Full List

Search

Recent Breaches

• Company #84 October 17, 2026 • [ ransomware, manufacturing ] Company #84 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-17. Country: United States of America. construction (custom homes) USA | [PENDING EXPOSURE]
• Company #86 October 17, 2026 • [ ransomware, retail ] Company #86 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-17. Country: United States of America. real estate and land development United States | [PENDING EXPOSURE]
• AirQ October 16, 2026 • [ ransomware, technology ] AirQ was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-16. Sector: Technology. Country: Andorra. Website: airq-ad.com. airq-ad.com AirQ UAE drone manufacturer founded in 2021 in Masdar City, Abu Dhabi, producing unmanned aerial systems fully in-house. It was started by Croatian entrepreneurs Dino Dedi as CEO and Igor Pongrac as CTO, who previously worked at Rimac Automobili, and has grown from 6 people to about 100 engineers. The flagship product is the Harara modular VTOL drone, carrying 6 kg of payload and flying up to 7 hours or 600 km in hybrid mode, with over 1000 test flights completed. Other products include the StingJet reusable jet target drone for air defense training and the world's first fully electric UAV launcher. The company is backed by Abu Dhabi institutions such as Tawazun Council and Masdar City Free Zone and runs real operations like medical blood sample delivery between hospitals. Its main strengths are full in-house composite production and dual defense plus commercial markets, while the main risks are its young age, ongoing aviation certification and dependence on UAE defense.
• Rheem Global October 17, 2026 Rheem Global was listed as a victim on the leak site of the Helix ransomware group; the attack is estimated to have taken place on 2026-10-17. Sector: Manufacturing. Country: United States of America. Rheem Global customer records. Yearly revenue ~$6 billion. GoFile links and passwords unlock in 12 hours.
• Company #88 October 17, 2026 • [ ransomware, healthcare ] Company #88 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-17. Country: United States of America. home healthcare services United States | [PENDING EXPOSURE]
• First Brothers Co., Ltd October 17, 2026 • [ ransomware, leak ] First Brothers Co., Ltd was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-17. Sector: Other. Country: Thailand. Website: firstbrothers.com.
• oakgrovetech October 2, 2026 oakgrovetech was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-10-02. Sector: Technology. Country: United States of America. Website: oakgrovetech.com. The company specializes in multi-domain training, unmanned systems & robotics, cyber/space operations, learning/courseware development, staff augmentation, intelligence analysis, and operates a Test & Training Center near Fort Bragg/Hoffman, NC. It primarily serves DoD clients including USASOC and 1st Special Forces Command. Corporate email archive of CEO and executive management (12 PST files, 35.14 GB) forwarded credentials, NDAs, negotiations with the DoD/FBI and other companies. Deltek GCS payroll module: banking details of all vendors and contractors. Accounting system backup. Company QuickBooks files OGT financial database: bank accounts, employee SSNs, administrator password. Contracts, personal data (PII), SSNs and much more.
• Smith Douglas Homes October 17, 2026 • [ ransomware, manufacturing ] Smith Douglas Homes was listed as a victim on the leak site of the Helix ransomware group; the attack is estimated to have taken place on 2026-10-17. Sector: Manufacturing. Country: United States of America. Website: smithdouglas.com. Smith Douglas Homes records. Yearly revenue ~$971 million. GoFile links and passwords unlock in 12 hours.
• Bay Alarm October 17, 2026 • [ ransomware, technology ] Bay Alarm was listed as a victim on the leak site of the Helix ransomware group; the attack is estimated to have taken place on 2026-10-17. Sector: Professional Services. Country: United States of America. Website: bayalarm.com. Bay Alarm records. Yearly revenue ~$256 million. GoFile links and passwords unlock in 12 hours.
• Quikrete October 18, 2026 • [ ransomware, manufacturing ] Quikrete was listed as a victim on the leak site of the Helix ransomware group; the attack is estimated to have taken place on 2026-10-18. Sector: Manufacturing. Country: United States of America. Quikrete records. GoFile links and passwords unlock in 6 hours.
• monroeroadways.com September 29, 2026 • [ ransomware, manufacturing ] monroeroadways.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-09-29. Sector: Transportation. Country: United States of America. Website: monroeroadways.com. Rochester, New York. A construction company that goes by Monroe Roadways in bid documents but appears as MRI Contractors of New York, Inc. in banking records. One address: 300 Hogan Road, Fairport. One president: Jeffrey D. Taylor. Two names and not a single public word about what lies behind them.
• SMIC US Company (Sunnyvale, CA — US arm of Semiconductor Manufacturing International Corpo... October 18, 2026 • [ ransomware, leak, manufacturing ] SMIC US Company (Sunnyvale, CA US arm of Semiconductor Manufacturing International Corpo... was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-18. Sector: Manufacturing. Country: United States of America. Semiconductor manufacturing California, USA | Corporate business records and working files from the company's file servers; Employee and payroll related records; Financial and accounting documents | [NOT PAID EXPOSED]
• Company #92 October 18, 2026 • [ ransomware, technology ] Company #92 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-18. Country: South Korea. IT services South Korea | [PENDING EXPOSURE]
• Merit Financial Group October 19, 2026 • [ ransomware, finance, leak ] Merit Financial Group was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-10-19. Sector: Financial Services. Country: United States of America. Merit Financial Group, LLC, doing business as Merit Financial Advisors ("Merit"), is a national wealth management firm that supports both the independent broker-dealer and RIA models. Based in Atlanta, Georgia, Merit has 24 additional offices throughout the U.S. and managed $5.59 billion in assets as of June 30, 2021 ($3.53 billion in advisory, $1.95 billion in brokerage assets and with $112 million in assets under advisement). Merit's mission is to establish and exceed the financial goals of its clients, while also providing its advisors and offices with practice management resources, an industry leading technology platform and the investment expertise needed to drive growth and deliver a superior client experience. The company headquarters is located in 2400 Lakeview Parkway, Suite 550, Alpharetta, GA 30009, United States. 201-500 Employees
• Company #94 October 19, 2026 • [ ransomware, automotive, retail ] Company #94 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-19. Country: United States of America. automotive retail United States | [PENDING EXPOSURE]
• Kingwood Endoscopy October 19, 2026 • [ ransomware, healthcare ] Kingwood Endoscopy was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-19. Sector: Healthcare. Country: United States of America. Healthcare - Ambulatory Surgery Center (US) Texas, US | The complete network configuration of an outpatient endoscopy surgery center: every account, password and access path; Proof of total control of the center's records, camera and remote-access systems; The center's full device and systems map | [NOT PAID EXPOSED]
• PingCAP / TiDB Cloud October 19, 2026 PingCAP / TiDB Cloud was listed as a victim on the leak site of the fulcrumsec ransomware group; the attack is estimated to have taken place on 2026-10-19. Sector: Technology. Country: China. [AI generated] PingCAP is a technology company founded in 2015 in Beijing, China, specializing in distributed database software. It develops TiDB, an open-source, MySQL-compatible distributed SQL database designed for hybrid transactional and analytical processing. Its cloud offering, TiDB Cloud, provides fully managed database-as-a-service on major cloud platforms. The company operates globally, serving enterprises in finance, gaming, e-commerce, and software industries requiring scalable data solutions.
• Grupo Cronica October 19, 2026 • [ ransomware, technology ] Grupo Cronica was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-19. Sector: Other. Country: Argentina. Website: www.grupocronica.com.ar.
• Brüninghoff Group October 20, 2026 • [ ransomware, manufacturing, leak ] Brninghoff Group was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-10-20. Sector: Manufacturing. Country: Germany. Brninghoff Group (brueninghoff.de) is a German construction and manufacturing company headquartered in Heiden, founded in 1974. The company specializes in turnkey project development, engineering, and the prefabrication of hybrid timber, concrete, and steel building systems. With around 700 employees, it strongly emphasizes sustainable, energy-efficient building methods for commercial, residential, and public architecture.
• Fisher59 October 20, 2026 • [ ransomware, retail ] Fisher59 was listed as a victim on the leak site of the anubis ransomware group; the attack is estimated to have taken place on 2026-10-20. Beverage distributor data breach.