-
Strad Solutions
September 12, 2026
•
[ ransomware, technology, hack ]
Strad Solutions was listed as a victim on the leak site of the Vexy Ransomware ransomware group; the attack is estimated to have taken place on 2026-09-12. Sector: Technology. Country: United Kingdom of Great Britain and Northern Ireland. Website: stradsolutions.com. Strad Solutions provides cloud hosting, dedicated servers, managed IT, cybersecurity, and disaster recovery services for businesses worldwide.
-
INCOR Group
September 13, 2026
INCOR Group was listed as a victim on the leak site of the Doommageddon ransomware group; the attack is estimated to have taken place on 2026-09-13. Sector: Other. Country: India. Website: incor.in. Status: upcoming | Data size: | Files: 0 files | Deadline: 2026-09-20T00:00:00Z
-
Kimberly-Clark
September 13, 2026
•
[ ransomware, manufacturing ]
Kimberly-Clark was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-09-13. Sector: Manufacturing. Country: United States of America. Website: kimberly-clark.com. This is a final warning to reach out by 16 Sep 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 13 Sep 2026 | Warning: FINAL WARNING
-
i2i-systems
September 13, 2026
i2i-systems was listed as a victim on the leak site of the Barracuda ransomware group; the attack is estimated to have taken place on 2026-09-13. Sector: Technology. Country: Turkey. Website: i2i-systems.com. This is one of the most poorly secured companies we have ever encountered. Over the course of a week, we analyzed the infrastructure and moved freely across their network. The infrastructure lacked proper security configurations, and the IT department showed a complete disregard for the data. As a result of the attack, 693 gigabytes of data were exfiltrated.
We downloaded the complete source code for the following projects:
Caplan
DataGov-Dev-Docker
DDR
DDR-Veriskop
DFE-Dev
Kangal-Dev
SDD-DEV-DOCKER
SDD-MAIN
commonprojects.zip
Copycat.zip
CopycatLive.zip
datacat.war
datagov.war
Kangal-Dev.zip
Kangal-Master.zip
SDD-DEV-DOCKER@2.zip
smartdq.war
The volume of exfiltrated source code totaled 44 gigabytes. The data includes a full snapshot of the latest releases from the development repository. i2i-systems has a direct connection to the information security company Veriskop; therefore, this breach directly affects them as well. In addition, i2i-systems engaged in joint projects with partners such as Vodafone, Etiya, Bouygues, Freedom Mobile, and others; this is evidenced by the Linux servers located within the i2i-systems infrastructure:
1864654005 backup_Veriskop-SQA1.local_2026-08-31_203808.tar.gz
3292962897 copycat2019.i2isystems.local_critical_backup_2026-08-31_19-30-29.tar.gz
18422354 critical_backup_bouygues_fcbs_batch2.local_20260830_221815.tar.gz
2231188487 etiya-mobile-test-01.local_backup_20260831_213207.tar.gz
20546323810 freedom-mobile1-critical-vault.tar.gz
1050673952 freedom-mobile2-secrets-20260830-232814.tar.gz
721661 maya-redhat7-9_2026-08-30_233036.tar.gz
22966288270 ol8-10-innobi_full_backup_20260831_022640.tar.gz
529695763 veriskop-db-critical-backup-2026-08-31_234418.tar.gz
13012999372 veriskop-fiziksel-yedek-20260831023535.tar.gz
309528511 veriskop-oracle-critical-backup-2026-08-31_203340.tar.gz
633604141 veriskop-rhel-7.local_critical_backup.tar.gz
4878999722 Veriskoptest01.local_backup_20260831_213236.tar.gz
238487575 Veriskoptest02.local_critical_backup_20260831_213052.tar.gz
33936543608 veriskoptest03_critical_backup_2026-08-31.tar.gz
We have extracted absolutely all critical data from these infrastructure Linux systems and created a snapshot of the databases.
In addition, i2i-systems recently launched a joint project with Turk Telekomwe have downloaded the database containing all their customers.
The data will be published soon... | Severity: HIGH | Size: 643 GB | Status: selling | 300000$
-
Paid Victim FDC699DE3A112669
September 13, 2026
Paid Victim FDC699DE3A112669 was listed as a victim on the leak site of the AuditTeam ransomware group; the attack is estimated to have taken place on 2026-09-13. Country: Germany.
-
Paid Victim F9CF4B639CAC1B18
September 13, 2026
•
[ ransomware ]
Paid Victim F9CF4B639CAC1B18 was listed as a victim on the leak site of the AuditTeam ransomware group; the attack is estimated to have taken place on 2026-09-13. Country: Russian Federation.
-
CARIDRO VAL DE LOIRE
September 13, 2026
•
[ ransomware, manufacturing ]
CARIDRO VAL DE LOIRE was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-13. Sector: Agriculture and Food Production. Country: France. Website: caridrovaldeloire.fr.
-
www.kashkha.com
September 13, 2026
•
[ ransomware, retail, manufacturing ]
www.kashkha.com was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-09-13. Website: www.kashkha.com. Kashkha is a multinational modest fashion brand founded three decades ago in Dubai, UAE, specializing in designing, manu...
-
Navitrans
September 13, 2026
•
[ ransomware, leak, manufacturing ]
Navitrans was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-09-13. Sector: Transportation. Navitrans is a leading Colombian distributor and service provider specializing in commercial trucks and heavy machinery, offering a comprehensive range of products and services including vehicle sales, spare parts distribution, and maintenance and repair services through a nationwide network of workshops. This post includes sensitive data about prices, financing, and other operational information. [Size: 223.2 MB | Sector: Manufacturing, Transportation]
-
Gilco Scaffolding
September 13, 2026
•
[ ransomware, manufacturing ]
Gilco Scaffolding was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-13. Sector: Manufacturing. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.gilcoscaffolding.com.
-
Cerámicas Kantu
September 13, 2026
•
[ ransomware, manufacturing ]
Cermicas Kantu was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-09-13. Sector: Manufacturing. Cermicas Kantu S.A.C. is a Peruvian company specializing in the manufacturing of decorative tiles and accessories made from ceramic, porcelain, and glass. With over 40 years of experience in the ceramic industry and more than 15 years in producing construction finishes, they offer high-quality products with innovative designs. Their intended clients include distributors and individuals looking to enhance their spaces with unique decorative elements. The company emphasizes customer service and provides assistance through their sales advisors.
-
Alicotrans
September 14, 2026
•
[ ransomware, transportation ]
Alicotrans was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Transportation. Country: Brazil. Website: www.alicotrans.com.
-
Atlas Ocean Voyages
September 14, 2026
•
[ ransomware, retail ]
Atlas Ocean Voyages was listed as a victim on the leak site of the Booba Project ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Hospitality. Country: United States of America. Website: www.atlasoceanvoyages.com. Travel Arrangements Stolen data: 37 GB.
-
Mestechkin Law Group P.C.
September 14, 2026
•
[ ransomware, finance, technology ]
Mestechkin Law Group P.C. was listed as a victim on the leak site of the Booba Project ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Professional Services. Country: United States of America. Website: www.lawmlg.com. Law Practice Stolen data: 37 GB.
-
Vitar Group
September 14, 2026
•
[ ransomware, manufacturing ]
Vitar Group was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Other. Country: Argentina. Website: www.vitargroup.com.
-
steelhausinc.com
September 14, 2026
steelhausinc.com was listed as a victim on the leak site of the chaos ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Manufacturing. Country: United States of America. Website: steelhausinc.com. Steelhaus boldly drives the market with innovative energy solutions; fusing practical, field proven experience, adaptable engineering, integrated manufacturing, and uncompromising safety with relentless delivery of unwavering customer service
-
glasfloss.com
September 14, 2026
glasfloss.com was listed as a victim on the leak site of the chaos ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Manufacturing. Country: United States of America. Website: glasfloss.com. DATA LEAK NOTICE: GLASFLOSS (glasfloss.com)
A comprehensive data breach has exposed 402 GB of confidential corporate, financial, and employee records from Glasfloss.
The compromised database contains internal documentation across multiple departments:
Accounting & Finance: Contracts, ESOP rec
-
Massey, Stotser & Nichols
September 14, 2026
•
[ ransomware, hack ]
Massey, Stotser & Nichols was listed as a victim on the leak site of the insomnia ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Professional Services. Country: United States of America. Website: www.msnattorneys.com. Massey, Stotser & Nichols is a Birmingham, AL law firm offering real estate, family law, and civil/corporate litigation. They serve Fortune 500, businesses, and individuals, delivering personalized solutions with big-firm capability.
-
Metropolitan Community Health Services
August 24, 2026
•
[ ransomware, healthcare, leak ]
Metropolitan Community Health Services was listed as a victim on the leak site of the insomnia ransomware group; the attack is estimated to have taken place on 2026-08-24. Sector: Healthcare. Country: United States of America. Website: www.agapechc.org. Agape Health Services, a CCBHC/FQHC run by Metropolitan Community Health Services, offers sliding-scale primary, preventive, dental, pharmacy, and behavioral health care, plus mobile, law-enforcement, training, and reentry services.
-
httoy.fi
September 9, 2026
•
[ ransomware, finance ]
httoy.fi was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-09-09. Country: Finland. Website: httoy.fi. Tilitoimisto HTT Oy Tilitoimisto HTT Oy on Raumassa toimiva kirjanpitj, joka tarjoaa taloushallin...
