Recent Breaches
-
October 27, 2026 • GreenbergFarrow was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Professional Services. Website: GreenbergFarrow. [architecture] GreenbergFarrow a respected ESOP-owned architecture firm headquartered in Atlanta, Georgia with offices in Charlotte, Dallas, Los Angeles, New York, Myrtle Beach, and international operations in Mexico, Colombia, India, and Canada. The dataset spans three major divisions: Client Libraries (152 client folders, AF): Proprietary architectural designs, prototypes, and specifications for major retail chains, banks, and restaurant brands including Circle K, Capital One, 7-Eleven, Chase Bank, Chipotle, Comcast, Bath & Body Works, and DSW. Corporate Library: The entire institutional memory 24 years of accounting (invoicing, cleared checks, budgets from 20022026), administration (7 acquisitions, active litigation, ESOP governance, FBI clearance, employment agreements), and 72 GB of proprietary CAD standards. Discipline Libraries (283 GB): Complete architecture reference library. The exposed material includes: 300650+ individuals' personal data SSNs from three years of payroll tax returns, 57+ W-9 forms, employee censuses with DOBs/salaries/home addresses, and an employee's complete termination package including Medicare enrollment and voicemail recording.
7,450+ cleared check images with routing numbers, account numbers, payee details, and authorised signatures spanning 20142023. Complete active litigation file for GF v. Storm/RFW (1:25-cv-03532) complaint, amended complaint, answers to interrogatories, discovery requests and responses, settlement negotiations, D&O insurer correspondence, and engagement letters. The entire attorney-client privilege chain. FBI facility clearance documents SF 328 (Certificate Pertaining to Foreign Interests), DD 441 (Facility Clearance), Key Management Personnel lists, and SCIF project architectural drawings acquired through DBI Architects. Complete acquisition records for 7 deals (5 completed + 2 in progress) including purchase prices, due diligence materials, certified financial statements, and wire instructions. -
October 27, 2026 • Hudson River Museum was listed as a victim on the leak site of the Booba Project ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Education. Country: United States of America. Website: www.hrm.org. Museums, Historical Sites, and Zoos Stolen data: 115 GB.
-
October 27, 2026 • Kerckstede vzw was listed as a victim on the leak site of the Booba Project ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Other. Country: Belgium. Website: www.althus.be. Hospitals and Health Care Stolen data: 10 GB.
-
October 27, 2026 • MicroSearch was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Technology. Website: www.microsearch.net. United States
-
October 27, 2026 • UPDATE: UNM was listed as a victim on the leak site of the BYOD ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Education. We are offering the decryption key for the remaining of locked devices for free (ONLY for the hospital sector) we did not know that it was running machines related to assisting patients in real-time, (we would keep it locked if it was appointments, patient information + research data only), we are still going to keep the data, but we will provide the decryption key for the hospital sector only. Feel free to contact us on Session. To any patient that was affected, please provide us proof, and we will pay you up to $2500 each for the inconvenience. We are sorry once again. We have morals and we have a heart, we are not villains, but we will still continue to hold companies responsible for bad security leading to the compromise of any customer data. That's the whole reason why we came about and we plan to keep it that way.
-
October 28, 2026 • Company #112 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-28. Country: Malaysia. telecommunications services Malaysia | [PENDING EXPOSURE: settlement window open]
-
October 28, 2026 • EWM Group was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-10-28. Sector: Other. Country: United Kingdom of Great Britain and Northern Ireland. Website: EWM Group. [fashion] EWM Group the parent group behind Bonmarch, Edinburgh Woollen Mill, and Peacocks, three of the UK's best-known value fashion chains. The exposed material includes: 503,878 loyalty programme member records full name, home address, date of birth, phone, mobile, email, loyalty card number, and transaction history spanning 20002026. ~21,000 employee records salary, National Insurance number (via P11D), bank sort code and account number (WAGESTRANSFER database), home address, emergency contacts, maternity/paternity data, sickness absence, accident reports with injury details.
100+ GB of Outlook PST email archives complete email histories for named staff members spanning years of business operations. 313+ SQL Server database backups across 122 unique databases the entire digital brain of the retail operation. 83 GB of e-commerce transaction data every online order from January 2021 to August 2026. -
October 28, 2026 • Roberts Consulting Services was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-10-28. Sector: Professional Services. Website: jsrconsulting.com. RCS is a full-service engineering firm specializing in Construction Materials Testing, Construc tion Engineering and Inspection (CEI), and QA/QC services, founded in 2013. With over 60 years of combined FDOT experience, RCS provides high-quality professional services to clients in road way and bridge construction projects throughout Central Florida. We will upload 28gb of corporate data soon. Detailed employee information (passport scans, DLs, SSN), contracts and agreements, client information, financials, NDA, etc.
-
October 28, 2026 • Trulife was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-10-28. Sector: Healthcare. Website: trulife.com. Trulife is an internationally recognized company with over 60 years of experience in the develo pment and manufacture of specialized healthcare and consumer products. Their extensive product range includes breastcare solutions, orthotics, lower limb prosthetics, walking aids, and press ure care products. We will upload 68gb of corporate data soon. Detailed employee information (passport scans, DLs, medical certs, birth certs), contracts and agreements, confidential files (employee violations , terminations and so on), financials, NDA, etc.
-
October 28, 2026 • The Anglican International School was listed as a victim on the leak site of the Global Secret Group ransomware group; the attack is estimated to have taken place on 2026-10-28. Sector: Education. Country: Israel. Website: aisj.co.il. Country: Grenada.Spain | Website: aisj.co.il | Revenue: $11.1 Million | Industry: Primary and Secondary Education | Employees: 50-100 | Properties: 218 GB (257,960 Files, 28,378 Folders)
-
October 27, 2026 • A&B Lab was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Other. Country: United States of America. Website: ablabs.com. Provides Laboratory Services.
-
October 26, 2026 • Cyrious Software was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Technology. Country: United States of America. Website: cyrious.com. Specialized business management software designed for sign, graphics, and print providers
-
October 28, 2026 • Lowenstein Sandler LLP was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-10-28. Sector: Professional Services. Country: United States of America. Founded in 1961 and headquartered in New York City, New York, Lowenstein Sandler is a national law fir
-
October 28, 2026 • Santiam Hospital & Clinics was listed as a victim on the leak site of the anubis ransomware group; the attack is estimated to have taken place on 2026-10-28. Sector: Healthcare. Country: United States of America. A major medical data breach.
-
October 28, 2026 • susannecerda.com was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-10-28. Country: Mexico. Website: susannecerda.com. Die Unternehmensgruppe Susanne Cerd bietet nicht nur Dienstleistungen im Bereich Unternehmensgrndu...
-
October 29, 2026 • Terrebonne Parish Government was listed as a victim on the leak site of the Booba Project ransomware group; the attack is estimated to have taken place on 2026-10-29. Sector: Government & Defense. Country: United States of America. Website: www.tpcg.org. Government Relations Services Stolen data: 105 GB.
-
October 29, 2026 • Circleville Police Department was listed as a victim on the leak site of the Booba Project ransomware group; the attack is estimated to have taken place on 2026-10-29. Sector: Government & Defense. Country: United States of America. Website: www.circlevillepolice.com. Government Administration Stolen data: 15 GB.
-
October 29, 2026 • South Weber City was listed as a victim on the leak site of the Booba Project ransomware group; the attack is estimated to have taken place on 2026-10-29. Sector: Government & Defense. Country: United States of America. Website: www.southwebercity.gov. Government Administration Stolen data: 295 GB.
-
October 29, 2026 National Association of Credit Management was listed as a victim on the leak site of the Booba Project ransomware group; the attack is estimated to have taken place on 2026-10-29. Sector: Financial Services. Country: United States of America. Website: www.nacm.org. Financial Services Stolen data: 38 GB.
-
October 29, 2026 • LifeFone was listed as a victim on the leak site of the Booba Project ransomware group; the attack is estimated to have taken place on 2026-10-29. Sector: Healthcare. Country: United States of America. Website: www.lifefone.com. Medical Equipment Manufacturing Stolen data: Less than 1 GB.