Full List

Search

Recent Breaches

• FuG-Gruppe October 21, 2026 • [ ransomware, technology ] FuG-Gruppe was listed as a victim on the leak site of the lamashtu ransomware group; the attack is estimated to have taken place on 2026-10-21. Sector: Other. Country: Germany. Website: fug-cwit.de. A German IT systems integrator and general contractor (Systemhaus) based in Halver, North Rhine-Westphalia (NRW), founded in 1950. The company specializes in IT/EDP integration and ERP solutions for industrial businesses, steel trading companies
• VERGI Muenster October 22, 2026 • [ ransomware, finance, energy ] VERGI Muenster was listed as a victim on the leak site of the lamashtu ransomware group; the attack is estimated to have taken place on 2026-10-22. Sector: Energy & Utilities. Country: Germany. Website: vergi-muenster.de. German tax advisory and business consulting firm providing tax return preparation, bookkeeping, annual financial statements, auditing, fiduciary services, and consulting for start-ups and established businesses.
• Company #108 October 22, 2026 • [ ransomware, technology ] Company #108 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-22. media production (audio description and accessibility media) Montreal, Quebec, Canada | [PENDING EXPOSURE]
• Airtificial October 22, 2026 • [ ransomware, technology ] Airtificial was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-22. Sector: Technology. Website: www.airtificial.com.
• Medienwerkstatt October 22, 2026 • [ ransomware, leak, education ] Medienwerkstatt was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-10-22. Sector: Education. Country: Germany. Medienwerkstatt stands for digital and printed communication of the highest quality and disting uishes itself through an exceptional customer service. With more than 50 passionate talents for various offline and online disciplines, medienwerkstatt ag is one of the largest media service providers in the canton of Thurgau. We will upload 130gb of corporate data soon. Employee personal information (names, addresses, p hones, contacts and so on), customer information, contracts and agreements, and so on.
• M...r October 22, 2026 • [ ransomware ] M...r was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-10-22. Redacted entry - full company name pending disclosure (FULL DATA TIMER active).
• M... C... October 22, 2026 M... C... was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-10-22. Redacted entry - full company name pending disclosure (FULL DATA TIMER active).
• Coop Italia October 23, 2026 • [ ransomware, retail ] Coop Italia was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-23. Sector: Retail & E-Commerce. Country: Italy. Website: www.coop.it.
• B2Chat October 23, 2026 B2Chat was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-10-23. Sector: Technology. B2Chat is a multimillion dollar business communication platform based in Spain that provides tools for customer support, sales, and engagement. It allows businesses to interact with customers through various channels, such as live chat, chatbots, and messaging apps (for example, WhatsApp, Facebook Messenger, and Telegram). The platform is designed to help companies streamline communication, improve response times, and enhance customer satisfaction. This leak includes sensitive financial information, employees' names, emails, and phone numbers, as well as clients' and partners' data. If you do not pay the ransom, we will contact and attack your employees, clients, and partners to destroy your business. [Sector: Technology]
• Prism Medical Products October 23, 2026 • [ ransomware, healthcare ] Prism Medical Products was listed as a victim on the leak site of the Wallstreet ransomware group; the attack is estimated to have taken place on 2026-10-23. Sector: Healthcare. Country: United States of America. Prism Medical Products is a U.S. home medical supplies provider specializing in wound care, along with ostomy, urological, compression, and other prescribed supplies. It works with clinicians and insurers to coordinate coverage and deliver supplies directly to patients homes
• Wah Chan Consolidated Sdn Bhd October 23, 2026 • [ ransomware, retail ] Wah Chan Consolidated Sdn Bhd was listed as a victim on the leak site of the Orova ransomware group; the attack is estimated to have taken place on 2026-10-23. Sector: Other. Country: Malaysia. Website: wahchan.com.my. Today, Wah Chan stands as a prominent name in Malaysias jewelry industry. Our extensive network boasts over 50 boutiques strategically located across key urban centers like Pahang, Selangor, Kuala Lumpur, Penang, Perak, Melaka, Negeri Sembilan, and Johor.
• SCHWAB-SYSTEM October 23, 2026 SCHWAB-SYSTEM was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-10-23. Sector: Financial Services. Country: Germany. The company provides solutions in the field of wood construction. Their primary motivation in e very project we undertake is to design and build structures that perfectly meet all the needs o f the people we work for. We will upload 19gb of corporate data soon. Employee personal information (passports and other personal docs), clients information, contracts and agreements, confidential information so on.
• Aerotop October 23, 2026 • [ ransomware, transportation ] Aerotop was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-23. Sector: Transportation. Country: Chile. Website: aerotop.cl.
• lidoway.com October 23, 2026 • [ ransomware, retail ] lidoway.com was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-10-23. Country: Liechtenstein. Website: lidoway.com. Lido boutique hotel, with 100 rooms, shops, restaurants and gym, creates a comfortable and intimate...
• dorsiacademy.it October 23, 2026 • [ ransomware, education ] dorsiacademy.it was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-10-23. Sector: Education. Country: Italy. Website: dorsiacademy.it. ART SCHOOL: Dove la Creativit Prende Forma Benvenuti in Art School, il luogo dove il talento incon...
• Miljaus Producciones S.L (www.miljaus.com) October 23, 2026 • [ ransomware, hack ] Miljaus Producciones S.L (www.miljaus.com) was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-23. Sector: Other. Country: Spain. Website: www.miljaus.com.
• Sanders Law Group October 23, 2026 • [ ransomware, hack, finance ] Sanders Law Group was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-10-23. Sector: Professional Services. Sanders Law Group DATA SALE LISTING - Sanders Law Group / Sanders Law Firm, PLLC (Uniondale, NY)Target: Sanders Law Firm, PLLC (d/b/a Sanders Law Group; former brands - Barshay Sanders PLLC, Baker Sanders) Addresses: 333 Earle Ovington Blvd, Suite 402, Uniondale, NY 11553 100 Garden City Plaza, Garden City, NY 11530 Phone: (516) 203-7600 Owner: Craig B. Sanders, Esq. (founding partner) Size: ~8 TB 4.5 million files 20052026, history through most recent Format: full file-server clones + 2 dumps of the firm's ARES case-management DB + mail archives (33 PST, ~120 GB + 2,479 mailbox dumps)Who they are and who they work withA high-volume litigation factory out of Long Island, NY, running three conveyor-belt practices:FDCPA mill - 9,332 mass cases against banks and collectors. Their evidence pipeline: 1,144 audio recordings of their own clients' calls with banksCopyright machine - ~17,000 'photo-enforcement' suits. In January 2022 Sanders bought the entire practice of Richard Liebowitz the most-sanctioned copyright attorney in U.S. history (discredited, bar-suspended). Included: the executed Asset Purchase Agreement, a confidential WZMP settlement (7 versions incl. redlines), the acquired book of cases and clients, and solicitation letters to poach his client listFCRA litigation vs Equifax, Experian, TransUnion 953 cases. Plus a dedicated Equifax SRAs folder: executed settlements with Equifax LLC, named client by client, alongside their full credit disclosuresCorporate clients/partners in the files: The Mega Agency, Pixsy (exclusive enforcement deals), Signature Health Center / CareHealth (healthcare), Chase debt-buyer packages, Esquire Funding (litigation finance - loan agreements, commission invoices). Case-management dev outsourced to an Indian shop (neuralit.com).Active matters right now: 6,098 (of 30,671 total in the DB).What's inside - value breakdownPractice-side (the firm's jugular)Full ARES DB (2 dumps) - all 30,671 cases with settlement offers/demand ceilings in 13,413 files (up to $4,000,000 per case), statuses, internal notes, deadlines. Publication - burned negotiation positions across every active case at once2,342 executed CONFIDENTIAL settlement agreements (e.g., NationalPhoto v. Entravision + dozens more) - bearing secrecy clauses the firm itself is liable for1,315 documents of the firm's own sanctions and discipline: court orders on sanctions motions, a DFS Disciplinary Stipulation, 6 'Notice of Attorney Sanction' filings, public discipline ordersBanking & trusts11 accounts, 562 statements, incl. attorney trust accounts IOLTA NY (9068) and IOLTA NJ (2302) - bar-mandated audit territory = direct license threat for every named attorneyWire instructions for the client fund 6327 (JPMorgan Chase)Partnership tax returns 20152020 (Form 1065, TurboTax source files), payroll, full HR (I-9s, staff employment contracts, employee handbook)Client PII industrial scale12,803 full credit reports of the firm's own plaintiff-clients20,106 W-9/1099 forms, 520 files: SSN cards / passports / driver licenses / birth certificates1,471+ medical records (named patients, incl. NYUI files)CRM: 5,352 clients + 13,178 leads with phones/emails32,816 executed retainer agreementsOwner-level leverage (Craig B. Sanders)His 2022 divorce: Judgment of Divorce (Michelle Sanders v. Craig Sanders) + settlement stipulation + sworn Net Worth Statement + brokerage/bank statementsBonus: the firm's 78-page FBI IC3 criminal complaint dated 08/22/2026Email 20 years33 legacy PSTs (~120 GB) + 2,479 mailbox dumps + daily email backups (20132014)Freebies: office password lists in plaintext, owner's Chrome password export, court ECF login sheets. More
• Family Planning Association of Pakistan October 23, 2026 • [ ransomware, healthcare ] Family Planning Association of Pakistan was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-10-23. Sector: Healthcare. Country: Pakistan. Rahnuma-FPAP is one of the largest and oldest civil society organizations in Pakistan focused on reproductive health and contraceptive care. The organization aims to empower individuals to make informed decisions about their sexual and reproductive health rights. It provides a wide range of services including family planning, HIV/AIDS care, gynecology, and obstetrics, particularly targeting vulnerable and underserved populations. Rahnuma-FPAP operates a network of clinics across Pakistan, ensuring accessible and confidential health services for all individuals.
• Asia Market Ltd October 13, 2026 Asia Market Ltd was listed as a victim on the leak site of the Majinahanashi ransomware group; the attack is estimated to have taken place on 2026-10-13. Sector: Retail & E-Commerce. Founded in 1981, it is Ireland's largest chain of supermarkets and wholesale suppliers, specializing in the sale of authentic Asian food, tableware, and household goods. HQ: 18 Drury Street, Dublin...
• Tema Energy S.r.l. October 6, 2026 • [ ransomware, energy, manufacturing ] Tema Energy S.r.l. was listed as a victim on the leak site of the Majinahanashi ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Energy & Utilities. Country: Italy. Website: temaenergy.it. Tema Energy S.r.l. manufactures and processes components and equipment for the oil and gas and power generation industries, including components for gas turbine and power generation systems. HQ: Vi...