 2026
•
[ ransomware, finance ]
TruAmerica Multifamily was listed as a victim on the leak site of the termite ransomware group; the attack is estimated to have taken place on 2026-09-22. Country: United States of America. Website: www.truamerica.com. TruAmerica Multifamily is a vertically integrated real estate investment and asset management firm specializing in multifamily housing across the United States. The company focuses on identifying value opportunities within existing apartment communities and enhancing their long-term performance through strategic acquisition, thoughtful renovation, and disciplined property management.
-
FinSoft (Kolibri retail back-office software)
September 22, 2026
•
[ ransomware, technology, retail ]
FinSoft (Kolibri retail back-office software) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-09-22. Sector: Retail & E-Commerce. Country: Uzbekistan. Retail software vendor / IT services Uzbekistan | Client databases of 10+ retail chains (keddo, marc, lancaster, comf_rus, ek, cr, bas_at, bas_juk, bas_nov, bas_zar): sales, stock, pricing, financial records; Back-office platform and API service data | One client database publishes per day after the deadline, starting with keddo. Their clients will know exactly whose software failed them. | [ACTIVE: deadline 2026-09-25 01:06 UTC]
-
Sealcon
September 22, 2026
•
[ ransomware, manufacturing, technology ]
Sealcon was listed as a victim on the leak site of the termite ransomware group; the attack is estimated to have taken place on 2026-09-22. Sector: Manufacturing. Country: United States of America. Website: www.sealconusa.com. Founded in 1989 and headquartered in Colorado, Sealcon is a cable management provider in North America consisting of rated electrical and electronic components such as liquid-tight strain reliefs, cable glands, circular connectors, UL enclosures, conduit, and electrical accessories.
-
NAI Earle Furman
September 22, 2026
NAI Earle Furman was listed as a victim on the leak site of the secp0 ransomware group; the attack is estimated to have taken place on 2026-09-22. Sector: Professional Services. Country: United States of America. The reviewed dataset is a single-snapshot, single-volume file-server tree (E:/Shares, 1.36M paths) covering NAI Earle Furman's brokerage deals, property-management portfolio (MRI accounting), broker commissions, employee home directories, and the absorbed Croxton Gray firm's data...
-
Columbus Informatica
September 22, 2026
•
[ ransomware, technology ]
Columbus Informatica was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-22. Sector: Technology. Country: Italy. Website: www.columbusinformatica.it.
-
Textile City
September 22, 2026
•
[ ransomware, manufacturing ]
Textile City was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-22. Sector: Manufacturing. Country: Canada. Website: www.textilecity.ca.
-
vit.ac.in
September 13, 2026
•
[ ransomware, education, technology ]
vit.ac.in was listed as a victim on the leak site of the AuditTeam ransomware group; the attack is estimated to have taken place on 2026-09-13. Sector: Education. Country: India. Website: vit.ac.in. VIT (Vellore Institute of Technology, official site vit.ac.in) is a well-known private university in India: founded in 1984 and granted university status in 2001, with its main campus in Vellore and additional campuses in Chennai, AP, and Bhopal; it is especially strong in engineering and technology (NAAC A++, solid NIRF/QS standing), admits most undergrads via VITEEE, and posts strong placements (often 10,000+ offers in recent years, with top packages around 1 crore INR).
-
DI.C.S.EL. S.R.L.
September 22, 2026
•
[ ransomware, manufacturing, financial ]
DI.C.S.EL. S.R.L. was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-09-22. Sector: Manufacturing. Country: Italy. Introduction DI.C.S.EL. S.R.L., founded in 2005, is an Italian company headquartered in Milan a
nd operating throughout Lombardy, specializing in the provision of technical solutions for the
electrical and measurement sectors.
We will upload 9gb of corporate data soon. Employee personal information (drivers licenses, EU
IDs), financials, payment details, projects, NDAs and so on.
-
The Fifty/50
September 22, 2026
•
[ ransomware, retail ]
The Fifty/50 was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-22. Country: United States of America. Website: www.thefifty50.com.
-
TDMI
September 22, 2026
•
[ ransomware, manufacturing, leak ]
TDMI was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-09-22. TDMI has an in-house sample department for outstanding product development and quality testing.
The company stay alert to emerging trends and develop innovative textiles based on constant ma
rket research analyses.
We will upload 33gb of corporate data soon. Detailed employee personal information (SSNs, drive
rs licenses, passports), financials, credit cards, projects, client data, NDAs and so on.
-
Coe Press Equipment
September 22, 2026
•
[ ransomware, manufacturing, financial ]
Coe Press Equipment was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-09-22. Sector: Manufacturing. Country: United States of America. COE Press Equipment designs and manufactures a complete line of premiere coil handling and serv
o roll feed equipment from stand-alone roll feeds, precision straighteners, and reels to comple
te integrated feed systems and cut-to-length lines.
We will upload 25gb of corporate data soon. Detailed employee personal information (SSNs, drive
rs licenses, passports and other HR files), financials, projects, confidential client docs, NDA
s and so on.
-
GOTTHELF
September 22, 2026
GOTTHELF was listed as a victim on the leak site of the Booba Project ransomware group; the attack is estimated to have taken place on 2026-09-22. Country: Moldova. Website: www.gotthelfmd.com. Healthcare Stolen data: 2 GB.
-
Tulare Western High School
September 22, 2026
•
[ ransomware, education ]
Tulare Western High School was listed as a victim on the leak site of the Booba Project ransomware group; the attack is estimated to have taken place on 2026-09-22. Sector: Education. Country: United States of America. Website: www.tjuhsd.org. Education Administration Programs Stolen data: 35 GB.
-
Krapf Group
September 22, 2026
•
[ ransomware, manufacturing ]
Krapf Group was listed as a victim on the leak site of the kairos ransomware group; the attack is estimated to have taken place on 2026-09-22. Sector: Manufacturing. Country: United States of America. Founded in 1942 and headquartered in West Chester, Pennsylvania, Krapf Group is a family-owned and operated transportation business. Operates a fleet of more than 2,500 school buses and commercial vehicles with over 3,500 employees. The data also contains personal information about thousands of bus drivers.
-
gregjoneslaw.com
September 8, 2026
•
[ ransomware, leak ]
gregjoneslaw.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-09-08. Sector: Professional Services. Country: United States of America. Website: gregjoneslaw.com. Documents: Greg Jones & Associates, P.A. PROLOGUE An anonymous $250,000 loan from "Skeeter" on t...
-
moscone.com
September 11, 2026
•
[ ransomware, retail ]
moscone.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-09-11. Sector: Hospitality. Country: United States of America. Website: moscone.com. "We Create Unforgettable Experiences." What ASM Global Hides Backstage at Moscone Center PROLOGUE: O...
-
quantummarketing-group.com
August 13, 2026
quantummarketing-group.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-08-13. Sector: Professional Services. Country: Germany. Website: quantummarketing-group.com. The Cold Call Quantum Technology Marketing Group Limited Reading, UK Prologue. What's Inside We ha...
-
lakebeverage.com
September 7, 2026
•
[ ransomware, retail ]
lakebeverage.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Retail & E-Commerce. Country: United States of America. Website: lakebeverage.com. A Beer Distributor and Its 165 Gigabytes Rochester, New York WSLR #63124 September 2026 Prologue...
-
namtheun2.com
September 11, 2026
•
[ ransomware, leak, energy ]
namtheun2.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-09-11. Sector: Energy & Utilities. Country: Laos. Website: namtheun2.com. Nam Theun 2: 1.2 TB of Files That Were Never Meant to Leave PROLOGUE VAT declaration V262120000733,...