Recent Breaches
-
October 18, 2026 • mckenneys was listed as a victim on the leak site of the iah6477 ransomware group; the attack is estimated to have taken place on 2026-10-18. Sector: Professional Services. Country: United States of America. Website: mckenneys.com. Size: 295.9 GiB
-
October 18, 2026 • Llano Independent School District was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-18. Sector: Education. Country: United States of America. Website: www.llanoisd.org.
-
October 18, 2026 • Amagi Media Labs was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-18. Sector: Technology. Country: United States of America. media technology / broadcast playout United States | Network and device configuration files from a US broadcast playout site; Internal network maps of the site | [NOT PAID EXPOSED]
-
October 19, 2026 • American Campus was listed as a victim on the leak site of the Helix ransomware group; the attack is estimated to have taken place on 2026-10-19. Sector: Education. Country: United States of America. American Campus records. Yearly revenue ~$1 billion yearly. GoFile links and passwords unlock in 6 hours.
-
October 19, 2026 • GTL Concreto e Logstica LTDA was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-10-19. Sector: Manufacturing. Country: Brazil. Production and preparation of ready-mixed concrete and mortars. Production of cement products for construction. Construction of buildings and other construction works. Rental of vehicles and industrial equipment without an operator. IN THE ARCHIVE FINANCIAL DOCUMENTS, PERSONAL AND CUSTOMER DATA, EMPLOYEE CREDENTIALS. [Sector: Manufacturing, Finance, Transportation]
-
October 19, 2026 Salauno was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-19. Country: Mexico. Website: www.salauno.com.mx.
-
October 19, 2026 • Johnson & Pace was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-19. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.johnsonpace.com.
-
October 19, 2026 Froggys Fog was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-19. Sector: Retail & E-Commerce. Country: United States of America. special-effects fog fluid manufacturer and distributor (order management and shipping operations) Tennessee, USA | The complete shipping and order management database of a specialty fluid manufacturer, including full nightly backup copies from January 2026 to present; Employee account directory for the company domain; Shipping software and remote access configuration for their warehouse servers | [NOT PAID EXPOSED]
-
October 19, 2026 • Vormittag Associates Inc was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-19. Country: United States of America. ERP software and hosting company USA | Internal network configurations and security credentials of an ERP hosting company; Administrator and remote access credentials; Network topology of corporate and hosted client environments | [NOT PAID EXPOSED]
-
October 19, 2026 • Toyota Canarias was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-19. Sector: Transportation. Country: Spain. Website: www.toyota-canarias.es.
-
October 20, 2026 • OpenText was listed as a victim on the leak site of the Mimori ransomware group; the attack is estimated to have taken place on 2026-10-20. Sector: Technology. Country: Canada. Website: opentext.com. OpenText Corporation is a Canadian company that develops and sells enterprise information management software. OpenText can help you tackle the most complex digital transformation programs with confidence. With the worlds most complete and integrated information management platform, we empower our customers to organize, integrate, and protect data and content as it flows through business processes inside and outside their organization. Sector: Technology - Files: 94306 - Publication planned: 2026-10-29T19:36:20Z
-
October 20, 2026 • Asensus Surgical was listed as a victim on the leak site of the Dark Project ransomware group; the attack is estimated to have taken place on 2026-10-20. Sector: Healthcare. Country: United States of America. Website: www.asensus.com. About Asensus Surgical TransEnterix, which rebranded as Asensus Surgical in 2021, pursued the goal of challenging Intuitive Surgical in the robotic surgery market. After the FDA rejected its SurgiBot system in 2016, the company pivoted to the Senhance platform, a digital laparoscopy system featuring haptic feedback and eye-tracking camera control. Despite building a global procedure base, Asensus faced persistent financial difficulties and going-concern doubts, ultimately being acquired by KARL STORZ in 2024. The acquisition marked the end of Asensus as an independent entity, with its Senhance technology now folded into KARL STORZ's broader surgical portfolio. Asensus Surgical fell victim to a cyberattack, resulting in the theft of more than 600 GB of data and over 85,000 files containing confidential information, employees personal documents, research findings, and all of the companys internal information.
-
October 20, 2026 • centralrogers.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-10-20. Sector: Other. Country: United States of America. Website: centralrogers.com. Central is full of people who are committed to fulfilling our mission to Connect People to Christ. It's a family where you can find hope, love and an abundance of grace. Employees: 20 Revenue: $5 Million Phone Number: (479) 636.1630
-
October 21, 2026 Bruin Group LLC was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-10-21. Sector: Other. Country: United States of America. Bruin Group LLC is a telecom expense management (TEM) and communications auditing firm. Companies hand them carrier invoices, circuit inventories, wire instructions, letters of authorization, and internal ticket correspondence so Bruin can audit and recover overcharges. Bruin sits on a concentrated pile of third-party financial and telecom data for every client they serve. We have your entire ticket repository. Wire instructions, account numbers, W-9s, EINs, signed LOAs, Tenet patient call traces, all of it, for every client you manage. Tenet. Welltower. USDA. MarineMax. Allegis. Lincare. Salvation Army. Realogy. Delek. Quiktrip. CubeSmart. SRS. Baymark. Partial list. $1,000,000 in BTC or XMR. Pay and it ends. Don't and we contact your clients directly with their own documents, then publish one company at a time. emperadorlol@proton.me xdlmfao@morke.ru Session: 05651c732327b723588d47455471ee9e27feb5187a30f2933554a705aacb38358 [Sector: Telecommunications]
-
October 14, 2026 • police.rajasthan.gov.in was listed as a victim on the leak site of the Scarlettgroup ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Government & Defense. Country: India. Website: police.rajasthan.gov.in. Rajasthan Police is the official law enforcement agency of Rajasthan, India, responsible for maintaining law and order, preventing crime, ensuring public safety, and protecting citizens across the state.
-
October 21, 2026 • Company #100 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-21. rheumatology medical practice Riverside, California, United States | [PENDING EXPOSURE]
-
October 21, 2026 • Cascade Flooring America was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-10-21. Sector: Retail & E-Commerce. Country: United States of America. Cascade Flooring America is a flooring store located in Vancouver, WA, offering a wide range of products including flooring, furniture, window coverings, and kitchen and bath services. The c ompany caters to homeowners looking for premium flooring solutions, with options such as carpet , hardwood, luxury vinyl, laminate, and tile. We will upload 50gb of corporate data soon. Employee personal information (passports and other personal information), client information, financials, confidential files, NDA, and so on.
-
October 21, 2026 • Hanjin Information Systems & Telecommunication Co., Ltd. was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-21. Sector: Technology. Country: South Korea. IT services South Korea | A complete corporate identity directory of an IT services company, 999 personnel accounts with names and corporate email addresses; The client staffing structure showing which personnel are seconded to major client organizations; Third party vendor accounts and their corporate domains | [NOT PAID EXPOSED]
-
October 21, 2026 • Allmand-Smith Limited was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-10-21. Sector: Manufacturing. Country: United Kingdom of Great Britain and Northern Ireland. Website: Allmand-Smith Limited. [distributor, manufacturer] Allmand-Smith Limited (trading as Stormguard) a UK manufacturer and distributor of building products headquartered in Stoke-on-Trent. Domain admin credentials in plaintext and a full DC dump STORMGUARD\MichaelAdmin / 5t0rmGuard Complete NatWest banking infrastructure blfw.db (21.3 MB live Bankline database with account numbers, sort codes, payee details, and transaction logs), plus WorldPay payment gateway credentials (WorldPay Account Details.xlsx), plus Sage 200 AR/AP containing bank details for every customer and supplier across all 15 entities. NatWest has 3 outstanding registered charges (Jun 2026). Full payroll for every employee, current and former Payroll.zip (6.1 GB, 1,185 files) from Sage Payroll: NI numbers (lifetime identifiers), tax codes, PAYE history, gross/net pay per period, bank account details for BACS salary payments, pension contributions, P45/P60 records. Complete financial records for 15 entities Sage 200 databases for Allmand-Smith Ltd, Stormguard Fabrications, Stormguard Sills, Rainwater Systems, Floodplan, Bridgemill, Chelford, Paradise, MJ Associates, SAS Partners, Specialised Aluminium Supplies, two pension funds, plus the consolidated age200_AllmandSmithLtd.bak (2.1 GB). Management accounts (JanJul 2024), nominal trial balances, bank reconciliations (102,662 cash at year-end). Revenue: 17.66M, profit: 1.01M, financial health: 12/100 (distressed).
-
October 21, 2026 • mvjllp.com was listed as a victim on the leak site of the BrainCipher ransomware group; the attack is estimated to have taken place on 2026-10-21. Website: mvjllp.com.