Full List

Search

Recent Breaches

• Ceres Tolvas September 18, 2026 • [ ransomware, manufacturing ] Ceres Tolvas was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-18. Sector: Agriculture and Food Production. Country: Argentina. Website: www.cerestolvas.com.ar.
• Ascend Com September 18, 2026 • [ ransomware, technology ] Ascend Com was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-18. Sector: Technology. Country: Singapore. Website: www.ascendcom.com.sg.
• www.kendallhunt.com September 18, 2026 • [ ransomware, education ] www.kendallhunt.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-09-18. Sector: Education. Country: United States of America. Website: www.kendallhunt.com. Founded in 1944, Kendall Hunt Publishing is a publisher of hands-on, inquiry-based science, mathematics, and gifted curricula for grades PreK-12. Their research and standards-based programs are available in both print and digital components that encompass students, teachers, and parents. Kendall Hunt is headquartered in Dubuque, IA.
• www.roancampingholidays.com September 18, 2026 • [ ransomware, retail, leak ] www.roancampingholidays.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-09-18. Sector: Hospitality. Country: Netherlands. Website: www.roancampingholidays.com. Roan Luxury Camping Holidays is a Dutch tour operator specializing in deluxe mobile home and tent rentals at 4- and 5-star campsites across Europe
• Anderson Industries September 18, 2026 • [ ransomware, manufacturing, financial ] Anderson Industries was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-09-18. Sector: Manufacturing. Country: United States of America. Website: anderson-industries.com. Anderson Industries is a cutting-edge engineering and manufacturing company that assists forwar d-thinking businesses in bringing innovative products to market. They offer a range of products including agricultural equipment, trailers, and foundry services. We will upload 9gb of corporate data soon. Employee personal information, client information, l ots of projects, specifications, orders, financials, NDAs and so on.
• MPA Pharma September 18, 2026 MPA Pharma was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-09-18. Sector: Healthcare. Country: Germany. Website: mpapharma.de. MPA Pharma MPA Pharma GmbH is an internationally active, rapidly growing company specializing in the import and trade of high-quality pharmaceuticals, including both patented and generic products. 2,899,290 files, ~5.8 TBPharmaceutical companyCategories: accounting records and database backups, government audits (customs / corporate tax / social security / wage tax),corporate ownership (nominee structure, beneficial-ownership filings, related-party payments), narcotics/BtM records (opioids, cannabis, precursors),litigation files, executive and employee personal data, IT artifacts, pharmacovigilance correspondence.Credit cards with CVV of executives, Oltersdorf ID card valid until 2030, the Pfeiffer letter on the hidden Paranova Pack B.V., UBO passportsSQL backups (17.7 million general-ledger rows), commercial register extract (HRB), organizational chartCredentials (TIER 1) - a list of all password files (values not repeated here, stored in the MPA PASSWORDS report)Government audits - customs 17,011.77 EUR with a breakdown, corporate tax +202,203.18 EUR, social security (DRV) 23,134.96 EUR with a separate case against the managing director, wage-tax auditNarcotics (BtM) - permits (318 04 74), reconciliations of 588 rows / 93 differences, fentanyl, hydromorphone, oxycodone, tapentadol, unexplained remainders of 1-13 units, documentation gap 2017-2020, cannabis up to 22 percent THC, precursorsLitigation - MSD/Merck memo, settlement agreement, Amgros judgment 5,180,043.09 DKK, complaint to the Ministry of Health, arbitration filingPeople, security, pharmacovigilance, bulk financial recordsArtifacts - leadership phone book, employee medical documents, Eli Lilly 2025, AstraZeneca, rebate contracts, a list of all produced reports More
• United Federation of Teachers September 18, 2026 • [ ransomware, education ] United Federation of Teachers was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-09-18. Sector: Education. Country: United States of America. Website: uft.org. Education / Labor Union US New York | The unions complete legal case archive approx. 181,420 documents: grievance and arbitration files, disciplinary appeal decisions and personnel case files, each named for a member; Contract documents: CBAs, MOUs, MOAs and side letters; Nurse-federation and health-benefit-fund case materials; Teacher evaluation and class-size complaint files; Staff search and case-view audit logs | Publication proceeds in batches after the deadline. The victim can verify everything and settle in their private negotiation room. | [ACTIVE: deadline 2026-09-19 14:58 UTC]
• Vietnamese betting operator (GC789 network / Boundless TE) September 18, 2026 Vietnamese betting operator (GC789 network / Boundless TE) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-09-18. Sector: Other. Country: Vietnam. Online gambling / agent platform Vietnam / Switzerland | The complete bettor database: 2,021,011 registered bettors with names, +84 phone numbers, email addresses, deposit and withdrawal amounts; The full agent network: 39,998 agent accounts, hierarchy, balances, credit lines and commission ladders; 85 million login records with IP addresses and device identifiers; Daily trading and P&L data per provider; The fraud stack: 33,000+ blacklisted emails and phones, arbitrage and odds-mover reports, multi-account detection rules | Publication proceeds in batches after the deadline. | [ACTIVE: deadline 2026-09-20 01:37 UTC]
• BeLi Teacher / FSC education centers (AWS) September 18, 2026 • [ ransomware, education, technology ] BeLi Teacher / FSC education centers (AWS) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-09-18. Sector: Education. Country: Vietnam. Website: beliteachers.com. Education / edtech Vietnam | The complete CRM lead database: 152,044 contact records names, emails, +84 phone numbers, cities, study interests, engagement history; The CRM file archive (tasks, forums, comments, customer files) migrated from GetFly CRM | Publication proceeds in batches after the deadline. | [ACTIVE: deadline 2026-09-20 02:47 UTC]
• Konnatus (usucapião legal services) September 18, 2026 Konnatus (usucapio legal services) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-09-18. Sector: Professional Services. Country: Brazil. Legal services / real estate Brazil | The application database: chart of accounts, income/outflow structures, account types; User accounts with password hashes | Publication proceeds after the deadline. | [ACTIVE: deadline 2026-09-20 03:32 UTC]
• STOKR (digital securities platform) September 18, 2026 STOKR (digital securities platform) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-09-18. Sector: Financial Services. Country: Luxembourg. Website: stokr.io. Digital securities / investment platform Luxembourg - EU | KYC investor register: full names, emails, countries, nationalities, wallet addresses and tax IDs where present; Identity-to-crypto-wallet mapping of KYC-accepted investors (FR, DE, CH, BE, NL, UK and others); Internal platform admin directory with staff accounts and roles | The investor data will also be delivered to the tax authorities of the investors' countries. | [ACTIVE: deadline 2026-09-20 22:40 UTC]
• AstraZeneca Türkiye September 18, 2026 • [ ransomware, healthcare, manufacturing ] AstraZeneca Trkiye was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-09-18. Sector: Healthcare. Country: Turkey. Website: astrazeneca.com.tr. Pharmaceutical manufacturing (GxP) Trkiye | Complete internal network-security configuration of all 3 sites (940 MB): every rule, device definition, remote-access mappings; 1.35M connection records: M365/Intune, SAP Concur, UniFi camera estate, internal applications | All sites are enforcing a total network blackout until settlement. | [ACTIVE: deadline 2026-09-21 03:01 UTC]
• Argentem Creek Partners (investment firm) September 18, 2026 • [ ransomware, finance, technology ] Argentem Creek Partners (investment firm) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-09-18. Sector: Financial Services. Country: United States of America. Website: argentemcreek.com. Investment management / private credit United States | Full corporate network evidence: 2.5M+ connection records, complete internal systems map (Active Directory, SharePoint, MSP tooling, office-security integrations); Tax-season document flows of the firm and its investor document delivery platform | Corporate connectivity remains severed until settlement. | [ACTIVE: deadline 2026-09-21 03:01 UTC]
• Ministry of Education — Argentina September 18, 2026 • [ ransomware, government, education ] Ministry of Education Argentina was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-09-18. Sector: Government & Defense. Country: Argentina. Website: argentina.gob.ar. Government / education Argentina | Complete network-security configuration of the ministry network; 1.08M connection records: national library (BNM), school-book selection platform, scholarship systems (becasprogresar), titulosvalidez, certificadosinfd, sitrared; Evidence of the Monero cryptocurrency miner operating inside the ministry network | The ministry network is under a total blackout until settlement. | [ACTIVE: deadline 2026-09-21 03:01 UTC]
• PayPal support operations (Transcom WorldWide) September 18, 2026 • [ ransomware, finance, technology ] PayPal support operations (Transcom WorldWide) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-09-18. Sector: Financial Services. Country: Sweden. Website: transcom.com. Outsourced customer support / financial services Netherlands / Tunisia | 86.7M connection records: daily support-agent sessions into PayPal corporate Citrix/AAA systems; Complete infrastructure map: internal AD, PKI, Netskope/Zscaler tenants, all 8 sites | All 8 sites are enforcing a network blackout until settlement. | [ACTIVE: deadline 2026-09-21 03:01 UTC]
• Prefix Corp September 18, 2026 • [ ransomware, manufacturing ] Prefix Corp was listed as a victim on the leak site of the securotrop ransomware group; the attack is estimated to have taken place on 2026-09-18. Sector: Other. Country: United States of America. Website: www.prefix.com. Status: AWAITING Size: 1135 GB
• Paid Victim 192EB2B6AD7B98D9 September 18, 2026 • [ ransomware ] Paid Victim 192EB2B6AD7B98D9 was listed as a victim on the leak site of the AuditTeam ransomware group; the attack is estimated to have taken place on 2026-09-18. Country: Russian Federation. [AI generated] N/A I don't have any reliable information about a company named "Paid Victim 192EB2B6AD7B98D9." This appears to be an anonymized or coded identifier, possibly from a ransomware leak site or threat intelligence feed, rather than an actual company name. Without access to the specific database or source that generated this identifier, I cannot provide factual details about its operations, industry, or country.
• kit-e.jp September 9, 2026 kit-e.jp was listed as a victim on the leak site of the AuditTeam ransomware group; the attack is estimated to have taken place on 2026-09-09. Sector: Technology. Country: Japan. Website: kit-e.jp. No data breaches
• Premier Lighting & Controls September 18, 2026 Premier Lighting & Controls was listed as a victim on the leak site of the Gammax ransomware group; the attack is estimated to have taken place on 2026-09-18. Sector: Manufacturing. Country: United States of America. Website: premierlight.com. Premier Lighting & Controls is a full-service commercial lighting agency. It serves architects, contractors, distributors, building owners, and en...
• Inter (Venezuela's largest internet provider) September 18, 2026 Inter (Venezuela's largest internet provider) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-09-18. Sector: Technology. Country: Venezuela (Bolivarian Republic of). Website: inter.com.ve. Telecommunications / ISP Venezuela | Subscriber connection records: 15,300,000+ entries, tens of thousands of subscriber addresses with the services they contacted; Complete internal network map across all regional operations; Core infrastructure configuration evidence | Network traffic remains severed until settlement. | [ACTIVE: deadline 2026-09-20 18:39 UTC]