-
Penco Products
October 23, 2026
•
[ ransomware, manufacturing ]
Penco Products was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-23. Sector: Manufacturing. Country: United States of America. Website: pencoproducts.com. pencoproducts.com Penco Products US metal manufacturer founded in 1869, now based in Greenville, North Carolina, making steel lockers, shelving, pallet racks and garment dispensers at its 375,000 square foot ISO certified plant in Hamilton. It is part of the IMC industrial group and has around 200 employees, up to 350 in summer peaks. Its lockers are an American standard in schools, gyms, hospitals and military facilities, with new smart locker lines for contactless pickup. Led by CEO Craig Atwater since 2021, it sells through a national distributor network with QuickShip warehouses across the country. Strengths are 157 years of brand trust, full US vertical production and diversification into school furniture.
-
P****y
October 13, 2026
P****y was listed as a victim on the leak site of the payoutsking ransomware group; the attack is estimated to have taken place on 2026-10-13. Country: United States of America. Website: p****.com.
-
Merical LLC
October 1, 2026
Merical LLC was listed as a victim on the leak site of the payoutsking ransomware group; the attack is estimated to have taken place on 2026-10-01. Country: United States of America. Website: merical.com. [AI generated] N/A
I don't have reliable, verified information about a specific company named "Merical LLC." There appear to be multiple businesses using similar names, and I cannot confirm which one you're referring to or verify accurate details about its operations, industry, or country without risking providing inaccurate information. If you can share additional context (such as location, website, or industry sector), I can try to assist further.
-
Morrow Meadows Corporation
September 23, 2026
•
[ ransomware, manufacturing, technology ]
Morrow Meadows Corporation was listed as a victim on the leak site of the payoutsking ransomware group; the attack is estimated to have taken place on 2026-09-23. Sector: Other. Country: United States of America. Website: morrow-meadows.com. [AI generated] Morrow Meadows Corporation is a United States-based electrical contracting company. It provides electrical construction, design-build, and engineering services for commercial, industrial, institutional, and data center projects. Operating primarily in California, the company serves sectors such as technology, healthcare, education, and manufacturing, offering services including power distribution, lighting, fire alarm systems, and electrical infrastructure installation.
-
Arthritis Center of Riverside
October 24, 2026
•
[ ransomware, healthcare, leak ]
Arthritis Center of Riverside was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-24. Sector: Healthcare. Country: United States of America. Website: thearthritiscenter.com. rheumatology medical practice Riverside, California, United States | Scanned laboratory requisitions of named patients with dates of birth, home addresses and Medicare subscriber details, April through October 2026; Accounts receivable aging with patient names, account numbers, insurers and balances; Patient billing files and records correspondence of the practice | [NOT PAID EXPOSED]
-
www.optika.ca
October 24, 2026
•
[ ransomware, healthcare, technology ]
www.optika.ca was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-10-24. Sector: Technology. Country: Canada. Website: www.optika.ca. Optika Eye Care Center (Centre Visuel Optika Optomtristes) is a Canadian optometry and optical care clinic located in ...
-
www.zhservices.com
October 24, 2026
•
[ ransomware, technology, healthcare ]
www.zhservices.com was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-10-24. Sector: Professional Services. Website: www.zhservices.com. ZH Healthcare (Z & H Consultancy Services Private Limited) is an Indian health-tech platform and EMR/EHR solutions provi...
-
Heber City, UT
October 24, 2026
•
[ ransomware, government ]
Heber City, UT was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-24. Sector: Government & Defense. Country: United States of America. Website: www.heberut.gov.
-
Castle Howard Estate
October 24, 2026
•
[ ransomware, retail ]
Castle Howard Estate was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-24. Sector: Hospitality. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.castlehoward.co.uk.
-
AB InBev
October 25, 2026
•
[ ransomware, manufacturing, retail ]
AB InBev was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-10-25. Sector: Agriculture and Food Production. Country: Belgium. Website: ab-inbev.be. AB InBev is the world's largest brewer, headquartered in Belgium, known for Budweiser, Corona, and Stella Artois .
We hold 329,244 AB InBev social-listening alerts, 2,510 corporate emails across all subsidiaries, 19K access logs, GBS portal records, internal PKI certificates, and 3.2GB of Azure blob assets.
Our demand is $1,000,000 in BTC. [Sector: Retail, Manufacturing]
-
ETO
October 25, 2026
•
[ ransomware, manufacturing, technology ]
ETO was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-25. Country: Germany. Website: www.etogruppe.com.
-
Hossner-Textil GmbH
October 25, 2026
•
[ ransomware, manufacturing ]
Hossner-Textil GmbH was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-25. Sector: Manufacturing. Country: Germany. Website: www.hossner-textile.de.
-
Miletic GmbH
October 26, 2026
•
[ ransomware, manufacturing ]
Miletic GmbH was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-10-26. Country: Germany. Miletic GmbH is a German specialized contractor headquartered in Bad Schnborn that has been operating in the construction sector since 1989. The company's core business focuses on construction and repair work for ecologically sensitive industrial facilities, including gas stations, tank farms, and operations governed by German water protection laws (WHG Class LAU facilities). Its service portfolio includes joint sealing and remediation, the application of chemical-resistant protective coatings, concrete construction, and related earthworks.
-
Glückauf-Vermessung GmbH
October 26, 2026
Glckauf-Vermessung GmbH was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Professional Services. Country: Germany. Glckauf-Vermessung GmbH (glueckauf-vermessung.de) is a German engineering and technical company based in Sondershausen, operating as part of the ERCOSPLAN Group and specializing in surveying and mine surveying (Bergbau-Markscheiderei). Its core business activities include geodetic support for the mining industry, geological exploration, and work related to salt and mineral deposits. The company provides services for surface and underground measurements, deformation monitoring, and the preparation of technical documentation for industrial projects.
-
Seufert Construction
October 26, 2026
•
[ ransomware, manufacturing ]
Seufert Construction was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Manufacturing. Country: United States of America. Website: www.seufertconstruction.com.
-
Miller Stratvert
October 26, 2026
Miller Stratvert was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-26. Country: United States of America. Website: www.mstlaw.com.
-
Gamdom
October 26, 2026
•
[ ransomware, financial, technology ]
Gamdom was listed as a victim on the leak site of the Whitearmor ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Other. Gamdom is an unregulated crypto casino and sportsbook founded in 2016. It recently suffered a hot-wallet breach, with founder Felix Romer reporting over $3 million in losses, though on-chain analysts estimate the damage closer to $4.2 million.
We hold Gamdom's full user database, 15,420,003 accounts with 146 columns, with Gamdom's total combined profit value exceeding $1 billion.
The way in was something internal, a machine account that was already sitting in their admin side (Metawin).
Issued years back, nobody ever rotated it. Never meant to leave the building.
It had admin reach, and everything after that was their own stuff anyway, their control panels and secret stores.
About your provably fair: what it promised and what it delivered were never the same thing.
We demand $15,000,000 in BTC.
Emails with instructions will be sent to you directly.
To verify, a sample can be found below.
-
Ingelectus Innovative Electrical Solutions S.L.
October 26, 2026
•
[ ransomware, energy, technology ]
Ingelectus Innovative Electrical Solutions S.L. was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Energy & Utilities. Country: Spain. smart grid engineering firm Spain | Live electrical telemetry sampled from the plant control network, with voltage, current and energy readings recorded on 23 October 2026; Complete inventory of 49 network devices including substation switches, remote terminal units, power meters and server management controllers, with locations and firmware details; Full maps of the internal control network segments and message broker metrics that carry the plant data | [NOT PAID EXPOSED]
-
Morrison Cohen
October 26, 2026
•
[ ransomware, finance, government ]
Morrison Cohen was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Professional Services. Country: United States of America. [AI generated] Morrison Cohen LLP is a United States law firm headquartered in New York City. It provides legal services across practice areas including corporate law, litigation, bankruptcy and restructuring, real estate, intellectual property, and white-collar defense. The firm serves corporate clients, financial institutions, and individuals. It operates within the legal services industry, primarily serving businesses in the New York metropolitan area and nationally.
-
Natuzzi
October 27, 2026
•
[ ransomware, manufacturing ]
Natuzzi was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Manufacturing. Country: Italy. [AI generated] Natuzzi S.p.A. is an Italian manufacturer and distributor of furniture, specializing in leather and fabric upholstered sofas, chairs, and home furnishings. Founded in 1959 and headquartered in Santeramo in Colle, Italy, the company operates in the home furniture and interior design industry. Natuzzi designs, produces, and markets its products globally, selling through its own branded stores and third-party retailers across multiple countries.