-
On Demand Occupational Medicine
September 10, 2026
•
[ ransomware, healthcare ]
On Demand Occupational Medicine was listed as a victim on the leak site of the Wallstreet ransomware group; the attack is estimated to have taken place on 2026-09-10. Sector: Healthcare. Country: United States of America. On Demand Occupational Medicine provides occupational health, drug testing, workplace safety, and employee wellness services in Austintown, Ohio.
-
NcbChurch
September 10, 2026
•
[ ransomware ]
NcbChurch was listed as a victim on the leak site of the Wallstreet ransomware group; the attack is estimated to have taken place on 2026-09-10. Sector: Other. Country: United States of America. New Covenant Believers Church is a faith-based ministry focused on spiritual, emotional, and mental growth through Gods Word
-
artiflexmfg.com
September 10, 2026
•
[ ransomware, manufacturing ]
artiflexmfg.com was listed as a victim on the leak site of the chaos ransomware group; the attack is estimated to have taken place on 2026-09-10. Sector: Manufacturing. Country: United States of America. Website: artiflexmfg.com. ArtiFlex Manufacturing LLC operates as a specialized contract manufacturer focused on delivering precision sheet metal solutions to diverse industrial sectors. The company has built its operational foundation on deep expertise in manufacturing engineering, combining technical knowledge with practica
-
mankatoclinic.com
September 10, 2026
mankatoclinic.com was listed as a victim on the leak site of the chaos ransomware group; the attack is estimated to have taken place on 2026-09-10. Sector: Healthcare. Country: United States of America. Website: mankatoclinic.com. The Mankato Clinic was founded Mankato, Minnesota in 1916, by five area physicians who believed that a comprehensive, multi-specialty group practice offered the best means of providing quality health care to the residents of southern Minnesota. The mission of the Mankato Clinic is to improve the hea
-
California School Employees Association
August 21, 2026
•
[ ransomware, education ]
California School Employees Association was listed as a victim on the leak site of the ransomhouse ransomware group; the attack is estimated to have taken place on 2026-08-21. Sector: Education. Country: United States of America. Website: www.csea.com. The California School Employees Association (CSEA) is dedicated to supporting classified school employees and advocating for public education. They offer a range of member benefits including financial services, legal help, and educational resources. CSEA aims to protect the rights of its members while promoting quality education for students. Their intended clients include school employees, retirees, and individuals interested in joining their advocacy efforts.
-
Professional Retail Services
September 10, 2026
Professional Retail Services was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-09-10. Sector: Retail & E-Commerce. Professional Retail Services Owners documents: employee evaluations, salary rates, bonuses, job offers, family documentsCFOs documents: client credit reports, bankruptcy records, tax documents, fathers medical records (guardianship court case)Corporate financials: owners personal tax return, credit application, signed checks with MICR (BNB Bank)Corporate credit cards, drug testsMedical records, employee health insuranceAnd much more More
-
General Santos Doctors Hospital
September 10, 2026
•
[ ransomware, healthcare, finance ]
General Santos Doctors Hospital was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-09-10. Sector: Healthcare. Country: Philippines. General Santos Doctors Hospital 3.502.636 files, total volume ~2.44 TBPatient data (PHI) name-tagged scans across department shares (surgical pathology, hemodialysis charts, admission records), cancer-center dossiers with PhilHealth IDs, lab quotations incl. cancer-marker tests with birth dates, PhilHealth claims monitoring, neonatal (NICU) dataStaff and professionals accredited physicians register (cell numbers, PRC licenses, PhilHealth IDs), named payroll workbooks (incl. the affiliated diagnostic center), HR dossiers, staff passport scans, drug-test filesMoney, audit and governance audited financial statements personally signed by chairman/treasurer/CFO with BIR stamps, balance sheet, all bank accounts across six-plus banks, internal-audit memos on (cashier discrepancies and cash shortages), SEC stockholders' minutes, payroll bank-upload batches, related-party entities on the same sharesLeadership personal data personal cell numbers of the president, hospital administrator and board members More
-
alphaomega-eng.com
September 2, 2026
•
[ ransomware, technology ]
alphaomega-eng.com was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-09-02. Sector: Professional Services. Country: Germany. Website: alphaomega-eng.com. In 1993, Alpha Omega was established as a small engineering firm in Nazareth, Israel, by Imad Younis...
-
Grunthal Welding & Supplies
September 10, 2026
•
[ ransomware, manufacturing ]
Grunthal Welding & Supplies was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-09-10. Sector: Manufacturing. Country: Canada. Website: www.grunthalwelding.com. Canada
-
Sys-kool
September 10, 2026
•
[ ransomware, technology ]
Sys-kool was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-09-10. Sector: Technology. Website: www.sys-kool.com. United States
-
M800 and CINNOX
August 30, 2026
M800 and CINNOX was listed as a victim on the leak site of the beast ransomware group; the attack is estimated to have taken place on 2026-08-30. Sector: Technology. Country: Hong Kong. Website: www.m800.com. M800 helps businesses connect globally with virtual numbers, SMS, voice calls, CINNOX, and AI-powered call solutions. Reach and engage customers worldwide.
-
i2k2 Networks
September 10, 2026
•
[ ransomware, technology ]
i2k2 Networks was listed as a victim on the leak site of the Vexy Ransomware ransomware group; the attack is estimated to have taken place on 2026-09-10. Sector: Technology. Country: India. Website: i2k2.com. i2k2 Networks Pvt. Ltd., established in 1999, is a leading Indian provider of cloud computing, web hosting, managed IT, data center, backup, disaster recovery, and DevOps solutions. With 25+ years of experience, 4,000+ customers, Tier III-compliant data centers, and 24/7 support, i2k2 delivers secure, scalable, and reliable IT solutions worldwide.
-
CO-OP URBAN BANK LTD
September 10, 2026
•
[ ransomware, finance, leak ]
CO-OP URBAN BANK LTD was listed as a victim on the leak site of the Global Secret Group ransomware group; the attack is estimated to have taken place on 2026-09-10. Sector: Financial Services. Country: India. Website: indialei.in/detailed-information/353561/335800GR1DJMM8YD7J14/the-gudivada-co-op-urban-bank-limited. Country: India |
Website: https://indialei.in/detailed-information/353561/335800GR1DJMM8YD7J14/the-gudivada-co-op-urban-bank-limited/ |
Revenue: $50 Million |
Industry: Bank, Finance |
Employees: 25-50 |
Properties: 41.3 GB (125,988 Files, 14,641 Folders)
-
Agencia Estatal de Meteorología
September 11, 2026
•
[ ransomware, government ]
Agencia Estatal de Meteorologa was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-09-11. Sector: Government & Defense. Country: Spain. Agencia Estatal de Meteorologa - AEMET is a governmental agency of Spain that provides comprehensive meteorological services, including weather observation, predictions, and climate analytics. It serves various sectors such as agriculture, aviation, maritime activities, and emergency services. AEMET aims to support public safety and management through accurate weather forecasts, climate data, and educational resources. The agency also engages in research and international collaboration to enhance meteorological science and technology.
-
Medical Department Store
September 10, 2026
•
[ ransomware, retail, healthcare ]
Medical Department Store was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-09-10. Sector: Retail & E-Commerce. Country: United States of America. Website: medicaldepartmentstore.com. Medical Department Store in united state
-
Konica Minolta Bulgaria
September 11, 2026
•
[ ransomware, manufacturing, technology ]
Konica Minolta Bulgaria was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-09-11. Sector: Manufacturing. Country: Bulgaria. Konica Minolta Bulgaria is a company with its own sales, marketing, and technical structure, and is part of the global brand specializing in innovative business and IT solutions. The company established its presence in Bulgaria in 2005 and has experienced continuous growth ever since.
-
Dustin Group
September 11, 2026
•
[ ransomware, technology ]
Dustin Group was listed as a victim on the leak site of the fulcrumsec ransomware group; the attack is estimated to have taken place on 2026-09-11. Sector: Technology. Country: Sweden. [AI generated] Dustin Group is a Swedish technology reseller and IT solutions provider headquartered in Stockholm, Sweden. The company operates primarily in the Nordic and Benelux regions, offering hardware, software, and IT services to businesses and public sector organizations. Its product portfolio includes computers, networking equipment, and cloud solutions. Dustin serves both SMBs and large enterprises, positioning itself as a one-stop shop for IT procurement and digital transformation support.
-
Foss Inc.
September 9, 2026
Foss Inc. was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-09-09. Country: United States of America. Website: fossinc.com. Leading provider of installation, maintenance services to the energy industry
-
Port of Tanjung Pelepas
September 11, 2026
Port of Tanjung Pelepas was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2026-09-11. Sector: Transportation. Country: Malaysia. Website: ptp.com.my. Marine Shipping & Transportation
-
Tuboaços da Amazônia Ltda.
August 11, 2026
•
[ ransomware, manufacturing ]
Tuboaos da Amaznia Ltda. was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-08-11. Sector: Manufacturing. Country: Brazil. Website: tuboacos.com.br. - Drawings- Clients' Customized Projects
