-
Hauhinco
October 28, 2026
Hauhinco was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-10-28. Sector: Manufacturing. Country: Germany. Website: hauhinco.de. Hauhinco is a German manufacturer of high-pressure water hydraulics. The company produces plunger pumps, valves, and pump stations for mining and industry. It also develops rail-bound shunting systems for automated material handling.
-
S... H...
October 28, 2026
•
[ ransomware ]
S... H... was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-10-28. Redacted entry - full company name pending disclosure (FULL DATA TIMER active).
-
Morrison Foerster
October 28, 2026
•
[ ransomware, leak ]
Morrison Foerster was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-10-28. Sector: Professional Services. Country: United States of America. Morrison Foerster is a leading international law firm with a presence in the United States, Asia, and
-
Becker & Poliakoff
October 29, 2026
•
[ ransomware, leak ]
Becker & Poliakoff was listed as a victim on the leak site of the Syntax ransomware group; the attack is estimated to have taken place on 2026-10-29. Sector: Professional Services. Country: United States of America. Multi-practice commercial law firm with more than 170 attorneys
-
City of Columbia, SC
October 29, 2026
•
[ ransomware, government ]
City of Columbia, SC was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-29. Sector: Government & Defense. Country: United States of America. Website: www.columbiasc.gov.
-
au.bank.in
October 29, 2026
•
[ ransomware, finance ]
au.bank.in was listed as a victim on the leak site of the Scarlettgroup ransomware group; the attack is estimated to have taken place on 2026-10-29. Sector: Financial Services. Country: India. Website: au.bank.in. AU Small Finance Bank is an Indian financial institution offering personal and business banking, loans, credit cards, savings accounts, and digital banking services.
-
LA PROFUMERIA SRL
October 29, 2026
LA PROFUMERIA SRL was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-10-29. Sector: Retail & E-Commerce. Country: Italy. Italian company working with perfumes and cosmetics.
Archived personal and corporate data of employees and customers. [Sector: Manufacturing]
-
rolly.io
October 29, 2026
rolly.io was listed as a victim on the leak site of the Whitearmor ransomware group; the attack is estimated to have taken place on 2026-10-29. Sector: Technology. Website: rolly.io. Rolly.io is an on-chain crypto casino on Arbitrum featuring a public bankroll, transparent bonus formulas (rakeback, weekly bonuses), and active player reward systems.
We hold 1,364 rolly.gg player PII records with linked on-chain wallets, 430K+ ledger transactions, 11,442 wallet addresses, 155 whale payout maps, 299 deanonymized staff/CTO emails, and 313 internal chat messages.
We aren't asking for any ransom, we just thought it was funny to hack a casino that made a joke about Gamdom.
-
Morgan White Group
October 29, 2026
•
[ ransomware, finance, leak ]
Morgan White Group was listed as a victim on the leak site of the Shiba ransomware group; the attack is estimated to have taken place on 2026-10-29. Sector: Professional Services. Insurance
-
Susman Godfrey LLP
October 30, 2026
•
[ ransomware, finance ]
Susman Godfrey LLP was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Professional Services. Country: United States of America. Susman Godfrey L.L.P. is a premier litigation firm recognized for its exceptional courtroom talent and
-
Minutes Quick Services
October 30, 2026
Minutes Quick Services was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Professional Services. Country: United Arab Emirates. retail and facility services United Arab Emirates | 15,832 salary transfer records with full names, Emirates ID numbers, bank account numbers and monthly salaries, including a September 2026 payroll of 450 staff and AED 1,768,100; Employee master records of 966 staff with names, dates of birth, nationalities, designations, branches and bank account details; Identity document records: passport, visa, labour card and Emirates ID numbers with issue and expiry dates; A listing of 348 employee document scan files including named passport scans; 2,002,922 biometric attendance records spanning the branch network | [NOT PAID EXPOSED]
-
Five Star Jewelers
October 28, 2026
•
[ ransomware, retail ]
Five Star Jewelers was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-10-28. Sector: Retail & E-Commerce. Country: United States of America. Website: fivestarjewelers.com. Premier jewelry store located in Miami, FL
-
CP Manufacturing, Inc.
October 30, 2026
•
[ ransomware, manufacturing, financial ]
CP Manufacturing, Inc. was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Manufacturing. Country: United States of America. Website: CP Manufacturing, Inc.. [manufacturer] CP Manufacturing, Inc. a San Diego-based industrial manufacturer of waste sorting and recycling equipment (MRF systems) operating since the 1970s under
the CP Group / CPG Sorting Technologies brand, with subsidiaries MSS Inc. (Nashville, TN), IMS Electronics Recycling, IMS Logistics, IMS Recycling Services,
Material Sales, HMM, and UK partner Recycleye.
The dataset includes complete server mirrors from HR, finance, engineering, legal, operations, and sales infrastructure, capturing the company's entire digital
footprint:
Sage/Epicor ERP accounting system for 8 entities (CPM, MSS, HMM, IMSR, IMSRE, MSIRE, CPGH, CP Global) with consolidated P&L showing $109.1M revenue, $10.2M net
income, and $12.1M EBITDA for FY2024, plus multi-year budgets (20212024), daily cash reports, and AR/AP data
~340 Social Security Numbers with full identity packages (name, DOB, health coverage status, premium amounts, tax withholdings) across 4 entities via ACA 1095-C
filings (20162022), biweekly payroll registers, 401(k) participant records, 10-year salary histories (20132023), and benefits administration across 5 carriers
(Anthem, Blue Shield, SIMNSA, UNUM, Western Dental)
Truist bank account details routing number 053101121 and account number 1180009812409 for CP Manufacturing LLC, plus ACH payment batch files spanning August 2025
through August 2026
277+ GB of proprietary engineering IP 22G of AutoCAD Electrical MRF designs with proprietary component catalogs (1.2G), 195G of Artec 3D scanner data for
manufactured equipment, 38G of CNC laser fabrication data (Amada LCG3015 AJ / FabriWin), PCB board designs (5 boards), SolidWorks Electrical templates, and Epicor
ERP Bill of Materials with proprietary part numbers
60+ customer contracts and 30+ NDAs with Republic Services, Waste Management, Recycleye/Nestl, Cal-Waste, Balcones, Wasatch, and international partners, plus
Declaration Partners acquisition due diligence documents, competitor proposals (BHS, Machinex, MISTRAL), and a complete project green list
Privileged legal materials active litigation subpoena (Hans Ouellet), Coastal Resources MWS settlement agreement with UCC1 financing statements,
separation/termination documents for named employees, restrictive covenant cease-and-desist letters, PIIAAs (invention assignment agreements), wage garnishment
orders, and corporate equity documents
200+ named job applicant resumes, 51 employee headshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
-
iFink
October 30, 2026
•
[ ransomware, technology ]
iFink was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Technology. Country: Romania. Website: ifink.ro.
-
Farmacia I
October 30, 2026
•
[ ransomware, healthcare, hack ]
Farmacia I was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Healthcare. Country: Mexico. Website: www.farmaciasimas.com.
-
Phillips Nizer
October 11, 2026
•
[ ransomware, finance ]
Phillips Nizer was listed as a victim on the leak site of the ransomhouse ransomware group; the attack is estimated to have taken place on 2026-10-11. Sector: Professional Services. Country: United States of America. Website: www.phillipsnizer.com. Phillips Nizer LLP offers sophisticated legal services at cost-effective rates, ensuring that clients' interests are fiercely protected and promoted. The firm provides resourceful representation across various legal matters, catering to a diverse clientele. With a commitment to legal independence and professional responsibility, Phillips Nizer emphasizes ethical advocacy and respect for the rule of law.
-
Fred H Beck & Associates
October 30, 2026
•
[ ransomware, leak, finance ]
Fred H Beck & Associates was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Professional Services. Country: United States of America. Website: .. A regional commercial real estate services firm based in Charlotte, North Carolina.
-
EAS Engineering
October 30, 2026
•
[ ransomware, manufacturing ]
EAS Engineering was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Manufacturing. Country: United States of America. Website: eas-eng.com. Specializes in navigating wetland regulations for landowners, developers, and their legal representatives at local, state, and federal levels.
-
Acclaim Companies / JCJ Investment
October 30, 2026
•
[ ransomware, finance ]
Acclaim Companies / JCJ Investment was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Financial Services. Country: United States of America. Website: acclaimcompanies.com. A privately-held, real estate development and property management company.
-
Studio Stelitano e Associati
October 30, 2026
•
[ ransomware, finance ]
Studio Stelitano e Associati was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Professional Services. Country: Italy. Studio Stelitano e Associati
Italian professional consulting firm based in Bologna (Italy)
Labor Law and HR Administration
The archive contains the most important personal data and customer data [Sector: Finance]