-
All Business Technologies (Fox Hill bookkeeping and tax practice)
October 18, 2026
•
[ ransomware, leak, finance ]
All Business Technologies (Fox Hill bookkeeping and tax practice) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-18. Sector: Professional Services. Accounting & Tax Preparation (US) Massachusetts, USA | Books and tax records of a Massachusetts bookkeeping and tax practice: live accounting company files of more than 60 client companies with all accounting backups 2014 through 2026; Per-client tax return data for tax years 2015 through 2025 and the practice billing database; Accounts receivable ledgers, client lists and scanned client legal documents: deeds, trust certifications and IRS powers of attorney | [NOT PAID EXPOSED]
-
Telecom Egypt
October 18, 2026
•
[ ransomware, technology, education ]
Telecom Egypt was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-18. Sector: Technology. Country: Egypt. Website: te.eg. computer training academy Egypt | Course materials and programming projects; Exam preparation materials; Student account folders and work; A complete copy of the course database | [NOT PAID EXPOSED]
-
Belcorp
October 18, 2026
Belcorp was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-18. Sector: Retail & E-Commerce. Country: Peru. Website: www.belcorp.biz.
-
POWERsonic Industries Inc.
October 19, 2026
•
[ ransomware, manufacturing, leak ]
POWERsonic Industries Inc. was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-10-19. Sector: Manufacturing. Country: United States of America. Website: POWERsonic Industries Inc.. [manufacturer] POWERsonic Industries Inc. a privately held wire harness and cable assembly contract manufacturer founded in 1998 with ~100-150 employees across 7 locations.
The exposed material spans every entity in the POWERsonic corporate structure:
Employee PII for 93-150 employees SIN documents, passports, I-20 visas, LMIA immigration approvals, W-2 tax forms, pay stubs, banking information. Plus 8 complete email archives totaling 13.2 GB.
Customer proprietary designs 7.5 GB of Demers Ambulance wiring harness data, 15 GB of CIRRIS cable test results, Mold Masters drawings, and a bilateral NDA with Husky Injection Molding.
Full financial records Dec 2025 balance sheet ($285K cash, $5.1M AP), trial balance, revenue data ($17.7M US), loan agreements, order margins (~45%), insurance policies.
-
Latham & Watkins
October 19, 2026
Latham & Watkins was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-10-19. Sector: Professional Services. Country: United States of America. Founded in 1934, Latham & Watkins is an international law firm specializing in activism, communication
-
CREDIN
October 19, 2026
•
[ ransomware, finance ]
CREDIN was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-19. Sector: Financial Services. Country: Portugal. Website: www.credin.pt.
-
SkyWorld Air Cargo
October 19, 2026
•
[ ransomware, manufacturing ]
SkyWorld Air Cargo was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-19. Sector: Transportation. Country: United Arab Emirates. Website: www.skyworldaircargo.com.
-
Walbro
October 12, 2026
Walbro was listed as a victim on the leak site of the nitrogen ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Manufacturing. Country: United States of America. Website: www.walbro.com. Walbro is a global market leader in engine management and fuel systems for the Outdoor Power Equipment, Recreational, Marine, and Personal Transportation markets, and a leading supplier of high pressure aluminum die casting to various industries. Walbro manufactures carburetors, electronic fuel injection systems, ignition systems, fuel tanks, fuel pumps, valves and fuel storage and distribution systems, and offers value-added machining, electronics and assembly capabilities.
-
Seetelhotels.de
October 19, 2026
•
[ ransomware, financial, healthcare ]
Seetelhotels.de was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-10-19. Sector: Hospitality. Country: Germany. Website: Seetelhotels.de. Seetel Hotels (SEETEL Hotel GmbH & Co. Betriebs KG) has been notified that a substantial volume of confidential and internal corporate data has been compromised.
The affected data includes, but is not limited to:
Full guest identity records, government-issued passport and ID numbers, payment card details (credit card numbers, CVVs, and expiration dates), direct booking notes, special requests, dietary restrictions, documented allergies, and medical/health-related accommodation preferences.
Invoices, payment transaction logs, accounts receivable and payable (Debitorenbuchhaltung / Kreditorenbuchhaltung) records, internal financial audits, and controlling documentation.
-
chooseultimate.com
October 19, 2026
•
[ ransomware, healthcare, retail ]
chooseultimate.com was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-10-19. Sector: Retail & E-Commerce. Country: United States of America. Website: chooseultimate.com. Ultimate Health Plans is a local Medicare Advantage Plan based in Spring Hill, Florida, serving vari...
-
Rosenberg & Pittinsky
October 19, 2026
•
[ ransomware, leak ]
Rosenberg & Pittinsky was listed as a victim on the leak site of the Global Secret Group ransomware group; the attack is estimated to have taken place on 2026-10-19. Sector: Professional Services. Country: United States of America. Website: rpllplaw.com. NameCompany: Rosenberg & Pittinsky, LLP |
Country: New York, NY 10016 |
Website: rpllplaw.com |
Revenue: $5 Million |
Industry: Legal Services, Law Firm, Real Estate & Commercial Litigation |
Employees: 25-50 |
Properties: 430 GB (218,361 Files, 6,630 Folders)
-
GardaWorld
October 19, 2026
•
[ ransomware, government ]
GardaWorld was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-19. Sector: Government & Defense. Country: Canada. Website: www.garda.com.
-
Company #96
October 20, 2026
•
[ ransomware, healthcare ]
Company #96 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-20. Country: Trinidad & Tobago. medical laboratory and diagnostics Trinidad and Tobago | [PENDING EXPOSURE]
-
Company #97
October 20, 2026
•
[ ransomware, manufacturing ]
Company #97 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-20. Country: Tunisia. textile manufacturing Tunisia | [PENDING EXPOSURE]
-
Aveva
October 20, 2026
•
[ ransomware, technology, manufacturing ]
Aveva was listed as a victim on the leak site of the Mimori ransomware group; the attack is estimated to have taken place on 2026-10-20. Sector: Manufacturing. Country: United Kingdom of Great Britain and Northern Ireland. Website: aveva.com. AVEVA is a British multinational industrial software company headquartered in Cambridge, England, and operating as an autonomous business unit of Schneider Electric. It provides engineering, design, operations management, data visualization, asset performance, and cloud-based industrial intelligence solutions for sectors including oil and gas, power, chemicals, manufacturing, marine, mining, and infrastructure. AVEVA's technology helps thousands of enterprises worldwide optimize industrial processes, improve operational efficiency, and support digital transformation across complex engineering and asset lifecycle management.
Sector: Technology - Files: 177234 - Publication planned: 2026-10-23T19:09:39Z
-
51Ridge (Newark NJ hosting/IT)
October 20, 2026
•
[ ransomware, technology ]
51Ridge (Newark NJ hosting/IT) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-20. Sector: Technology. Country: United States of America. IT services USA | Complete network configuration and topology of a US IT services company; Internal infrastructure details including site-to-site VPN architecture | [NOT PAID EXPOSED]
-
Duarte Nursery, Inc.
October 20, 2026
Duarte Nursery, Inc. was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-10-20. Sector: Agriculture and Food Production. Country: United States of America. Website: Duarte Nursery, Inc.. Duarte Nursery, Inc. is a wholesale deciduous fruit and nut tree nursery in Hughson, California an S Corporation run by brothers John and Jeff Duarte.
The dataset is the company's complete digital footprint:
300500 full Social Security numbers from California DE9 quarterly employment tax filings (2024 Q1 through 2026 Q2).
The owners' complete identity packages John Duarte: SSN 545-67-5279, DOB 9/9/1966, DL C3261756, BofA account 325107115395. Jeff Duarte: SSN 545675712, DOB 7/19/1969.
Bank account and routing numbers for ~100 employees via NACHA ACH direct deposit files plus the company's own BofA commercial account credentials and wire transfer instructions.
Two years of reviewed financial statements showing the company is
Privileged litigation documents from active lawsuits including P2G class certification strategy and settlement documents.
Proprietary rootstock and grafting data the IP that differentiates Duarte from competing Central Valley nurseries.
Complete salary and compensation data for 23 salaried employees, insurance coverage details, tax returns, and 401(k) census information.
-
Beach Eye Medical Group
October 15, 2026
•
[ ransomware, leak, healthcare ]
Beach Eye Medical Group was listed as a victim on the leak site of the Dark Project ransomware group; the attack is estimated to have taken place on 2026-10-15. Sector: Healthcare. Country: United States of America. Website: beacheye.com. About Beach Eye Medical Group The latest eye-care technology combined with decades of experience makes Beach Eye Medical Group a center of excellence for eye care. ur team of board-certified doctors is led by Dr. Samir Shah, a specialist in complex eye surgery with a sub-specialty in cataract, cornea, and refractive surgery. The company's physician team includes Dr. DruAnn McCluskey, who provides care for a variety of eye conditions, from cornea and external disease to dry eye and glaucoma. Dr. Kevin Jwo specializes in treating cataracts and glaucoma through a variety of medical, laser, and surgical techniques. As a result of the attack on Company Beach Eye Medical Group, more than 200 GB of confidential data was stolen. The data comprises more than 250,000 files containing information about the organizations employees and their patients, medical records, and doctors reports, as well as other important company information.
-
P... H...
October 20, 2026
•
[ ransomware ]
P... H... was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-10-20. Redacted entry - full company name pending disclosure (FULL DATA TIMER active).
-
GSE-M Technology Sdn. Bhd.
October 21, 2026
•
[ ransomware, technology, manufacturing ]
GSE-M Technology Sdn. Bhd. was listed as a victim on the leak site of the bravox ransomware group; the attack is estimated to have taken place on 2026-10-21. Sector: Technology. Country: Malaysia. Website: www.gse.com.my. Industrial Engineering, Manufacturing Automation and Custom Machinery Solutions.
