Recent Breaches
-
October 29, 2026 INTAX, Inc. was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-10-29. Sector: Financial Services. INTAX, Inc. Complete file server of INTAX, Inc. (Lexington, KY, USA) - a property-tax compliance and bill-pay firm.892,867 files, 1.27 TBClient tax returns: 649,905 PDFs. Clients include AARP, ADT, Pilot Travel Centers, Wendy's, Valvoline, Zions, Raytheon (~100 companies).Client accounting: 100+ QuickBooks company files full ledgers, banks, payroll.Money: bank account + routing numbers, $910,000 wire form, signed W-9, proof the firm opens dedicated accounts and pays client taxes (~$73.6M/yr moved).Identity data: US passports of the owner and employees, driver license, birth certificate, W-2s with SSNs, IRS filings 20252026, medical insurance cards.60+ cleartext password files: US government tax portals + the firm's own QuickBooks.24,000+ emails, personal employee folders, lawsuit records, owner exit/sale planning. More
-
October 28, 2026 • W Interactive was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-28. Sector: Technology. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.w-interactive.com.
-
October 29, 2026 • IT Foods Industries was listed as a victim on the leak site of the Shiba ransomware group; the attack is estimated to have taken place on 2026-10-29. Sector: Agriculture and Food Production. Manufacturing
-
October 30, 2026 INTI International University & Colleges was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Education. Country: Malaysia. INTI International University & Colleges INTI International University & Colleges offers a diverse range of academic programs including undergraduate, postgraduate, and professional development courses across various fields such as business, engineering, health sciences, and design. More
-
October 30, 2026 • Innoe Asesores was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Professional Services. Country: Mexico. Website: www.innoeasesores.com.
-
October 30, 2026 • FrenchCreek Production was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Energy & Utilities. Country: United States of America. FrenchCreek Fall Safety specializes in manufacturing high-quality fall protection equipment. Th eir product range includes harnesses, lanyards, self-retracting lifelines, and comprehensive sa fety systems for various applications, including confined space entry and rescue. We will upload 40gb of corporate data soon. Detailed employee information (phones numbers, addr esses and so on), contracts and agreements, client and partners information, financials, specif ications and so on.
-
October 30, 2026 • Cipsa Industrias Sa De Cv was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Manufacturing. Country: Mexico. Cipsa Industrias Sa De Cv Compania Industrial Papelera Poblana, S.A. de C.V. (CIPPSA) and Tubos y Empaques de Puebla, S.A. de C.V. (TEPSA / KJAS TEPSA), a Mexican corrugated cardboard, packaging and paper-tube manufacturer. Complete employee HR records: names, dates of birth, home addresses, phone numbers, personal and corporate email addresses, CURP, RFC, IMSS numbers, salaries and employee badge photographs.Payroll records, tax data, fiscal validation files and HSBC payroll-bank files containing employee account and CLABE data.Information showing executive compensation through an **honorarios** arrangement outside the regular payroll system.Financial and industrial reports, sales/procurement/payroll budgets, production costs, operational analytics, invoices and accounting records.Customer complaint records and overdue receivables data.Occupational-safety, psychosocial-risk, industrial-incident and hazardous-waste documentation. More
-
October 30, 2026 • P... was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-10-30. Redacted entry - full company name pending disclosure (FULL DATA TIMER active).
-
October 30, 2026 • Louisiana Crane & Construction was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Manufacturing. Country: United States of America. Website: la-crane.com. A construction management company.
-
October 30, 2026 • Illinois Work Injury Resource Center (IWIRC) was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Healthcare. Country: United States of America. Website: iwirc.biz. A comprehensive occupational health and rehabilitation service provider located in Peoria, IL.
-
October 30, 2026 • Facts N Figures was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Professional Services. Country: United States of America. Website: factsnfiguresinc.com. A consumer insights research company.
-
October 31, 2026 • Bi Link was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-31. Country: United States of America. Website: bi-link.com. bi-link.com Revenue $380.2 Million Bi-Link US precision manufacturer founded in 1961 (HQ Bloomingdale, IL), making metal stampings and injection-molded plastics with in-house tooling and assembly for automotive, medical, wireless, and consumer electronics OEMs. It owns plants in Shanghai, Nanning, Mexico (Jurez), and a new Vietnam site (2024), offering prototype-to-production under one roof. Revenue isn't reliably public broker estimates range wildly from ~$10M to $50M, but a TaiPEX filing suggests ~$5M+/month after consolidation. The critical development: in October 2025 family owners agreed to sell the company to Taiwan-listed Donpon Precision, closed and consolidated from Jan 2026. Despite the site still claiming "family-owned", control is now Donpon's, and long-time CEO Tom Harris has exited. Certifications (ISO 9001, ISO 13485, IATF 16949) support real OEM work (e.g. Teleflex via a 3D Systems case)
-
October 28, 2026 • Cherry Bekaert was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-28. Sector: Professional Services. Country: United States of America. Website: cbh.com. cbh.com Revenue $446.7 Million CBH Group Australia's largest grain cooperative, founded in 1933 in Perth and owned by over 3,700 farmer shareholders across Western Australia. It operates the world's largest grain export network with around 200 receival sites, 20 million tons of storage capacity and four export terminals at Kwinana, Albany, Geraldton and Esperance. Each year it handles approximately 20 million tons of grain and exports 15 to 17 million tons, mainly wheat, barley and canola to Asia, the Middle East and beyond. Led by CEO Brendan White, it has invested over 2 billion dollars in infrastructure modernization including rail upgrades, solar energy and digital platforms like the CBH App. The cooperative is financially strong with a BBB credit rating and returns profits to farmers through patronage dividends. It operates its own rail fleet of 360 wagons, runs quality testing laboratories at every site and is expanding port capacity to load Panamax vessels at Kwinana and Albany.
-
October 28, 2026 • SK Capital Partners was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-28. Sector: Financial Services. Country: United States of America. Website: skcapitalpartners.com. skcapitalpartners.com Revenue $63 Million SK Capital Partners is a New York-based private equity firm founded in 2007 as a spinoff from Apax Partners, managing approximately 10 billion dollars across 60 plus investments in specialty chemicals, pharmaceuticals and ingredients. Led by co-founder Barry Siadat, it targets control investments in companies with 100 million to 1 billion dollars in revenue and has built platforms like Advansix, Sartomer and Cura Particles through buy-and-build strategies. Its portfolio companies employ over 12,000 people and generate more than 5 billion dollars in annual revenue. Recent deals include the July 2026 acquisition of Lorama Group and the October 2026 purchase of Vesuvius Americas refractory assets. Key strengths are deep sector expertise in real-economy industrial businesses and proven IPO and trade sale exits.
-
October 28, 2026 First Dental was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-28. Sector: Healthcare. Country: United States of America. Website: myfirstdental.com. myfirstdental.com First Dental Care is a dental practice network in Massachusetts founded by Dr. Farshad Ghobbeh, who opened his first clinic in Medford in 2008 and expanded to Somerville in 2012 and four more locations including Arlington, Watertown, Acton and Bedford. With over 20,000 patients and 18 years of experience, it offers general and cosmetic dentistry, dental implants, Invisalign, emergency care and smile makeovers across six clinics. Its Smile Now Pay Later model with Klarna makes implants available from 58 dollars per month and whitening at 149 dollars instead of 500. The team is multilingual speaking English, Spanish, Portuguese, Russian, Chinese and Persian to serve diverse Massachusetts communities. It accepts over 15 insurance plans including Aetna, Blue Cross Blue Shield, Delta Dental and MassHealth. Key strengths are 18 years of community trust, multi-location accessibility, affordable payment plans and Dr. Ghobbeh's personal commitment to quality oral health.
-
October 26, 2026 • Regency Park Oak Knoll was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Other. Country: United States of America. Website: www.regencypk.com. www.regencypk.com https://www.zoominfo.com/c/regency-park-oak-knoll/235454820 Regency Park Oak Knoll specializes in providing world-class memory care and assisted living services for residents with dementia or memory loss in Pasadena, California. With over 50 years of experience, their expert staff offers personalized care, socialization, and a range of therapies tailored to each resident's needs. The facility is dedicated to ensuring a safe, secure, and homelike environment, focusing on the physical, emotional, and spiritual well-being of its residents. Recognized as a premier memory care community, Regency Park Oak Knoll is committed to treating every resident like family.
-
October 26, 2026 • Mann Group was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Manufacturing. Country: Australia. Website: manngroup.com.au. manngroup.com.au Mann Group is an Australian multi-disciplinary engineering and construction company founded in 1992 in Sydney, operating through eight subsidiaries including Mechtronic Engineering, Mann Fab, Mann Energy, Mann Enviro and Mann Solar. With 350 plus employees, it is Australia's leading provider of thermal, electrical, environmental and sanitary engineering solutions. The group covers pipe fabrication, structural steel, pressure vessels, industrial boilers, HVAC, waste-to-energy and renewable energy systems. Its headquarters and central workshop are located in Milperra, Sydney, with a financial year ending in June.
-
October 26, 2026 • Lydenburg Toyota was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Retail & E-Commerce. Country: South Africa. Website: lydenburg.toyota.co.za. lydenburg.toyota.co.za Lydenburg Toyota is a Toyota dealership in Lydenburg (Mashishing), Mpumalanga, South Africa, part of the Toyota South Africa Motors dealer network selling new Toyota and Lexus vehicles, certified used cars, service, parts and financial services. The town is also home to Toyota SA Manufacturing, the largest Toyota plant in Africa, assembling Hilux, Fortuner and Corolla Cross with engines and components exported to over 40 countries including the United States. Toyota SA Motors holds 24.2 percent of the South African vehicle market and exported 187 billion rand in FY2023, with 8500 direct employees across its plants. The company invested 2.43 billion rand in hybrid technology and is developing a 2.2 billion dollar Mbombela megaproject including housing, schools and hospitals around the Lydenburg plant. Corolla Cross production from Lydenburg began exports to the US in April 2024.
-
October 26, 2026 • Unisa Shoes was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Retail & E-Commerce. Country: Spain. Website: unisa.es. unisa.es Unisa Shoes is a Spanish footwear company founded in 1973 in Elche, Alicante, with 52 years of history across three generations of the Prez Parres family. It designs and produces women's, men's and accessories collections sold in 70 plus countries through around 30 own stores, 150 plus Espacio Unisa points of sale and its e-commerce platform. Revenue reached 25.3 million euro in 2024 with 145 employees, and international online sales hit a record 16 percent in 2025. Led by CEO Carlos Prez Parres, the company launched its men's line in 2021 and an eco-friendly recycled suede collection, positioning itself as an accessible Spanish lifestyle brand. It opened a 300 square meter showroom in Madrid and a subsidiary in Italy to expand European distribution. Core strengths are family heritage, global reach across 70 countries and a diversified omnichannel sales model.
-
October 26, 2026 • Belmont Resorts was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Hospitality. Country: Australia. Website: belmontresorts.com. belmontresorts.com Belmont Resorts is a small boutique hotel in McLeodganj, Dharamshala, Himachal Pradesh, operating as Hotel Satovari Pride on the Strawberry Hills with panoramic views of the snow-capped Dhauladhar mountains. It has just 14 rooms across four categories from Deluxe to Premium Gold corner suites with private balconies, mini-fridges and sunrise-sunset views from both sides. Positioned as a value-for-money alternative next to ITC Hotels and Lemon Tree, it offers a pure vegetarian restaurant with Jain cuisine, 24/7 power backup, fast WiFi and free parking. The hotel caters to relaxation, spiritual tourism, trekking and long-term workation stays with tour packages to Khajjiar and Dalhousie.