-
광명산업(주)
September 1, 2026
•
[ ransomware, manufacturing, automotive ]
() was listed as a victim on the leak site of the BlackLocks ransomware group; the attack is estimated to have taken place on 2026-09-01. Sector: Manufacturing. Country: South Korea. Website: kmin.co.kr. Kwangmyung Industry is a manufacturing company established in 1985 that produces automotive parts, including automotive seats, molds, and jigs.
Domestic operations consist of the headquarters, the Cheonan Central Research Institute, Asan, Gwangju, and Gyeongju factories, as well as the Export Division and Kwangmyung Engineering.
Overseas subsidiaries include facilities in Ramos, Mexico, and Alabama, USA.
-
Metrea LLC/Commuter Air Technology, Inc.
September 5, 2026
Metrea LLC/Commuter Air Technology, Inc. was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-09-05. Sector: Transportation. Country: United States of America. Website: Metrea LLC/Commuter Air Technology, Inc.. [defence] Metrea LLC (formerly Meta Special Aerospace, LLC) and its subsidiary Commuter Air Technology, Inc. (CAT) are US defense contractors providing Contractor Owned, Contractor Operated (COCO) ISR aircraft services to US Special Operations Command. They operate modified King Air 350 surveillance aircraft in Niger, East Africa, the Philippines, and other theaters.
339 MB of Harris PRC-117G military tactical radio firmware including compiled waveform binaries for SINCGARS, HAVEQUICK II, ROVER, and 10 other ITAR-controlled waveforms (USML Category XI).
Named deployment data for 14+ operators at Sable Spear sites in Niger and East Africa, with rotation schedules, SIPRNet access documentation, and divert airfield planning.
Complete SOCOM contract pricing portfolios labor rates, burn rates, TINA-certified cost data, and subcontractor pricing for SOCPAC C3PO, Sable Spear, and Sable Dagger programs.
232 employee personnel files including resumes, W-9 forms (SSN), SERE training certificates, security clearances, expense reports, and deployment records.
NSWDG (SEAL Team Six), MARSOC, and 75th Rangers training exercise documentation 37 separately funded SOCOM training deliveries under the Alpha 28 program.
-
The Big Table
September 5, 2026
The Big Table was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-05. Sector: Hospitality. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.bigtablegroup.com.
-
Colonial Hyundai
September 5, 2026
Colonial Hyundai was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-05. Sector: Retail & E-Commerce. Country: United States of America. Website: www.colonialhyundai.com.
-
Nolan Consulting Group
September 5, 2026
•
[ ransomware, technology ]
Nolan Consulting Group was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-05. Sector: Professional Services. Country: United States of America. Website: www.nolancg.com.
-
G&S Technologies
September 5, 2026
G&S Technologies was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-05. Sector: Technology. Country: United States of America. Website: www.gstechnologies.com.
-
Jouvet SAS
September 5, 2026
•
[ ransomware, manufacturing ]
Jouvet SAS was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-05. Sector: Manufacturing. Country: France. Website: www.jouvet-sas.fr.
-
Bauman Law Group
September 5, 2026
•
[ ransomware, leak ]
Bauman Law Group was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-05. Sector: Professional Services. Country: United States of America. Website: www.baumanlawgroup.com.
-
Philippine Ports Authority
September 5, 2026
•
[ ransomware, government ]
Philippine Ports Authority was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-05. Sector: Transportation. Country: Philippines. Website: www.ppa.com.ph.
-
CitizensPay
September 5, 2026
•
[ ransomware, finance, technology ]
CitizensPay was listed as a victim on the leak site of the DYSPHOR1A ransomware group; the attack is estimated to have taken place on 2026-09-05. Sector: Financial Services. Country: Myanmar. Website: ctzpay.com. Citizens Pay (also known as CTZPay) is a mobile digital wallet and payment platform in Myanmar powered by Myanmar Citizens Bank (MCB) and Capital Connect Limited. Compromised agent user information total data size 30 GB. Price range $7,000 to $25,000. Victim domain https://ctzpay.com.
-
Mega Velocity
September 5, 2026
•
[ ransomware, technology, leak ]
Mega Velocity was listed as a victim on the leak site of the Vexy Ransomware ransomware group; the attack is estimated to have taken place on 2026-09-05. Sector: Transportation. Country: Mexico. Website: megavelocity.net. New Delhibased private technology company incorporated in 2013. Its registered business classification is software publishing, consultancy and supply, including software development, maintenance and web-page design. Its network records also identify MEGA VELOCITY PVT LTD as an Internet/hosting network operator.
-
Lider Aviacao
September 5, 2026
Lider Aviacao was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-05. Sector: Transportation. Country: Brazil. Website: lideraviacao.com.br. lideraviacao.com.br zoominfo.com/c/lider-aviacao/372493800 Lder Aviao is Latin America's largest business aviation company, founded in 1958 in Belo Horizonte, Brazil, as an air taxi with a single Cessna 170. Today: ~R$1.2B revenue, 1,300+ staff, 50+ aircraft, 22 own bases; 42.5% owned by US Bristow Group, run by the founder's third generation (President: Junia Hermont). A one-stop shop: charters (first booking app in Brazil), the region's largest FBO network, aircraft sales (exclusive HondaJet dealer, 1,000+ sold), a top MRO (authorized for Bell, HondaJet, Gulfstream) and offshore helicopter ops for Petrobras since 1973 (1M+ flight hours). Key edge: safety the only Brazilian company with IS-BAO Stage 3, plus Argus Platinum and 5 Petrobras Peotram wins. First SAF flight in Brazilian business aviation (2024), now expanding into agribusiness and electric aviation. Bottom line: a 67-year-old family giant controlling South American business aviation end-to-end.
-
Veradigm
September 4, 2026
•
[ ransomware, healthcare, technology ]
Veradigm was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-04. Sector: Healthcare. Country: United States of America. Website: veradigm.com. veradigm.com zoominfo.com/c/veradigm-llc/471134180
3.5+ million personal patient records with PII full name, address, social security number, email, address, phone number,guarantors PII ,Score Veradigm Inc. is a publicly traded American healthcare technology and data analytics company (OTC: MDRX), the former Allscripts, founded in 1986 and renamed Veradigm in January 2023, headquartered in Chicago with about 2,3002,600 employees. Its core asset is one of the largest multi-EHR data networks in US healthcare over 450,000 connected providers and 200M+ patient records which it monetizes through three segments: Provider (EHR, practice management, revenue cycle: $473M in 2024), Payer (quality and risk adjustment analytics: $67.3M) and Life Sciences (real-world data and AI-driven evidence: $54M).
-
Zdrowit
September 4, 2026
Zdrowit was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-04. Sector: Healthcare. Country: Poland. Website: karierazdrowit.pl. karierazdrowit.pl zoominfo.com/c/zdrowit/535531700 Zdrowit S.A. is a family-owned Polish pharmacy chain with 100% Polish capital, operating since 2004 and headquartered in Bytom, Silesia, with over 1,000 employees across 40+ cities in southern and central Poland, aiming to become the largest pharmacy network in the region. The business is growing extremely fast, with 2024 net sales revenue up +83.5%, though its net profit margin fell 10.3% due to the costs of rapid expansion. The company is structured as a holding: individual pharmacies operate as separate Sp. z o.o. entities under Zdrowit S.A., which is registered under KRS 0000704305 with a share capital of 1,197,432.00 PLN. Its core workforce consists of pharmacists and pharmacy technicians hired across dozens of locations, supported by a small modern HQ team in Bytom covering data, IT, controlling and marketing. A key strength is its internship pipeline, offering a 2-year program for technicians and a 6-month program for pharmacis
-
Leo Schachter Diamonds
September 2, 2026
•
[ ransomware, retail, manufacturing ]
Leo Schachter Diamonds was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-02. Sector: Retail & E-Commerce. Country: United States of America. Website: leoschachter.com. leoschachter.com Leo Schachter Diamonds (USA/Global)
Family diamond house since 1952, four generations; De Beers sightholder for 60+ years.
Invented the branded diamond (THE LEO at Kay/Jared, ~2,000 stores) a diamond sold like a Nike sneaker.
Owns one of Botswana's largest cutting factories: 90% women, trained from scratch, plus its own doctor when 60% of staff were HIV-positive.
Crisis context: lab-grown diamonds are squeezing the whole natural industry the moat is now brand + story, not just stones.
-
Spirit Cultural Exchange - US
September 5, 2026
•
[ ransomware, education ]
Spirit Cultural Exchange - US was listed as a victim on the leak site of the kazu ransomware group; the attack is estimated to have taken place on 2026-09-05. Sector: Education. Country: United States of America. Website: www.spiritexchange.com. Spirit Cultural Exchange is a U.S.-based organization that provides international cultural exchange and J-1 visa programs for students, young professionals, teachers, and international participants. Its programs include Summer Work and Travel, internships, professional training, and teaching opportunities in the United States
-
Mission Pet Health
September 5, 2026
•
[ ransomware, healthcare ]
Mission Pet Health was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2026-09-05. Sector: Healthcare. Country: United States of America. Website: missionpethealth.com. Healthcare Services
-
Edacentrum
September 6, 2026
•
[ ransomware, technology, manufacturing ]
Edacentrum was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-09-06. Country: Germany. Website: edacentrum.de. The edacentrum is the network for electronics, design and applications in business and science. As an independent authority, the edacentrum designs research & development for a consistent design methodology along the entire value chain. In this role, the edacentrum is a recognized innovation accelerator for the microelectronics industry and its user industries
-
myLaurel
September 6, 2026
•
[ ransomware, healthcare ]
myLaurel was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2026-09-06. Sector: Healthcare. Country: United States of America. Website: mylaurelhealth.com. Elderly Care Services
-
KHALED ALFAGIH ENGINEERING CONSULTANCY
September 6, 2026
KHALED ALFAGIH ENGINEERING CONSULTANCY was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-09-06. Sector: Professional Services. Country: Saudi Arabia. Website: kfoco.com. Khaled Alfagih Engineering Consultancy Company is one of the most specialized engineering consultancy firms in healthcare design and planning in KSA with more than 25 years of experience. KFO providing the quality in the field of architecture and engineering design, execution supervision and projects management. KFO focused on teamwork, client relationship and knowledge transfer.