Full List

Search

Recent Breaches

• Zdrowit September 4, 2026 Zdrowit was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-04. Sector: Healthcare. Country: Poland. Website: karierazdrowit.pl. karierazdrowit.pl zoominfo.com/c/zdrowit/535531700 Zdrowit S.A. is a family-owned Polish pharmacy chain with 100% Polish capital, operating since 2004 and headquartered in Bytom, Silesia, with over 1,000 employees across 40+ cities in southern and central Poland, aiming to become the largest pharmacy network in the region. The business is growing extremely fast, with 2024 net sales revenue up +83.5%, though its net profit margin fell 10.3% due to the costs of rapid expansion. The company is structured as a holding: individual pharmacies operate as separate Sp. z o.o. entities under Zdrowit S.A., which is registered under KRS 0000704305 with a share capital of 1,197,432.00 PLN. Its core workforce consists of pharmacists and pharmacy technicians hired across dozens of locations, supported by a small modern HQ team in Bytom covering data, IT, controlling and marketing. A key strength is its internship pipeline, offering a 2-year program for technicians and a 6-month program for pharmacis
• Leo Schachter Diamonds September 2, 2026 • [ ransomware, retail, manufacturing ] Leo Schachter Diamonds was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-02. Sector: Retail & E-Commerce. Country: United States of America. Website: leoschachter.com. leoschachter.com Leo Schachter Diamonds (USA/Global) Family diamond house since 1952, four generations; De Beers sightholder for 60+ years. Invented the branded diamond (THE LEO at Kay/Jared, ~2,000 stores) a diamond sold like a Nike sneaker. Owns one of Botswana's largest cutting factories: 90% women, trained from scratch, plus its own doctor when 60% of staff were HIV-positive. Crisis context: lab-grown diamonds are squeezing the whole natural industry the moat is now brand + story, not just stones.
• Spirit Cultural Exchange - US September 5, 2026 • [ ransomware, education ] Spirit Cultural Exchange - US was listed as a victim on the leak site of the kazu ransomware group; the attack is estimated to have taken place on 2026-09-05. Sector: Education. Country: United States of America. Website: www.spiritexchange.com. Spirit Cultural Exchange is a U.S.-based organization that provides international cultural exchange and J-1 visa programs for students, young professionals, teachers, and international participants. Its programs include Summer Work and Travel, internships, professional training, and teaching opportunities in the United States
• Mission Pet Health September 5, 2026 • [ ransomware, healthcare ] Mission Pet Health was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2026-09-05. Sector: Healthcare. Country: United States of America. Website: missionpethealth.com. Healthcare Services
• Edacentrum September 6, 2026 • [ ransomware, technology, manufacturing ] Edacentrum was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-09-06. Country: Germany. Website: edacentrum.de. The edacentrum is the network for electronics, design and applications in business and science. As an independent authority, the edacentrum designs research & development for a consistent design methodology along the entire value chain. In this role, the edacentrum is a recognized innovation accelerator for the microelectronics industry and its user industries
• myLaurel September 6, 2026 • [ ransomware, healthcare ] myLaurel was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2026-09-06. Sector: Healthcare. Country: United States of America. Website: mylaurelhealth.com. Elderly Care Services
• KHALED ALFAGIH ENGINEERING CONSULTANCY September 6, 2026 KHALED ALFAGIH ENGINEERING CONSULTANCY was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-09-06. Sector: Professional Services. Country: Saudi Arabia. Website: kfoco.com. Khaled Alfagih Engineering Consultancy Company is one of the most specialized engineering consultancy firms in healthcare design and planning in KSA with more than 25 years of experience. KFO providing the quality in the field of architecture and engineering design, execution supervision and projects management. KFO focused on teamwork, client relationship and knowledge transfer.
• evergenbio.com September 6, 2026 • [ ransomware, healthcare, manufacturing ] evergenbio.com was listed as a victim on the leak site of the chaos ransomware group; the attack is estimated to have taken place on 2026-09-06. Sector: Healthcare. Country: United States of America. Website: evergenbio.com. Evergen is a leading Contract Development and Manufacturing Organization (CDMO) specializing in biomaterial solutions for regenerative medicine. We work closely with OEM partners to deliver customized biomaterial solutions that meet specific clinical needs
• Sancity September 6, 2026 • [ ransomware, retail ] Sancity was listed as a victim on the leak site of the Vexy Ransomware ransomware group; the attack is estimated to have taken place on 2026-09-06. Sector: Other. Country: India. Website: sancity.in. An active, unlisted public company incorporated in 2012, operating in real estate/construction and real-estate marketing & sales
• eAssist Dental Solutions September 6, 2026 • [ ransomware, healthcare, technology ] eAssist Dental Solutions was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2026-09-06. Sector: Healthcare. Country: United States of America. Website: dentalbilling.com. Healthcare
• RTAD GOV MM September 6, 2026 • [ ransomware, government ] RTAD GOV MM was listed as a victim on the leak site of the DYSPHOR1A ransomware group; the attack is estimated to have taken place on 2026-09-06. Sector: Government & Defense. Country: Myanmar. Website: rtad.gov.mm. Road Transport Administration Department (RTAD) official government portal providing public transport services, driving license issuance, vehicle registration, and safety regulations. Full databases dump total 1.08 GB. Victim domain https://rtad.gov.mm.
• Norwood Law Firm September 4, 2026 • [ ransomware, hack, leak ] Norwood Law Firm was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-09-04. Sector: Professional Services. Country: United States of America. Website: norwoodlegal.com. Norwood Law is a Tulsa-based legal firm that specializes in personal injury law, criminal defense, business law, and family law. Founded by attorney Joe Norwood in 2004, the firm is known for its success in high-profile cases and achieving significant legal victories for its clients. The team also includes Todd Maxwell, who specializes in contracts, construction law, and dispute mediation. Norwood Law serves clients in Oklahoma seeking expert legal representation in complex legal matters.
• Homewood Sales September 4, 2026 • [ ransomware, retail, manufacturing ] Homewood Sales was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-09-04. Sector: Retail & E-Commerce. Country: United States of America. Website: homewoodsales.com. Homewood Sales Corporation specializes in equipment life extension solutions, offering a wide range of products including automatic voltage regulators, control panels, and motors, all built to Westinghouse specifications. With over a century of expertise, they provide exceptional quality in industrial and power distribution units and components. Their services include global sourcing, factory revitalization, and technical support, ensuring precise and expert assistance for their clients. Homewood primarily serves industries requiring reliable power distribution and equipment maintenance solutions.
• rubbermill.com August 15, 2026 • [ ransomware, manufacturing, financial ] rubbermill.com was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-08-15. Sector: Manufacturing. Country: United States of America. Website: rubbermill.com. RUBBERMILL, INC. DUMP: BREAKDOWN OF AN OEM MANUFACTURER LEAK Target: RubberMill, Inc. (North Carolina, USA) contract manufacturer of non-metallic components for appliance, HVAC, automotive, and heavy equipment. Certifications: ISO 9001:2015, WOSB, WBENC. Probable defense contracts (Mil-Spec). DUMP SIZE: ~296K files / 276K data objects / 340+ GB 146 GB disk image (.mrimg) full copy of the system AES PASSWORDS.xlsx file + APWDxx libraries credentials outlook.pst (487 MB) corporate email archive creditcard.xls payment data EMPLOYEE CALL LIST + Employee Information Record Form PII Insurance data Tax forms containing SSNs ENGINEERING DATA: 3,000+ CAD files (.dxf, .stp, .dwg) with client part numbers: 7J314, K2A31, K7K11, V1324, etc. Complete set of 3D models Client drawings FINANCIAL DATA: Sales analysis.mdb (38 MB) complete sales database commercial terms customer segmentation REGULATORY RISKS: C-TPAT / NAFTA / Certificate of Origin Conflict Minerals Reporting Template Supplier Quality Assurance Manual Probable Mil-Spec specifications The dump contains a full cross-section of the business: from passwords and SSNs to automotive OEM drawings and military specifications.
• Medela.com September 7, 2026 • [ ransomware, healthcare ] Medela.com was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Healthcare. Country: Switzerland. Website: Medela.com. This is a final warning to reach out by 08 Sep 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 07 Sep 2026 | Warning: FINAL WARNING
• Ben Leeds Properties September 7, 2026 Ben Leeds Properties was listed as a victim on the leak site of the ShadowByt3$ ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Other. Country: United Kingdom of Great Britain and Northern Ireland. Website: benleedsproperties.com. We have emailed the following la@benleedsproperties.com nikki@benleedsproperties.com 21736Roscoe@benleedsproperties.com 3327livonia@benleedsproperties.com Accounting@BenLeedsProperties.com Support@BenLeedsProperties.com Management@BenLeedsProperties.com Reply back and negotiate or all data that we said was stolen gets published. If you comply and negotiate then we won't leak the data that we say we have and could tear down your reputation like dominos. Were not bluffing and this is not a drill we have what we say we have and we are willing to publish it and let everyone accross La and Hollywood know since it affects some people there. You have till wednesday September 9th 2026 due to labor day for USA Companies.
• MSM Unify: Global Education Platform - CA September 7, 2026 • [ ransomware, education, technology ] MSM Unify: Global Education Platform - CA was listed as a victim on the leak site of the kazu ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Education. Country: Canada. Website: www.msmunify.com. MSM Unify is a global education technology platform that helps students find and apply to international universities and programs. It connects students with 1,500+ campuses and more than 50,000 programs across destinations such as Canada, the USA, the UK, Australia, and Germany. The platform provides support with course selection, university applications, scholarships, visa assistance, education loans, accommodation, and test preparation
• LIBRERIA SANTA FE A P S SRL September 7, 2026 • [ ransomware, retail ] LIBRERIA SANTA FE A P S SRL was listed as a victim on the leak site of the Vexy Ransomware ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Retail & E-Commerce. Country: Argentina. Website: lsf.com.ar. LSF (Librera Santa Fe) is a bookstore based in Buenos Aires, Argentina, with multiple branches across the city (CABA). It offers a wide selection of both national and imported books across various genres and authors. The store provides an easy online shopping experience where customers can browse and purchase titles with just a few clicks. It also maintains an active social media presence on Instagram (@libreriasantafe) to share news, promotions, and updates. Visitors are welcome to visit their physical locations in person.
• Hologic, Inc. September 7, 2026 • [ ransomware, healthcare, technology ] Hologic, Inc. was listed as a victim on the leak site of the metaencryptor ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Healthcare. Country: United States of America. Website: www.hologic.com. Hologic, Inc. is a U.S.-based medical technology company specializing in womens health. It develops and manufactures diagnostic, imaging, and surgical products, with a strong focus on breast health, gynecology, diagnostics, and osteoporosis assessment.
• ST Engineering September 7, 2026 ST Engineering was listed as a victim on the leak site of the metaencryptor ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Government & Defense. Country: Singapore. Website: stenng.com. Singapore Technologies Engineering or ST Engineering (ST Engg.) is a Singapore-based multinational technology, defence and engineering group with a diverse portfolio of businesses across the aerospace, smart city, defence and public security segments.