Full List

Search

Recent Breaches

• SIFCO Industries INC. September 7, 2026 • [ ransomware, manufacturing, energy ] SIFCO Industries INC. was listed as a victim on the leak site of the metaencryptor ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Manufacturing. Country: United States of America. Website: sifco.com. SIFCO Industries is a world-wide provider of highly engineered forged components to the Aerospace, Energy and Defense markets. We supply flight-critical forged components and machined assemblies to all of the leading aircraft and engine manufacturers in the world. These components can be found on virtually all of the commercial and military fixed-wing aircraft as well as helicopters and business jets. Our products are also supplied to the leading steam and gas turbine manufacturers and oil producers serving the energy sector.
• Jbc September 7, 2026 • [ ransomware, manufacturing, technology ] Jbc was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-07. Country: Spain. Website: www.jbctools.com.
• EllisDon Corporation September 7, 2026 • [ ransomware, leak, manufacturing ] EllisDon Corporation was listed as a victim on the leak site of the metaencryptor ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Professional Services. Country: Canada. Website: www.ellisdon.com. EllisDon Corporation is a leading Canadian construction and infrastructure services company. Founded in 1951, the company provides construction management, engineering, project development, and facilities management services across a wide range of sectors, including healthcare, transportation, commercial, industrial, government, and defense infrastructure. EllisDon operates across Canada and internationally.
• Semper Laser September 7, 2026 • [ ransomware, manufacturing ] Semper Laser was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Manufacturing. Country: Sweden. Website: semperlaser.com. Spa and Salon Management Florida
• Benshaw, Inc. August 27, 2026 • [ ransomware, manufacturing, financial ] Benshaw, Inc. was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-08-27. Sector: Manufacturing. Country: United States of America. Website: Benshaw, Inc.. [manufacturer, research] Benshaw, Inc. (Pittsburgh) and affiliated UTG entities (Unico, Benshaw Canada, AuCom, Excel, Noble Victoria). ~100+ corporate Visa/PCard records with full PAN + SSN + DOB + home address 637 former employees with full SSN/DOB/address on one spreadsheet 88 active employee folders plus multi-year Canada payroll Global bank account numbers (PNC, BMO, BNZ, St George, Commerzbank, JPM London, BBVA, GNB) ACH NACHA files with vendor routing/account numbers UEdit source with hardcoded XOR key 4148865678 and date-based CalcBackDoor() Oil & gas customer job packs (Chevron, Petrobras, EOG, Santos AU, KOC)
• Jinny Beauty Supply September 7, 2026 • [ ransomware, retail, technology ] Jinny Beauty Supply was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Retail & E-Commerce. Country: United States of America. Website: Jinny Beauty Supply. [distributors] Jinny Beauty Supply is one of the largest Korean-American wholesale beauty distributors in the US, operating 9 distribution centers from Doraville, Georgia to Commerce, California. They serve 7,400+ beauty supply stores and 2,800+ international distributors. The exposed material includes: A complete password vault export 50+ plaintext credentials for PayPal, Braintree, Amazon Seller Central, eBay, Acumatica ERP (production), 12 state tax portals, FedEx, UPS, ShipStation, Microsoft 365, Google Analytics, and internal email. VMware hypervisor root credentials vCenter and ESXi root passwords giving complete control over the entire virtual infrastructure. 911 scanned credit card authorization forms full card numbers, CVV, expiry dates, and cardholder signatures for beauty supply store customers across 26 US states. Complete employee compensation database ~260 employees with Korean and English names, departments, salaries, bonuses, and 1099 contractor data spanning 20152018. A 340 MB Shopify database backup full customer table (names, emails, phones, addresses), product catalog, pricing, and warehouse assignments. Active Directory domain enumeration all 239+ user accounts including 17 admin accounts, the complete server topology across 7 geographic sites (50+ servers), and DPAPI-encrypted RDP passwords. Employee tax documents W-4 forms (SSN), I-9 forms (SSN + DOB + citizenship), direct deposit forms (bank account and routing numbers). 3.6 GB of SQL Server database backups e-commerce customer/order/product data spanning November 2019 to March 2020.
• Lightcast September 7, 2026 • [ ransomware, technology ] Lightcast was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Professional Services. Country: United States of America. Website: lightcast.io. Human Resources Software
• GENESILICO September 7, 2026 • [ ransomware, technology ] GENESILICO was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Technology. Country: Italy. [AI generated] GeneSilico is a Polish bioinformatics company based in Warsaw, operating within the life sciences and computational biology sector. It specializes in RNA and protein structure prediction, molecular modeling, and bioinformatics software development. The company provides research services and tools to academic and pharmaceutical clients, supporting drug discovery and genomic research. It is affiliated with the Institute of Biochemistry and Biophysics of the Polish Academy of Sciences.
• KÖRBER September 7, 2026 • [ ransomware, manufacturing, technology ] KRBER was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Manufacturing. Country: Germany. [AI generated] Krber is a German technology conglomerate headquartered in Hamburg, Germany. The company operates across multiple industries including supply chain automation, pharma, tissue, tobacco, and digital solutions. Krber develops and delivers software, machinery, and integrated systems to help businesses optimize their operations. With a global presence spanning numerous countries, it serves clients in logistics, healthcare, and manufacturing sectors worldwide.
• GGS September 7, 2026 GGS was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-09-07.
• NFM Lending September 7, 2026 NFM Lending was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Financial Services. Country: United States of America. Website: https:nfmlending.com. NFM Lending is a national mortgage lender with over 1,000 employees that originated approximately $7.15 billion in mortgages in the past 12 months. The data breach exposed over 2.5 TB of sensitive personal customer information (names, Social Security numbers, bank accounts, credit information, loan terms, addresses, phone numbers, email addresses, borrower and loan identifiers, loan pricing, and itemized loan expense reports), as well as proprietary pricing/profit formulas, in violation of federal GLBA/FCRA, state privacy laws, and the CFPB's data breach reporting rules. You also have access to data from the Encompass database, which contains information on more than 1 million clients, as well as internal databases, an extensive database of tax forms, and employees' personal information.
• TrainMe September 7, 2026 • [ ransomware, education ] TrainMe was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Education. Country: Colombia. Website: trainme.co. Corporate Wellness Services
• Rug & Home September 7, 2026 • [ ransomware, retail, financial ] Rug & Home was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Retail & E-Commerce. Country: United States of America. Rug & Home Rug & Home is a leading destination in the USA for rugs, furniture, and home decor, offering a vast selection of unique designs and top brands.Database of 50,193 customersfull names, home addresses, email addresses, phone numbers, purchase amounts (CSV)~10,800 scanssigned delivery notes with customer addresses/phone numbersPlaintext passwords for ~60 B2B supplier portalsW-2, 1099, W-9 tax forms with employees' and contractors' SSNsPayroll database for all employees (Sage EMPLOYEE/ESWAGE)Company bank details (First Citizens Bank deposits) and employee accounts (direct deposit)HR: background checks, terminations, workplace injuries, 401(k)And much more More
• Precision Vehicle Logistics September 7, 2026 Precision Vehicle Logistics was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Transportation. Country: United States of America. Website: precisionvehiclelogistics.com. Freight & Logistics Services
• Alurwalls September 7, 2026 Alurwalls was listed as a victim on the leak site of the Dark Project ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Manufacturing. Country: Brazil. Website: www.alurwalls.com. About Alurwalls ALUR specializes in innovative glass wall systems, offering both single glazed and double glazed options. Their products are designed to create modern and functional workplace environments. ALUR's solutions are aimed at businesses looking to enhance their office spaces with stylish and efficient modular dividing walls. The company is recognized for its award-winning designs that contribute to the future of workplace architecture. Alurwalls was attacked, resulting in the theft of approximately 17 GB of confidential data. The stolen information includes banking and other financial documents, client building plans, and other personal data belonging to the company and its partners. Currently, more than 16,000 files are no longer protected by Alurwalls.
• Master Manufacturing Co., Inc. September 7, 2026 • [ ransomware, manufacturing, leak ] Master Manufacturing Co., Inc. was listed as a victim on the leak site of the Dark Project ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Manufacturing. Country: United States of America. Website: www.mastermfg.com. About Master Manufacturing Master Manufacturing Co., Inc. specializes in custom metal stamping and production services, leveraging over 200 years of combined design and engineering expertise. Founded in 1970 and located in southern Indiana, the company offers a range of services including laser cutting, wire bending, and heat treatment, all while maintaining a commitment to high-quality standards certified by IATF 16949. Their intended clients span various industries such as appliance, HVAC, lighting, automotive, and RV, with a focus on delivering innovative and efficient solutions. Master Manufacturing prides itself on quick turnaround times and the ability to meet specific customer needs through early design involvement and advanced manufacturing techniques. Master Manufacturing Co specializing in custom metal stamping and production services has fallen victim to a significant cyberattack. Hackers reportedly exfiltrated 36 gigabytes of sensitive data from the companys servers. The stolen information includes SQL databases containing personal data, as well as technical plans and schematics for custom metal parts. The breach raises serious concerns regarding intellectual property theft and potential privacy violations for employees and clients.
• United Group September 7, 2026 • [ ransomware, manufacturing, retail ] United Group was listed as a victim on the leak site of the Vexy Ransomware ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Other. Country: India. Website: united-group.in. United Group is a diversified Indian business group delivering innovative products and services across multiple industries. Founded in 2003, the company began as a food and beverage consultancy and has since expanded into food ingredients, nutraceuticals, industrial machinery, infrastructure, fashion, digital branding, packaging, and automotive accessories. With a strong focus on quality, innovation, and customer satisfaction, United Group operates through a network of specialized businesses, serving clients across India and international markets. Backed by certified manufacturing facilities and experienced professionals, the group is committed to providing reliable, sustainable, and value-driven solutions that support business growth and long-term success.
• Wellness Partners network(combined revenue) September 7, 2026 • [ ransomware, healthcare ] Wellness Partners network(combined revenue) was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Healthcare. Country: United States of America. Headquartered in Clinton, New York Community Wellness Partners is a faith based non-profit organization that provides healthcare, housing and community services. They also have 24/7 skilled-nursing care to older adults who require residential medical care and support services.
• NorthShore Health Centers August 10, 2026 NorthShore Health Centers was listed as a victim on the leak site of the insomnia ransomware group; the attack is estimated to have taken place on 2026-08-10. Sector: Healthcare. Country: United States of America. Website: www.northshorehealth.org. NorthShore Health Centers offers comprehensive care in Indiana, including behavioral health, dental, pediatrics, and womens health. It runs multiple health centers and mobile units across Porter, Lake, La Porte, and Jasper counties.
• State of Florida DMV September 7, 2026 • [ ransomware, government ] State of Florida DMV was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Government & Defense. Country: United States of America. Contact us, you know how. or we will release the files. View download button below for proof (samples). Deadline : 9 11 2026 | Updated: 07 Sep 2026 | Warning: FINAL WARNING