Recent Breaches
-
October 25, 2026 • Mach Law APC (San Diego family law and divorce practice) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-25. Sector: Professional Services. Country: United States of America. Legal Services - Family Law (US) California, USA | Client case files of a San Diego family law practice: divorce, custody and support matters with California court filings (FL-150 financial declarations, FL-300 requests for orders, FL-335 proofs of service) and XSpouse support calculations; Client intake records with Social Security numbers and dates of birth; Client bank statements (Navy Federal, Discover and other institutions) and the practice trust account statements; Client billing roster with balances | [NOT PAID EXPOSED]
-
October 25, 2026 • Technoleads Services Inc. was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-25. Sector: Technology. media production (audio description and accessibility media) Montreal, Quebec, Canada | Current 2026 client production files from your work in progress library, including active projects modified in October 2026; A job candidate resume with full personal contact details from your human resources records; Your archive of finished productions from 2016 through 2021, including a 2.1 GB demonstration archive; Internal technical documentation of your media production platform | [NOT PAID EXPOSED]
-
October 25, 2026 • TOPLIVO AD was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-25. Sector: Energy & Utilities. Country: Bulgaria. fuel trading and construction materials Bulgaria | The complete counterparty ledger of a fuel trading company: 694 companies with full legal names, addresses, managing persons, national company numbers, tax numbers and bank account details; More than 3,100 live customs and fuel movement documents from December 2025 through October 2026, and a 12 year archive of more than 46,000 documents from 2014 through 2025; Records of 611 drivers and 651 tanker trucks with registration plates; More than 2.6 million automated tank gauge readings from fuel storage tanks; Named staff accounts of the accounting system | [NOT PAID EXPOSED]
-
October 25, 2026 • Astrana Health was listed as a victim on the leak site of the Falcon ransomware group; the attack is estimated to have taken place on 2026-10-25. Sector: Healthcare. Country: United States of America. Healthcare services NASDAQ: ASTH - Our 738 GB extraction includes internal documents, regulatory audit reports, payer financial dispute trackers, internal operational readiness reviews, acquisition pipelines, detailed reimbursement tables, internal system evaluations, regulatory notifications, funds transfer records showing liquidity status, company financial statements, user credential lists, client contact lists, employee PII decks and much more. Contacted us then timewasted, re-attacks incoming.
-
October 25, 2026 • Weitz & Luxenberg was listed as a victim on the leak site of the Falcon ransomware group; the attack is estimated to have taken place on 2026-10-25. Sector: Professional Services. Country: United States of America. Mass tort litigation law firm - Our 82 GB extraction includes confidentiality agreements, stipulations, NDAs, internal board documents, privileged attorney-client communications, client rosters detailing medical conditions and settlement eligibility, active-case strategy documents, liability estimations, mediation term sheets, internal financial data, settlement payout memos, detailed bankruptcy settlement summaries, regulatory correspondence, internal board minutes and much more. Contacted us then timewasted, re-attacks incoming.
-
October 25, 2026 • Ooredoo Myanmar was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-25. Sector: Technology. Country: Myanmar. Website: www.u9.com.mm.
-
October 25, 2026 • J.B Hunt was listed as a victim on the leak site of the Whitearmor ransomware group; the attack is estimated to have taken place on 2026-10-25. Sector: Transportation. Country: United States of America. You are so stupid JB Hunt. Instead of getting in contact with us & starting the negotiation process, not only did you not announce the breach, you silently email customers demanding them to update their passwords.. Fuck you... ;/
-
October 26, 2026 • Taubensee Steel & Wire was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Manufacturing. Country: Germany. Website: www.taubensee.com.
-
October 26, 2026 THOMAS JORDAN, P.A was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Professional Services. Country: United States of America.
-
October 26, 2026 • Bangor Wholesale Laminates was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Manufacturing. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.bangorwholesalelaminates.com.
-
October 26, 2026 • Beasley Allen Law Firm was listed as a victim on the leak site of the Falcon ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Professional Services. Country: United States of America. Plaintiff litigation law firm - Our 214 GB extraction includes executed agreements, final settlement participation agreements, court-signed stipulations regarding net worth, privileged internal memos, detailed litigation strategies, rough trial transcripts, comprehensive staff FAQs and much more.
-
October 26, 2026 • Antah HealthCare Group was listed as a victim on the leak site of the crypto24 ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Healthcare. Country: Malaysia. Website: ahcg.com.my. Antah Healthcare Group (AHCG) is one of Malaysia's leading integrated healthcare distribution and commercial partners, specializing in the nationwide marketing, sales, clinical regulatory support, and supply chain logistics of pharmaceuticals, medical equipment, and consumable products to hospitals and clinics.We successfully infiltrated AHCG's network and exfiltrated over 500 GB of highly sensitive data, including human resources and employee records, customer transaction histories, confidential commercial contracts, clinical and regulatory documentation, logistics tracking information, and financial statements.
-
October 27, 2026 • SleepEx LabRetriever was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Healthcare. [AI generated] N/A I don't have reliable information about a company called "SleepEx LabRetriever." This does not correspond to any organization I can verify, and the name's unusual construction suggests it may be fictional, a test query, or a misspelling. I'd rather report this than fabricate details about its industry, operations, or country.
-
September 29, 2026 • binsky.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-09-29. Website: binsky.com. Piscataway, New Jersey. Binsky & Snyder, LLC has been servicing piping, HVAC, and mechanical systems since 1938. Its website tells a story of "family values" and "trust from day one." The actual corporate records tell a different story.
-
September 8, 2026 • acclaimcompanies.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-09-08. Sector: Professional Services. Country: United States of America. Website: acclaimcompanies.com. The Social Security Numbers of both group executives Gerald C. Johnson Jr. and Mark C. Johnson are fully exposed in corporate documents (IRS Form SS-4). The Johnson Family Trust holds an investment portfolio of $1.67 million at First Republic Bank against a margin loan of $280K, while parent company Acclaim Asset Management simultaneously received two different EINs from the IRS per CP212 notice (January 2025). Baboo Properties LLC, in which Mark C. Johnson is a member, failed to file the required Form 940 for 2015, despite receiving IRS notice CP080. A corporate network of 15+ legal ent
-
September 25, 2026 • passavant-ee.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-09-25. Sector: Healthcare. Country: Estonia. Website: passavant-ee.com. German engineering company Passavant Energy & Environment GmbH, which builds wastewater treatment plants with German and Swiss taxpayer money (KfW, SECO), is in reality controlled by Dubai-based conglomerate Drake & Scull International PJSC and through it finances operations in Iraq. Internal debit notes from Drake & Scull Oil & Gas Iraq Branch show that employees of the Iraqi division flew to Muscat (Oman) and stayed at hotels billed to Passavant Frankfurt, with the company's accounting department at Hahnstrae 31-35 approving those charges for payment. Employee Serikan Kire
-
October 18, 2026 • Company #91 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-18. Country: United States of America. home services advertising US | [PENDING EXPOSURE]
-
October 18, 2026 Mastelli S.r.l. was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-18. Sector: Manufacturing. Country: Italy. Website: www.mastelli.com.
-
October 18, 2026 • Pergande was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-18. Country: Germany. Website: www.pergande.de.
-
October 18, 2026 • Pengurusan Aset Air Berhad was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-18. Sector: Energy & Utilities. Country: Malaysia. Website: www.paab.my.