-
Atlas Stamping Manufacturing
October 26, 2026
Atlas Stamping Manufacturing was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Manufacturing. Country: United States of America. Website: atlasstamping.com. atlasstamping.com Atlas Stamping Manufacturing Corp. is a US metal stamping company founded in 1971 in Richardson, Texas, producing precision stamped parts for automotive, aerospace, electronics, medical and industrial customers. With around 50 to 200 employees and estimated revenue of 5 to 20 million dollars, it operates a full-service plant offering progressive and transfer die stamping, deep draw, forming, welding and assembly. Its own tool and die shop designs and maintains all stamping dies in-house, giving full control over quality and lead times. Press capabilities range from 30 to 400 tons handling materials from thin foil to quarter-inch thick steel, aluminum and specialty alloys. The company has served the Dallas-Fort Worth industrial market for 54 years with ISO 9001 quality systems and PPAP compliance for OEM clients.
-
Farmacias 911
October 26, 2026
•
[ ransomware, healthcare, manufacturing ]
Farmacias 911 was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Healthcare. Country: Ecuador. Website: farmacias911.com.ec. farmacias911.com.ec Gettareq S.A., known as Farmacias 911, is a major Ecuadorian pharmaceutical company founded in 2013 in Guayaquil, combining retail pharmacy, wholesale distribution, OEM manufacturing and medical consulting across the whole country. The group operates six brands including Farmacias 911 retail, ACOSAR wholesale distribution, Galenic for private label manufacturing, One Laboratory for quality testing and Conseplus for consulting. It has grown from 11 to 500 employees with a 166 percent increase in headcount, working with global pharmaceutical giants like Abbott, Bayer, Bristol Myers Squibb, Takeda and Roche. Led by founder and CEO Marlon Morillo, the company hosted Ecuador's largest pharmaceutical convention in 2025 alongside APESFA. Its vertical integration from import and production to retail and lab testing is unique in the Ecuadorian market.
-
flynn-construction.com
October 7, 2026
flynn-construction.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-10-07. Sector: Manufacturing. Country: United States of America. Website: flynn-construction.com. The internal job register records revenue: 57 projects for 20212023, original contracts of $44.51 million, change orders of +$4.37 million, for a final volume of $48.89 million. Meanwhile, different revenue figures were reported to insurers for comparable periods: $20 million (CNA, February 2024), $25 million (Professional Application 202425), $18 million (cyber insurance application, 2025). On June 1, 2023 in the midst of a series of injuries (Siko, Capodilupo, Dunlap) Flynn's Travelers umbrella policy was cancelled (premium refund of $13,012), and mid-term, pollution coverage was remov
-
layam.com
October 31, 2026
•
[ ransomware, retail ]
layam.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-10-31. Country: Israel. Website: layam.com. Its product portfolio includes food and provisions, beverages, tobacco products, perfumes, cosmetics, electronics, confectionery, gifts and other duty-free merchandise. The
-
jumonji-u.ac.jp
October 31, 2026
•
[ ransomware, education ]
jumonji-u.ac.jp was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-10-31. Sector: Education. Country: Japan. Website: jumonji-u.ac.jp. The institution is operated by Jumonji Gakuen Educational Corporation and focuses on providing undergraduate and postgraduate education in humanities, education,
-
Ivan Smith Furniture
October 31, 2026
•
[ ransomware, retail, leak ]
Ivan Smith Furniture was listed as a victim on the leak site of the sarcoma ransomware group; the attack is estimated to have taken place on 2026-10-31. Sector: Retail & E-Commerce. Country: Philippines. For 65 years, Ivan Smith Furniture has believed that great service starts with treating people like neighbors. What began as a small-town furniture store has grown to 40 locations across Louisiana, Texas, and Arkansas, but the values that built our business remain the same.Geo: USA - Leak size: 500 gb - Contains: Files and data bases
-
Cabka
October 23, 2026
Cabka was listed as a victim on the leak site of the AuditTeam ransomware group; the attack is estimated to have taken place on 2026-10-23. Sector: Manufacturing. Country: Spain. No data breaches
-
Kraft Lernen
October 31, 2026
•
[ ransomware, education ]
Kraft Lernen was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-10-31. Sector: Education. Country: Germany. Website: kraft-lernen.de. Kraft Lernen is a German company that specializes in supplying didactic and developmental materials for kindergartens, schools, and therapeutic institutions. Its product catalog includes educational aids, Montessori materials, board games, and supplies for motor skills, creative arts, and inclusive learning. Based in Germany, the company primarily targets educators, childcare professionals, and institutional procurement for educational centers.
-
System Soft
October 31, 2026
•
[ ransomware, technology ]
System Soft was listed as a victim on the leak site of the Vexy Ransomware ransomware group; the attack is estimated to have taken place on 2026-10-31. Sector: Technology. Country: Bulgaria. Website: systemsoft.info. systemsoft.info
-
VIVOTEK
September 1, 2026
VIVOTEK was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-09-01. Sector: Technology. Country: Taiwan. Website: vivotek.com. [AI generated] VIVOTEK is a Taiwanese company founded in 2000 and headquartered in New Taipei City, Taiwan. It specializes in network surveillance products, including IP cameras, video management software, and network video recorders. Operating in the physical security and surveillance industry, VIVOTEK serves global markets across retail, transportation, education, and government sectors, and is recognized as one of Asia's leading providers of IP surveillance solutions.
-
Commission de la construction du Quebec
September 1, 2026
•
[ ransomware, government ]
Commission de la construction du Quebec was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-01. Sector: Government & Defense. Country: Canada. Website: www.ccq.org.
-
vedantaainstitute.in
September 1, 2026
vedantaainstitute.in was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-09-01. Sector: Education. Country: India. Website: vedantaainstitute.in. Vedantaa Institute of Medical Sciences (VIMS) is a private Indian medical education institution and hospital operated un...
-
dmt-group.com
September 1, 2026
•
[ ransomware, technology ]
dmt-group.com was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-09-01. Sector: Technology. Country: Germany. Website: dmt-group.com. DMT Consulting Private Limited is an Indian private limited company incorporated on September 25, 1998, formerly known a...
-
tum.com.mx
September 1, 2026
•
[ ransomware, manufacturing, retail ]
tum.com.mx was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-09-01. Sector: Education. Country: Mexico. Website: tum.com.mx. TUM Transportistas Unidos Mexicanos Divisin Norte, S.A. de C.V. is the largest trucking company in Mexico, founded in ...
-
Burris & MacOmber
October 27, 2026
•
[ ransomware, leak ]
Burris & MacOmber was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Professional Services. [AI generated] N/A
I don't have reliable, verifiable information about a company called "Burris & MacOmber." I'm not able to confirm its existence, industry, operations, or location, and providing fabricated details would be inaccurate and potentially misleading for threat intelligence purposes. If you have additional context or source material about this entity, I'd be glad to help analyze it.
-
OR Technology
October 27, 2026
•
[ ransomware, technology ]
OR Technology was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Technology.
-
Charter Township of Commerce
October 27, 2026
•
[ ransomware, government ]
Charter Township of Commerce was listed as a victim on the leak site of the Booba Project ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Government & Defense. Country: United States of America. Website: www.commercetwp.com. Government Administration Stolen data: 155 GB.
-
Hygiena
October 27, 2026
•
[ ransomware, healthcare, hack ]
Hygiena was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Healthcare. Country: United States of America. Website: www.hygiena.com. United States
-
VPC Builders
October 27, 2026
•
[ ransomware, manufacturing ]
VPC Builders was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Professional Services. Country: United States of America. Website: www.vpcbuilders.com. United States
-
wagyu.xyz unfairness
October 28, 2026
•
[ ransomware, financial, technology ]
wagyu.xyz unfairness was listed as a victim on the leak site of the Whitearmor ransomware group; the attack is estimated to have taken place on 2026-10-28. Sector: Other. Website: wagyu.xyz. wagyu.xyz runs two rigged systems, both proven by the evidence:
1. Rigged coinflip. The site advertises "48% win chance, 4% house edge" (coinflip-public-claim.txt, coinflip-public-terms.json), but server settings aimed for a 4.00% expected edge and the distribution of outcomes is measurably shifted against players: of 2,852 provably-fair-verified flips, 1,417 fell in the 0-48000 band versus 1,325 above 52000, with only 110 in the dead zone (coinflip-measured-odds.json, result_bins). The provably-fair HMAC checks all pass (coinflip-fairness-verify.py, coinflip-sample-seed-chain.json), which only proves the commits weren't tampered per-round; the win thresholds themselves are crooked. Internal accounting confirms: expectedEdge "4.00", actualEdge "2.92" against a published 2% edge, and a 36.49% player win rate (coinflip-house-stats.json, coinflip-settings.json, coinflip-accepted-orders.json).
2. Hidden fee overcharging. Across 28,840 swap/bridge orders totaling ~$264.9M notional, wagyu advertised $1.73M in fees but actually collected $5.64M, hiding $3.9M or 69.28% of its real take (fee-overcharge-metrics.json). 13,190 orders were charged above the quoted rate, 1,812 above 2 percentage points. The server's internal policy charges up to 10% where the public disclosure says 2% (fee-policy-server.json vs fee-public-disclosure.txt, fee-policy-feeds.json, fee-overcharge-summary.json). Worst cases are itemized in fee-top100-overcharged.csv, e.g. order RMNCMB: $3.17M swap, quoted 0.02, charged 0.08, $190,092 stolen (fee-order-RMNCMB.json).
Evidence to support this can be found below:
