-
Dorfman Abrams Music, P.C
September 13, 2026
Dorfman Abrams Music, P.C was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-09-13. Sector: Professional Services. Country: United States of America. Website: .. A full service CPA firm
-
Bernath & Rosenberg
September 13, 2026
•
[ ransomware, finance ]
Bernath & Rosenberg was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-09-13. Sector: Professional Services. Country: United States of America. Website: .. A full service CPA firm
-
Better Accounting Solutions
September 14, 2026
•
[ ransomware, finance ]
Better Accounting Solutions was listed as a victim on the leak site of the anubis ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Professional Services. Wall Street accountants data breach.
-
HandyTrac (Greystar Litchfield Park, AZ)
September 15, 2026
•
[ ransomware, technology, leak ]
HandyTrac (Greystar Litchfield Park, AZ) was listed as a victim on the leak site of the ShadowByt3$ ransomware group; the attack is estimated to have taken place on 2026-09-15. Sector: Other. Country: United States of America. Website: new.handytrac.com. We have access to sensitive data. It's in your best interest to contact us and negotiate since it will just hurt you if you don't. We stole a lot of sensitive info including the following:
- Physical-to-Digital Key Maps (Reports)
- Property Intelligence & Vulnerability Logs (HandyTrac Key Control.pdf)
- Employee Identity & Credential Data (Employees)
- Financial & Vendor Records (Open_and_closed_Invoices)
- Administrative Portal Control (Dashboard / Administration)
This is not a joke or a bluff it's a sign of a corporate disaster. Figure it out and negotiate and the picture for proof is on are site at the below
url: http://sdwbyttda4uzwdffbt4m7niuodiwhcgmkyxqg5nly2bjxqa6xtbe3fyd.onion/Screenshot_proof.png
As you can see negotiate within 72 hours or we will leak the full data.
-
veritiv
September 15, 2026
•
[ ransomware, manufacturing ]
veritiv was listed as a victim on the leak site of the iah6477 ransomware group; the attack is estimated to have taken place on 2026-09-15. Sector: Manufacturing. Country: United States of America. Size: 1.9 TiB
-
Honda (Peru)
September 15, 2026
Honda (Peru) was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-09-15. Sector: Manufacturing. Country: Peru. Honda is a global automotive and motorcycle manufacturer founded in 1948 by Soichiro Honda and Takeo Fujisawa. The company offers a wide range of products including automobiles, motorcycles, and power products, catering to clients across various regions including Japan, North America, Europe, and Asia. Honda is committed to social responsibility and environmental conservation, reflecting its philosophy of coexistence with the products it creates. The company's leadership and innovative spirit have been key to its success and expansion in the global market.
-
Geieg
September 15, 2026
•
[ ransomware, retail ]
Geieg was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-15. Sector: Other. Country: Spain. Website: www.geieg.cat.
-
MedSkin Solutions Dr. Suwelack AG
September 14, 2026
•
[ ransomware, healthcare, technology ]
MedSkin Solutions Dr. Suwelack AG was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Healthcare. Country: Germany. Website: medskin-suwelack.com. medskin-suwelack.com rocketreach.co/medskin-solutions-dr-suwelack-ag-profile_b44a3a45fd136bbb MedSkin Solutions Dr. Suwelack AG MedSkin Solutions Dr Suwelack AG is a German biotechnology company. It was founded in 1997 and is based in Billerbeck near Mnster.
DATA
Finance Accounting Core
Quality Management System QMS Validation
Manufacturing Production Operations
Corporate Controlling Financial Planning
Health, Safety Environmental Compliance AUM
Corporate Identity Marketing Assets
Supply Chain Vendor Management
Legal Intercompany Contracts
IT Infrastructure Data Repositories
Human Resources Personnel Records
US Subsidiaries International Taxation
Construction Facility Projects
Regulatory Affairs Medical Device Registration
Executive Communications Email Archives
Archived Confectioning Procedures
-
TMI Tecnicas Mecanicas Ilerdenses
September 14, 2026
•
[ ransomware, manufacturing, leak ]
TMI Tecnicas Mecanicas Ilerdenses was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Manufacturing. Country: Spain. Website: tmipal.com. tmipal.com zoominfo.com/c/tmi-tecnicas-mecanicas-ilerdenses-sl/372767545 TMI Tecnicas Mecanicas Ilerdenses Spanish machining and metal-casting factory from Lleida, Catalonia founded 1991, producing and repairing components for agricultural machinery and industrial customers (custom parts made to customer drawings; "Ilerdenses" refers to Ilerda, the Roman name of Lleida). Classic quiet Catalan workshop serving Spain's fruit-growing capital, where farm equipment wears out fast and OEM replacement parts aren't always available.
-
Sarku Japan
September 14, 2026
•
[ ransomware, retail, automotive ]
Sarku Japan was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Retail & E-Commerce. Country: United States of America. Website: sarkujapan.com. sarkujapan.com zoominfo.com/c/sarku-japan/33898946 SARKU Japan Japan's #1 independent service & wholesale network for foreign cars founded 1993 in Chiba by Texan David J. Jones (in Japan since 1989) after seeing that owners of European/American cars in Japan were "orphans": parts take 68 weeks from Europe, service is scarce. SARKU built the full foreign-car infrastructure: 9 service centers (8 Kanto + Nagoya), a wholesale yard of ~4,000 imported cars (one of Japan's two largest), a parts warehouse of 30,000+ SKUs worth 700M+ (also one of Japan's two largest), plus procurement/export arms via US offices in Seattle (since 1997) and Florida selling 20,000+ cars and serving 60,000+ active customers (~150 staff from 15 countries; ~120K monthly site visitors, 170K+ downloaded car-buying guides). Since 2018 it's owned by the Netherlands' Louwman Group (Europe's largest family-run dealer group, est. 1923). Motto: "Foreign cars. Japanese precision."
-
Librería Santa Fe
September 14, 2026
•
[ ransomware, retail ]
Librera Santa Fe was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Retail & E-Commerce. Country: Argentina. Website: santafelibros.com.ar. santafelibros.com.ar Librera Santa Fe APS S.R.L. is an Argentine book retailer and distributor from Buenos Aires founded 1996 (SIC 5942 Book Stores, Active status), operating a chain of bookstores (named after Avenida Santa Fe, the city's legendary book district in Barrio Norte) plus B2B book/stationery distribution to schools and institutions across Argentina, with traces in Italian business aggregators (export/Italy-linked operations). Classic family bookselling business pre-Amazon era model: retail + distribution. Bottom line: a Buenos Aires book chain riding the avenue that made the city UNESCO's 2011 World Book Capital.
-
Apteki Mareshki
September 14, 2026
Apteki Mareshki was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Healthcare. Country: Bulgaria. Website: mareshki.com. mareshki.com Apteki Mareshki Bulgaria's largest pharmacy chain by outlet count 294 pharmacies in 120+ towns (2025), built since 199192 by Veselin Mareshki, the Varna businessman, founder of the Volya party and former deputy speaker of parliament. Because Bulgarian law caps one company at 4 pharmacies, the chain runs as dozens of legal entities (owned by his mother Veska, relatives and their children) under the MARESHKI HOLD AD umbrella, franchising the brand from Varnafarma-M and supplied through his own wholesaler Farmnet AD (bought from Actavis in 2010; 2016 revenue 494.8M leva, top-4 drug distributor together with Sofarma Trading, Phoenix and Sting handling ~80% of national distribution)
-
Aforpa
September 14, 2026
•
[ ransomware, technology, manufacturing ]
Aforpa was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-14. Country: France. Website: aforpa.fr. aforpa.fr zoominfo.com/c/aforpa/427085810 Aforpa French electrical engineering & installation contractor based in Roissy-en-France (next to Paris-CDG airport) founded 1965 (current SAS registered 1978), specializing in high-power electrical works (HTA/BT networks, lighting) and industrial automation for airports, power plants, tunnels, telecom and residential towers. Its verified credentials: RATP certificate Q19 (electrical works for Paris transport tunnels/stations) and registration on SFR's contractor registry (telecom power infrastructure). Headcount ~100250, revenue est. 3060M (private, undisclosed).
-
Wada Farms
September 14, 2026
•
[ ransomware, retail, manufacturing ]
Wada Farms was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Agriculture and Food Production. Country: Japan. Website: wadafarms.com. wadafarms.com Wada Farms third-generation family potato empire from Idaho founded 1945 by Japanese-American farmer Albert Wada (whose family was interned at Minidoka camp during WWII, then returned and bought 160 acres near Pocatello); today run by the third generation (~10,000 acres in Magic Valley growing Idaho Russet potatoes, onions and sweet potatoes) with its own climate-controlled storage, packing shed and three brands: Potato King, Wada Farms and Wada Farms Organic selling into national grocery chains, processors and export channels. Vertical integration from field to branded shelf; revenue undisclosed (est. $50100M+); 50150 seasonal/permanent staff
-
Somit
September 14, 2026
Somit was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Technology. Country: Finland. Website: somit.com. somit.com zoominfo.com/c/somit/372548242 Guatemalan IT systems integrator founded in 1994 designing, deploying and maintaining data networks, telecommunications, security systems, data-center engineering (power/cooling) and telemedicine & distance-learning interactive platforms for Guatemala's corporate and government sectors. In-house certified engineering staff; anchor clients include banks, universities and government institutions. A classic invisible Central-American integrator: 30+ years in the market, stable demand from banks and the state, near-zero international digital footprint
-
Multipla Contabilidade Empresarial
September 14, 2026
Multipla Contabilidade Empresarial was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Professional Services. Country: Brazil. Website: contabilmultipla.com.br. contabilmultipla.com.br Multipla Contabilidade Empresarial family accounting firm from Piracicaba, So Paulo state, operating since 1990 legal entity MULTIPLA CONTABILIDADE EMPRESARIAL S/S LTDA (CNPJ 05.145.683/0001-99, founded 01/07/2002, capital R$700,000, Simples taxpayer), owned and run by husband-and-wife team Renata Nunes Albino Semmler (accounting director, 35+ years in the profession) and Charles Semmler, with the second generation (Beatriz & Eduardo Albino Semmler) joining family firms in 2026. Services: industry-specialized accounting (services, commerce, industry, healthcare, construction, agribusiness), BPO financial outsourcing (spun into Multipla Gesto Financeira, 2022), company formation & legalization, tax planning & revision, and full payroll/HR (eSocial, DCTFWeb). Team of ~1520
-
Technical Asia
September 14, 2026
•
[ ransomware, technology, manufacturing ]
Technical Asia was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Technology. Country: Thailand. Website: technicalasia.com. technicalasia.com zoominfo.com/c/technical-asia-pte-ltd/347370168 Technical Asia Thai-Japanese JV (founded 1990, HQ Samut Prakan/Bangkok) the leading engineering-plastics distributor and fabricator in Thailand & Southeast Asia, importing materials from Japan's Sankyo Kasei and processing them locally: UHMW-PE, MC-Nylon, POM, PA6G, HDPE, PEEK, PVC-C, PVDF, PET, PTFE sold as cut-to-size sheets/rods/tubes and CNC-machined custom parts for automotive, food & packaging, semiconductors, chemicals, oil & gas, robotics and water treatment across SEA. Model: local warehouse stock (days vs. months from Japan) + cut-to-size service + CNC fabrication + engineering material consultation; ISO 9001 certified. ~50100 staff, revenue est. 100500M THB (private JV, not disclosed)
-
Ardom Eilot
September 14, 2026
Ardom Eilot was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-14. Country: Israel. Website: ardomeilot.com. ardomeilot.com Ardom Eilot transport & logistics arm of the Ardom Group the southern-Arava (Israel) kibbutz conglomerate owned by 9 kibbutzim + the Hevel Eilot Regional Council (founded 1978 as a cooperative). It hauls the region's entire output dates (80,000+ palms, ~7,000 t/yr via Ardom Dates), vegetables (~10,000 t/yr via Ardom Marketing), mail, materials and equipment for the owner-kibbutzim across Israel, running on the group's own VIA CARGO / EITAM logistics software (Israel's leading transport ERP, acquired 2008). The domain is one branch of the same cooperative ecosystem that also owns Ardom Dates Factories, Ardom Marketing, Ardom Water Association, Ardom Telecomputing (ICT) and Eilat-Eilot Renewable Energy (104 MW solar, target 400 MW by 2040, green hydrogen with H2PRO/Doral). Bottom line: the internal hauler of a kibbutz-built desert economy and yes, this is definitely them.
-
BGR Energy Systems
September 14, 2026
BGR Energy Systems was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Energy & Utilities. Country: India. Website: bgrcorp.com. bgrcorp.com zoominfo.com/c/bgr-energy-systems-ltd/351623005 BGR Energy Systems Limited Chennai-based Indian EPC contractor and capital-equipment maker for power, oil & gas and petrochemical industries founded 1985 as a 40:60 JV between promoter B.G. Raghupathy and Germany's GEA Energietechnik (condenser-tube cleaning systems for thermal/nuclear plants), renamed BGR Energy in 2007, IPO January 2008. It pioneered the Balance of Plant (BOP) concept in India and runs five divisions: Power Projects (turnkey EPC/BOP for >100 MW coal & gas plants), Oil & Gas Equipment (gas conditioning skids, storage tanks, compressor packages), Air Fin Coolers, Environmental Engineering (desalination, water/effluent treatment) and Electrical Projects (GIS/EHV substations, nuclear plant electricals). Track record: 20+ mega-projects NTPC Solapur 2660 supercritical boilers, NTPC Lara 2800 MW steam turbines, Mettur 600 MW, Krishnapatnam 2660, Ghatampur 3660, North Chennai 800 MW, nuclear electricals
-
Dang Invest Group
September 14, 2026
•
[ ransomware, finance, retail ]
Dang Invest Group was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Financial Services. Country: Vietnam. Website: danginvestgroup.com. danginvestgroup.com Dang Invest Group zech family restaurant group from Ostrava, founded in 1998 by Vietnamese immigrants the force behind the country's biggest Asian fast-food network: brands GUTY ("Taste of Modern Asia" bnh m, bao, rice bowls), Multifood (the original, 1998), Rakki Sushi, Tuk Tuk and Amart cafs, running 70+ company-owned outlets across Czechia, Slovakia and Germany, mostly on shopping-mall food courts, with a central kitchen and no franchise/PE money. The Vietnamese-diaspora ladder: one stall in 1998 mall standard in the 2000s sub-brands in the 2010s three countries in the 2020s, with the GUTY trademark registered at EUIPO/UKIPO for future European expansion.