Full List

Search

Recent Breaches

• Tailormade Logistics October 27, 2026 • [ ransomware, manufacturing ] Tailormade Logistics was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Transportation. Country: Denmark. Website: www.tailormade-logistics.com. Belgium
• TWICE SRL October 27, 2026 • [ ransomware, manufacturing, finance ] TWICE SRL was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-10-27. ompany from the Republic of San Marino, associated with the production and sale of fashion clothing and accessories. Archived personal and corporate data of employees and customers. [Sector: Manufacturing, Finance]
• Echo.com October 28, 2026 • [ ransomware, technology ] Echo.com was listed as a victim on the leak site of the Whitearmor ransomware group; the attack is estimated to have taken place on 2026-10-28. Sector: Technology. Country: Germany. Website: Echo.com. Echo Global Logistics is a Chicago-based, technology-enabled third-party logistics provider offering freight brokerage and integrated supply chain services, including truckload, LTL, warehousing, and cross-border shipping across North America. We hold Echo Global Logistics data: 2.06M claims rows, 153,727 freight loads, 261,440 quotes ($705M buy volume), 136,273 tenderings, 59,607 tracking records, 3,890 employee identity mappings with emails, 2,418 customers, 9,122 carriers, and warehouse geodata. We suggest you pay a small ransom demand of $10,000,000 in BTC and move on with your lives. Emails with instructions will be sent to you shortly. Samples can be found below. Contact: Session: 0547b7f96d469ecb332e89d0108e71c92df5bacff6c4ed5b9801ab5fffe872ee67 Email: whitearmorrxd@proton.me
• Femern Link Contractors October 28, 2026 Femern Link Contractors was listed as a victim on the leak site of the Barracuda ransomware group; the attack is estimated to have taken place on 2026-10-28. Sector: Transportation. Country: Denmark. Website: femernlinkcontractors.com. Femern Link Contractors (FLC) is an international joint venture responsible for designing and building the Fehmarnbelt tunnel between Denmark and Germany. Its work includes the immersed tunnel, tunnel portals and ramps, and the factory that produces the tunnel elements. During the attack, we bypassed EDR and infiltrated infrastructure. Since September 17, 2026, we have had full access to all confidential files of Femern Link Contractors, including internal correspondence, contracts, agreements, insurance documents, tunnel construction photos, site videos, procurement records, bank accounts and balances, employee personal data, and more. After gaining access to all systems, we encrypted all vCenter virtual machines on the day of the attack, resulting in a complete infrastructure shutdown. As a cybersecurity group, we do not wish to harm company and have sought a resolution. In an alternative outcome, this data and incident might never have been published (as with other clients with whom we successfully negotiated). However, due to interference from the Danish police, cooperation was prevented, and Femern Link Contractors will now suffer maximum reputational damage. All confidential construction information will become publicly available, including: C1 - Strategy C2 - QHSE C3 - Risk Management C4 - Compliance & Interface C5 - Project Control P1 - Works Preparation P2 - Design & Engineering P3 - Execution P4 - Completion S1 - Contract Management S2 - Procurement S3 - Human Resources S4 - Admin & Finance S5 - Communication & PR S6 - Information Systems & Document Control S7 - Industrial Relations XX IT - Temporary YY - PointCloud In total, 1,576,452 files and 154,206 folders (2.44 TB) were exfiltrated. The data is available for purchase either as individual files or as the entire dataset. | Status: selling | $500,000
• Marbre Design October 28, 2026 • [ ransomware, manufacturing ] Marbre Design was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-10-28. Sector: Manufacturing. Country: France. Marbre Design is a French company specializing in the processing of natural stone, marble, granite, and composite materials. The enterprise custom-manufactures kitchen countertops, bathroom fixtures, fireplace surrounds, and interior architectural elements. Its core operations focus on precision cutting, slab polishing, and the on-site installation of finished products.
• Hauhinco October 28, 2026 Hauhinco was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-10-28. Sector: Manufacturing. Country: Germany. Website: hauhinco.de. Hauhinco is a German manufacturer of high-pressure water hydraulics. The company produces plunger pumps, valves, and pump stations for mining and industry. It also develops rail-bound shunting systems for automated material handling.
• S... H... October 28, 2026 • [ ransomware ] S... H... was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-10-28. Redacted entry - full company name pending disclosure (FULL DATA TIMER active).
• Morrison Foerster October 28, 2026 • [ ransomware, leak ] Morrison Foerster was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-10-28. Sector: Professional Services. Country: United States of America. Morrison Foerster is a leading international law firm with a presence in the United States, Asia, and
• Becker & Poliakoff October 29, 2026 • [ ransomware, leak ] Becker & Poliakoff was listed as a victim on the leak site of the Syntax ransomware group; the attack is estimated to have taken place on 2026-10-29. Sector: Professional Services. Country: United States of America. Multi-practice commercial law firm with more than 170 attorneys
• City of Columbia, SC October 29, 2026 • [ ransomware, government ] City of Columbia, SC was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-29. Sector: Government & Defense. Country: United States of America. Website: www.columbiasc.gov.
• au.bank.in October 29, 2026 • [ ransomware, finance ] au.bank.in was listed as a victim on the leak site of the Scarlettgroup ransomware group; the attack is estimated to have taken place on 2026-10-29. Sector: Financial Services. Country: India. Website: au.bank.in. AU Small Finance Bank is an Indian financial institution offering personal and business banking, loans, credit cards, savings accounts, and digital banking services.
• LA PROFUMERIA SRL October 29, 2026 LA PROFUMERIA SRL was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-10-29. Sector: Retail & E-Commerce. Country: Italy. Italian company working with perfumes and cosmetics. Archived personal and corporate data of employees and customers. [Sector: Manufacturing]
• rolly.io October 29, 2026 rolly.io was listed as a victim on the leak site of the Whitearmor ransomware group; the attack is estimated to have taken place on 2026-10-29. Sector: Technology. Website: rolly.io. Rolly.io is an on-chain crypto casino on Arbitrum featuring a public bankroll, transparent bonus formulas (rakeback, weekly bonuses), and active player reward systems. We hold 1,364 rolly.gg player PII records with linked on-chain wallets, 430K+ ledger transactions, 11,442 wallet addresses, 155 whale payout maps, 299 deanonymized staff/CTO emails, and 313 internal chat messages. We aren't asking for any ransom, we just thought it was funny to hack a casino that made a joke about Gamdom.
• Morgan White Group October 29, 2026 • [ ransomware, finance, leak ] Morgan White Group was listed as a victim on the leak site of the Shiba ransomware group; the attack is estimated to have taken place on 2026-10-29. Sector: Professional Services. Insurance
• Susman Godfrey LLP October 30, 2026 • [ ransomware, finance ] Susman Godfrey LLP was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Professional Services. Country: United States of America. Susman Godfrey L.L.P. is a premier litigation firm recognized for its exceptional courtroom talent and
• Minutes Quick Services October 30, 2026 Minutes Quick Services was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Professional Services. Country: United Arab Emirates. retail and facility services United Arab Emirates | 15,832 salary transfer records with full names, Emirates ID numbers, bank account numbers and monthly salaries, including a September 2026 payroll of 450 staff and AED 1,768,100; Employee master records of 966 staff with names, dates of birth, nationalities, designations, branches and bank account details; Identity document records: passport, visa, labour card and Emirates ID numbers with issue and expiry dates; A listing of 348 employee document scan files including named passport scans; 2,002,922 biometric attendance records spanning the branch network | [NOT PAID EXPOSED]
• Five Star Jewelers October 28, 2026 • [ ransomware, retail ] Five Star Jewelers was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-10-28. Sector: Retail & E-Commerce. Country: United States of America. Website: fivestarjewelers.com. Premier jewelry store located in Miami, FL
• CP Manufacturing, Inc. October 30, 2026 • [ ransomware, manufacturing, financial ] CP Manufacturing, Inc. was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Manufacturing. Country: United States of America. Website: CP Manufacturing, Inc.. [manufacturer] CP Manufacturing, Inc. a San Diego-based industrial manufacturer of waste sorting and recycling equipment (MRF systems) operating since the 1970s under the CP Group / CPG Sorting Technologies brand, with subsidiaries MSS Inc. (Nashville, TN), IMS Electronics Recycling, IMS Logistics, IMS Recycling Services, Material Sales, HMM, and UK partner Recycleye. The dataset includes complete server mirrors from HR, finance, engineering, legal, operations, and sales infrastructure, capturing the company's entire digital footprint: Sage/Epicor ERP accounting system for 8 entities (CPM, MSS, HMM, IMSR, IMSRE, MSIRE, CPGH, CP Global) with consolidated P&L showing $109.1M revenue, $10.2M net income, and $12.1M EBITDA for FY2024, plus multi-year budgets (20212024), daily cash reports, and AR/AP data ~340 Social Security Numbers with full identity packages (name, DOB, health coverage status, premium amounts, tax withholdings) across 4 entities via ACA 1095-C filings (20162022), biweekly payroll registers, 401(k) participant records, 10-year salary histories (20132023), and benefits administration across 5 carriers (Anthem, Blue Shield, SIMNSA, UNUM, Western Dental) Truist bank account details routing number 053101121 and account number 1180009812409 for CP Manufacturing LLC, plus ACH payment batch files spanning August 2025 through August 2026 277+ GB of proprietary engineering IP 22G of AutoCAD Electrical MRF designs with proprietary component catalogs (1.2G), 195G of Artec 3D scanner data for manufactured equipment, 38G of CNC laser fabrication data (Amada LCG3015 AJ / FabriWin), PCB board designs (5 boards), SolidWorks Electrical templates, and Epicor ERP Bill of Materials with proprietary part numbers 60+ customer contracts and 30+ NDAs with Republic Services, Waste Management, Recycleye/Nestl, Cal-Waste, Balcones, Wasatch, and international partners, plus Declaration Partners acquisition due diligence documents, competitor proposals (BHS, Machinex, MISTRAL), and a complete project green list Privileged legal materials active litigation subpoena (Hans Ouellet), Coastal Resources MWS settlement agreement with UCC1 financing statements, separation/termination documents for named employees, restrictive covenant cease-and-desist letters, PIIAAs (invention assignment agreements), wage garnishment orders, and corporate equity documents 200+ named job applicant resumes, 51 employee headshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
• iFink October 30, 2026 • [ ransomware, technology ] iFink was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Technology. Country: Romania. Website: ifink.ro.
• Farmacia I October 30, 2026 • [ ransomware, healthcare, hack ] Farmacia I was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Healthcare. Country: Mexico. Website: www.farmaciasimas.com.