-
RoadEx America
September 14, 2026
•
[ ransomware, leak ]
RoadEx America was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Transportation. Country: United States of America. Website: www.roadexamerica.com.
-
Winston Contracting, LLC
September 14, 2026
•
[ ransomware, leak ]
Winston Contracting, LLC was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Professional Services. Country: United States of America. Website: winstoncontracting.com.
-
Foremost Mfg
September 14, 2026
•
[ ransomware, manufacturing ]
Foremost Mfg was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Manufacturing. Country: United States of America. Website: www.foremost-mfg.com.
-
geekybunch.com
September 14, 2026
•
[ ransomware, technology ]
geekybunch.com was listed as a victim on the leak site of the unsafe ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Technology. Country: United States of America. Website: geekybunch.com. Revenue: $5 million
-
Dorfman Abrams Music, P.C
September 13, 2026
Dorfman Abrams Music, P.C was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-09-13. Sector: Professional Services. Country: United States of America. Website: .. A full service CPA firm
-
Bernath & Rosenberg
September 13, 2026
•
[ ransomware, finance ]
Bernath & Rosenberg was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-09-13. Sector: Professional Services. Country: United States of America. Website: .. A full service CPA firm
-
Better Accounting Solutions
September 14, 2026
•
[ ransomware, finance ]
Better Accounting Solutions was listed as a victim on the leak site of the anubis ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Professional Services. Wall Street accountants data breach.
-
HandyTrac (Greystar Litchfield Park, AZ)
September 15, 2026
•
[ ransomware, technology, leak ]
HandyTrac (Greystar Litchfield Park, AZ) was listed as a victim on the leak site of the ShadowByt3$ ransomware group; the attack is estimated to have taken place on 2026-09-15. Sector: Other. Country: United States of America. Website: new.handytrac.com. We have access to sensitive data. It's in your best interest to contact us and negotiate since it will just hurt you if you don't. We stole a lot of sensitive info including the following:
- Physical-to-Digital Key Maps (Reports)
- Property Intelligence & Vulnerability Logs (HandyTrac Key Control.pdf)
- Employee Identity & Credential Data (Employees)
- Financial & Vendor Records (Open_and_closed_Invoices)
- Administrative Portal Control (Dashboard / Administration)
This is not a joke or a bluff it's a sign of a corporate disaster. Figure it out and negotiate and the picture for proof is on are site at the below
url: http://sdwbyttda4uzwdffbt4m7niuodiwhcgmkyxqg5nly2bjxqa6xtbe3fyd.onion/Screenshot_proof.png
As you can see negotiate within 72 hours or we will leak the full data.
-
veritiv
September 15, 2026
•
[ ransomware, manufacturing ]
veritiv was listed as a victim on the leak site of the iah6477 ransomware group; the attack is estimated to have taken place on 2026-09-15. Sector: Manufacturing. Country: United States of America. Size: 1.9 TiB
-
Honda (Peru)
September 15, 2026
Honda (Peru) was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-09-15. Sector: Manufacturing. Country: Peru. Honda is a global automotive and motorcycle manufacturer founded in 1948 by Soichiro Honda and Takeo Fujisawa. The company offers a wide range of products including automobiles, motorcycles, and power products, catering to clients across various regions including Japan, North America, Europe, and Asia. Honda is committed to social responsibility and environmental conservation, reflecting its philosophy of coexistence with the products it creates. The company's leadership and innovative spirit have been key to its success and expansion in the global market.
-
Geieg
September 15, 2026
•
[ ransomware, retail ]
Geieg was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-15. Sector: Other. Country: Spain. Website: www.geieg.cat.
-
MedSkin Solutions Dr. Suwelack AG
September 14, 2026
•
[ ransomware, healthcare, technology ]
MedSkin Solutions Dr. Suwelack AG was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Healthcare. Country: Germany. Website: medskin-suwelack.com. medskin-suwelack.com rocketreach.co/medskin-solutions-dr-suwelack-ag-profile_b44a3a45fd136bbb MedSkin Solutions Dr. Suwelack AG MedSkin Solutions Dr Suwelack AG is a German biotechnology company. It was founded in 1997 and is based in Billerbeck near Mnster.
DATA
Finance Accounting Core
Quality Management System QMS Validation
Manufacturing Production Operations
Corporate Controlling Financial Planning
Health, Safety Environmental Compliance AUM
Corporate Identity Marketing Assets
Supply Chain Vendor Management
Legal Intercompany Contracts
IT Infrastructure Data Repositories
Human Resources Personnel Records
US Subsidiaries International Taxation
Construction Facility Projects
Regulatory Affairs Medical Device Registration
Executive Communications Email Archives
Archived Confectioning Procedures
-
TMI Tecnicas Mecanicas Ilerdenses
September 14, 2026
•
[ ransomware, manufacturing, leak ]
TMI Tecnicas Mecanicas Ilerdenses was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Manufacturing. Country: Spain. Website: tmipal.com. tmipal.com zoominfo.com/c/tmi-tecnicas-mecanicas-ilerdenses-sl/372767545 TMI Tecnicas Mecanicas Ilerdenses Spanish machining and metal-casting factory from Lleida, Catalonia founded 1991, producing and repairing components for agricultural machinery and industrial customers (custom parts made to customer drawings; "Ilerdenses" refers to Ilerda, the Roman name of Lleida). Classic quiet Catalan workshop serving Spain's fruit-growing capital, where farm equipment wears out fast and OEM replacement parts aren't always available.
-
Sarku Japan
September 14, 2026
•
[ ransomware, retail, automotive ]
Sarku Japan was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Retail & E-Commerce. Country: United States of America. Website: sarkujapan.com. sarkujapan.com zoominfo.com/c/sarku-japan/33898946 SARKU Japan Japan's #1 independent service & wholesale network for foreign cars founded 1993 in Chiba by Texan David J. Jones (in Japan since 1989) after seeing that owners of European/American cars in Japan were "orphans": parts take 68 weeks from Europe, service is scarce. SARKU built the full foreign-car infrastructure: 9 service centers (8 Kanto + Nagoya), a wholesale yard of ~4,000 imported cars (one of Japan's two largest), a parts warehouse of 30,000+ SKUs worth 700M+ (also one of Japan's two largest), plus procurement/export arms via US offices in Seattle (since 1997) and Florida selling 20,000+ cars and serving 60,000+ active customers (~150 staff from 15 countries; ~120K monthly site visitors, 170K+ downloaded car-buying guides). Since 2018 it's owned by the Netherlands' Louwman Group (Europe's largest family-run dealer group, est. 1923). Motto: "Foreign cars. Japanese precision."
-
Librería Santa Fe
September 14, 2026
•
[ ransomware, retail ]
Librera Santa Fe was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Retail & E-Commerce. Country: Argentina. Website: santafelibros.com.ar. santafelibros.com.ar Librera Santa Fe APS S.R.L. is an Argentine book retailer and distributor from Buenos Aires founded 1996 (SIC 5942 Book Stores, Active status), operating a chain of bookstores (named after Avenida Santa Fe, the city's legendary book district in Barrio Norte) plus B2B book/stationery distribution to schools and institutions across Argentina, with traces in Italian business aggregators (export/Italy-linked operations). Classic family bookselling business pre-Amazon era model: retail + distribution. Bottom line: a Buenos Aires book chain riding the avenue that made the city UNESCO's 2011 World Book Capital.
-
Apteki Mareshki
September 14, 2026
Apteki Mareshki was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Healthcare. Country: Bulgaria. Website: mareshki.com. mareshki.com Apteki Mareshki Bulgaria's largest pharmacy chain by outlet count 294 pharmacies in 120+ towns (2025), built since 199192 by Veselin Mareshki, the Varna businessman, founder of the Volya party and former deputy speaker of parliament. Because Bulgarian law caps one company at 4 pharmacies, the chain runs as dozens of legal entities (owned by his mother Veska, relatives and their children) under the MARESHKI HOLD AD umbrella, franchising the brand from Varnafarma-M and supplied through his own wholesaler Farmnet AD (bought from Actavis in 2010; 2016 revenue 494.8M leva, top-4 drug distributor together with Sofarma Trading, Phoenix and Sting handling ~80% of national distribution)
-
Aforpa
September 14, 2026
•
[ ransomware, technology, manufacturing ]
Aforpa was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-14. Country: France. Website: aforpa.fr. aforpa.fr zoominfo.com/c/aforpa/427085810 Aforpa French electrical engineering & installation contractor based in Roissy-en-France (next to Paris-CDG airport) founded 1965 (current SAS registered 1978), specializing in high-power electrical works (HTA/BT networks, lighting) and industrial automation for airports, power plants, tunnels, telecom and residential towers. Its verified credentials: RATP certificate Q19 (electrical works for Paris transport tunnels/stations) and registration on SFR's contractor registry (telecom power infrastructure). Headcount ~100250, revenue est. 3060M (private, undisclosed).
-
Wada Farms
September 14, 2026
•
[ ransomware, retail, manufacturing ]
Wada Farms was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Agriculture and Food Production. Country: Japan. Website: wadafarms.com. wadafarms.com Wada Farms third-generation family potato empire from Idaho founded 1945 by Japanese-American farmer Albert Wada (whose family was interned at Minidoka camp during WWII, then returned and bought 160 acres near Pocatello); today run by the third generation (~10,000 acres in Magic Valley growing Idaho Russet potatoes, onions and sweet potatoes) with its own climate-controlled storage, packing shed and three brands: Potato King, Wada Farms and Wada Farms Organic selling into national grocery chains, processors and export channels. Vertical integration from field to branded shelf; revenue undisclosed (est. $50100M+); 50150 seasonal/permanent staff
-
Somit
September 14, 2026
Somit was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Technology. Country: Finland. Website: somit.com. somit.com zoominfo.com/c/somit/372548242 Guatemalan IT systems integrator founded in 1994 designing, deploying and maintaining data networks, telecommunications, security systems, data-center engineering (power/cooling) and telemedicine & distance-learning interactive platforms for Guatemala's corporate and government sectors. In-house certified engineering staff; anchor clients include banks, universities and government institutions. A classic invisible Central-American integrator: 30+ years in the market, stable demand from banks and the state, near-zero international digital footprint
-
Multipla Contabilidade Empresarial
September 14, 2026
Multipla Contabilidade Empresarial was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Professional Services. Country: Brazil. Website: contabilmultipla.com.br. contabilmultipla.com.br Multipla Contabilidade Empresarial family accounting firm from Piracicaba, So Paulo state, operating since 1990 legal entity MULTIPLA CONTABILIDADE EMPRESARIAL S/S LTDA (CNPJ 05.145.683/0001-99, founded 01/07/2002, capital R$700,000, Simples taxpayer), owned and run by husband-and-wife team Renata Nunes Albino Semmler (accounting director, 35+ years in the profession) and Charles Semmler, with the second generation (Beatriz & Eduardo Albino Semmler) joining family firms in 2026. Services: industry-specialized accounting (services, commerce, industry, healthcare, construction, agribusiness), BPO financial outsourcing (spun into Multipla Gesto Financeira, 2022), company formation & legalization, tax planning & revision, and full payroll/HR (eSocial, DCTFWeb). Team of ~1520