-
Suburban Orthopaedics
October 30, 2026
•
[ ransomware, healthcare ]
Suburban Orthopaedics was listed as a victim on the leak site of the Wallstreet ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Healthcare. Country: United States of America. Suburban Orthopaedics is a New Jersey medical center offering coordinated care for back, neck, and shoulder pain and injuries. Its services include orthopaedic care, chiropractic, interventional pain management, physical medicine and rehabilitation, and physical therapy
-
Honghwa International
October 30, 2026
•
[ ransomware, manufacturing ]
Honghwa International was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Manufacturing. Country: Taiwan. Website: www.honghwa.com.tw.
-
KTU Shipyard
October 30, 2026
•
[ ransomware, manufacturing ]
KTU Shipyard was listed as a victim on the leak site of the Whitearmor ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Transportation. Country: Philippines. Company: PT Karya Teknik Utama (KTU Shipyard)
Location: Batam, Indonesia
Founded: 1982
Industry: Shipbuilding & Marine Engineering
Website: https://ktushipyard.com/
What the company does
KTU Shipyard is an Indonesian shipbuilding company specializing in the construction, repair and maintenance of commercial vessels.
Its main products and services include:
- Tugboats
- Barges
- Tankers and cargo vessels
- Crane barges
- Ship repair and maintenance
Company size
- Privately owned company.
- Approximately 5011,000 employees.
- Multiple shipyard facilities in Indonesia.
- Claims to have built approximately 2,200 vessels.
Annual Revenue
~USD 200 million
Key Business Information
- Business model: B2B shipbuilding and marine services.
- Customers: Shipping companies, marine logistics operators and offshore businesses.
- Main market: Indonesia and regional maritime markets.
- Competitive advantage: Established shipbuilding experience, multiple facilities and diverse vessel manufacturing capabilities.
What was accessed: Internal ticketing systems, All users drive (including business, customer, confidential files over 3tb of data), customer data, etc. You have 20 days to reach out or let it be your downfall.
Attatched: Is a sample file from recent user drives, and a screenshot showing POA (proof of access)
We can be very reasonable and this can go well or it can not. You can start contact at the email: whitearmormember@proton.me
https://gofile.io/d/G981x5Rl
https://gofile.io/d/99sTtibR
(backup sample files)
-
Gilliam & Associates, P.C
October 30, 2026
•
[ ransomware, finance ]
Gilliam & Associates, P.C was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Professional Services. Country: United States of America. Website: gilliamcpapc.com. A full service CPA firm.
-
chicagolawyer.com
October 30, 2026
•
[ ransomware, leak, finance ]
chicagolawyer.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Professional Services. Country: United States of America. Website: chicagolawyer.com. Chicago Personal Injury Lawyers Award-Winning Injury Lawyers At Staver Accident Injury Lawyers, we face powerful insurance companies head-on, using our decades of experience to help injury victims like you get the compensation you deserve. SAIL to victory with our winning team.
-
spencers.com
October 30, 2026
•
[ ransomware, retail ]
spencers.com was listed as a victim on the leak site of the Scarlettgroup ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Retail & E-Commerce. Country: United States of America. Website: spencers.com. Spencer's is an American specialty retailer known for novelty gifts, pop culture merchandise, clothing, accessories, and adult-themed products.
-
Angeles Contractor
October 28, 2026
•
[ ransomware, manufacturing, government ]
Angeles Contractor was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-28. Sector: Manufacturing. Country: Mexico. Website: angelescontractor.com. angelescontractor.com Angeles Contractor Inc is a general contractor founded in 1998 in City of Industry, California, with 8 CSLB license categories and 63 to 95 employees delivering construction projects across Southern California. It has completed 259 public works projects worth over 197 million dollars for 47 government agencies, led by San Bernardino County with 73 contracts. Its portfolio includes the Rose Bowl renovation, UCLA dining hall, CGV Cinemas, Paakuma K-8 School and a 14.5 million dollar Big Bear Airport terminal rebuild. Led by President Young W. Kang and VP Alex Cho, it maintains over 90 percent repeat business across education, healthcare, commercial and residential sectors. It holds multiple JOC contracts with San Bernardino, San Mateo and Sourcewell worth up to 30 million dollars per year. The company is a certified Minority Business Enterprise with active expansion into Northern California through offices in San Jose and Salinas.
-
FPT Software
October 27, 2026
•
[ ransomware, technology, automotive ]
FPT Software was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Technology. Country: Vietnam. Website: fptsoftware.com. fptsoftware.com FPT Software is the largest IT services company in Southeast Asia, founded in 1999 in Hanoi with 1.34 billion dollars in revenue and over 33,000 employees across 31 countries. It serves 1,100 clients including 130 Fortune Global 500 companies across automotive, banking, healthcare and energy, with Japan as its largest international market. Its AI-first strategy uses the FleziPT platform delivering 30 percent productivity gains, with AI and data services growing 60 percent in 2026. In 2025 it signed a record 256 million dollar AI transformation deal and secured 26 projects above 10 million dollars. Strategic partnerships span NVIDIA, Microsoft, SAP, AWS and OpenAI. Key strengths are unmatched scale from Vietnam, deep AI capabilities and a 152,000 strong education talent pipeline.
-
Eichstatt
October 27, 2026
•
[ ransomware, government, education ]
Eichstatt was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-27. Country: Germany. Website: eichstaett.de. eichstaett.de 1,5 tb information Eichsttt is a small historic town in Upper Bavaria with 13,500 inhabitants and 1400 years of history, famous for its baroque architecture, Jura Museum with Archaeopteryx fossils and UNESCO Altmhltal Geopark. The Katholische Universitt Eichsttt-Ingolstadt enrolls about 4,800 students across 4 faculties spanning theology, philosophy, languages and business in Ingolstadt. Under President Dr. Klaus Stwe since 2023, it received 5.86 million euro in Bavarian funding for digital transformation and AI programs. It is developing an international campus in Shandong, China and launching new sustainability master's degrees. Key strengths are its Catholic identity, small class sizes and strategic location between Munich and Nuremberg.
-
ImmoVia Hausverwaltung
October 26, 2026
ImmoVia Hausverwaltung was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Other. Country: Germany. Website: immovia-hausverwaltung.de. immovia-hausverwaltung.de ImmoVia Hausverwaltung GmbH is a German property management company registered in November 2025 in Bautzen, Saxony, founded by property owners who bring their own landlord experience to managing rental properties and condominium associations. Led by Managing Director Ramona Biehle with equal shareholders holding 33.3 percent each, the firm offers rental management, WEG administration, technical building management and DATEV-compatible tax data integration. Its philosophy is reliable, solution-oriented and personal management treating each property as if it were its own.
-
SuperScale
October 26, 2026
•
[ ransomware, technology ]
SuperScale was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Technology. Website: superscale.com. superscale.com SuperScale is a Slovak game growth platform founded in 2015 in Bratislava, helping over 500 mobile game studios scale their games through AI-powered performance marketing, data science and monetization optimization. With around 60 employees and 1000 plus games grown, it offers both a SaaS platform and managed growth services acting as an outsourced UA and live ops team. Its core technology includes predictive LTV and retention models, automated user acquisition campaigns and AI creative production across Facebook, Google, TikTok and Apple Search Ads. Led by CEO Ivan Trancik, the company specializes in hybrid monetization strategies combining ads, in-app purchases and subscriptions for casual, midcore and hypercasual titles.
-
Acodafe
October 26, 2026
•
[ ransomware, technology, leak ]
Acodafe was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Country: Colombia. Website: acodafe.com. acodafe.com Acodafe S.L. is a Spanish IT services company founded in 2009 in Matar, Barcelona, providing managed IT, network installation, cybersecurity, cloud backups, data center hosting and GDPR consulting for small and medium businesses. Led by sole administrator Adrin Conde Kuller, it has just 4 employees and annual revenue between 500,000 and 1.5 million euro. The company grew sales by 22.8 percent in 2024 and climbed over 12,000 positions in Spain's national business ranking. Its services cover the full IT lifecycle for SMEs and industrial clients from system maintenance and installation to 24/7 emergency support. In 2019 it expanded into data protection consulting, a growing regulatory niche in Spain. Key strengths are 17 years of market presence, a lean and profitable operation and a diversified service portfolio tailored to small business needs.
-
Pure Perfection
October 26, 2026
•
[ ransomware, retail, automotive ]
Pure Perfection was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Retail & E-Commerce. Country: United States of America. Website: pureperfection.com. pureperfection.com Pure Perfection GmbH is a German live communication agency founded in 2008 in Wiesbaden, ranked number one in the 2026 BlachReport German Event Creativity Ranking ahead of insglck and Vok Dams. With 72 to 80 employees across offices in Wiesbaden, Berlin, Dsseldorf and Florida, it delivered 133 events in 2025, with 90 of them abroad including Shanghai, Miami and Singapore. Led by co-founders Jan Rogozinski and Kim Meisinger, the agency works through three units: Pure Live for events, Pure Space for brand spaces and architecture, and Pure Content for storytelling and PR. Major clients include Audi, KODA, L'Oral, Bentley and Nestl, with pharma being its largest vertical at 90 events per year. Revenue peaked at 26.4 million euro in 2023 and the agency won 60 MUSE Creative Awards in 2026 alone.
-
Epic Health
October 26, 2026
Epic Health was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Healthcare. Country: Australia. Website: epichealth.com.au. epichealth.com.au Epic Health is an Australian medical group founded in 2001 in Melbourne, running multiple brands including Epic Medical general practice, Epic Youth Health, Epic Skin Health and Alevia Medical Weight Loss. Its fastest-growing division is Alevia, offering doctor-supervised weight loss programs using GLP-1 medications like Mounjaro and Ozempic across four clinics plus telehealth Australia-wide. The group combines traditional family medicine with niche verticals like dermatology, adolescent health and aesthetic medicine under one team-based model. Led by medical director Dr. Neeraj Mahindra, it serves patients nationally through Medicare-compatible telehealth with instant rebates and a dedicated digital app. Key strengths are 24 years of operation, a debt-free financial position and multi-brand diversification into high-demand health niches. The company is well positioned in Australia's booming medical weight loss and telehealth markets.
-
Incomelec
October 26, 2026
•
[ ransomware, manufacturing, technology ]
Incomelec was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Manufacturing. Country: Colombia. Website: incomelec.com. incomelec.com Incomelec is a Colombian company founded in 2006 in Bogota, the Latin American leader in pedestrian, vehicle and passenger access control including turnstiles and automated barriers. With 52 employees and operations in 14 countries, it has installed equipment in over 20 airports, 90 parking facilities and 250 buildings, handling more than 85 percent of Colombia's toll booth systems. Its flagship product is BIOMIG, an automated migration control system used at El Dorado and Medellin airports with iris scanning and passport verification. It is the exclusive regional partner of Automatic Systems from the Bollore Group and the only distributor worldwide that locally assembles TR-490 and TR-491 turnstile lines. Led by CEO Kris De Sutter Gomez, it serves Metro de Medellin, TransMilenio and BD Bacata, Colombia's tallest building.
-
ASL İnsaat
October 26, 2026
•
[ ransomware, manufacturing ]
ASL nsaat was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Manufacturing. Country: Turkey. Website: aslinsaat.com.tr. aslinsaat.com.tr ASL nsaat is a Turkish construction company based in Istanbul, operating in civil and industrial building contracting both domestically and internationally. It provides full-cycle services including design, general contracting and project management for residential, commercial and industrial projects. The company is privately held with estimated staffing of several hundred employees scaling with active construction sites. Turkey is the world's second largest market for international construction contractors, and ASL operates within this competitive ecosystem. Key sectors are residential complexes, shopping centers, hotels, factories and infrastructure. Typical strengths of Turkish contractors like ASL are cost competitiveness, speed of delivery and experience in challenging geographies across the Middle East, Africa and Central Asia.
-
Serit CC
October 26, 2026
Serit CC was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Country: Norway. Website: serit.no. serit.no Serit CC, formally C.C. Solution AS, is a Norwegian IT services company founded in 2007 in Bergen, providing cloud, cybersecurity, managed IT, Microsoft 365 and AI automation to small and medium businesses. It has 6 employees and annual revenue of around 17 million Norwegian kroner, and since June 2025 it is part of Serit, one of Norway's largest independent IT groups with 27 offices and over 200 specialists. The company holds Helsenett certification for healthcare clients and runs its own Norwegian data center, keeping all data inside the country. It is led by founder and CEO Christopher Andreas Namtvedt, a former NATO systems administrator, together with CTO Ole Erik Skare who has been with the firm for 17 years. Core strengths are deep Bergen market knowledge combined with the national scale of Serit group partnerships with Microsoft, Fortinet, Dell and Lenovo. A newer focus is secure AI adoption and workflow automation for business clients.
-
atljamaica.com
September 30, 2026
•
[ ransomware, retail, hospitality ]
atljamaica.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Other. Country: Jamaica. Website: atljamaica.com. Sandals Resorts International (SRI) is a Jamaican luxury resort chain operating under the all-inclusive brand across the Caribbean. Appliance Traders Limited (ATL) is a retail electronics chain operating under the ATL Jamaica brand. Both companies belong to the same corporate structure: "ATL Group of Companies" and "Sandals Group of Companies" are used interchangeably in their internal documents to refer to the same circle of affiliated entities.
-
Digital Triumph
October 31, 2026
•
[ ransomware, leak, technology ]
Digital Triumph was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-31. Sector: Technology. Country: Malaysia. telecommunications services Malaysia | Employee payroll records with names, national identity numbers and wages, statutory filings 2016 to 2025; Audited financial statements, tax filings and company bank account numbers; 2,552 customer invoices and delivery orders; The full customer service data room covering 309 organizations including banks, an embassy and government offices; The CRM customer database and the company mail archive, 8,700+ verified business emails with customer correspondence | [NOT PAID EXPOSED]
-
goldencrops.com.tw
October 31, 2026
goldencrops.com.tw was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-10-31. Sector: Agriculture and Food Production. Country: Taiwan. Website: goldencrops.com.tw. The company specializes in grain-based foods, nutritional products, plant-based foods and customized food manufacturing services. It operates three factories in