-
chicagolawyer.com
October 30, 2026
•
[ ransomware, leak, finance ]
chicagolawyer.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Professional Services. Country: United States of America. Website: chicagolawyer.com. Chicago Personal Injury Lawyers Award-Winning Injury Lawyers At Staver Accident Injury Lawyers, we face powerful insurance companies head-on, using our decades of experience to help injury victims like you get the compensation you deserve. SAIL to victory with our winning team.
-
spencers.com
October 30, 2026
•
[ ransomware, retail ]
spencers.com was listed as a victim on the leak site of the Scarlettgroup ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Retail & E-Commerce. Country: United States of America. Website: spencers.com. Spencer's is an American specialty retailer known for novelty gifts, pop culture merchandise, clothing, accessories, and adult-themed products.
-
Angeles Contractor
October 28, 2026
•
[ ransomware, manufacturing, government ]
Angeles Contractor was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-28. Sector: Manufacturing. Country: Mexico. Website: angelescontractor.com. angelescontractor.com Angeles Contractor Inc is a general contractor founded in 1998 in City of Industry, California, with 8 CSLB license categories and 63 to 95 employees delivering construction projects across Southern California. It has completed 259 public works projects worth over 197 million dollars for 47 government agencies, led by San Bernardino County with 73 contracts. Its portfolio includes the Rose Bowl renovation, UCLA dining hall, CGV Cinemas, Paakuma K-8 School and a 14.5 million dollar Big Bear Airport terminal rebuild. Led by President Young W. Kang and VP Alex Cho, it maintains over 90 percent repeat business across education, healthcare, commercial and residential sectors. It holds multiple JOC contracts with San Bernardino, San Mateo and Sourcewell worth up to 30 million dollars per year. The company is a certified Minority Business Enterprise with active expansion into Northern California through offices in San Jose and Salinas.
-
FPT Software
October 27, 2026
•
[ ransomware, technology, automotive ]
FPT Software was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Technology. Country: Vietnam. Website: fptsoftware.com. fptsoftware.com FPT Software is the largest IT services company in Southeast Asia, founded in 1999 in Hanoi with 1.34 billion dollars in revenue and over 33,000 employees across 31 countries. It serves 1,100 clients including 130 Fortune Global 500 companies across automotive, banking, healthcare and energy, with Japan as its largest international market. Its AI-first strategy uses the FleziPT platform delivering 30 percent productivity gains, with AI and data services growing 60 percent in 2026. In 2025 it signed a record 256 million dollar AI transformation deal and secured 26 projects above 10 million dollars. Strategic partnerships span NVIDIA, Microsoft, SAP, AWS and OpenAI. Key strengths are unmatched scale from Vietnam, deep AI capabilities and a 152,000 strong education talent pipeline.
-
Eichstatt
October 27, 2026
•
[ ransomware, government, education ]
Eichstatt was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-27. Country: Germany. Website: eichstaett.de. eichstaett.de 1,5 tb information Eichsttt is a small historic town in Upper Bavaria with 13,500 inhabitants and 1400 years of history, famous for its baroque architecture, Jura Museum with Archaeopteryx fossils and UNESCO Altmhltal Geopark. The Katholische Universitt Eichsttt-Ingolstadt enrolls about 4,800 students across 4 faculties spanning theology, philosophy, languages and business in Ingolstadt. Under President Dr. Klaus Stwe since 2023, it received 5.86 million euro in Bavarian funding for digital transformation and AI programs. It is developing an international campus in Shandong, China and launching new sustainability master's degrees. Key strengths are its Catholic identity, small class sizes and strategic location between Munich and Nuremberg.
-
ImmoVia Hausverwaltung
October 26, 2026
ImmoVia Hausverwaltung was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Other. Country: Germany. Website: immovia-hausverwaltung.de. immovia-hausverwaltung.de ImmoVia Hausverwaltung GmbH is a German property management company registered in November 2025 in Bautzen, Saxony, founded by property owners who bring their own landlord experience to managing rental properties and condominium associations. Led by Managing Director Ramona Biehle with equal shareholders holding 33.3 percent each, the firm offers rental management, WEG administration, technical building management and DATEV-compatible tax data integration. Its philosophy is reliable, solution-oriented and personal management treating each property as if it were its own.
-
SuperScale
October 26, 2026
•
[ ransomware, technology ]
SuperScale was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Technology. Website: superscale.com. superscale.com SuperScale is a Slovak game growth platform founded in 2015 in Bratislava, helping over 500 mobile game studios scale their games through AI-powered performance marketing, data science and monetization optimization. With around 60 employees and 1000 plus games grown, it offers both a SaaS platform and managed growth services acting as an outsourced UA and live ops team. Its core technology includes predictive LTV and retention models, automated user acquisition campaigns and AI creative production across Facebook, Google, TikTok and Apple Search Ads. Led by CEO Ivan Trancik, the company specializes in hybrid monetization strategies combining ads, in-app purchases and subscriptions for casual, midcore and hypercasual titles.
-
Acodafe
October 26, 2026
•
[ ransomware, technology, leak ]
Acodafe was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Country: Colombia. Website: acodafe.com. acodafe.com Acodafe S.L. is a Spanish IT services company founded in 2009 in Matar, Barcelona, providing managed IT, network installation, cybersecurity, cloud backups, data center hosting and GDPR consulting for small and medium businesses. Led by sole administrator Adrin Conde Kuller, it has just 4 employees and annual revenue between 500,000 and 1.5 million euro. The company grew sales by 22.8 percent in 2024 and climbed over 12,000 positions in Spain's national business ranking. Its services cover the full IT lifecycle for SMEs and industrial clients from system maintenance and installation to 24/7 emergency support. In 2019 it expanded into data protection consulting, a growing regulatory niche in Spain. Key strengths are 17 years of market presence, a lean and profitable operation and a diversified service portfolio tailored to small business needs.
-
Pure Perfection
October 26, 2026
•
[ ransomware, retail, automotive ]
Pure Perfection was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Retail & E-Commerce. Country: United States of America. Website: pureperfection.com. pureperfection.com Pure Perfection GmbH is a German live communication agency founded in 2008 in Wiesbaden, ranked number one in the 2026 BlachReport German Event Creativity Ranking ahead of insglck and Vok Dams. With 72 to 80 employees across offices in Wiesbaden, Berlin, Dsseldorf and Florida, it delivered 133 events in 2025, with 90 of them abroad including Shanghai, Miami and Singapore. Led by co-founders Jan Rogozinski and Kim Meisinger, the agency works through three units: Pure Live for events, Pure Space for brand spaces and architecture, and Pure Content for storytelling and PR. Major clients include Audi, KODA, L'Oral, Bentley and Nestl, with pharma being its largest vertical at 90 events per year. Revenue peaked at 26.4 million euro in 2023 and the agency won 60 MUSE Creative Awards in 2026 alone.
-
Epic Health
October 26, 2026
Epic Health was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Healthcare. Country: Australia. Website: epichealth.com.au. epichealth.com.au Epic Health is an Australian medical group founded in 2001 in Melbourne, running multiple brands including Epic Medical general practice, Epic Youth Health, Epic Skin Health and Alevia Medical Weight Loss. Its fastest-growing division is Alevia, offering doctor-supervised weight loss programs using GLP-1 medications like Mounjaro and Ozempic across four clinics plus telehealth Australia-wide. The group combines traditional family medicine with niche verticals like dermatology, adolescent health and aesthetic medicine under one team-based model. Led by medical director Dr. Neeraj Mahindra, it serves patients nationally through Medicare-compatible telehealth with instant rebates and a dedicated digital app. Key strengths are 24 years of operation, a debt-free financial position and multi-brand diversification into high-demand health niches. The company is well positioned in Australia's booming medical weight loss and telehealth markets.
-
Incomelec
October 26, 2026
•
[ ransomware, manufacturing, technology ]
Incomelec was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Manufacturing. Country: Colombia. Website: incomelec.com. incomelec.com Incomelec is a Colombian company founded in 2006 in Bogota, the Latin American leader in pedestrian, vehicle and passenger access control including turnstiles and automated barriers. With 52 employees and operations in 14 countries, it has installed equipment in over 20 airports, 90 parking facilities and 250 buildings, handling more than 85 percent of Colombia's toll booth systems. Its flagship product is BIOMIG, an automated migration control system used at El Dorado and Medellin airports with iris scanning and passport verification. It is the exclusive regional partner of Automatic Systems from the Bollore Group and the only distributor worldwide that locally assembles TR-490 and TR-491 turnstile lines. Led by CEO Kris De Sutter Gomez, it serves Metro de Medellin, TransMilenio and BD Bacata, Colombia's tallest building.
-
ASL İnsaat
October 26, 2026
•
[ ransomware, manufacturing ]
ASL nsaat was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Manufacturing. Country: Turkey. Website: aslinsaat.com.tr. aslinsaat.com.tr ASL nsaat is a Turkish construction company based in Istanbul, operating in civil and industrial building contracting both domestically and internationally. It provides full-cycle services including design, general contracting and project management for residential, commercial and industrial projects. The company is privately held with estimated staffing of several hundred employees scaling with active construction sites. Turkey is the world's second largest market for international construction contractors, and ASL operates within this competitive ecosystem. Key sectors are residential complexes, shopping centers, hotels, factories and infrastructure. Typical strengths of Turkish contractors like ASL are cost competitiveness, speed of delivery and experience in challenging geographies across the Middle East, Africa and Central Asia.
-
Serit CC
October 26, 2026
Serit CC was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Country: Norway. Website: serit.no. serit.no Serit CC, formally C.C. Solution AS, is a Norwegian IT services company founded in 2007 in Bergen, providing cloud, cybersecurity, managed IT, Microsoft 365 and AI automation to small and medium businesses. It has 6 employees and annual revenue of around 17 million Norwegian kroner, and since June 2025 it is part of Serit, one of Norway's largest independent IT groups with 27 offices and over 200 specialists. The company holds Helsenett certification for healthcare clients and runs its own Norwegian data center, keeping all data inside the country. It is led by founder and CEO Christopher Andreas Namtvedt, a former NATO systems administrator, together with CTO Ole Erik Skare who has been with the firm for 17 years. Core strengths are deep Bergen market knowledge combined with the national scale of Serit group partnerships with Microsoft, Fortinet, Dell and Lenovo. A newer focus is secure AI adoption and workflow automation for business clients.
-
atljamaica.com
September 30, 2026
•
[ ransomware, retail, hospitality ]
atljamaica.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Other. Country: Jamaica. Website: atljamaica.com. Sandals Resorts International (SRI) is a Jamaican luxury resort chain operating under the all-inclusive brand across the Caribbean. Appliance Traders Limited (ATL) is a retail electronics chain operating under the ATL Jamaica brand. Both companies belong to the same corporate structure: "ATL Group of Companies" and "Sandals Group of Companies" are used interchangeably in their internal documents to refer to the same circle of affiliated entities.
-
Digital Triumph
October 31, 2026
•
[ ransomware, leak, technology ]
Digital Triumph was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-31. Sector: Technology. Country: Malaysia. telecommunications services Malaysia | Employee payroll records with names, national identity numbers and wages, statutory filings 2016 to 2025; Audited financial statements, tax filings and company bank account numbers; 2,552 customer invoices and delivery orders; The full customer service data room covering 309 organizations including banks, an embassy and government offices; The CRM customer database and the company mail archive, 8,700+ verified business emails with customer correspondence | [NOT PAID EXPOSED]
-
goldencrops.com.tw
October 31, 2026
goldencrops.com.tw was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-10-31. Sector: Agriculture and Food Production. Country: Taiwan. Website: goldencrops.com.tw. The company specializes in grain-based foods, nutritional products, plant-based foods and customized food manufacturing services. It operates three factories in
-
Rood Trucking
October 31, 2026
•
[ ransomware, manufacturing ]
Rood Trucking was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-10-31. Sector: Transportation. Country: United States of America. Established in 1962 by George and Diane Rood Sr., the company developed from a single-truck operation into a regional carrier
-
mars-semi.com.tw
October 31, 2026
•
[ ransomware, manufacturing, technology ]
mars-semi.com.tw was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-10-31. Sector: Manufacturing. Country: Taiwan. Website: mars-semi.com.tw. Established in 2001 and headquartered in Hsinchu Science Park, the company develops long-range, high-bandwidth wireless audio and video system-on-chip (SoC)
-
Phoenix Charter Academy
October 31, 2026
•
[ ransomware, education, financial ]
Phoenix Charter Academy was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-10-31. Sector: Education. Country: United States of America. Website: phoenixcharteracademy.org. Phoenix Charter Academy Phoenix Charter Academy Network is a public charter school network in Massachusetts, USA, operating three campuses (Chelsea, Lawrence, Springfield) and serving mainly low-income and immigrant families.36,829 files, 445.1 GB of data.Domain controller (password hashes of ~170+ staff accounts)File server, helpdesk server, print serverPowerSchool test server the student databaseStudent special-education records of named minors: signed IEP/504 plans for the 20252026 school year, BASC-3 psychological protocols, three-year re-evaluations, speech-therapy files, discipline recordsImmigration records of students' families: official CBP I-94 entry records, parole application statements, immigration cover lettersStaff personal and financial data: W-2 forms with SSNs and salaries, US passport card and foreign passport scans, bank statements with account numbers (Bank of America / Tremont Credit Union), signed direct deposit authorizations, CORI background-check filesMedical data: MassHealth cards and applications, immunization recordsMunicipal compliance files: Lawrence Board of Health licenses and inspections (20222024), Fire Department inspection certificatesInternal HR material: network-wide salary bands More
-
Community Medical Center, Falls City Nebraska
October 27, 2026
•
[ ransomware, healthcare ]
Community Medical Center, Falls City Nebraska was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Healthcare. Country: United States of America. Website: www.cmcfc.org.
