Full List

Search

Recent Breaches

• MISC Group October 26, 2026 MISC Group was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Energy & Utilities. Country: Malaysia. MISC Group Incorporated in 1968, MISC Group is a world leading provider of international energy-related maritime solutions and services.29,841 files , 28.4 GBComplete command workstations: Master, Chief Officer and Bridge user folders - 16,918 files / 15.5 GB, including PST mail archives;Crew personal data (PDPA breach): IMO FAL Form 5 crew lists for ~30 seafarers with passport numbers (Malaysia/Philippines/Indonesia/India), Seafarer Employment Agreements with DOB, home addresses and salaries, a full scan of the 4th Officer's PRC passport;Every ship's password: ECDIS, CCTV, AIS, fire & gas alarm panels, door access codes, the Ship Security Plan (ISPS) password, NS5/Dualog mail accounts, domain admin credentials, OCIMF/SIRE web account;Internal investigations: complaint against the Chief Engineer (on-board assault/harassment, 25.08.2026), FR-HR25 investigative report;Incidents: vessel listing during (de-)ballasting - twice, one incident not reported to the flag state; a series of near-misses (VDR sensor failure, radar misuse during collision avoidance);Compliance gap: ~20 internal ISM non-conformities (rusted cargo pipelines, HV gloves expired since 2021) vs 'clean' statutory ABS audits of 17.10.2025; Japan PSC deficiency (Himeji, 09.12.2025) + Statements of Fact from 4 officers;Drydock & charter documentation: repair specs (SQLite MSL), ExxonMobil/APLNG delivery & redelivery certificates, CTMS custody-transfer data, full e-docs and ship plans More
• University of New Mexico October 26, 2026 • [ ransomware, hack, education ] University of New Mexico was listed as a victim on the leak site of the BYOD ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Education. Country: United States of America. 36,000 Machines Compromised, both AD forests (Main Campus + Hospital Sector(with appointments, patient information + research)) With GPOs, Two Oracle databases, every student + employee PII (including SSNs), research information, entire Entra Tenant, Oracle HR + Payroll + Banner Student Records, Internal Emails, Cerner EHR rosters. This is your entire network and infrastructure compromised, the entire university COMPLETELY. Anyways, you know where to find us (contact tab). We will take you down when communication has been established between our team and yours.
• Afflelou October 26, 2026 • [ ransomware, retail, healthcare ] Afflelou was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Retail & E-Commerce. Country: France. Alain Afflelou is a leading European franchisor of optical and hearing aid products, founded in France in 1972. The company operates a robust network of over 1,500 stores across 20 countries, driven by aggressive marketing innovations like its famous "Tchin-Tchin" multi-pair offer. Key Figures Network Revenue: 1.13 billion (TTC) for the fiscal year ending July 2025 Corporate Revenue: 447.3 million (excl. taxes), generated from corporate stores and franchise fees. Core Segments: Eyewear and audioprosthetics. [Sector: Retail]
• probe-011637cabbf94076- October 27, 2026 • [ ransomware ] probe-011637cabbf94076- was listed as a victim on the leak site of the ULose ransomware group; the attack is estimated to have taken place on 2026-10-27. Country: zz | Status: Public
• zzq-test October 27, 2026 • [ ransomware, leak ] zzq-test was listed as a victim on the leak site of the ULose ransomware group; the attack is estimated to have taken place on 2026-10-27. Country: c | Status: Sale
• gamblinglore October 27, 2026 • [ ransomware, retail ] gamblinglore was listed as a victim on the leak site of the Whitearmor ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Retail & E-Commerce. Verification for Gamblinglore.com
• Personify Health October 17, 2026 • [ ransomware, healthcare, leak ] Personify Health was listed as a victim on the leak site of the Helix ransomware group; the attack is estimated to have taken place on 2026-10-17. Sector: Healthcare. Country: United States of America. Personify Health records. Yearly revenue ~$500 million. GoFile links and passwords unlock in 12 hours.
• Solid Trading B.V. October 18, 2026 • [ ransomware, leak, finance ] Solid Trading B.V. was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-18. Sector: Other. Country: Netherlands. FX liquidity and trading technology Netherlands | Live client trading records: order and execution data for the banks and institutions trading through this firm, with amounts and account identifiers; The client database: companies, platform users with password hashes, credit limits, clearing paths and fee schedules; FIX venue session configurations, including login credentials for liquidity providers; Trade history and bank matching audit records | [NOT PAID EXPOSED]
• Company #89 October 18, 2026 • [ ransomware, technology ] Company #89 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-18. Country: United States of America. online sports betting analytics United States | [PENDING EXPOSURE]
• konsis.no September 29, 2026 • [ ransomware, technology ] konsis.no was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-09-29. Sector: Professional Services. Country: Norway. Website: konsis.no. We hold a large volume of data from Konsis Grafisk AS a Norwegian design, marketing and print agency with annual revenue of approximately NOK 100 million.
• www.marvinpac.com September 25, 2026 • [ ransomware, manufacturing, retail ] www.marvinpac.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-09-25. Sector: Manufacturing. Country: United States of America. Website: www.marvinpac.com. Marvinpac CZ, s.r.o. the Czech subsidiary of Swiss group Marvinpac SA specialises in contract packaging and co-packing for some of the world's leading brands: Nespresso, L'Oral, COTY (Gucci, Hugo Boss, Calvin Klein), air up, LEGO, and others. The company has operated since 2010 at its production facility in anyJalovice near Prague, and forms part of an international group with divisions in Switzerland, France, and Italy.
• BRUTRA Logistek October 18, 2026 BRUTRA Logistek was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-18. Sector: Transportation. Country: Netherlands. Website: www.brutra-logistiek.nl.
• All Business Technologies (Fox Hill bookkeeping and tax practice) October 18, 2026 • [ ransomware, leak, finance ] All Business Technologies (Fox Hill bookkeeping and tax practice) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-18. Sector: Professional Services. Accounting & Tax Preparation (US) Massachusetts, USA | Books and tax records of a Massachusetts bookkeeping and tax practice: live accounting company files of more than 60 client companies with all accounting backups 2014 through 2026; Per-client tax return data for tax years 2015 through 2025 and the practice billing database; Accounts receivable ledgers, client lists and scanned client legal documents: deeds, trust certifications and IRS powers of attorney | [NOT PAID EXPOSED]
• Telecom Egypt October 18, 2026 • [ ransomware, technology, education ] Telecom Egypt was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-18. Sector: Technology. Country: Egypt. Website: te.eg. computer training academy Egypt | Course materials and programming projects; Exam preparation materials; Student account folders and work; A complete copy of the course database | [NOT PAID EXPOSED]
• Belcorp October 18, 2026 Belcorp was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-18. Sector: Retail & E-Commerce. Country: Peru. Website: www.belcorp.biz.
• POWERsonic Industries Inc. October 19, 2026 • [ ransomware, manufacturing, leak ] POWERsonic Industries Inc. was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-10-19. Sector: Manufacturing. Country: United States of America. Website: POWERsonic Industries Inc.. [manufacturer] POWERsonic Industries Inc. a privately held wire harness and cable assembly contract manufacturer founded in 1998 with ~100-150 employees across 7 locations. The exposed material spans every entity in the POWERsonic corporate structure: Employee PII for 93-150 employees SIN documents, passports, I-20 visas, LMIA immigration approvals, W-2 tax forms, pay stubs, banking information. Plus 8 complete email archives totaling 13.2 GB. Customer proprietary designs 7.5 GB of Demers Ambulance wiring harness data, 15 GB of CIRRIS cable test results, Mold Masters drawings, and a bilateral NDA with Husky Injection Molding. Full financial records Dec 2025 balance sheet ($285K cash, $5.1M AP), trial balance, revenue data ($17.7M US), loan agreements, order margins (~45%), insurance policies.
• Latham & Watkins October 19, 2026 Latham & Watkins was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-10-19. Sector: Professional Services. Country: United States of America. Founded in 1934, Latham & Watkins is an international law firm specializing in activism, communication
• CREDIN October 19, 2026 • [ ransomware, finance ] CREDIN was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-19. Sector: Financial Services. Country: Portugal. Website: www.credin.pt.
• SkyWorld Air Cargo October 19, 2026 • [ ransomware, manufacturing ] SkyWorld Air Cargo was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-19. Sector: Transportation. Country: United Arab Emirates. Website: www.skyworldaircargo.com.
• Walbro October 12, 2026 Walbro was listed as a victim on the leak site of the nitrogen ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Manufacturing. Country: United States of America. Website: www.walbro.com. Walbro is a global market leader in engine management and fuel systems for the Outdoor Power Equipment, Recreational, Marine, and Personal Transportation markets, and a leading supplier of high pressure aluminum die casting to various industries. Walbro manufactures carburetors, electronic fuel injection systems, ignition systems, fuel tanks, fuel pumps, valves and fuel storage and distribution systems, and offers value-added machining, electronics and assembly capabilities.