-
Svedala Kommun
October 28, 2026
•
[ ransomware, government, manufacturing ]
Svedala Kommun was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-28. Sector: Government & Defense. Country: Sweden. Website: svedala.se. svedala.se Revenue $282.1 Million Svedala kommun is a municipality in Skne County, Sweden, part of Greater Malm with 23,722 residents and a projected growth to 26,800 by 2032. It jumped from 63rd to 15th place in Sweden's Bst att leva 2026 ranking, ranking number one nationwide in business climate, self-sufficiency and outbound commuting. The local economy centers on transport and warehousing driven by Malm Airport, with Sandvik SRP as the largest private employer and a new Airport City MMX business park planned to create 1,000 jobs. The municipality runs a balanced budget of SEK 1.66 billion with a tax rate below the national average. Education performs above average with 89.8 percent gymnasium eligibility and 80.3 percent qualified teachers. It is investing 431 million kronor in infrastructure 2025 to 2027.
-
Rexville Radiology
October 26, 2026
Rexville Radiology was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Healthcare. Country: United States of America. Website: rexvilleradiology.com. rexvilleradiology.com Rexville Radiology is a diagnostic imaging center in Bayamn, Puerto Rico, founded by neuro-radiology specialist Dr. Ramn Pizarro Fornaris and accredited by the American College of Radiology. It offers a full range of imaging services under one roof including open MRI, 64-slice CT scanning, 3D digital mammography with tomosynthesis, ultrasound, DEXA bone density and digital X-ray. The center stands out for its open MRI design that accommodates claustrophobic patients and its advanced breast imaging with 3D tomosynthesis for early cancer detection. Led by Dr. Pizarro, a recognized neuro-radiologist, it provides personalized care with fast turnaround times and early opening hours from 6 AM six days a week.
-
Mercantile Investment Corporation Bolivia S A
October 26, 2026
•
[ ransomware, leak, finance ]
Mercantile Investment Corporation Bolivia S A was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Financial Services. Country: Bolivia (Plurinational State of). Mercantile & Investment Corporation Bolivia S.A. is a Bolivian broker-dealer and investment house founded in 1983 in La Paz, licensed by ASFI, the national financial regulator, with over 43 years of experience in the Bolivian capital markets. It is the investment arm of international Grupo MIC, offering securities trading, foreign exchange, financial leasing, repo operations, centralized securities custody and discretionary portfolio management. Led by Managing Director Alberto Barrn Michel, it serves institutional investors and corporate clients seeking access to Bolivia's Bolsa Boliviana de Valores. Bolivia's capital market is one of the smallest in Latin America, giving licensed players like MIC a niche with limited competition. Key strengths are full ASFI licensing, international group backing and a comprehensive financial product suite spanning brokerage, leasing and asset management. The firm positions itself as a trusted long-term wealth protector in a market dominated by trade
-
Trade Union Co
October 26, 2026
•
[ ransomware, hack, automotive ]
Trade Union Co was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Other. Country: United States of America. Website: tradeunionco.com. tradeunionco.com tuc-dxb.com Trade Union Co. is a family-owned automotive spare parts wholesaler and retailer founded in 1960 in Beirut, Lebanon, with over 65 years of experience serving customers across the Middle East, Africa, Europe, Asia and the Americas. The group operates through its Beirut headquarters and The Trade Union International LLC in Dubai, a 5000 square meter global re-export hub established in 2007 with offices also in Germany, Russia and Nigeria. With over 150 employees and 20 plus international aftermarket brands including Bosch, Mahle, ZF and Sachs, it supplies parts for European, Japanese and American passenger and commercial vehicles. Led by CEO Walid El Bissani and Head of Strategy Tarek Jamil, the company is a member of NEXUS Automotive International, the world's largest automotive distribution community. It regularly exhibits at Automechanika Dubai and Frankfurt, showcasing its growing brand portfolio and global logistics network.
-
Groupe AC Environnement
October 26, 2026
•
[ ransomware, energy ]
Groupe AC Environnement was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Energy & Utilities. Country: France. Website: ac-environnement.com. ac-environnement.com Groupe AC Environnement is a French environmental engineering company founded in 1997 in Pontarlier, delivering integrated solutions for water treatment, wastewater, waste management and bioremediation. With 160 employees across five subsidiaries including GEG, Marach'Hydro and Biova, it has completed over 120 projects in 13 countries. Its standout project is the STEP des Voraces, France's first large-scale wastewater plant featuring demethanization serving 300,000 equivalent inhabitants. The group offers 26 specialized technical solutions spanning drinking water, industrial effluent, zero liquid discharge and circular economy applications. Led by Johan Hansma, it operates across the full project lifecycle from design and construction to long-term operations and maintenance.
-
Betopia Group
October 26, 2026
•
[ ransomware, technology, leak ]
Betopia Group was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Other. Country: Cyprus. Website: betopiagroup.com. betopiagroup.com Betopia Group Betopia Group is a Bangladeshi tech holding based in Dhaka, formally created in July 2025 by consolidating 22 business units including Bdcalling IT, Softvence, Sparktech, JVAI and Zencore, claiming 5,000 employees and 36 million dollars in annual revenue. Founded by Muhammad Monir Hossain, who went from freelancing on oDesk in 2013 to launching Bdcalling IT in 2017 with just 500,000 taka and 7 people, the group now serves clients in over 80 countries with 80 to 90 percent of business from the United States. Its units span software development, AI, cloud infrastructure via ZenexCloud, Odoo ERP implementation, renewable energy through PulseGrid and IT education. In July 2026 the group unveiled Vision 2030, planning to double its workforce and build Betopia City, an AI-powered smart tech hub in Bangladesh. The company is embroiled in a major scandal, with Fiverr suspending around 300 accounts linked to Betopia for coordinated marketplace manipulation.
-
Malmsten
October 26, 2026
•
[ ransomware, manufacturing ]
Malmsten was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Other. Country: Sweden. Website: malmsten.com. malmsten.com Malmsten AB is a Swedish family-owned company founded in 1975 in Tby, the world's leading manufacturer of swimming pool and open water equipment including lane lines, buoys, starting blocks and safety gear. With around 30 employees and global distribution, its equipment has been used at 11 consecutive Olympic Games from Moscow 1980 to Paris 2024. Founder Robert Malmsten received the FINA Gold Pin Award in 2024 for 48 years of service to the international swimming federation's equipment committee. The company's proprietary wave calming technology reduces turbulence in competition lanes, making its Golden Series the gold standard for elite swimming events. Led by CEO David Malmsten in the second generation, it operates a subsidiary in Australia and serves 100 plus national swimming federations worldwide. Key strengths are FINA approval, Olympic heritage and a full product range from elite competition to public pool equipment.
-
Zinkan Enterprises
October 26, 2026
Zinkan Enterprises was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Country: United States of America. Website: zinkanenterprises.com. zinkanenterprises.com Zinkan Enterprises is a private US environmental services company founded in 1983 in Hunt Valley, Ohio, operating in water treatment, pond and lake management, oil and gas chemicals and waste management. With 45 to 75 employees and estimated revenue of 5 to 20 million dollars, it owns several brands including Pace Products, the creator of Freeze Free, the world's first anti-freeze pond coating dating back to the 1960s. Its Crystal Clear division manages ponds and water features for prestigious clients including Walt Disney World golf courses and the 2006 Open Championship at Royal Liverpool. Led by founder Thomas Zinkan, the company offers full-cycle solutions from chemical products to fountain equipment and contract pond maintenance. Core strengths are 42 years of experience, a unique patented anti-freeze technology and diversified revenue across four environmental service verticals.
-
Atlas Stamping Manufacturing
October 26, 2026
Atlas Stamping Manufacturing was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Manufacturing. Country: United States of America. Website: atlasstamping.com. atlasstamping.com Atlas Stamping Manufacturing Corp. is a US metal stamping company founded in 1971 in Richardson, Texas, producing precision stamped parts for automotive, aerospace, electronics, medical and industrial customers. With around 50 to 200 employees and estimated revenue of 5 to 20 million dollars, it operates a full-service plant offering progressive and transfer die stamping, deep draw, forming, welding and assembly. Its own tool and die shop designs and maintains all stamping dies in-house, giving full control over quality and lead times. Press capabilities range from 30 to 400 tons handling materials from thin foil to quarter-inch thick steel, aluminum and specialty alloys. The company has served the Dallas-Fort Worth industrial market for 54 years with ISO 9001 quality systems and PPAP compliance for OEM clients.
-
Farmacias 911
October 26, 2026
•
[ ransomware, healthcare, manufacturing ]
Farmacias 911 was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Healthcare. Country: Ecuador. Website: farmacias911.com.ec. farmacias911.com.ec Gettareq S.A., known as Farmacias 911, is a major Ecuadorian pharmaceutical company founded in 2013 in Guayaquil, combining retail pharmacy, wholesale distribution, OEM manufacturing and medical consulting across the whole country. The group operates six brands including Farmacias 911 retail, ACOSAR wholesale distribution, Galenic for private label manufacturing, One Laboratory for quality testing and Conseplus for consulting. It has grown from 11 to 500 employees with a 166 percent increase in headcount, working with global pharmaceutical giants like Abbott, Bayer, Bristol Myers Squibb, Takeda and Roche. Led by founder and CEO Marlon Morillo, the company hosted Ecuador's largest pharmaceutical convention in 2025 alongside APESFA. Its vertical integration from import and production to retail and lab testing is unique in the Ecuadorian market.
-
flynn-construction.com
October 7, 2026
flynn-construction.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-10-07. Sector: Manufacturing. Country: United States of America. Website: flynn-construction.com. The internal job register records revenue: 57 projects for 20212023, original contracts of $44.51 million, change orders of +$4.37 million, for a final volume of $48.89 million. Meanwhile, different revenue figures were reported to insurers for comparable periods: $20 million (CNA, February 2024), $25 million (Professional Application 202425), $18 million (cyber insurance application, 2025). On June 1, 2023 in the midst of a series of injuries (Siko, Capodilupo, Dunlap) Flynn's Travelers umbrella policy was cancelled (premium refund of $13,012), and mid-term, pollution coverage was remov
-
layam.com
October 31, 2026
•
[ ransomware, retail ]
layam.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-10-31. Country: Israel. Website: layam.com. Its product portfolio includes food and provisions, beverages, tobacco products, perfumes, cosmetics, electronics, confectionery, gifts and other duty-free merchandise. The
-
jumonji-u.ac.jp
October 31, 2026
•
[ ransomware, education ]
jumonji-u.ac.jp was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-10-31. Sector: Education. Country: Japan. Website: jumonji-u.ac.jp. The institution is operated by Jumonji Gakuen Educational Corporation and focuses on providing undergraduate and postgraduate education in humanities, education,
-
Ivan Smith Furniture
October 31, 2026
•
[ ransomware, retail, leak ]
Ivan Smith Furniture was listed as a victim on the leak site of the sarcoma ransomware group; the attack is estimated to have taken place on 2026-10-31. Sector: Retail & E-Commerce. Country: Philippines. For 65 years, Ivan Smith Furniture has believed that great service starts with treating people like neighbors. What began as a small-town furniture store has grown to 40 locations across Louisiana, Texas, and Arkansas, but the values that built our business remain the same.Geo: USA - Leak size: 500 gb - Contains: Files and data bases
-
Cabka
October 23, 2026
Cabka was listed as a victim on the leak site of the AuditTeam ransomware group; the attack is estimated to have taken place on 2026-10-23. Sector: Manufacturing. Country: Spain. No data breaches
-
Kraft Lernen
October 31, 2026
•
[ ransomware, education ]
Kraft Lernen was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-10-31. Sector: Education. Country: Germany. Website: kraft-lernen.de. Kraft Lernen is a German company that specializes in supplying didactic and developmental materials for kindergartens, schools, and therapeutic institutions. Its product catalog includes educational aids, Montessori materials, board games, and supplies for motor skills, creative arts, and inclusive learning. Based in Germany, the company primarily targets educators, childcare professionals, and institutional procurement for educational centers.
-
System Soft
October 31, 2026
•
[ ransomware, technology ]
System Soft was listed as a victim on the leak site of the Vexy Ransomware ransomware group; the attack is estimated to have taken place on 2026-10-31. Sector: Technology. Country: Bulgaria. Website: systemsoft.info. systemsoft.info
-
VIVOTEK
September 1, 2026
VIVOTEK was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-09-01. Sector: Technology. Country: Taiwan. Website: vivotek.com. [AI generated] VIVOTEK is a Taiwanese company founded in 2000 and headquartered in New Taipei City, Taiwan. It specializes in network surveillance products, including IP cameras, video management software, and network video recorders. Operating in the physical security and surveillance industry, VIVOTEK serves global markets across retail, transportation, education, and government sectors, and is recognized as one of Asia's leading providers of IP surveillance solutions.
-
Commission de la construction du Quebec
September 1, 2026
•
[ ransomware, government ]
Commission de la construction du Quebec was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-01. Sector: Government & Defense. Country: Canada. Website: www.ccq.org.
-
vedantaainstitute.in
September 1, 2026
vedantaainstitute.in was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-09-01. Sector: Education. Country: India. Website: vedantaainstitute.in. Vedantaa Institute of Medical Sciences (VIMS) is a private Indian medical education institution and hospital operated un...