Recent Breaches
-
October 27, 2026 • Machelen (Belgium) was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-10-27. Country: Belgium. Website: machelen.be. Machelen (Belgium) Machelen (Belgium) - municipal and social welfare (OCMW) file servers1.3 million files, ~2.9 TB. Working copy + backup copy (lawer2/lawer3). Language: Dutch, partly French.Contents:Social welfare and migration service client files: passports, ID cards, residence permits, sick notes.WZC nursing home: medical files, staff HR dossiers, workplace accidents.Civil status records (births, marriages) with national register numbers (NISS/RRN).Payslips, financial data.Correspondence (~23k messages), employee home folders.Databases and backups: full OCMW database backup (6 GB, 09/2026), 645 .mdb databases, 12,873 .dbf, 110 .bak (17 GB).Verified: 13,319 files with personal data. Among them - a valid Belgian ID card (expiry 02/2029), Belgian and Moroccan passports, national register numbers (RRN), sick notes with patient addresses, medical documents (GDPR Art. 9 special categories). More
-
October 27, 2026 • Ryder was listed as a victim on the leak site of the Whitearmor ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Transportation. Country: United States of America. Ryder is a Fortune 500 transportation and supply chain management company providing fleet management, dedicated transportation, and logistics solutions. What we hold: 18.75M rows, 328 CSVs, consumer names, phones, emails, driver/associate PII, cleartext API keys, LMS credentials, FTP/telematics configs from RyderView, RLM, EFT. Our demand is only $20M in BTC... i swear. Samples can be found below. Emails with instructions will be sent to Ryder shortly, and no we did not buy access from 'shadowbyte' or whatever the niggas name is on pwnforums. Contact if you do not receive the instructions: Session: 0547b7f96d469ecb332e89d0108e71c92df5bacff6c4ed5b9801ab5fffe872ee67 Email: whitearmorrxd@proton.me
-
October 28, 2026 • PQE Group was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-10-28. Sector: Professional Services. Country: Italy. Founded in 1998, PQE Group provides technology solutions and compliance consulting services to the Life Sciences industry. The company is headquartered in Reggello, Florence. Note : The Full Data volume is coming as duplicati (dindex.zip.aes), Our Team with our Affiliates will try to enum the PassPhrase From the Target Network and Crack it with a Custom Pass lists and custom tools, We Also Gonna Share the Guide to how you as a hacker can get the hash with aescrypt2hashcat.pl and Crack it using hashcat, The Rest will depend on your Crack process to see the full data volume, We also available to Recover the data to the company when they contact us via official channels and stop the leak process, Thank you.
-
October 28, 2026 • Fortrex was listed as a victim on the leak site of the Wallstreet ransomware group; the attack is estimated to have taken place on 2026-10-28. Sector: Manufacturing. Country: United States of America. Website: fortrexsolutions.com. Fortrex is the premier provider of food safety solutions in North America, offering comprehensive sanitation services, chemical products and intervention solutions for food processing facilities. Our team of skilled food sanitors, microbiologists, technical experts and engineers are committed to keeping USDA, FDA, and CFIA processing facilities clean, safe, and audit-ready
-
October 28, 2026 • xspringcapital.com was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-10-28. Sector: Financial Services. Country: Thailand. Website: xspringcapital.com. XSpring Capital Public Company Limited is a company that operates in the business of investing in va...
-
October 29, 2026 • California School Boards Association was listed as a victim on the leak site of the Booba Project ransomware group; the attack is estimated to have taken place on 2026-10-29. Sector: Education. Country: United States of America. Website: www.csba.org. Education Management Stolen data: 80 GB.
-
October 29, 2026 • www.viehhauser-kfz.at was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-10-29. Sector: Transportation. Country: Austria. Website: www.viehhauser-kfz.at. Viehhauser KFZ GmbH & Co KG is an Austrian family-owned automotive dealership and service center founded on March 20, 19...
-
October 29, 2026 • Proterial was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-29. Sector: Manufacturing. Country: Japan. Website: www.proterial.com.
-
October 29, 2026 • sunnybrook.ca was listed as a victim on the leak site of the Scarlettgroup ransomware group; the attack is estimated to have taken place on 2026-10-29. Sector: Healthcare. Country: Canada. Website: sunnybrook.ca. Sunnybrook Health Sciences Centre is a leading Canadian teaching and research hospital based in Toronto, providing specialized healthcare services in trauma, cancer, cardiac care, rehabilitation, and emergency medicine.
-
October 29, 2026 • Antwerp House Dentistry was listed as a victim on the leak site of the Shiba ransomware group; the attack is estimated to have taken place on 2026-10-29. Sector: Healthcare. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.antwerphousedentistry.co.uk. Local dentist clinic based in Cambridge, London
-
October 29, 2026 • Friendly Senior Living was listed as a victim on the leak site of the Shiba ransomware group; the attack is estimated to have taken place on 2026-10-29. Sector: Healthcare. Hospitals & Physicians Clinics
-
October 29, 2026 TDS Telecommunications LLC. was listed as a victim on the leak site of the Global Secret Group ransomware group; the attack is estimated to have taken place on 2026-10-29. Sector: Energy & Utilities. Country: United States of America. Website: tdstelecom.com. Country: Madison, Wisconsin, US | Website: tdstelecom.com | Revenue: $1.30 Billion | Industry: Telecommunications, Internet Service Providers | Employees: 3,000-5,000 | Properties: 27.4 GB (79,679 Files, 1,943 Folders)
-
October 30, 2026 • Service One Transportation was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Transportation. Service One Transportation, Inc. is a trucking and logistics company based in Wisconsin, offeri ng a wide range of transportation services including Over the Road, Regional, and Refrigerated truckload services. We will upload 5gb of corporate data soon. Detailed employee information (passports, SSN number s, tax ID numbers and much more), lots of contracts and agreements, client information, detaile d financials, NDA and so on.
-
October 30, 2026 • Hudson & Hudson Sign Products was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Manufacturing. Country: United States of America. Hudson & Hudson is a second generation sign company, located in the heart of Houston. From its humble beginnings, in the back of a garage near downtown Houston, it has grown to one of the pr emier sign manufacturing facilities in the US. We will upload 14gb of corporate data soon. Employee information, contracts and agreements, cli ent information, financials, drawings and so on.
-
October 30, 2026 • Rapid Manufacturing was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Manufacturing. Website: Rapid Manufacturing. [manufacturer] Rapid Manufacturing a 50-year-old electronics contract manufacturer in Anaheim, California with operations in Ensenada, Mexico. Rapid Manufacturing is not a household name. But it is a critical Tier-1 supplier to SpaceX (Falcon & Starship programs), Anduril, Northrop Grumman, Rocket Lab, L3Harris, Collins Aerospace (RTX), and Millennium Space (Boeing). It builds the wire harnesses, electro-mechanical assemblies, and box builds that go inside rockets, missiles, and satellites. The exposed material includes:
> ITAR-controlled engineering drawings and manufacturing processes for Falcon 9/Heavy, Starship, and Draco propulsion systems RTD soldering acceptance criteria, visual inspection standards, cable thermocouple assemblies, and production master plans. 26 ITAR customer quoting accounts including SpaceX, Anduril, Northrop Grumman, Rocket Lab, L3Harris, Collins Aerospace, and Millennium Space the complete defense/space revenue architecture. 6001,200 employee records spanning US (SSN, bank accounts, payroll, I-9/immigration) and Mexico (RFC, CURP, IMSS, bank accounts, nminas) with data from 2019 through August 2026. Attorney-client privileged materials settlement agreements, severance terms, internal investigation files, and a recorded termination meeting (audio). -
October 30, 2026 • Palletline was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Transportation. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.palletline.co.uk.
-
October 30, 2026 • Societe Ivoirienne De Telediffusion was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Technology. Country: Cte dIvoire. Website: www.sidt.ci.
-
October 30, 2026 • Sistemas Visuales 360 was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Technology. Country: Mexico. Website: www.sistemasvisuales360.com.mx.
-
October 30, 2026 A... F... was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-10-30. Redacted entry - full company name pending disclosure (FULL DATA TIMER active).
-
October 30, 2026 • M... H... was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-10-30. Redacted entry - full company name pending disclosure (FULL DATA TIMER active).