-
newmantractor.com
September 21, 2026
•
[ ransomware, manufacturing ]
newmantractor.com was listed as a victim on the leak site of the threeam ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Manufacturing. Country: United States of America. Website: newmantractor.com. Since 1976, Newman Tractor has been serving the heavy equipment industry both domestically, and internationally. Originally founded as a farm equipment business in Boone County, Kentucky, Newman Tractor has transformed into one of this country's m
-
siinqeebank.com
September 20, 2026
•
[ ransomware, finance ]
siinqeebank.com was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-09-20. Sector: Financial Services. Country: Somalia. Website: siinqeebank.com. Siinqee Bank is a licensed Ethiopian financial institution that offers inclusive and innovative bank...
-
IKEGAMI TSUSHINKI COMPANY LIMITED
September 21, 2026
•
[ ransomware, manufacturing, technology ]
IKEGAMI TSUSHINKI COMPANY LIMITED was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Manufacturing. Country: Japan. Website: www.ikegami.co.jp.
-
Gomomentum.com
September 21, 2026
•
[ ransomware, leak, technology ]
Gomomentum.com was listed as a victim on the leak site of the EndZone ransomware group; the attack is estimated to have taken place on 2026-09-21. Country: United States of America. Website: momentumtelecom.com. Revenue: $221.7 million
Momentum is a telecommunications company founded in 2001 that provides cloud-based communication solutions for businesses, specializing in cloud voice services, managed networks, SD-WAN solutions, and Microsoft Teams Phone integration. We gained access to a diagnostic and provisioning tool used by Momentum through a compromised Multi-Service Operator (MSO). Upon reconnaissance, we identified multiple critical vulnerabilities throughout the system. This tool controls internet and voice services for millions of users across global markets. We successfully accessed user data for every MSO, exposing personally identifiable information (PII) for over 7.5 million users. They didn't notice the prolonged access or the customer data dump for a while, but when we started deleting modems they noticed. They kept burning access and we gained it back, they'd burn it again. We removed modem packages for 58,127 users across the United States. That's 58,127 people without internet service right now. Families, businesses, students all cut off from the digital world. This is the direct result of their negligence and failure to secure their systems. These services can be restored immediately with the click of a button on our tool but you must reach out. Momentum management should contact us to discuss resolution.
-
Charlottesville Police Department
September 21, 2026
•
[ ransomware, government ]
Charlottesville Police Department was listed as a victim on the leak site of the Doommageddon ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Government & Defense. Country: United States of America. Website: cpdcareers.com. Status: upcoming | Data size: | Files: 0 files | Deadline: 2026-09-30T00:00:00Z
-
Manroc Developments
September 21, 2026
Manroc Developments was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Other. Country: Canada. Website: manroc.com. Manroc Developments Inc. is a leading full-service mining contractor specializing in the Alimak Raise Mining process, with over 30 years of experience in the industry. The company serves the international mining community, having completed over 70 projects across four continents and driven more than 65,000 lateral development meters. Headquartered in Manitouwadge, Ontario, Manroc is committed to building long-term relationships with clients by delivering on promises and ensuring project success through experienced personnel. They also offer a comprehensive training program to support career development in the mining sector.
The company headquarters is located in 7 Black Road, Manitouwadge, ON P0T 2C0, Canada. 201-500 Employees
-
TrueCore Behavioral Solutions
September 21, 2026
•
[ ransomware, healthcare ]
TrueCore Behavioral Solutions was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Healthcare. Country: United States of America. Website: truecorebehavioral.com. TrueCore Behavioral Solutions is a behavioral treatment provider located in Tampa, FL, specializing in services for at-risk adjudicated youth aged 13-21. Established in 2001, the company is committed to empowering individuals, families, and communities to discover their true potential through quality behavioral health services. They offer residential and outpatient treatment programs that utilize a strength-based approach and evidence-based interventions tailored to the needs of the youth they serve. TrueCore is recognized for its unmatched commitment to helping youth improve their quality of life and achieve personal success.
The company headquarters is located in 1907 US-301, Building C, Suite C150, Tampa, FL 33619, United States. 51-200 Employees
-
The Money Store
September 21, 2026
•
[ ransomware, finance ]
The Money Store was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Financial Services. Country: United States of America. Website: themoneystore.com. The Money Store is a local mortgage lender based in Hamilton, NJ, specializing in home financing solutions. They offer a variety of loan products including home purchase, refinance, construction, renovation, and home equity loans to cater to diverse client needs. Their services are designed for individuals looking to buy, build, renovate, or refinance their homes. The company aims to simplify the home financing journey with a user-friendly application process and dedicated team support.
The company headquarters is located in 30B Vreeland Road, Suite 200, Florham Park, NJ 07932, United States.
201-500 Employees
-
Grupolider
September 21, 2026
•
[ ransomware, manufacturing, retail ]
Grupolider was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Other. Country: Angola. Website: grupolider-ao.com. grupolider-ao.com zoominfo.com/c/grupolider/429885445 Grupolider is an Angolan diversified holding company founded in 1999, headquartered in Catete (Luanda province). The group operates in agriculture, logistics, freight forwarding, construction, and furniture manufacturing, with its flagship business being Novagrolider the largest agricultural producer in Angola. Novagrolider farms around 20,000 hectares of land and produces roughly 150,000 tons of food per year (bananas, vegetables, fruit, and dairy), while the group employs over 3,200 direct staff. The company exports to Portugal, Spain, France, Belgium, Russia, South Africa, and Morocco, and was the first farm in Africa to receive GlobalGAP certification. Estimated annual revenue is around USD 1315 million (Novagrolider alone), though reliable consolidated figures for the private group are not publicly disclosed. Since 2021, after the death of co-founder Joo Macedo, the group has been led by his brother and partner Jos Macedo.
-
Prestige Management
August 17, 2026
Prestige Management was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-08-17. Sector: Professional Services. Country: United States of America. Website: prestigemgt.com. Prestige Management Inc. is a licensed real estate company based in New York, specializing in r
esidential and commercial property management. The company is dedicated to providing high-quali
ty management services for property owners and residents, ensuring accountability and complianc
e in their operations.
We will upload 20gb of corporate data soon. Employee and client information (name, address and
so on), financials, payment details.
-
Visual Intelligence, Inc.
September 21, 2026
•
[ ransomware, technology ]
Visual Intelligence, Inc. was listed as a victim on the leak site of the metaencryptor ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Technology. Country: United States of America. Website: visualintelligenceinc.com. Visual Intelligence is a managed services company that applies advances in drones, computing, and AI to assess and cleanse existing Telecom company databases, generate critical intelligence, and inform teams with a new digital core.
-
HyVision System. Inc
September 21, 2026
HyVision System. Inc was listed as a victim on the leak site of the metaencryptor ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Technology. Country: South Korea. Website: en.hyvision.co.kr. Hyvision System Inc is a Korea-based company principally engaged in the manufacture of automatic test and measurement equipment for mobile camera modules. Its products include testing and measuring system for camera modules, ccm tester, smart comp. tester, vision inspector tester, secondary batteries, and smart components.
-
Flex Ltd
September 21, 2026
•
[ ransomware, manufacturing, technology ]
Flex Ltd was listed as a victim on the leak site of the metaencryptor ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Manufacturing. Country: United States of America. Website: flex.com. Flex Ltd. is a global technology manufacturing and supply-chain company headquartered in Austin, Texas. It provides design, engineering, electronics manufacturing, supply-chain management, and infrastructure solutions for customers across the data center, AI, automotive, healthcare, industrial, communications, and consumer technology sectors. Flex operates more than 100 facilities worldwide and employs approximately 150,000 people.
-
Hudson MD Group, LLC
September 21, 2026
•
[ ransomware, healthcare ]
Hudson MD Group, LLC was listed as a victim on the leak site of the metaencryptor ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Healthcare. Country: United States of America. Website: www.hudsonmdgroup.com. Hudson MD Group, LLC is a U.S.-based multispecialty medical group headquartered in West Orange, New Jersey. Established in 2019, the organization brings together physicians and healthcare professionals across multiple medical specialties and operates a network of outpatient medical practices and care centers throughout New Jersey.
The group provides a broad range of healthcare services, including primary and internal medicine, cardiology, gastroenterology, neurology, obstetrics and gynecology, nephrology, urology, and other specialized medical services. Its integrated practice model allows participating physicians to operate within a shared organizational and administrative infrastructure while maintaining their clinical practices.
-
U.S. Electrical Services and Wiedenbach Brown
September 21, 2026
U.S. Electrical Services and Wiedenbach Brown was listed as a victim on the leak site of the moneymessage ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Energy & Utilities. [AI generated] N/A
I don't have verified, reliable information about a company specifically named "U.S. Electrical Services and Wiedenbach Brown." I don't want to guess or fabricate details about its operations, industry specifics, or history, as this appears to be either a highly obscure entity, a merged/rebranded company, or possibly a name combination I cannot confidently verify. Providing invented details would risk inaccuracy in a threat intelligence context.
-
Telrad Networks
September 21, 2026
•
[ ransomware, technology ]
Telrad Networks was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Technology. Country: Israel. Website: www.telrad.com.
-
Kjla
September 21, 2026
•
[ ransomware, technology ]
Kjla was listed as a victim on the leak site of the Global Secret Group ransomware group; the attack is estimated to have taken place on 2026-09-21. Country: United States of America. Website: kjla.com. Country: US |
Website: kjla.com |
Revenue: $6.7 Million |
Industry: Broadcasting |
Employees: 1150 employees |
Properties:: 783 GB (501,662 Files, 42,890 Folders)
-
Allied Supply Co.
September 21, 2026
Allied Supply Co. was listed as a victim on the leak site of the Global Secret Group ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Manufacturing. Country: Ohio 45402, US
Website: alliedsupply.com
Revenue: $8 Million
Industry: Wholesale, Industrial Machinery & Equipment, Manufacturing |
Employees: 50-100 |
Properties: 25.3 GB (32,019 Files, 3,994 Folders)
-
Summa Gold
September 21, 2026
•
[ ransomware, manufacturing ]
Summa Gold was listed as a victim on the leak site of the anubis ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Manufacturing. Behind the scenes of a gold mining company.
-
360 Consulenza S.r.l.
September 14, 2026
•
[ ransomware, technology, leak ]
360 Consulenza S.r.l. was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Professional Services. Country: Italy. Website: www.360consulenza.com. - Clients' Private Documents- Projects- Software Source Codes