-
Hollard Insurance Group
September 7, 2026
•
[ ransomware, finance, leak ]
Hollard Insurance Group was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Financial Services. Country: South Africa. Website: hollard.co.za. hollard.co.za zoominfo.com/c/the-hollard-insurance-company-ltd/56019572 Hollard is South Africa's largest independent, privately-owned insurance group, founded in 1980 by the Enthoven family, HQ'd in Johannesburg, 4,000+ employees, 6M+ policyholders. Ownership: Enthoven family 57%, B-BBEE group Bushwillow 20%, Tokio Marine ~22.5% (2018, ~$327M); GCR AA(za). Operates in 18 countries on 4 continents via 100+ partnership ventures: Hollard Insure (corporate/broker), Hollard Life Solutions (mass market, prepaid "starter packs" sold like airtime), Hollard International (8 African countries + Philippines). Landmark deals: CommInsure Australia A$625M (2022 top-5 insurer there, 15-year exclusive bancassurance deal with Commonwealth Bank), and in 2025 Global Alliance Seguros (Mozambique) + Absa Life Botswana. Innovations: HUGinsure (world's first social-impact insurer), insurtech bets (Naked, dotsure).
-
MEI Architects
September 7, 2026
MEI Architects was listed as a victim on the leak site of the Dark Project ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Professional Services. Country: United States of America. Website: www.meiarchitects.com. About MEI Architects MEI Architects is a firm based in San Francisco that specializes in commercial, residential, and public architecture. They provide elegant and pragmatic solutions tailored for government, nonprofit, and private clients. Their portfolio includes notable projects such as the Portsmouth Square Improvement Project and the VA Palo Alto Polytrauma Aquatic Therapy Center. The firm is committed to community-minded design and successful partnerships. As a result of the attack, 340 GB of data (approximately 130,000 files) was stolen: including Social Security numbers, passports, green cards, invoices, HR documents, and a vast number of architectural drawingsincluding those from past and current projects, as well as those currently under construction.
-
SAD'S Interim
September 8, 2026
SAD'S Interim was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-09-08. Sector: Professional Services. Country: France. Website: sads-interim.eu. SAD'S Interim Since 2000, SAD'S INTERIM has established itself as a key player in the temporary employment sector.Bank statements (relevs) with SEPA credit transfersFactoring: invoice import batches, client receivables ledgers (encours) with EUR amounts and named clients, payment receipts (quittances)SQL backups of the BRANIPP ERP (the temp-workers payroll database)Payslips (bulletins de salaire) and payroll validation workbooksPermanent-staff employment contracts signed by the owners (Sadoun family)Temp-worker contracts, Pole Emploi attestationsPassports (EU and third-country nationals)CARTE BTP (construction-worker cards with photo and DOB)carte Vitale (health-insurance cards)RIB (bank account details)NIR (national insurance numbers)MDPH (disability recognition documents) More
-
Mefa Group www.mefagroup.com.tr / MEFA Endüstri www.mefaendustri.com / and (Efachem, Eco...
August 25, 2026
•
[ ransomware, manufacturing, automotive ]
Mefa Group www.mefagroup.com.tr / MEFA Endstri www.mefaendustri.com / and (Efachem, Eco... was listed as a victim on the leak site of the blacknevas ransomware group; the attack is estimated to have taken place on 2026-08-25. Sector: Manufacturing. Country: Turkey. Website: mefagroup.com.tr. https://send.exploit.in/#37608d72633301fc62801dfdf9111dbe!BsYvGiQz6WmjZo1VvPwTi8lU2K7prrPY2q6CdMORZn0List of files. For details and cooperation, write to Telegram https://t.me/BlackNevas or email happyCarter@mail.com.MEFA Group is a Turkish industrial group (headquartered in Ankara), founded in 2006. It operates in industrial manufacturing, plastics, rubber, processing, and logistics. The group has over 115,000 m of production space, over 2,000 employees, and several facilities in Turkey, Romania, and Poland. Its main areas of focus are the automotive industry, white goods, and related industries.MILKRUN Milkrun Lojistik, the group's logistics division. It provides integrated and smart logistics solutions for group companies and partners (focusing on efficiency, digitalization, and sustainability). It is not the Australian grocery delivery service of a similar name.Efachem, a division specializing in plastic and rubber compounds (compound solutions), develops customized formulas to meet customer needs, ensuring compatibility with production processes and consistent quality.Ecopolymer, a division specializing in raw materials processing and technology, utilizes cutting-edge recycling technologies, converting plastic waste into high-performance raw materials within the framework of a circular economy.All these companies operate as a single ecosystem: production (MEFA Endstri), raw materials/compounds (Efachem), processing (Ecopolymer), and logistics (Milkrun).
-
Alaska Electrical Apprenticeship
September 8, 2026
•
[ ransomware, education ]
Alaska Electrical Apprenticeship was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-08. Sector: Education. Country: United States of America. Website: www.alaskaelectricalapprenticeship.org.
-
TTG Asia Media
September 8, 2026
TTG Asia Media was listed as a victim on the leak site of the Eclipse ransomware group; the attack is estimated to have taken place on 2026-09-08. Sector: Hospitality. Country: Singapore. Website: ttgasia.com. TTG Asia is a leading travel trade business resource in the Asia-Pacific region, established in 1974. The company provides a comprehensive range of services and information related to travel, including hotels, transportation, airlines, and cruises. Its intended clients include travel professionals and businesses within the tourism industry looking for insights and resources to enhance their operations. TTG Asia also features news, trade calendars, and branded content to support the growth of the travel sector.
-
The Zhou Law Group
September 8, 2026
The Zhou Law Group was listed as a victim on the leak site of the Eclipse ransomware group; the attack is estimated to have taken place on 2026-09-08. Sector: Professional Services. Country: United States of America. Website: sanjoseattorneys.com. The Zhou Law Group is one of the largest family law firms in California, specializing in divorce and related family law issues such as child custody, spousal support, and property division. With a team of top-rated divorce lawyers and Certified Family Law Specialists, they provide effective legal solutions to clients, including tech company founders and high asset-holders. The firm operates in the Greater Bay Area and Greater Los Angeles, offering services in multiple languages, including English and Chinese. Their reputation for professionalism and client care has earned them stellar reviews and a strong presence in the family law industry.
-
CreateASoft
September 8, 2026
•
[ ransomware, technology, financial ]
CreateASoft was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-09-08. Sector: Technology. Inc. is a software company. The company provides dynamic process improvement solutions, predict
ive technology, and end-to-end support to a variety of process-based operations dedicated to im
proving operational efficiency and responsiveness.
We will upload corporate data soon. Employee and customer files, contacts and agreements, finan
cials, projects and so on.
-
Brentwood Country Club
September 8, 2026
Brentwood Country Club was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-09-08. Sector: Hospitality. Country: United States of America. Nestled in the heart of one of L.A.'s most desirable neighborhoods, cooled by the ocean breezes
just minutes away, Brentwood Country Club has been a warm, welcoming, "home away from home" fo
r members and their guests since 1948. At Brentwood, youll find an elegant, yet relaxed atmosph
ere, where friends and families gather to appreciate each others company and all the best that
life has to offer.
We will upload corporate data soon. Employee personal information (passport, DLs), contacts and
agreements, financials, clients data, projects and so on.
-
Brent Electric
September 8, 2026
Brent Electric was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-09-08. Sector: Energy & Utilities. Country: United Kingdom of Great Britain and Northern Ireland. Brent Electric Inc. has been serving the electrical industry since 1996, providing expert servi
ces for all electrical needs. The company specializes in generator sales and service, ensuring
reliable power solutions for its clients. Additionally, Brent Electric offers custom engraving
services, catering to a diverse range of customer requirements.
We will upload corporate data soon. Employee personal docs scans (DLs, passports), contacts and
agreements, financials, customer files, projects, NDAs and so on.
-
EMS1R
September 8, 2026
•
[ ransomware, healthcare, technology ]
EMS1R was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2026-09-08. Country: United States of America. Website: ems1r.com. Corporate Wellness Services
-
contreras.com.ar
September 8, 2026
•
[ ransomware, manufacturing, energy ]
contreras.com.ar was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-09-08. Country: Argentina. Website: contreras.com.ar. Founded in 1947 by the Contreras brothers, the company has continuously evolved and modernized, focu...
-
fdcputman.nl
September 8, 2026
•
[ ransomware, finance ]
fdcputman.nl was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-09-08. Sector: Other. Country: Netherlands. Website: fdcputman.nl. FDC Putman is a financial specialist offering tailored advice on mortgages, insurance, and various f...
-
copeplastics.com
September 8, 2026
•
[ ransomware, manufacturing, hack ]
copeplastics.com was listed as a victim on the leak site of the chaos ransomware group; the attack is estimated to have taken place on 2026-09-08. Sector: Manufacturing. Country: United Kingdom of Great Britain and Northern Ireland. Website: copeplastics.com. Cope Plastics is a leading U.S. distributor and fabricator of performance plastics, serving industrial and commercial customers since 1946. From our headquarters in Alton, Illinois and through multiple branch locations, we support clients across countless sectorsheavy equipment, transportation, aero
-
Financière d'Uzès
September 8, 2026
•
[ ransomware, finance ]
Financire d'Uzs was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-09-08. Sector: Financial Services. Country: France. Website: finuzes.fr. Financire d'Uzs offers a range of financial services tailored for individuals, entrepreneurs, and professionals, focusing on wealth management, investment strategies, and fiscal optimization. Their services include asset management, financial analysis, and dedicated funds, catering to clients looking to enhance their income, organize their assets, and manage their taxes. With over 35 years of experience and a commitment to independence, they have supported 2000 families and manage 1.5 billion euros in assets. The company operates six offices across France, providing personalized service through a single point of contact.
-
Sales Boomerang
September 8, 2026
Sales Boomerang was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2026-09-08. Sector: Professional Services. Country: United States of America. Website: salesboomerang.com. Accounting/Finance Software, Analytics & Performance Software, Customer Relationship Management
-
mcnishsteel.com
September 8, 2026
•
[ ransomware, manufacturing ]
mcnishsteel.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-09-08. Sector: Manufacturing. Country: Canada. Website: mcnishsteel.com. The company is headquartered in Edmonton, Alberta, and was founded in 1978 by William and Wallace McNish. It has developed
-
recoverycafe.org
September 8, 2026
•
[ ransomware, healthcare ]
recoverycafe.org was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-09-08. Sector: Healthcare. Country: United States of America. Website: recoverycafe.org. The organization was founded in 2003 and opened its first physical caf in Seattle in 2004. Its approach is based
-
hbpro.pt
September 8, 2026
•
[ ransomware, technology ]
hbpro.pt was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-09-08. Sector: Professional Services. Country: Portugal. Website: hbpro.pt. Established in 1994, the company has more than three decades of experience providing technology products, infrastructure, consulting, maintenance, and technical
-
gsngestion.es
September 8, 2026
•
[ ransomware, technology ]
gsngestion.es was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-09-08. Sector: Professional Services. Country: Spain. Website: gsngestion.es. The company is based in Villaviciosa de Odn, Madrid, and operates through the GSN Gestin brand. Its website states that
