Recent Breaches
-
October 4, 2026 • SA BAUFER V.F was listed as a victim on the leak site of the Majinahanashi ransomware group; the attack is estimated to have taken place on 2026-10-04. Sector: Manufacturing. SA BAUFER VF is a Swiss company that specializes in the processing, supply, and installation of reinforcing steel for reinforced concrete structures HQ: Via Industrie 14, 6512 Giubiasco, Switzerlan...
-
October 24, 2026 • Adirondack Networks, Inc. was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-24. Sector: Technology. Country: United States of America. network and IT services New York, United States | The live accounting database of the company, more than 627 megabytes, active through 20 October 2026; A second company accounting database of Elevate Networks, Inc., more than 331 megabytes, active through 20 October 2026; Transaction logs and scheduled accounting backups | [NOT PAID EXPOSED]
-
October 24, 2026 • grupoeuro.com.mx was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-10-24. Sector: Manufacturing. Country: Mexico. Website: grupoeuro.com.mx. Grupo Euro Corporativo is a 100% Mexican business conglomerate (corporativo empresarial 100% potosino) founded in 1990, ...
-
October 24, 2026 • www.choicegoodwill.com was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-10-24. Sector: Retail & E-Commerce. Country: United States of America. Website: www.choicegoodwill.com. Choice Group (Goodwill Projects) is a prominent Indian real estate developer founded in 1994, headquartered in Tingre Na...
-
October 24, 2026 • SLTN Inter Access was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-24. Country: Netherlands. Website: www.sltn.nl.
-
October 24, 2026 • Frommann Energie GmbH was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-10-24. Sector: Energy & Utilities. Country: Germany. German company that sells and delivers fuels, primarily heating oil (Heizl), but also motor fuels and lubricants. Archived personal and corporate data of employees and customers. Here are the most important documents. [Sector: Manufacturing, Finance, Technology]
-
October 24, 2026 • Phoenix S&S GmbH was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-10-24. Sector: Manufacturing. Country: Germany. German company from Frankfurt am Main, which deals with building maintenance, construction services, logistics and security. Archived personal and corporate data of employees and customers. Here are the most important documents. [Sector: Manufacturing, Finance, Transportation]
-
October 24, 2026 Vins Viallet was listed as a victim on the leak site of the lamashtu ransomware group; the attack is estimated to have taken place on 2026-10-24. Sector: Retail & E-Commerce. Country: France. Website: vins-viallet.com. Vins Viallet is a French family-owned wine producer and distributor based in the Savoie region. Founded in 1966, the company produces and markets a range of wines, including white, red, ros and sparkling varieties, serving retail and wholesale
-
October 25, 2026 • Newcomer Cremations, Funerals & Receptions was listed as a victim on the leak site of the anubis ransomware group; the attack is estimated to have taken place on 2026-10-25. Sector: Healthcare. Country: United States of America. Customers' personal documents and the company's internal documents.
-
October 25, 2026 • Pure Grow Diamonds Inc. was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-25. Sector: Manufacturing. diamond and lab grown diamond trading New York, New York, United States | Diamond stock and inventory lists with stock codes and certificate numbers; Customer return records with customer names and tracking references; More than 2,200 bank deposit and invoice documents | [NOT PAID EXPOSED]
-
October 25, 2026 • AyT COMPUTERS SRL was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-10-25. Sector: Technology. Argentine Company operates in the field of electronic security systems, video surveillance, monitoring and IT infrastructure. There are many customer documents and employee data. Financial documents, customer cards with phone numbers and addresses. [Sector: Finance, Technology]
-
October 25, 2026 • Aesthetic Dental Designs, P.A was listed as a victim on the leak site of the HYFLOCK ransomware group; the attack is estimated to have taken place on 2026-10-25. Sector: Healthcare. Country: United States of America. Website: dentalartsofatlantis.com. Aesthetic Dental Designs, P.A. (operating commercially as Dental Arts of Atlantis) is a fully licensed and accredited dental healthcare corporation headquartered at 5057 S Congress Ave, Suite 401, Lake Worth Beach, Florida (NPI: 1235501420). The practice is anchored by a distinguished clinical team, featuring Dr. Colleen Lam, D.M.D. and Dr. Serrano. The organization provides comprehensive clinical infrastructure specializing in advanced restorative, cosmetic, and multi-generational family dentistry. Its core competencies include high-precision digital prosthodontics, advanced smile designs, complex full-mouth reconstructions, and systematic preventive oral healthcare. Operating under a patient-centric administrative framework, Aesthetic Dental Designs, P.A. integrates cutting-edge dental technologies with rigorous clinical protocols. The enterprise maintains an established track record of therapeutic excellence, operational integrity, and superior patient outcomes within the South Florida healthcare market.
-
October 25, 2026 A-RMS was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-10-25. Sector: Government & Defense. We encrypted your servers and stole some of your source code, along with some sensitive information. If you do not pay the ransom, we will contact and attack your employees, clients, and partners to destroy your business. [Sector: Technology]
-
October 25, 2026 • Yodingenierie was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-10-25. Sector: Professional Services. Country: Benin. YOD Engineering is an engineering company computer science, member of the NED&CO Group , a pan-African player committed to transformation digital, information systems governance and innovation by intelligence artificial.
-
October 25, 2026 • mahsing.com.my was listed as a victim on the leak site of the Scarlettgroup ransomware group; the attack is estimated to have taken place on 2026-10-25. Sector: Hospitality. Country: Malaysia. Website: mahsing.com.my. Mah Sing Group is a leading Malaysian property developer specializing in affordable residential and commercial properties, with additional businesses in healthcare and plastics manufacturing.
-
October 26, 2026 • Inside Passage Electric Cooperative, Inc was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Energy & Utilities. Country: United States of America. Website: www.insidepassageelectric.org. In 2004, Tlingit & Haida Regional Electric Authority was re-organized to an electric cooperative which is now known as Inside Passage Electric Cooperative, Inc. IPEC is a non-profit, independent electric utility owned by the members we serve. Electric cooperatives are democratically governed businesses, ensuring they are closely regulated by their consumers. Members of electric cooperatives express higher than average levels of customer satisfaction since they put customers first because the consumers are the owners. In addition, co-ops are locally owned and operated which makes IPEC more responsive to our members since they are the owners and we are accountable to them. IPEC is governed by a board of directors elected from the membership, which sets policies and procedures that are implemented by the cooperatives professional staff. Our Board is committed to providing quality, dependable and affordable electric service to our members since they live in the communities they represent. IPEC currently serves Hoonah (463 services), Kake (321 services), Chilkat Valley (231 services), Angoon (227 services) and Klukwan (61 services) for a total of 1,303 customers.
-
October 26, 2026 • Ernesto Malvestiti S.p.A. was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Manufacturing. Country: Italy. Website: Ernesto Malvestiti S.p.A.. [manufacturer] Ernesto Malvestiti S.p.A. a privately-held Italian manufacturer of precision aluminium die-cast and fine-blanked components, supplying BMW, Valeo, BorgWarner, Schneider Electric, Fiat/Stellantis, and 150+ other automotive OEM. The exposed material spans the company's entire operations: PAGHENET payroll database (1.1 GB SQL Server backup 7 copies) every employee's salary, IBAN bank account, codice fiscale (Italian tax ID), home address, and tax withholdings. Plus the INAZMST employee master database (181 MB 5). GDPR Article 9 special-category data medical fitness records, disability status, union membership lists, workplace injuries, occupational diseases, and stress assessments for the entire workforce. 50+ plaintext OEM portal credentials stored in a single file called accesso web.txt BMW B2B, Brose SWP, Valeo, BorgWarner SAP, Schneider VFAST, Eaton, Fiat, Peugeot/PSA, and 40+ more. SQL Server administrator password for the payroll database server, stored in a plaintext ODBC registry export. ADP payroll SFTP credentials stored in WinSCP.ini the channel used to transmit employee salary data to the external payroll processor. 614 MB of financial/controlling data consolidated balance sheets (2024-2025), revenue by plant, P&L, transfer pricing documents, cash flow, competitor analysis, and banking relationships. 1.5 GB of engineering IP 300+ fine blanking die designs, technical drawings (483 MB), press parameters, PLC programs, FANUC robot code, and R&D contracts. 160+ client/supplier contracts with pricing, commercial terms, and executed NDAs. 560+ job candidate CVs with full names, addresses, phone numbers, and career histories.
-
October 26, 2026 • Referans Lab Ref-Lab was listed as a victim on the leak site of the Doommageddon ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Technology. Country: Turkey. Status: leaked | Data size: 3.07 GB | Files: 2 files | Deadline: 2026-10-26T00:00:00Z
-
October 26, 2026 • TRANSPORTES JIMENEZ and REYES JIM REY S.A. was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Transportation. Country: Mexico. Transport company from Ecuador engaged in road freight transport. Including the transportation of heavy and bulk cargo, cars, animals and cargo in tanks. Year Founded: 2020 There are many customer documents and employee data. Financial documents, accounting and banking data. [Sector: Transportation]
-
October 26, 2026 • Burnaby Schools - School District 41 was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Education. Country: Canada. Website: www.burnabyschools.ca.