Full List

Search

Recent Breaches

• EPMMOP October 26, 2026 • [ ransomware, government, technology ] EPMMOP was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Country: Ecuador. Website: epmmop.quito.gob.ec. epmmop.quito.gob.ec EPMMOP is the Metropolitan Public Company of Mobility and Public Works of Quito, Ecuador, responsible for urban transportation infrastructure and public works across the capital district of 2.7 million people. It manages the city's integrated transport system including the new Quito Metro, launched in December 2023 as Ecuador's first subway line with 22.4 kilometers and 15 stations. The agency also operates the TelefriQo cable car, one of the highest in the world, plus trolleybus, BRT and cable car systems under the SITM integrated transit framework. It builds and maintains roads, bridges, sidewalks, drainage and one of Latin America's largest cycling networks. The company works within Quito's UNESCO World Heritage context, requiring unique engineering solutions for the historic center.
• WIKA Beton October 26, 2026 • [ ransomware, manufacturing, government ] WIKA Beton was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Manufacturing. Country: Indonesia. Website: wika-beton.co.id. wika-beton.co.id WIKA Beton (PT Wijaya Karya Beton Tbk) is Indonesia's largest precast and prestressed concrete manufacturer, founded in 1997 and listed on the Indonesia Stock Exchange since 2014 as part of state-owned Wijaya Karya group. It operates over 20 production plants across Indonesia from Java to Papua, producing more than 189 types of concrete products including bridge girders, piles, culverts and railway sleepers. Revenue is estimated at around 5.3 trillion rupiah with a market cap of 1.9 trillion, offering a 3.5 percent dividend yield and trading well below book value. The company is a primary supplier for Indonesia's massive infrastructure boom including toll roads, the Jakarta-Bandung high-speed railway and new port construction. Led as a state-owned enterprise, it benefits from priority access to government contracts and a unique nationwide plant network.
• Grupo Sanirent October 26, 2026 • [ ransomware, healthcare, government ] Grupo Sanirent was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Healthcare. Country: Mexico. Website: sanirent.com.mx. sanirent.com.mx Grupo Sanirent is a 100 percent Mexican company founded in 1983 in Mexico City, the national leader in portable toilet rental, mobile offices, septic services and waste management. With 178 employees and operations in all 32 Mexican states, it serves everything from private events and luxury weddings to massive construction sites and industrial operations. Its business lines include standard and VIP portable toilets, camper-style luxury stations, mobile office rentals, industrial drain cleaning with specialized vactor and guzzler trucks, and full waste collection including hazardous and bio-infectious materials. The company holds ISO 9001 certification and has won 53 government contracts with major institutions like IMSS, CFE, CAPUFE and the National Culture Secretariat. Its premium Eventos Especiales division provides luxury sanitary facilities for high-end events across the country. Key strengths are 43 years of experience, full national coverage, diversified service.
• SoftwareOne October 26, 2026 • [ ransomware, technology, leak ] SoftwareOne was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Technology. Country: Turkey. Website: softwareone.com. softwareone.com SoftwareOne Turkiye is the Turkish arm of SoftwareOne Holding AG, a Swiss-listed global software and cloud solutions provider that merged with Crayon to form a 13,000 person company operating in over 70 countries. Based in Ataehir, Istanbul and active since 2019, it employs around 40 to 60 people and works with 100 percent of Turkey's top 50 companies and 80 percent of the top 500. Services span software licensing advisory for Microsoft, IBM and Oracle, cloud migration across Azure, AWS and Google Cloud, DevSecOps, cybersecurity, AI and FinOps. In December 2024 SoftwareOne AG acquired full ownership of the Turkish entity, approved by the Turkish Competition Authority. Led by Managing Director Doa Pekdemir and CFO Hakan Keri, it has delivered projects for Turkish Airlines, TAV Airports, Coca-Cola and Vakf Katlm. Key strengths are its unmatched enterprise market coverage in Turkey and full access to the global SoftwareOne and Crayon ecosystem.
• Northwest Micro Systems October 26, 2026 • [ ransomware, technology ] Northwest Micro Systems was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Technology. Country: United States of America. Website: nwmicro.com. nwmicro.com Northwest Micro Systems, formally Northwest Micro Inc., is a private IT services and software company founded in 1998 in Atlanta, Georgia, serving small businesses with managed IT, cloud backup, email, CRM and custom .NET development. Led by founder and owner Leo Zhadanovsky, it has around 11 employees and steady revenue of roughly 5 million dollars. Its unique model offers affordable one-time products like the One 2 One email server and Speed To Success CRM for about 100 dollars with lifetime updates and support. The company positions itself as the anti-corporate alternative to Oracle and Microsoft, focused on keeping small business clients for life. Core strengths are 28 years of market presence, a loyal SMB client base and a low-overhead operation. Its tech stack centers on Microsoft 365, SQL Server and .NET with a mix of SaaS and on-premise tools.
• United Rolls October 26, 2026 United Rolls was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Manufacturing. Country: United States of America. Website: unitedrolls.com. unitedrolls.com United Rolls United Rolls Inc. is a US mill roll manufacturer founded in 1898 in Canton, Ohio, producing horizontally spun cast iron and steel rolls for hot strip, cold strip, plate and roughing mills worldwide. It is a subsidiary of WHEMCO and Park Corporation, employing around 64 to 110 people and generating estimated revenue of 10 to 20 million dollars. Its plant pours, heat treats, grinds and tests rolls under one roof with a capacity of 18,000 tons per year and rolls up to 66 tons. The company is known for its patented Synergy line, including Synergy 100 high-speed steel rolls and UR2-EC niobium carbide iron rolls that extend mill campaign life. Led by President Robert Feielin since 2024, it is part of WHEMCO, the only US maker of all roll types for flat rolling, with sales offices in Berlin and Sheffield. Key strengths are 128 years of heritage and full vertical integration.
• Spontini October 26, 2026 Spontini was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Hospitality. Country: Italy. Website: spontinimilano.com. spontinimilano.com Spontini is a Milanese pizza by the slice chain founded in 1953, now run by the third generation of the Innocenti family with Massimo Innocenti as CEO and his son Andrea leading operations. The group runs about 27 stores in Milan and 15 more across 10 countries including Japan, Korea, Qatar and Saudi Arabia, mostly through franchising with partners like M.H. Alshaya. It serves around 2.4 million pizza slices a year using an unchanged 1953 recipe with 100 percent Italian ingredients like Molini Certosa flour and Rodolfi tomatoes. Revenue has grown to roughly 30 million euro with over 800 employees, driven by expansion into travel locations like Milan Central station and Malpensa airport. In 2026 the brand entered retail with a frozen pizza line called Tonda 1953 produced with SanNico Food.
• nelsenarchitects.com September 28, 2026 • [ ransomware, technology, leak ] nelsenarchitects.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Professional Services. Country: United States of America. Website: nelsenarchitects.com. This article is based on a portion of the company's internal documents to which we gained access. Every statement has coordinates file, date, line number. Personal data has been masked the company failed to protect it, so we are protecting it.
• everon.com.ar October 31, 2026 • [ ransomware, technology ] everon.com.ar was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-10-31. Sector: Other. Country: Argentina. Website: everon.com.ar. The company is headquartered in Resistencia, in Chaco Province, and specializes in providing fiber-optic internet connectivity to residential customers and
• grifosespinoza.com October 31, 2026 • [ ransomware, retail, financial ] grifosespinoza.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-10-31. Sector: Other. Country: Peru. Website: grifosespinoza.com. Headquartered in Lima, the company manages fuel stations that serve individual motorists, commercial customers and other transportation-related businesses. Its core
• Holcim October 31, 2026 • [ ransomware, manufacturing ] Holcim was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-10-31. Sector: Manufacturing. Country: Switzerland. Holcim is a global building-materials and building-solutions company founded in Switzerland in 1912. It provides cement, aggregates, ready-mix concrete and high-value building solutions for infrastructure, buildings and industrial applications. Holcim focuses on sustainable construction through solutions such as ECOPact, ECOPlanet and ECOCycle. In 2025, the company generated CHF 15.7 billion in net sales and operated across 43 markets. [Sector: Manufacturing, Construction]
• Punta Shopping October 31, 2026 • [ ransomware, retail, finance ] Punta Shopping was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-10-31. Sector: Retail & E-Commerce. Country: Uruguay. Website: puntashopping.com.uy. Commercial organization in Uruguay, located in the city of Punta del Este Field of activity: shopping center management, rental of commercial space, retail trade and services. The archive contains the most important personal data and customer data. [Sector: Finance]
• JHAMF Group October 31, 2026 • [ ransomware, technology ] JHAMF Group was listed as a victim on the leak site of the Vexy Ransomware ransomware group; the attack is estimated to have taken place on 2026-10-31. Country: Bangladesh. Website: www.jhamf.com. JHAMF Group is a Colombian IT services company specializing in IT infrastructure, telecommunications, software licensing and implementation, network installation and certification, technical support outsourcing, and cloud infrastructure solutions, including Microsoft Azure.
• hccd-construction.com September 1, 2026 • [ ransomware, manufacturing ] hccd-construction.com was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-09-01. Sector: Manufacturing. Country: United States of America. Website: hccd-construction.com. The Holding Company for Construction and Development (HCCD) is an Egyptian public holding company (Egyptian Holding Stoc...
• southsign.in September 1, 2026 • [ ransomware, technology ] southsign.in was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-09-01. Sector: Professional Services. Country: India. Website: southsign.in. Southsign Technologies is an Indian proprietor firm established in 2021, headquartered in Dindigul, Tamil Nadu, India, o...
• amptc.net September 1, 2026 • [ ransomware, technology ] amptc.net was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-09-01. Sector: Technology. Country: United States of America. Website: amptc.net. Arab Maritime Petroleum Transport Company (AMPTC) is a leading Arab maritime shipping company established in 1972 as a s...
• Hawaii Law Enforcement Fedral Credit Union October 27, 2026 • [ ransomware, finance ] Hawaii Law Enforcement Fedral Credit Union was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Financial Services. Country: United States of America. Website: www.hlefcu.com.
• NuVista Federal Credit Union October 27, 2026 • [ ransomware, finance ] NuVista Federal Credit Union was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Financial Services. Country: United States of America. Website: www.nuvista.org.
• Bristol City Council October 27, 2026 Bristol City Council was listed as a victim on the leak site of the Wallstreet ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Government & Defense. Country: United Kingdom of Great Britain and Northern Ireland. Bristol City Council is the local authority for Bristol, England. It provides public services for residents, businesses, and visitors, including council tax and benefits, housing, schools, social care, waste and recycling, transport, planning, parks, and libraries
• RCOA- Regent Christian Online Academy October 27, 2026 • [ ransomware, education ] RCOA- Regent Christian Online Academy was listed as a victim on the leak site of the Booba Project ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Education. Country: Canada. Website: www.rcoa.ca. Hospitals and Health Care Stolen data: 1 GB.