Recent Breaches
-
October 21, 2026 • Company #100 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-21. rheumatology medical practice Riverside, California, United States | [PENDING EXPOSURE]
-
October 21, 2026 • Cascade Flooring America was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-10-21. Sector: Retail & E-Commerce. Country: United States of America. Cascade Flooring America is a flooring store located in Vancouver, WA, offering a wide range of products including flooring, furniture, window coverings, and kitchen and bath services. The c ompany caters to homeowners looking for premium flooring solutions, with options such as carpet , hardwood, luxury vinyl, laminate, and tile. We will upload 50gb of corporate data soon. Employee personal information (passports and other personal information), client information, financials, confidential files, NDA, and so on.
-
October 21, 2026 • Hanjin Information Systems & Telecommunication Co., Ltd. was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-21. Sector: Technology. Country: South Korea. IT services South Korea | A complete corporate identity directory of an IT services company, 999 personnel accounts with names and corporate email addresses; The client staffing structure showing which personnel are seconded to major client organizations; Third party vendor accounts and their corporate domains | [NOT PAID EXPOSED]
-
October 21, 2026 • Allmand-Smith Limited was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-10-21. Sector: Manufacturing. Country: United Kingdom of Great Britain and Northern Ireland. Website: Allmand-Smith Limited. [distributor, manufacturer] Allmand-Smith Limited (trading as Stormguard) a UK manufacturer and distributor of building products headquartered in Stoke-on-Trent. Domain admin credentials in plaintext and a full DC dump STORMGUARD\MichaelAdmin / 5t0rmGuard Complete NatWest banking infrastructure blfw.db (21.3 MB live Bankline database with account numbers, sort codes, payee details, and transaction logs), plus WorldPay payment gateway credentials (WorldPay Account Details.xlsx), plus Sage 200 AR/AP containing bank details for every customer and supplier across all 15 entities. NatWest has 3 outstanding registered charges (Jun 2026). Full payroll for every employee, current and former Payroll.zip (6.1 GB, 1,185 files) from Sage Payroll: NI numbers (lifetime identifiers), tax codes, PAYE history, gross/net pay per period, bank account details for BACS salary payments, pension contributions, P45/P60 records. Complete financial records for 15 entities Sage 200 databases for Allmand-Smith Ltd, Stormguard Fabrications, Stormguard Sills, Rainwater Systems, Floodplan, Bridgemill, Chelford, Paradise, MJ Associates, SAS Partners, Specialised Aluminium Supplies, two pension funds, plus the consolidated age200_AllmandSmithLtd.bak (2.1 GB). Management accounts (JanJul 2024), nominal trial balances, bank reconciliations (102,662 cash at year-end). Revenue: 17.66M, profit: 1.01M, financial health: 12/100 (distressed).
-
October 21, 2026 • mvjllp.com was listed as a victim on the leak site of the BrainCipher ransomware group; the attack is estimated to have taken place on 2026-10-21. Website: mvjllp.com.
-
October 21, 2026 • prosomnus.com was listed as a victim on the leak site of the BrainCipher ransomware group; the attack is estimated to have taken place on 2026-10-21. Sector: Healthcare. Country: United States of America. Website: prosomnus.com. [AI generated] ProSomnus Inc. is a U.S.-based medical device company specializing in the design and manufacture of precision oral appliances for the treatment of obstructive sleep apnea and snoring. Operating in the healthcare and medical device industry, the company focuses on sleep medicine solutions as an alternative to CPAP therapy. ProSomnus is headquartered in California, United States, and serves dental and sleep medicine professionals.
-
October 21, 2026 • clinicaromero.com was listed as a victim on the leak site of the BrainCipher ransomware group; the attack is estimated to have taken place on 2026-10-21. Sector: Healthcare. Country: Argentina. Website: clinicaromero.com. [AI generated] N/A I don't have reliable, verified information about "clinicaromero.com" to provide an accurate factual description. Rather than guess based on the name alone (which suggests it could be a medical clinic, possibly in a Spanish-speaking country), I'd be fabricating details about its operations, industry specifics, or location that I cannot confirm. If you have additional context or source material about this entity, I can help analyze that instead.
-
October 22, 2026 • Company #106 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-22. Financial Advisory & Restructuring (US) Chicago, Illinois, USA | [PENDING EXPOSURE]
-
October 22, 2026 • PWC was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-10-22. Sector: Professional Services. Country: United Kingdom of Great Britain and Northern Ireland. [AI generated] PwC (PricewaterhouseCoopers) is a multinational professional services network headquartered in London, United Kingdom. It is one of the "Big Four" accounting firms, offering audit and assurance, tax, consulting, and advisory services to businesses, governments, and organizations worldwide. PwC operates across numerous industries including finance, technology, healthcare, and energy, serving clients in over 150 countries globally.
-
October 22, 2026 Annapath was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-10-22. Annapath, Inc. is a privately owned surgical and cytopathology laboratory that primarily focuse s on dermatopathology, serving clients in Maryland, Delaware, Pennsylvania, Washington D.C., Vi rginia, and West Virginia. The company offers a full range of anatomic and clinical pathology s ervices, emphasizing prompt and accurate diagnoses with a commitment to exceptional customer se rvice. We will upload 110gb of corporate data soon. Employee personal information (passports and other s personal files), customer information, contracts and agreements, and so on.
-
October 21, 2026 • Bethany Press International was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-10-21. Sector: Retail & E-Commerce. Bethany Press partners with authors, ministries, and publishers to create, produce, and distrib ute millions of life-changing Christian books each year. They offer industry-leading publishing services for both short-run and long-run printing and distribution. We will upload 40gb of corporate data soon. Employee personal information (financials and so on ), customer information, financials, contracts and agreements, and so on.
-
October 22, 2026 • Barrow & Grimm was listed as a victim on the leak site of the bravox ransomware group; the attack is estimated to have taken place on 2026-10-22. Country: United States of America. Website: barrowgrimm.com. Legal Services, Business Litigation and Corporate Law.
-
October 22, 2026 • istanbultrading.com was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-10-22. Sector: Retail & E-Commerce. Country: Turkey. Website: istanbultrading.com. Istanbul Foodstuff Trading Co LLC is a company that operates in the Computer Equipment & Peripherals...
-
October 22, 2026 • SEPIVER was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-22. Country: Mexico. Website: sepiver.com.mx.
-
October 23, 2026 • EMARKETER was listed as a victim on the leak site of the fulcrumsec ransomware group; the attack is estimated to have taken place on 2026-10-23. Sector: Technology. Country: United States of America. [AI generated] EMARKETER is a market research and business intelligence company based in the United States, specializing in digital marketing, media, and commerce data. It provides forecasts, analysis, reports, and trends on topics like advertising, e-commerce, social media, and emerging technology. The company serves marketers, advertisers, and businesses seeking insights into consumer behavior and industry trends.
-
October 23, 2026 • Kale Balata A was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-23. Sector: Agriculture and Food Production. Country: Turkey. Website: www.kalebalata.com.
-
October 23, 2026 • Labaid Cancer Hospital And Super Speciality Center was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-23. Sector: Healthcare. Country: Bangladesh. Website: www.labaidcancer.com.
-
October 23, 2026 • ARX Group SA was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-10-23. Sector: Other. Country: Switzerland. Website: ARX Group SA. [consultancies, engineering] ARX Group SA one of Switzerland's premier engineering consultancies, with 25+ offices in 17+ countries, known for iconic projects including the Ceneri Base Tunnel and dozens of USTRA/SBB federal infrastructure contracts. The exposed material includes:
9,510 project fee structures with internal/external billing rates for every engineer the complete pricing intelligence for one of Switzerland's largest infrastructure consultancies. 8 GB of Ceneri Base Tunnel documentation as-built engineering records for Swiss national critical infrastructure. 881,205 time entries spanning years of daily work activity for every employee, with task descriptions and project assignments. -
October 23, 2026 Hensel Elektrik was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-10-23. Sector: Manufacturing. Country: Germany. Website: www.hensel-electric.de/tr-tr. Hensel Elektrik is the Turkish subsidiary of the German company Gustav Hensel GmbH & Co. KG, which manufactures electrical installation equipment and power distribution systems. The company was founded in 1931. https://temp.sh/BcIQY/Data_list.txt
-
October 23, 2026 • Conax Technologies was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-23. Sector: Technology. Country: Norway. Website: conaxtechnologies.com. conaxtechnologies.com Conax Technologies US manufacturer founded in 1952 in Buffalo, New York, producing temperature sensors like thermocouples and RTDs together with high-pressure compression seal fittings for extreme conditions. Owned by the private equity firm May River Capital, it has around 200 to 500 employees and estimated revenue of roughly 41 million dollars. Its products operate in extreme temperatures up to 2000 Fahrenheit and pressures up to 100,000 psi across aerospace, defense, semiconductor, medical and energy markets. The company runs a 101,000 square foot plant with 150 machines, holds AS9100, NADCAP and ISO certifications, and has over 45 patents with 100 million products installed worldwide. Under CEO John LeFevre since 2023 it is expanding through acquisitions such as Vulcan Electric and Sorregosa Spain plus growth in semiconductor and medical verticals.