-
swadeshicipl.com
September 12, 2026
•
[ ransomware, manufacturing ]
swadeshicipl.com was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-09-12. Sector: Manufacturing. Country: India. Website: swadeshicipl.com. Swadeshi Civil Infrastructure Private Limited (SCIPL) is an Indian private limited company incorporated on March 11, 200...
-
www.eac-airports.com
September 12, 2026
www.eac-airports.com was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-09-12. Sector: Transportation. Country: Kenya. Website: www.eac-airports.com. Egyptian Airports Company (EAC) is an Egyptian state-owned public company incorporated in 2001, operating as a subsidiar...
-
meridian16.hr
September 12, 2026
•
[ ransomware, technology, manufacturing ]
meridian16.hr was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-09-12. Sector: Professional Services. Country: Croatia. Website: meridian16.hr. Meridian 16 Business Park d.o.o. is a Croatian eco-industrial business zone developer and operator, established over the...
-
intherpro.com
September 12, 2026
•
[ ransomware, leak, manufacturing ]
intherpro.com was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-09-12. Sector: Professional Services. Website: intherpro.com. Intherpro LLC (International Thermal Insulation & Passive Fire Protection Company) is a UAE-based global leader in engin...
-
www.metalware.ca
September 12, 2026
•
[ ransomware, manufacturing ]
www.metalware.ca was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-09-12. Sector: Manufacturing. Country: Canada. Website: www.metalware.ca. Metalware Corporation Inc. is Canada's leading industrial shelving manufacturer, founded in 1954, headquartered in Montr...
-
pss.ht
September 12, 2026
•
[ ransomware, technology ]
pss.ht was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-09-12. Country: Haiti. Website: pss.ht. Professional Security Services S.A. (PSS) is a Haitian-owned private security services company established in 1995, head...
-
eracm.fr
September 12, 2026
•
[ ransomware, education ]
eracm.fr was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-09-12. Sector: Other. Country: France. Website: eracm.fr. ERACM (cole Rgionale d'Acteurs de Cannes et Marseille) is a French non-profit association and regional drama school ...
-
lasultanahotels.com
September 12, 2026
•
[ ransomware, retail ]
lasultanahotels.com was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-09-12. Sector: Hospitality. Country: Morocco. Website: lasultanahotels.com. La Sultana Hotel Group is a Moroccan luxury boutique hotel group created in the year 2000, targeting discerning traveler...
-
www.ibnsinatrust.com
September 12, 2026
•
[ ransomware, healthcare ]
www.ibnsinatrust.com was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-09-12. Sector: Healthcare. Country: United Arab Emirates. Website: www.ibnsinatrust.com. The Ibn Sina Trust is a pioneering Bangladeshi non-profit welfare trust and major healthcare provider founded on June 30...
-
capricornlogistics.com
September 12, 2026
•
[ ransomware, hack, manufacturing ]
capricornlogistics.com was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-09-12. Sector: Transportation. Country: South Africa. Website: capricornlogistics.com. Capricorn Logistics Pvt. Ltd. is an Indian comprehensive supply chain and logistics company founded in 2001 in Mumbai, M...
-
www.tender.mx
September 12, 2026
•
[ ransomware, retail, leak ]
www.tender.mx was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-09-12. Sector: Government & Defense. Country: Mexico. Website: www.tender.mx. Tender (Carnicera Tender) is a Mexican premium butcher shop chain (carnicera) founded under the original brand Vigar...
-
www.tiflispalace.ge
September 12, 2026
www.tiflispalace.ge was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-09-12. Sector: Hospitality. Country: Georgia. Website: www.tiflispalace.ge. Tiflis Palace is a luxurious boutique hotel located in the heart of Tbilisi, Georgia, in the legendary place of the city...
-
watchops.com
September 12, 2026
watchops.com was listed as a victim on the leak site of the unsafe ransomware group; the attack is estimated to have taken place on 2026-09-12. Sector: Technology. Country: United States of America. Website: watchops.com. Revenue: $1.3 million
-
Axdia International
September 12, 2026
•
[ ransomware, technology, manufacturing ]
Axdia International was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-09-12. Sector: Professional Services. Website: axdia.com. Axdia International Axdia International is a German electronics company that brings together a wide range of modern small electronics and electric mobility products. More
-
Nexbex Solutions Private Limited
September 11, 2026
Nexbex Solutions Private Limited was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-09-11. Country: India. Website: nexbex.in. Nexbex Solutions Private Limited is a technology consulting and software engineering firm incorporated in November 2023, headquartered in Malappuram, Kerala (India). Classified as an emerging private company, it operates with a paid-up capital of 10 million Indian rupees (10 Lakhs) and a compact team, generating estimated annual revenue of less than $1.2 million USD. Its core business focuses on computer programming, custom mobile application development (such as its corporate loyalty platforms Nexi Paints and Grace Petroleum), and digital solutions for retail automation, e-commerce, and smart lead management for growing small and medium-sized enterprises.
We have access to all their databases with their clients' sensitive data, which include names, emails, phone numbers, addresses, etc. 600 MB.
Domains: club7ms.com, rayssportsnetwork.com, hwzthat.com, etc.
Subdomains Type
staging, edmontoneagles, masc, psca, live, kkr, victoriapark, staging.victoriapark, spartans, blaze, ramblers, eagle
admin.bookings-staging, backend.academy, admin.spike.booking, etc.
We have the source code for all 200+ of their projects. 10 GB +. going up. [Size: 600.0 MB | Sector: Technology]
-
Strad Solutions
September 12, 2026
•
[ ransomware, technology, hack ]
Strad Solutions was listed as a victim on the leak site of the Vexy Ransomware ransomware group; the attack is estimated to have taken place on 2026-09-12. Sector: Technology. Country: United Kingdom of Great Britain and Northern Ireland. Website: stradsolutions.com. Strad Solutions provides cloud hosting, dedicated servers, managed IT, cybersecurity, and disaster recovery services for businesses worldwide.
-
INCOR Group
September 13, 2026
INCOR Group was listed as a victim on the leak site of the Doommageddon ransomware group; the attack is estimated to have taken place on 2026-09-13. Sector: Other. Country: India. Website: incor.in. Status: upcoming | Data size: | Files: 0 files | Deadline: 2026-09-20T00:00:00Z
-
Kimberly-Clark
September 13, 2026
•
[ ransomware, manufacturing ]
Kimberly-Clark was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-09-13. Sector: Manufacturing. Country: United States of America. Website: kimberly-clark.com. This is a final warning to reach out by 16 Sep 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 13 Sep 2026 | Warning: FINAL WARNING
-
i2i-systems
September 13, 2026
i2i-systems was listed as a victim on the leak site of the Barracuda ransomware group; the attack is estimated to have taken place on 2026-09-13. Sector: Technology. Country: Turkey. Website: i2i-systems.com. This is one of the most poorly secured companies we have ever encountered. Over the course of a week, we analyzed the infrastructure and moved freely across their network. The infrastructure lacked proper security configurations, and the IT department showed a complete disregard for the data. As a result of the attack, 693 gigabytes of data were exfiltrated.
We downloaded the complete source code for the following projects:
Caplan
DataGov-Dev-Docker
DDR
DDR-Veriskop
DFE-Dev
Kangal-Dev
SDD-DEV-DOCKER
SDD-MAIN
commonprojects.zip
Copycat.zip
CopycatLive.zip
datacat.war
datagov.war
Kangal-Dev.zip
Kangal-Master.zip
SDD-DEV-DOCKER@2.zip
smartdq.war
The volume of exfiltrated source code totaled 44 gigabytes. The data includes a full snapshot of the latest releases from the development repository. i2i-systems has a direct connection to the information security company Veriskop; therefore, this breach directly affects them as well. In addition, i2i-systems engaged in joint projects with partners such as Vodafone, Etiya, Bouygues, Freedom Mobile, and others; this is evidenced by the Linux servers located within the i2i-systems infrastructure:
1864654005 backup_Veriskop-SQA1.local_2026-08-31_203808.tar.gz
3292962897 copycat2019.i2isystems.local_critical_backup_2026-08-31_19-30-29.tar.gz
18422354 critical_backup_bouygues_fcbs_batch2.local_20260830_221815.tar.gz
2231188487 etiya-mobile-test-01.local_backup_20260831_213207.tar.gz
20546323810 freedom-mobile1-critical-vault.tar.gz
1050673952 freedom-mobile2-secrets-20260830-232814.tar.gz
721661 maya-redhat7-9_2026-08-30_233036.tar.gz
22966288270 ol8-10-innobi_full_backup_20260831_022640.tar.gz
529695763 veriskop-db-critical-backup-2026-08-31_234418.tar.gz
13012999372 veriskop-fiziksel-yedek-20260831023535.tar.gz
309528511 veriskop-oracle-critical-backup-2026-08-31_203340.tar.gz
633604141 veriskop-rhel-7.local_critical_backup.tar.gz
4878999722 Veriskoptest01.local_backup_20260831_213236.tar.gz
238487575 Veriskoptest02.local_critical_backup_20260831_213052.tar.gz
33936543608 veriskoptest03_critical_backup_2026-08-31.tar.gz
We have extracted absolutely all critical data from these infrastructure Linux systems and created a snapshot of the databases.
In addition, i2i-systems recently launched a joint project with Turk Telekomwe have downloaded the database containing all their customers.
The data will be published soon... | Severity: HIGH | Size: 643 GB | Status: selling | 300000$
-
Paid Victim FDC699DE3A112669
September 13, 2026
Paid Victim FDC699DE3A112669 was listed as a victim on the leak site of the AuditTeam ransomware group; the attack is estimated to have taken place on 2026-09-13. Country: Germany.
