-
THOMAS JORDAN, P.A
October 26, 2026
THOMAS JORDAN, P.A was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Professional Services. Country: United States of America.
-
Bangor Wholesale Laminates
October 26, 2026
•
[ ransomware, manufacturing ]
Bangor Wholesale Laminates was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Manufacturing. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.bangorwholesalelaminates.com.
-
Beasley Allen Law Firm
October 26, 2026
•
[ ransomware, leak ]
Beasley Allen Law Firm was listed as a victim on the leak site of the Falcon ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Professional Services. Country: United States of America. Plaintiff litigation law firm - Our 214 GB extraction includes executed agreements, final settlement participation agreements, court-signed stipulations regarding net worth, privileged internal memos, detailed litigation strategies, rough trial transcripts, comprehensive staff FAQs and much more.
-
Antah HealthCare Group
October 26, 2026
•
[ ransomware, healthcare, leak ]
Antah HealthCare Group was listed as a victim on the leak site of the crypto24 ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Healthcare. Country: Malaysia. Website: ahcg.com.my. Antah Healthcare Group (AHCG) is one of Malaysia's leading integrated healthcare distribution and commercial partners, specializing in the nationwide marketing, sales, clinical regulatory support, and supply chain logistics of pharmaceuticals, medical equipment, and consumable products to hospitals and clinics.We successfully infiltrated AHCG's network and exfiltrated over 500 GB of highly sensitive data, including human resources and employee records, customer transaction histories, confidential commercial contracts, clinical and regulatory documentation, logistics tracking information, and financial statements.
-
SleepEx LabRetriever
October 27, 2026
•
[ ransomware, healthcare ]
SleepEx LabRetriever was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Healthcare. [AI generated] N/A
I don't have reliable information about a company called "SleepEx LabRetriever." This does not correspond to any organization I can verify, and the name's unusual construction suggests it may be fictional, a test query, or a misspelling. I'd rather report this than fabricate details about its industry, operations, or country.
-
binsky.com
September 29, 2026
•
[ ransomware, manufacturing ]
binsky.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-09-29. Website: binsky.com. Piscataway, New Jersey. Binsky & Snyder, LLC has been servicing piping, HVAC, and mechanical systems since 1938. Its website tells a story of "family values" and "trust from day one." The actual corporate records tell a different story.
-
acclaimcompanies.com
September 8, 2026
•
[ ransomware, leak, financial ]
acclaimcompanies.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-09-08. Sector: Professional Services. Country: United States of America. Website: acclaimcompanies.com. The Social Security Numbers of both group executives Gerald C. Johnson Jr. and Mark C. Johnson are fully exposed in corporate documents (IRS Form SS-4). The Johnson Family Trust holds an investment portfolio of $1.67 million at First Republic Bank against a margin loan of $280K, while parent company Acclaim Asset Management simultaneously received two different EINs from the IRS per CP212 notice (January 2025). Baboo Properties LLC, in which Mark C. Johnson is a member, failed to file the required Form 940 for 2015, despite receiving IRS notice CP080. A corporate network of 15+ legal ent
-
passavant-ee.com
September 25, 2026
•
[ ransomware, healthcare, leak ]
passavant-ee.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-09-25. Sector: Healthcare. Country: Estonia. Website: passavant-ee.com. German engineering company Passavant Energy & Environment GmbH, which builds wastewater treatment plants with German and Swiss taxpayer money (KfW, SECO), is in reality controlled by Dubai-based conglomerate Drake & Scull International PJSC and through it finances operations in Iraq. Internal debit notes from Drake & Scull Oil & Gas Iraq Branch show that employees of the Iraqi division flew to Muscat (Oman) and stayed at hotels billed to Passavant Frankfurt, with the company's accounting department at Hahnstrae 31-35 approving those charges for payment. Employee Serikan Kire
-
Company #91
October 18, 2026
•
[ ransomware, retail ]
Company #91 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-18. Country: United States of America. home services advertising US | [PENDING EXPOSURE]
-
Mastelli S.r.l.
October 18, 2026
Mastelli S.r.l. was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-18. Sector: Manufacturing. Country: Italy. Website: www.mastelli.com.
-
Pergande
October 18, 2026
•
[ ransomware, manufacturing ]
Pergande was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-18. Country: Germany. Website: www.pergande.de.
-
Pengurusan Aset Air Berhad
October 18, 2026
•
[ ransomware, energy ]
Pengurusan Aset Air Berhad was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-18. Sector: Energy & Utilities. Country: Malaysia. Website: www.paab.my.
-
mckenneys
October 18, 2026
•
[ ransomware, technology ]
mckenneys was listed as a victim on the leak site of the iah6477 ransomware group; the attack is estimated to have taken place on 2026-10-18. Sector: Professional Services. Country: United States of America. Website: mckenneys.com. Size: 295.9 GiB
-
Llano Independent School District
October 18, 2026
•
[ ransomware, education ]
Llano Independent School District was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-18. Sector: Education. Country: United States of America. Website: www.llanoisd.org.
-
Amagi Media Labs
October 18, 2026
•
[ ransomware, technology, misconfiguration ]
Amagi Media Labs was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-18. Sector: Technology. Country: United States of America. media technology / broadcast playout United States | Network and device configuration files from a US broadcast playout site; Internal network maps of the site | [NOT PAID EXPOSED]
-
American Campus
October 19, 2026
•
[ ransomware, education ]
American Campus was listed as a victim on the leak site of the Helix ransomware group; the attack is estimated to have taken place on 2026-10-19. Sector: Education. Country: United States of America. American Campus records. Yearly revenue ~$1 billion yearly. GoFile links and passwords unlock in 6 hours.
-
GTL Concreto e Logística LTDA
October 19, 2026
•
[ ransomware, manufacturing, finance ]
GTL Concreto e Logstica LTDA was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-10-19. Sector: Manufacturing. Country: Brazil. Production and preparation of ready-mixed concrete
and mortars. Production of cement products for
construction. Construction of buildings and other
construction works. Rental of vehicles and industrial
equipment without an operator.
IN THE ARCHIVE FINANCIAL DOCUMENTS, PERSONAL AND CUSTOMER DATA,
EMPLOYEE CREDENTIALS. [Sector: Manufacturing, Finance, Transportation]
-
Salauno
October 19, 2026
Salauno was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-19. Country: Mexico. Website: www.salauno.com.mx.
-
Johnson & Pace
October 19, 2026
•
[ ransomware, technology ]
Johnson & Pace was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-19. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.johnsonpace.com.
-
Froggys Fog
October 19, 2026
Froggys Fog was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-19. Sector: Retail & E-Commerce. Country: United States of America. special-effects fog fluid manufacturer and distributor (order management and shipping operations) Tennessee, USA | The complete shipping and order management database of a specialty fluid manufacturer, including full nightly backup copies from January 2026 to present; Employee account directory for the company domain; Shipping software and remote access configuration for their warehouse servers | [NOT PAID EXPOSED]