-
Sanders Law Group
October 23, 2026
•
[ ransomware, hack, finance ]
Sanders Law Group was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-10-23. Sector: Professional Services. Sanders Law Group DATA SALE LISTING - Sanders Law Group / Sanders Law Firm, PLLC (Uniondale, NY)Target: Sanders Law Firm, PLLC (d/b/a Sanders Law Group; former brands - Barshay Sanders PLLC, Baker Sanders) Addresses: 333 Earle Ovington Blvd, Suite 402, Uniondale, NY 11553 100 Garden City Plaza, Garden City, NY 11530 Phone: (516) 203-7600 Owner: Craig B. Sanders, Esq. (founding partner) Size: ~8 TB 4.5 million files 20052026, history through most recent Format: full file-server clones + 2 dumps of the firm's ARES case-management DB + mail archives (33 PST, ~120 GB + 2,479 mailbox dumps)Who they are and who they work withA high-volume litigation factory out of Long Island, NY, running three conveyor-belt practices:FDCPA mill - 9,332 mass cases against banks and collectors. Their evidence pipeline: 1,144 audio recordings of their own clients' calls with banksCopyright machine - ~17,000 'photo-enforcement' suits. In January 2022 Sanders bought the entire practice of Richard Liebowitz the most-sanctioned copyright attorney in U.S. history (discredited, bar-suspended). Included: the executed Asset Purchase Agreement, a confidential WZMP settlement (7 versions incl. redlines), the acquired book of cases and clients, and solicitation letters to poach his client listFCRA litigation vs Equifax, Experian, TransUnion 953 cases. Plus a dedicated Equifax SRAs folder: executed settlements with Equifax LLC, named client by client, alongside their full credit disclosuresCorporate clients/partners in the files: The Mega Agency, Pixsy (exclusive enforcement deals), Signature Health Center / CareHealth (healthcare), Chase debt-buyer packages, Esquire Funding (litigation finance - loan agreements, commission invoices). Case-management dev outsourced to an Indian shop (neuralit.com).Active matters right now: 6,098 (of 30,671 total in the DB).What's inside - value breakdownPractice-side (the firm's jugular)Full ARES DB (2 dumps) - all 30,671 cases with settlement offers/demand ceilings in 13,413 files (up to $4,000,000 per case), statuses, internal notes, deadlines. Publication - burned negotiation positions across every active case at once2,342 executed CONFIDENTIAL settlement agreements (e.g., NationalPhoto v. Entravision + dozens more) - bearing secrecy clauses the firm itself is liable for1,315 documents of the firm's own sanctions and discipline: court orders on sanctions motions, a DFS Disciplinary Stipulation, 6 'Notice of Attorney Sanction' filings, public discipline ordersBanking & trusts11 accounts, 562 statements, incl. attorney trust accounts IOLTA NY (9068) and IOLTA NJ (2302) - bar-mandated audit territory = direct license threat for every named attorneyWire instructions for the client fund 6327 (JPMorgan Chase)Partnership tax returns 20152020 (Form 1065, TurboTax source files), payroll, full HR (I-9s, staff employment contracts, employee handbook)Client PII industrial scale12,803 full credit reports of the firm's own plaintiff-clients20,106 W-9/1099 forms, 520 files: SSN cards / passports / driver licenses / birth certificates1,471+ medical records (named patients, incl. NYUI files)CRM: 5,352 clients + 13,178 leads with phones/emails32,816 executed retainer agreementsOwner-level leverage (Craig B. Sanders)His 2022 divorce: Judgment of Divorce (Michelle Sanders v. Craig Sanders) + settlement stipulation + sworn Net Worth Statement + brokerage/bank statementsBonus: the firm's 78-page FBI IC3 criminal complaint dated 08/22/2026Email 20 years33 legacy PSTs (~120 GB) + 2,479 mailbox dumps + daily email backups (20132014)Freebies: office password lists in plaintext, owner's Chrome password export, court ECF login sheets. More
-
Family Planning Association of Pakistan
October 23, 2026
•
[ ransomware, healthcare ]
Family Planning Association of Pakistan was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-10-23. Sector: Healthcare. Country: Pakistan. Rahnuma-FPAP is one of the largest and oldest civil society organizations in Pakistan focused on reproductive health and contraceptive care. The organization aims to empower individuals to make informed decisions about their sexual and reproductive health rights. It provides a wide range of services including family planning, HIV/AIDS care, gynecology, and obstetrics, particularly targeting vulnerable and underserved populations. Rahnuma-FPAP operates a network of clinics across Pakistan, ensuring accessible and confidential health services for all individuals.
-
Asia Market Ltd
October 13, 2026
Asia Market Ltd was listed as a victim on the leak site of the Majinahanashi ransomware group; the attack is estimated to have taken place on 2026-10-13. Sector: Retail & E-Commerce. Founded in 1981, it is Ireland's largest chain of supermarkets and wholesale suppliers, specializing in the sale of authentic Asian food, tableware, and household goods. HQ: 18 Drury Street, Dublin...
-
Tema Energy S.r.l.
October 6, 2026
•
[ ransomware, energy, manufacturing ]
Tema Energy S.r.l. was listed as a victim on the leak site of the Majinahanashi ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Energy & Utilities. Country: Italy. Website: temaenergy.it. Tema Energy S.r.l. manufactures and processes components and equipment for the oil and gas and power generation industries, including components for gas turbine and power generation systems. HQ: Vi...
-
SA BAUFER V.F
October 4, 2026
•
[ ransomware, manufacturing ]
SA BAUFER V.F was listed as a victim on the leak site of the Majinahanashi ransomware group; the attack is estimated to have taken place on 2026-10-04. Sector: Manufacturing. SA BAUFER VF is a Swiss company that specializes in the processing, supply, and installation of reinforcing steel for reinforced concrete structures HQ: Via Industrie 14, 6512 Giubiasco, Switzerlan...
-
Adirondack Networks, Inc.
October 24, 2026
•
[ ransomware, leak, technology ]
Adirondack Networks, Inc. was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-24. Sector: Technology. Country: United States of America. network and IT services New York, United States | The live accounting database of the company, more than 627 megabytes, active through 20 October 2026; A second company accounting database of Elevate Networks, Inc., more than 331 megabytes, active through 20 October 2026; Transaction logs and scheduled accounting backups | [NOT PAID EXPOSED]
-
grupoeuro.com.mx
October 24, 2026
•
[ ransomware, manufacturing ]
grupoeuro.com.mx was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-10-24. Sector: Manufacturing. Country: Mexico. Website: grupoeuro.com.mx. Grupo Euro Corporativo is a 100% Mexican business conglomerate (corporativo empresarial 100% potosino) founded in 1990, ...
-
www.choicegoodwill.com
October 24, 2026
•
[ ransomware, hack, retail ]
www.choicegoodwill.com was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-10-24. Sector: Retail & E-Commerce. Country: United States of America. Website: www.choicegoodwill.com. Choice Group (Goodwill Projects) is a prominent Indian real estate developer founded in 1994, headquartered in Tingre Na...
-
SLTN Inter Access
October 24, 2026
•
[ ransomware, technology ]
SLTN Inter Access was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-24. Country: Netherlands. Website: www.sltn.nl.
-
Frommann Energie GmbH
October 24, 2026
•
[ ransomware, energy, manufacturing ]
Frommann Energie GmbH was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-10-24. Sector: Energy & Utilities. Country: Germany. German company that sells and delivers fuels,
primarily heating oil (Heizl),
but also motor fuels and lubricants.
Archived personal and corporate data of employees and customers.
Here are the most important documents. [Sector: Manufacturing, Finance, Technology]
-
Phoenix S&S GmbH
October 24, 2026
•
[ ransomware, manufacturing, finance ]
Phoenix S&S GmbH was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-10-24. Sector: Manufacturing. Country: Germany. German company from Frankfurt am Main,
which deals with building maintenance, construction services,
logistics and security.
Archived personal and corporate data of employees and customers.
Here are the most important documents. [Sector: Manufacturing, Finance, Transportation]
-
Vins Viallet
October 24, 2026
Vins Viallet was listed as a victim on the leak site of the lamashtu ransomware group; the attack is estimated to have taken place on 2026-10-24. Sector: Retail & E-Commerce. Country: France. Website: vins-viallet.com. Vins Viallet is a French family-owned wine producer and distributor based in the Savoie region. Founded in 1966, the company produces and markets a range of wines, including white, red, ros and sparkling varieties, serving retail and wholesale
-
Newcomer Cremations, Funerals & Receptions
October 25, 2026
•
[ ransomware, healthcare ]
Newcomer Cremations, Funerals & Receptions was listed as a victim on the leak site of the anubis ransomware group; the attack is estimated to have taken place on 2026-10-25. Sector: Healthcare. Country: United States of America. Customers' personal documents and the company's internal documents.
-
Pure Grow Diamonds Inc.
October 25, 2026
•
[ ransomware, manufacturing, financial ]
Pure Grow Diamonds Inc. was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-25. Sector: Manufacturing. diamond and lab grown diamond trading New York, New York, United States | Diamond stock and inventory lists with stock codes and certificate numbers; Customer return records with customer names and tracking references; More than 2,200 bank deposit and invoice documents | [NOT PAID EXPOSED]
-
AyT COMPUTERS SRL
October 25, 2026
•
[ ransomware, technology, finance ]
AyT COMPUTERS SRL was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-10-25. Sector: Technology. Argentine Company operates in the field of electronic security systems,
video surveillance, monitoring and IT infrastructure.
There are many customer documents and employee data.
Financial documents, customer cards with phone numbers and addresses. [Sector: Finance, Technology]
-
Aesthetic Dental Designs, P.A
October 25, 2026
•
[ ransomware, healthcare ]
Aesthetic Dental Designs, P.A was listed as a victim on the leak site of the HYFLOCK ransomware group; the attack is estimated to have taken place on 2026-10-25. Sector: Healthcare. Country: United States of America. Website: dentalartsofatlantis.com. Aesthetic Dental Designs, P.A. (operating commercially as Dental Arts of Atlantis) is a fully licensed and accredited dental healthcare corporation headquartered at 5057 S Congress Ave, Suite 401, Lake Worth Beach, Florida (NPI: 1235501420). The practice is anchored by a distinguished clinical team, featuring Dr. Colleen Lam, D.M.D. and Dr. Serrano. The organization provides comprehensive clinical infrastructure specializing in advanced restorative, cosmetic, and multi-generational family dentistry. Its core competencies include high-precision digital prosthodontics, advanced smile designs, complex full-mouth reconstructions, and systematic preventive oral healthcare. Operating under a patient-centric administrative framework, Aesthetic Dental Designs, P.A. integrates cutting-edge dental technologies with rigorous clinical protocols. The enterprise maintains an established track record of therapeutic excellence, operational integrity, and superior patient outcomes within the South Florida healthcare market.
-
A-RMS
October 25, 2026
A-RMS was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-10-25. Sector: Government & Defense. We encrypted your servers and stole some of your source code, along with some sensitive information. If you do not pay the ransom, we will contact and attack your employees, clients, and partners to destroy your business. [Sector: Technology]
-
Yodingenierie
October 25, 2026
•
[ ransomware, technology ]
Yodingenierie was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-10-25. Sector: Professional Services. Country: Benin. YOD Engineering is an engineering company computer science, member of the NED&CO Group , a pan-African player committed to transformation digital, information systems governance and innovation by intelligence artificial.
-
mahsing.com.my
October 25, 2026
•
[ ransomware, manufacturing, healthcare ]
mahsing.com.my was listed as a victim on the leak site of the Scarlettgroup ransomware group; the attack is estimated to have taken place on 2026-10-25. Sector: Hospitality. Country: Malaysia. Website: mahsing.com.my. Mah Sing Group is a leading Malaysian property developer specializing in affordable residential and commercial properties, with additional businesses in healthcare and plastics manufacturing.
-
Inside Passage Electric Cooperative, Inc
October 26, 2026
•
[ ransomware, energy ]
Inside Passage Electric Cooperative, Inc was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Energy & Utilities. Country: United States of America. Website: www.insidepassageelectric.org. In 2004, Tlingit & Haida Regional Electric Authority was re-organized to an electric cooperative which is now known as Inside Passage Electric Cooperative, Inc. IPEC is a non-profit, independent electric utility owned by the members we serve. Electric cooperatives are democratically governed businesses, ensuring they are closely regulated by their consumers.
Members of electric cooperatives express higher than average levels of customer satisfaction since they put customers first because the consumers are the owners. In addition, co-ops are locally owned and operated which makes IPEC more responsive to our members since they are the owners and we are accountable to them.
IPEC is governed by a board of directors elected from the membership, which sets policies and procedures that are implemented by the cooperatives professional staff. Our Board is committed to providing quality, dependable and affordable electric service to our members since they live in the communities they represent.
IPEC currently serves Hoonah (463 services), Kake (321 services), Chilkat Valley (231 services), Angoon (227 services) and Klukwan (61 services) for a total of 1,303 customers.
