-
Yapı Merkezi
September 7, 2026
•
[ ransomware, manufacturing, retail ]
Yap Merkezi was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Manufacturing. Country: Turkey. Website: ym.com.tr. ym.com.tr rocketreach.co/yapi-merkezi-profile_b5c7f2fff42e0db7 YM Group is a Turkish family-owned manufacturing and brand house founded in 1986 in Istanbul by Yksel Mehmet Yldrm, built on a flexible-packaging plant in orlu (Halal-certified, exporting to Europe/MENA). Its crown jewel: it owns and operates the legendary American trail-running brand Ultimate Direction (the 1935 inventor of the hydration pack) designing, manufacturing in Turkey and distributing it worldwide plus its own jewelry line Ela by YM and investment arm YM Capital. The group follows the classic ladder: manufacturing own brands capital, with Halal certification as a niche edge for Gulf/Asian markets. Small core team (~110), private, low-profile, no public financials. Bottom line: a quiet Turkish industrial family that turned commodity packaging profits into ownership of an iconic American outdoor brand.
-
S A Chile
September 7, 2026
•
[ ransomware, technology, energy ]
S A Chile was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Energy & Utilities. Country: Chile. Website: syachile.cl. syachile.cl zoominfo.com/c/sa-chile/372625700 S&A Chile is a Chilean mission-critical IT integrator founded in 1989 by Peruvian-Palestinian immigrant Edward Seleme Chvez from his home dining room today run by his daughters (2nd generation) after his death in 2024, HQ named after him in Providencia, Santiago. Its two moats: a 35+ year IBM Premier/Gold partnership (multiple IBM awards, incl. "Top Infrastructure Sales 2024") and its own Tier III datacenter 100% uptime for 5+ consecutive years, triple ISO-certified (9001/20000/27001), 2 MW power, running on certified renewable energy (Colbn, 2026). Core services: colocation/hosting, cybersecurity (Fortinet SOC), backup/DR, private cloud, plus a new AI vertical on IBM watsonx (2025). Anchor client: Correos de Chile (national postal service) has outsourced its infrastructure to S&A since 2002. Bottom line: a quiet 37-year-old family survivor of the Chilean IT market trusted infrastructure for the state, now pivoting to agentic AI.
-
Sharp Office
September 7, 2026
•
[ ransomware, technology ]
Sharp Office was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Professional Services. Country: Australia. Website: sharpoffice.com.au. sharpoffice.com.au zoominfo.com/c/sharp-office/1306869482 Sharp Office is one of Australia's longest-running B2B office suppliers heritage dating to 1935 (John Sharp Business Systems, Sydney), merged with Stafford Menser in 2011 into Sharp Office Systems Pty Ltd, HQ in Ingleburn NSW, serving clients Australia-wide. It's a one-stop B2B platform: 25,000+ stationery SKUs, office furniture, print & copy (HP, Canon, Ricoh, Kyocera), laptops/tech, plus Managed Print Services and managed IT "one bill, one delivery, one invoice" for businesses. Its moats: ISO 9001:2015 + EcoVadis certification, NSW government supplier status, credit accounts with 14-day terms and personal account managers. Not related to Japan's Sharp Corporation a fully independent Australian house. Bottom line: a 90-year-old quiet institutional survivor that evolved from typewriters to managed IT, winning government and club contracts through reliability rather than flash.
-
Chip7
September 7, 2026
Chip7 was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Technology. Country: Portugal. Website: chip7.pt. chip7.pt zoominfo.com/c/chip7/507351948 We have downloaded your company's data: Confidential personal data and customer information, Financial Documents and Accounting, Business correspondence and legal documents, your databases, e-mails, IT infrastructure information, Accesses and credentials, Technical documentation and other data about you company. Chip7 is Portugal's largest IT & gaming retail franchise network born in 1994 as a tiny Porto PC-assembler, crashed with its holding's 2010 bankruptcy, had its brand seized and sold by state bank CGD, then reborn as a franchise federation run by master franchisor Strongpage (just ~9 employees owning only the brand, website and buying power). Today: 90+ independent franchised stores covering all of Portugal, ~32M network billing (2023, +23%), 70,000+ products, 1,100+ brands online, ~$10.6M e-commerce sales.
-
Nile Projects Trading
September 7, 2026
•
[ ransomware, retail, automotive ]
Nile Projects Trading was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Other. Country: Egypt. Website: nileprojects.com. nileprojects.com zoominfo.com/c/nile-projects--trading-co/357370722 Nile Projects & Trading is a private Egyptian holding founded in 1972 by Ossama El-Naggar, HQ'd in Giza/Cairo with 3,000+ employees, 750,000+ customers and 6 offices across Egypt and Jordan. It's Egypt's exclusive Bridgestone importer (since 1990) running 50+ Fit & Fix service centers plus unique mobile tire vans and the country's luxury fashion franchise king: Burberry, Ferragamo, BOSS, Calvin Klein, Polo Ralph Lauren, Sandro, Maje (launched Jordan), Kenzo, plus Matalan for mass market and Amorino/Eichholtz/TIMEVALLE in F&B, furniture and watches. Over 50+ years it has introduced 80+ international brands to Egypt and the Middle East, pioneering retail after the 2004 import opening. Key strengths: fully self-financed (no external debt), its own ERP software, owns the malls it anchors (Katameya Downtown), and a 2bn+ EGP credit line recently winning Bridgestone's global Toolbox award 2025.
-
University of San Francisco
September 7, 2026
•
[ ransomware, education ]
University of San Francisco was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Education. Country: United States of America. Website: usfca.edu. usfca.edu zoominfo.com/c/university-of-san-francisco/346496443 is San Francisco's oldest university a private Jesuit institution founded in 1855, with ~10,200 students, a $428M endowment, and a 55-acre hilltop campus near Golden Gate Park (plus downtown, Pleasanton and Tokyo sites). A 13:1 student-faculty ratio and #1-ranked online professional studies graduate program anchor its academics; 34% first-gen, 55% students of color, 92% on financial aid mission-driven access defines it. Athletics: Division I Dons (WCC) with 3 national titles home of Bill Russell's legendary 195556 back-to-back NCAA basketball championships. New president Salvador Aceves (2025) the first Latino in the role and an R2 "high research activity" Carnegie classification. Tuition ~$62K with average grants of $38K+; alumni median salary $115K. Bottom line: a mission-driven urban Jesuit university blending social justice, elite basketball history and top professional programs "Change the World From Here.
-
Mutant
September 7, 2026
•
[ ransomware, technology, finance ]
Mutant was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Other. Country: Brazil. Website: mutant.com.br. mutant.com.br zoominfo.com/c/mutant/452328184 Mutant is one of Latin America's largest CX & AI companies, founded in 2016 as a spin-off from Genesys Brazil, HQ'd in So Paulo with 4,000+ employees across 14 countries. Backed by Permira, GIC and TCV, its holding "Clash" raised $75M from BlackRock in 2025 for M&A and AI. It runs 3.5 billion AI-driven interactions per year for 100+ enterprise clients including the world's largest corporate WhatsApp operation (Caixa) with clients like Ita, Vivo, Santander, Claro and iFood. Built through 8+ acquisitions (Interaxa, GRB, Intervalor...), it projects ~R$1B revenue in 2026 and pours R$100M+/year into its proprietary generative AI ecosystem (IAM/Xavier/PALI). Bottom line: the quiet AI-giant of Brazilian customer experience "Artificial Intelligence, Human Experiences" now repositioning as the enterprise AI-intelligence layer of LatAm.
-
Drogueria Saporiti Sacifia
September 7, 2026
•
[ ransomware, leak, healthcare ]
Drogueria Saporiti Sacifia was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Retail & E-Commerce. Country: Argentina. Website: drogueria-saporiti.com.ar. drogueria-saporiti.com.ar zoominfo.com/c/drogueria-saporiti-sacifia/462786110 100GB data stolen! Droguera Saporiti is a century-old Argentine pharmaceutical wholesaler and manufacturer, founded in 1901 in Buenos Aires, now run by the Otero Pose family with ~110 employees and 8,700 m of facilities. It's the silent "backbone" of Argentine pharmacies: 3,500+ products, 7,000+ pharmacy clients, wholesale distribution plus imports/exports of raw materials. Its flagship is the legendary Parafarm brand ("orange line" of galenic essentials vaseline, Pasta Lassar, Agua de Dalibour, hydrogen peroxide) sold nationwide since the 1960s, alongside Sweet Rose, Home Test, Wild Skin and Well Being. It survived a devastating fire in the 1990s and a rough 201415 ANMAT season (interjurisdictional trade ban + Parafarm lot withdrawal). Bottom line: a low-profile family institution with huge brand equity Argentina's reference house for pharmacy-grade essentials.
-
Hollard Insurance Group
September 7, 2026
•
[ ransomware, finance, leak ]
Hollard Insurance Group was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Financial Services. Country: South Africa. Website: hollard.co.za. hollard.co.za zoominfo.com/c/the-hollard-insurance-company-ltd/56019572 Hollard is South Africa's largest independent, privately-owned insurance group, founded in 1980 by the Enthoven family, HQ'd in Johannesburg, 4,000+ employees, 6M+ policyholders. Ownership: Enthoven family 57%, B-BBEE group Bushwillow 20%, Tokio Marine ~22.5% (2018, ~$327M); GCR AA(za). Operates in 18 countries on 4 continents via 100+ partnership ventures: Hollard Insure (corporate/broker), Hollard Life Solutions (mass market, prepaid "starter packs" sold like airtime), Hollard International (8 African countries + Philippines). Landmark deals: CommInsure Australia A$625M (2022 top-5 insurer there, 15-year exclusive bancassurance deal with Commonwealth Bank), and in 2025 Global Alliance Seguros (Mozambique) + Absa Life Botswana. Innovations: HUGinsure (world's first social-impact insurer), insurtech bets (Naked, dotsure).
-
MEI Architects
September 7, 2026
MEI Architects was listed as a victim on the leak site of the Dark Project ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Professional Services. Country: United States of America. Website: www.meiarchitects.com. About MEI Architects MEI Architects is a firm based in San Francisco that specializes in commercial, residential, and public architecture. They provide elegant and pragmatic solutions tailored for government, nonprofit, and private clients. Their portfolio includes notable projects such as the Portsmouth Square Improvement Project and the VA Palo Alto Polytrauma Aquatic Therapy Center. The firm is committed to community-minded design and successful partnerships. As a result of the attack, 340 GB of data (approximately 130,000 files) was stolen: including Social Security numbers, passports, green cards, invoices, HR documents, and a vast number of architectural drawingsincluding those from past and current projects, as well as those currently under construction.
-
SAD'S Interim
September 8, 2026
SAD'S Interim was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-09-08. Sector: Professional Services. Country: France. Website: sads-interim.eu. SAD'S Interim Since 2000, SAD'S INTERIM has established itself as a key player in the temporary employment sector.Bank statements (relevs) with SEPA credit transfersFactoring: invoice import batches, client receivables ledgers (encours) with EUR amounts and named clients, payment receipts (quittances)SQL backups of the BRANIPP ERP (the temp-workers payroll database)Payslips (bulletins de salaire) and payroll validation workbooksPermanent-staff employment contracts signed by the owners (Sadoun family)Temp-worker contracts, Pole Emploi attestationsPassports (EU and third-country nationals)CARTE BTP (construction-worker cards with photo and DOB)carte Vitale (health-insurance cards)RIB (bank account details)NIR (national insurance numbers)MDPH (disability recognition documents) More
-
Mefa Group www.mefagroup.com.tr / MEFA Endüstri www.mefaendustri.com / and (Efachem, Eco...
August 25, 2026
•
[ ransomware, manufacturing, automotive ]
Mefa Group www.mefagroup.com.tr / MEFA Endstri www.mefaendustri.com / and (Efachem, Eco... was listed as a victim on the leak site of the blacknevas ransomware group; the attack is estimated to have taken place on 2026-08-25. Sector: Manufacturing. Country: Turkey. Website: mefagroup.com.tr. https://send.exploit.in/#37608d72633301fc62801dfdf9111dbe!BsYvGiQz6WmjZo1VvPwTi8lU2K7prrPY2q6CdMORZn0List of files. For details and cooperation, write to Telegram https://t.me/BlackNevas or email happyCarter@mail.com.MEFA Group is a Turkish industrial group (headquartered in Ankara), founded in 2006. It operates in industrial manufacturing, plastics, rubber, processing, and logistics. The group has over 115,000 m of production space, over 2,000 employees, and several facilities in Turkey, Romania, and Poland. Its main areas of focus are the automotive industry, white goods, and related industries.MILKRUN Milkrun Lojistik, the group's logistics division. It provides integrated and smart logistics solutions for group companies and partners (focusing on efficiency, digitalization, and sustainability). It is not the Australian grocery delivery service of a similar name.Efachem, a division specializing in plastic and rubber compounds (compound solutions), develops customized formulas to meet customer needs, ensuring compatibility with production processes and consistent quality.Ecopolymer, a division specializing in raw materials processing and technology, utilizes cutting-edge recycling technologies, converting plastic waste into high-performance raw materials within the framework of a circular economy.All these companies operate as a single ecosystem: production (MEFA Endstri), raw materials/compounds (Efachem), processing (Ecopolymer), and logistics (Milkrun).
-
Alaska Electrical Apprenticeship
September 8, 2026
•
[ ransomware, education ]
Alaska Electrical Apprenticeship was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-08. Sector: Education. Country: United States of America. Website: www.alaskaelectricalapprenticeship.org.
-
TTG Asia Media
September 8, 2026
TTG Asia Media was listed as a victim on the leak site of the Eclipse ransomware group; the attack is estimated to have taken place on 2026-09-08. Sector: Hospitality. Country: Singapore. Website: ttgasia.com. TTG Asia is a leading travel trade business resource in the Asia-Pacific region, established in 1974. The company provides a comprehensive range of services and information related to travel, including hotels, transportation, airlines, and cruises. Its intended clients include travel professionals and businesses within the tourism industry looking for insights and resources to enhance their operations. TTG Asia also features news, trade calendars, and branded content to support the growth of the travel sector.
-
The Zhou Law Group
September 8, 2026
The Zhou Law Group was listed as a victim on the leak site of the Eclipse ransomware group; the attack is estimated to have taken place on 2026-09-08. Sector: Professional Services. Country: United States of America. Website: sanjoseattorneys.com. The Zhou Law Group is one of the largest family law firms in California, specializing in divorce and related family law issues such as child custody, spousal support, and property division. With a team of top-rated divorce lawyers and Certified Family Law Specialists, they provide effective legal solutions to clients, including tech company founders and high asset-holders. The firm operates in the Greater Bay Area and Greater Los Angeles, offering services in multiple languages, including English and Chinese. Their reputation for professionalism and client care has earned them stellar reviews and a strong presence in the family law industry.
-
CreateASoft
September 8, 2026
•
[ ransomware, technology, financial ]
CreateASoft was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-09-08. Sector: Technology. Inc. is a software company. The company provides dynamic process improvement solutions, predict
ive technology, and end-to-end support to a variety of process-based operations dedicated to im
proving operational efficiency and responsiveness.
We will upload corporate data soon. Employee and customer files, contacts and agreements, finan
cials, projects and so on.
-
Brentwood Country Club
September 8, 2026
Brentwood Country Club was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-09-08. Sector: Hospitality. Country: United States of America. Nestled in the heart of one of L.A.'s most desirable neighborhoods, cooled by the ocean breezes
just minutes away, Brentwood Country Club has been a warm, welcoming, "home away from home" fo
r members and their guests since 1948. At Brentwood, youll find an elegant, yet relaxed atmosph
ere, where friends and families gather to appreciate each others company and all the best that
life has to offer.
We will upload corporate data soon. Employee personal information (passport, DLs), contacts and
agreements, financials, clients data, projects and so on.
-
Brent Electric
September 8, 2026
Brent Electric was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-09-08. Sector: Energy & Utilities. Country: United Kingdom of Great Britain and Northern Ireland. Brent Electric Inc. has been serving the electrical industry since 1996, providing expert servi
ces for all electrical needs. The company specializes in generator sales and service, ensuring
reliable power solutions for its clients. Additionally, Brent Electric offers custom engraving
services, catering to a diverse range of customer requirements.
We will upload corporate data soon. Employee personal docs scans (DLs, passports), contacts and
agreements, financials, customer files, projects, NDAs and so on.
-
EMS1R
September 8, 2026
•
[ ransomware, healthcare, technology ]
EMS1R was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2026-09-08. Country: United States of America. Website: ems1r.com. Corporate Wellness Services
-
contreras.com.ar
September 8, 2026
•
[ ransomware, manufacturing, energy ]
contreras.com.ar was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-09-08. Country: Argentina. Website: contreras.com.ar. Founded in 1947 by the Contreras brothers, the company has continuously evolved and modernized, focu...
