Full List

Search

Recent Breaches

• Latham & Watkins October 19, 2026 Latham & Watkins was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-10-19. Sector: Professional Services. Country: United States of America. Founded in 1934, Latham & Watkins is an international law firm specializing in activism, communication
• CREDIN October 19, 2026 • [ ransomware, finance ] CREDIN was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-19. Sector: Financial Services. Country: Portugal. Website: www.credin.pt.
• SkyWorld Air Cargo October 19, 2026 • [ ransomware, manufacturing ] SkyWorld Air Cargo was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-19. Sector: Transportation. Country: United Arab Emirates. Website: www.skyworldaircargo.com.
• Walbro October 12, 2026 Walbro was listed as a victim on the leak site of the nitrogen ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Manufacturing. Country: United States of America. Website: www.walbro.com. Walbro is a global market leader in engine management and fuel systems for the Outdoor Power Equipment, Recreational, Marine, and Personal Transportation markets, and a leading supplier of high pressure aluminum die casting to various industries. Walbro manufactures carburetors, electronic fuel injection systems, ignition systems, fuel tanks, fuel pumps, valves and fuel storage and distribution systems, and offers value-added machining, electronics and assembly capabilities.
• Seetelhotels.de October 19, 2026 • [ ransomware, financial, healthcare ] Seetelhotels.de was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-10-19. Sector: Hospitality. Country: Germany. Website: Seetelhotels.de. Seetel Hotels (SEETEL Hotel GmbH & Co. Betriebs KG) has been notified that a substantial volume of confidential and internal corporate data has been compromised. The affected data includes, but is not limited to: Full guest identity records, government-issued passport and ID numbers, payment card details (credit card numbers, CVVs, and expiration dates), direct booking notes, special requests, dietary restrictions, documented allergies, and medical/health-related accommodation preferences. Invoices, payment transaction logs, accounts receivable and payable (Debitorenbuchhaltung / Kreditorenbuchhaltung) records, internal financial audits, and controlling documentation.
• chooseultimate.com October 19, 2026 • [ ransomware, healthcare, retail ] chooseultimate.com was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-10-19. Sector: Retail & E-Commerce. Country: United States of America. Website: chooseultimate.com. Ultimate Health Plans is a local Medicare Advantage Plan based in Spring Hill, Florida, serving vari...
• Rosenberg & Pittinsky October 19, 2026 • [ ransomware, leak ] Rosenberg & Pittinsky was listed as a victim on the leak site of the Global Secret Group ransomware group; the attack is estimated to have taken place on 2026-10-19. Sector: Professional Services. Country: United States of America. Website: rpllplaw.com. NameCompany: Rosenberg & Pittinsky, LLP | Country: New York, NY 10016 | Website: rpllplaw.com | Revenue: $5 Million | Industry: Legal Services, Law Firm, Real Estate & Commercial Litigation | Employees: 25-50 | Properties: 430 GB (218,361 Files, 6,630 Folders)
• GardaWorld October 19, 2026 • [ ransomware, government ] GardaWorld was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-19. Sector: Government & Defense. Country: Canada. Website: www.garda.com.
• Company #96 October 20, 2026 • [ ransomware, healthcare ] Company #96 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-20. Country: Trinidad & Tobago. medical laboratory and diagnostics Trinidad and Tobago | [PENDING EXPOSURE]
• Company #97 October 20, 2026 • [ ransomware, manufacturing ] Company #97 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-20. Country: Tunisia. textile manufacturing Tunisia | [PENDING EXPOSURE]
• Aveva October 20, 2026 • [ ransomware, technology, manufacturing ] Aveva was listed as a victim on the leak site of the Mimori ransomware group; the attack is estimated to have taken place on 2026-10-20. Sector: Manufacturing. Country: United Kingdom of Great Britain and Northern Ireland. Website: aveva.com. AVEVA is a British multinational industrial software company headquartered in Cambridge, England, and operating as an autonomous business unit of Schneider Electric. It provides engineering, design, operations management, data visualization, asset performance, and cloud-based industrial intelligence solutions for sectors including oil and gas, power, chemicals, manufacturing, marine, mining, and infrastructure. AVEVA's technology helps thousands of enterprises worldwide optimize industrial processes, improve operational efficiency, and support digital transformation across complex engineering and asset lifecycle management. Sector: Technology - Files: 177234 - Publication planned: 2026-10-23T19:09:39Z
• 51Ridge (Newark NJ hosting/IT) October 20, 2026 • [ ransomware, technology ] 51Ridge (Newark NJ hosting/IT) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-20. Sector: Technology. Country: United States of America. IT services USA | Complete network configuration and topology of a US IT services company; Internal infrastructure details including site-to-site VPN architecture | [NOT PAID EXPOSED]
• Duarte Nursery, Inc. October 20, 2026 Duarte Nursery, Inc. was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-10-20. Sector: Agriculture and Food Production. Country: United States of America. Website: Duarte Nursery, Inc.. Duarte Nursery, Inc. is a wholesale deciduous fruit and nut tree nursery in Hughson, California an S Corporation run by brothers John and Jeff Duarte. The dataset is the company's complete digital footprint: 300500 full Social Security numbers from California DE9 quarterly employment tax filings (2024 Q1 through 2026 Q2). The owners' complete identity packages John Duarte: SSN 545-67-5279, DOB 9/9/1966, DL C3261756, BofA account 325107115395. Jeff Duarte: SSN 545675712, DOB 7/19/1969. Bank account and routing numbers for ~100 employees via NACHA ACH direct deposit files plus the company's own BofA commercial account credentials and wire transfer instructions. Two years of reviewed financial statements showing the company is Privileged litigation documents from active lawsuits including P2G class certification strategy and settlement documents. Proprietary rootstock and grafting data the IP that differentiates Duarte from competing Central Valley nurseries. Complete salary and compensation data for 23 salaried employees, insurance coverage details, tax returns, and 401(k) census information.
• Beach Eye Medical Group October 15, 2026 • [ ransomware, leak, healthcare ] Beach Eye Medical Group was listed as a victim on the leak site of the Dark Project ransomware group; the attack is estimated to have taken place on 2026-10-15. Sector: Healthcare. Country: United States of America. Website: beacheye.com. About Beach Eye Medical Group The latest eye-care technology combined with decades of experience makes Beach Eye Medical Group a center of excellence for eye care. ur team of board-certified doctors is led by Dr. Samir Shah, a specialist in complex eye surgery with a sub-specialty in cataract, cornea, and refractive surgery. The company's physician team includes Dr. DruAnn McCluskey, who provides care for a variety of eye conditions, from cornea and external disease to dry eye and glaucoma. Dr. Kevin Jwo specializes in treating cataracts and glaucoma through a variety of medical, laser, and surgical techniques. As a result of the attack on Company Beach Eye Medical Group, more than 200 GB of confidential data was stolen. The data comprises more than 250,000 files containing information about the organizations employees and their patients, medical records, and doctors reports, as well as other important company information.
• P... H... October 20, 2026 • [ ransomware ] P... H... was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-10-20. Redacted entry - full company name pending disclosure (FULL DATA TIMER active).
• GSE-M Technology Sdn. Bhd. October 21, 2026 • [ ransomware, technology, manufacturing ] GSE-M Technology Sdn. Bhd. was listed as a victim on the leak site of the bravox ransomware group; the attack is estimated to have taken place on 2026-10-21. Sector: Technology. Country: Malaysia. Website: www.gse.com.my. Industrial Engineering, Manufacturing Automation and Custom Machinery Solutions.
• nbcuniversal.com October 18, 2026 nbcuniversal.com was listed as a victim on the leak site of the Scarlettgroup ransomware group; the attack is estimated to have taken place on 2026-10-18. Sector: Technology. Country: United States of America. Website: nbcuniversal.com. NBCUniversal is a global entertainment company producing films, television, news, streaming, and world-class theme park experiences worldwide.
• TheHomeMag NorCal October 21, 2026 • [ ransomware, retail, leak ] TheHomeMag NorCal was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-21. Sector: Retail & E-Commerce. Country: United States of America. home services advertising US | Internal network configuration and access credentials of a US home-services advertising franchise; Staff contact and infrastructure records | [NOT PAID EXPOSED]
• dangvuongcac October 21, 2026 • [ ransomware, retail, leak ] dangvuongcac was listed as a victim on the leak site of the HYFLOCK ransomware group; the attack is estimated to have taken place on 2026-10-21. Country: Vietnam. Website: dangvuongcac.com. We got their hotel room info and all kinds of chat records.,,dangvuongcac.com (commonly called Teng Wang Ge or Tengwang Pavilion in Chinese) is a very well-known large-scale, male-oriented high-end entertainment club, spa massage, and KTV group in Ho Chi Minh City, Vietnam. In the Chinese 'experienced insider' circles and the local nightlife scene, its often referred to as the 'Vietnam Dragon Palace' or as part of the 'Yueyang Tower/Yueyang Tower system' (H Thng Nhc Dng Lu). Heres a brief overview of the companys background and main business: 1. Business Nature and Positioning Its not an ordinary massage or wellness shop. Its a high-end, male-focused comprehensive adult nightlife venue (Empire of Nightlife). Its main offering isnt purely physical therapy, but more of a pro project that emphasizes socializing, partying, and entertainment. 2. Core Services High-end Spa/Massage: Offers advanced, entertainment-oriented massage packages including Thai, essential oil, Nuru (sliding bed), and some premium rooms include bathing with staff. Pool Party: This is a signature feature, with large indoor luxury spa pools and special pools with artificial rain, supporting multi-person pool parties. Tech KTV (Karaoke): The venue offers multi-dimensional KTV rooms with cyberpunk or futuristic tech styles, combining dining and singing. Some netizens consider it the top-tier setup in Ho Chi Minh nightlife. 3. Venue Size and Location Address: Located in the Trung Son area of Binh Chanh District, Ho Chi Minh City (Address: 20 ng s 6A, Khu dn c Trung Sn, Bnh Chnh, Thnh ph H Ch Minh). While administratively in Binh Chanh, its very close to the Chinese-dense districts 5 and 7 (Phu My Hung), with very convenient transport. Staff Size: Officially claims to have over 400 trained young female technicians (KTV/K thut vin) in its system. Opening Hours: Daily from 9:00 AM to 5:00 AM the next day. 4. Clientele and Marketing The club mainly targets foreign tourists (especially Chinese visitors from Mainland China, Taiwan, and Hong Kong) and local high-spending customers. Since its management and customer service team are very familiar with the Chinese market, it has a highly visible marketing presence on WeChat, Telegram, Zalo, and TikTok, providing fully Chinese-speaking customer service for bookings and orders.
• Lindauer Dornier October 21, 2026 • [ ransomware, manufacturing, technology ] Lindauer Dornier was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-10-21. Sector: Manufacturing. Country: Germany. [AI generated] Lindauer Dornier GmbH is a German mechanical engineering company based in Lindau, Germany. Founded in 1950, it specializes in manufacturing textile machinery, particularly weaving machines, as well as equipment for composite materials, plastics film stretching lines, and paper machine components. The company operates globally, serving industrial manufacturing sectors, and is part of the broader Dornier industrial group with a long engineering heritage.