Full List

Search

Recent Breaches

• Verano Holdings October 16, 2026 Verano Holdings was listed as a victim on the leak site of the THE SEVEN DEADLY SINS ransomware group; the attack is estimated to have taken place on 2026-10-16. Sector: Retail & E-Commerce. Country: United States of America. Website: verano.com. Public multi-state cannabis operator (VRNO); Zen Leaf and MV retail banners across 14+ U.S. states. Sweed POS and loyalty warehouse.
• Hospital Sírio-Libanês October 16, 2026 • [ ransomware, healthcare, technology ] Hospital Srio-Libans was listed as a victim on the leak site of the THE SEVEN DEADLY SINS ransomware group; the attack is estimated to have taken place on 2026-10-16. Sector: Healthcare. Country: Brazil. Website: hsl.org.br. One of Brazil's largest private hospital groups; Mangar Digital runs national telessade and PROADI programs.
• CAS Paper Mill October 14, 2026 • [ ransomware, manufacturing ] CAS Paper Mill was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Manufacturing. Country: Canada. Website: caspapermill.com. caspapermill.com C.A.S. Paper Mill Co., Ltd. is a Thai paper manufacturer in Singburi (est. 1990, operating since 1994), part of the Charoen Aksorn Group Thailand's largest paper distributor, backed by Bangkok Bank and Vacharaphol. It produces 130,000 MT/yr of newsprint, printing and kraft paper plus 30,000 MT/yr of tissue (Toscotec line, 2022), from 100% recycled US/Canadian waste paper. Zero-liquid-discharge since 1994, 10 MWp floating solar; ISO 9001/14001/45001, TIS 758, FSC C125297. Exports: Vietnam, Philippines, Pakistan. Revenue est. $80150M (~300 staff), but fell ~10% in 2025 as newsprint demand declines. Main red flag: 2018 villagers' protest over alleged coal pollution affecting 10,000+ residents, and denial of a license for the coal expansion.
• Caretaker Landscape and Tree Management October 14, 2026 Caretaker Landscape and Tree Management was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Agriculture and Food Production. Country: United States of America. Website: caretakerlandscape.com. Full-service commercial landscape and development services such as pruning, fertilization, mowing, renovation, and aeration
• Company #81 October 16, 2026 • [ ransomware, healthcare ] Company #81 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-16. Healthcare - Ambulatory Surgery Center (US) Texas, US | [PENDING EXPOSURE]
• Data-Core Systems October 16, 2026 • [ ransomware, technology, healthcare ] Data-Core Systems was listed as a victim on the leak site of the Vexy Ransomware ransomware group; the attack is estimated to have taken place on 2026-10-16. Sector: Technology. Website: dcsdev.org. Data-Core Systems is an IT consulting and technology services company incorporated in 1988. It helps organizations with digital transformation, SAP implementation, AI and machine learning, data analytics, cloud migration, application development, publishing, and business process solutions. It serves industries including healthcare, manufacturing, government, finance, retail, and energy.
• Prafesta Ind. e Com. de Embalagens Ltda October 16, 2026 • [ ransomware, manufacturing, finance ] Prafesta Ind. e Com. de Embalagens Ltda was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-16. Sector: Manufacturing. Country: Brazil. packaging manufacturing (extrusion) Brazil | Senior Sapiens ERP and Vetorh HR payroll platform; eSocial government payroll filings September and October 2026; Thousands of electronic invoices with customer and supplier data; Worker and partner CPF identification numbers; Bank integration certificates and financial records | [NOT PAID EXPOSED]
• Kissei Shoji October 16, 2026 • [ ransomware, manufacturing, healthcare ] Kissei Shoji was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-10-16. Sector: Manufacturing. Country: Japan. [AI generated] N/A I don't have reliable, verified information about a specific company called "Kissei Shoji" to provide an accurate factual description of its operations, industry, and country. Providing details without verification could result in inaccurate or fabricated information. If you have additional context or source material about this company, I'd be happy to help analyze it.
• Company #84 October 17, 2026 • [ ransomware, manufacturing ] Company #84 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-17. Country: United States of America. construction (custom homes) USA | [PENDING EXPOSURE]
• Company #86 October 17, 2026 • [ ransomware, retail ] Company #86 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-17. Country: United States of America. real estate and land development United States | [PENDING EXPOSURE]
• AirQ October 16, 2026 • [ ransomware, technology ] AirQ was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-16. Sector: Technology. Country: Andorra. Website: airq-ad.com. airq-ad.com AirQ UAE drone manufacturer founded in 2021 in Masdar City, Abu Dhabi, producing unmanned aerial systems fully in-house. It was started by Croatian entrepreneurs Dino Dedi as CEO and Igor Pongrac as CTO, who previously worked at Rimac Automobili, and has grown from 6 people to about 100 engineers. The flagship product is the Harara modular VTOL drone, carrying 6 kg of payload and flying up to 7 hours or 600 km in hybrid mode, with over 1000 test flights completed. Other products include the StingJet reusable jet target drone for air defense training and the world's first fully electric UAV launcher. The company is backed by Abu Dhabi institutions such as Tawazun Council and Masdar City Free Zone and runs real operations like medical blood sample delivery between hospitals. Its main strengths are full in-house composite production and dual defense plus commercial markets, while the main risks are its young age, ongoing aviation certification and dependence on UAE defense.
• Rheem Global October 17, 2026 Rheem Global was listed as a victim on the leak site of the Helix ransomware group; the attack is estimated to have taken place on 2026-10-17. Sector: Manufacturing. Country: United States of America. Rheem Global customer records. Yearly revenue ~$6 billion. GoFile links and passwords unlock in 12 hours.
• Company #88 October 17, 2026 • [ ransomware, healthcare ] Company #88 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-17. Country: United States of America. home healthcare services United States | [PENDING EXPOSURE]
• First Brothers Co., Ltd October 17, 2026 • [ ransomware, leak ] First Brothers Co., Ltd was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-17. Sector: Other. Country: Thailand. Website: firstbrothers.com.
• oakgrovetech October 2, 2026 oakgrovetech was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-10-02. Sector: Technology. Country: United States of America. Website: oakgrovetech.com. The company specializes in multi-domain training, unmanned systems & robotics, cyber/space operations, learning/courseware development, staff augmentation, intelligence analysis, and operates a Test & Training Center near Fort Bragg/Hoffman, NC. It primarily serves DoD clients including USASOC and 1st Special Forces Command. Corporate email archive of CEO and executive management (12 PST files, 35.14 GB) forwarded credentials, NDAs, negotiations with the DoD/FBI and other companies. Deltek GCS payroll module: banking details of all vendors and contractors. Accounting system backup. Company QuickBooks files OGT financial database: bank accounts, employee SSNs, administrator password. Contracts, personal data (PII), SSNs and much more.
• Smith Douglas Homes October 17, 2026 • [ ransomware, manufacturing ] Smith Douglas Homes was listed as a victim on the leak site of the Helix ransomware group; the attack is estimated to have taken place on 2026-10-17. Sector: Manufacturing. Country: United States of America. Website: smithdouglas.com. Smith Douglas Homes records. Yearly revenue ~$971 million. GoFile links and passwords unlock in 12 hours.
• Bay Alarm October 17, 2026 • [ ransomware, technology ] Bay Alarm was listed as a victim on the leak site of the Helix ransomware group; the attack is estimated to have taken place on 2026-10-17. Sector: Professional Services. Country: United States of America. Website: bayalarm.com. Bay Alarm records. Yearly revenue ~$256 million. GoFile links and passwords unlock in 12 hours.
• Quikrete October 18, 2026 • [ ransomware, manufacturing ] Quikrete was listed as a victim on the leak site of the Helix ransomware group; the attack is estimated to have taken place on 2026-10-18. Sector: Manufacturing. Country: United States of America. Quikrete records. GoFile links and passwords unlock in 6 hours.
• monroeroadways.com September 29, 2026 • [ ransomware, manufacturing ] monroeroadways.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-09-29. Sector: Transportation. Country: United States of America. Website: monroeroadways.com. Rochester, New York. A construction company that goes by Monroe Roadways in bid documents but appears as MRI Contractors of New York, Inc. in banking records. One address: 300 Hogan Road, Fairport. One president: Jeffrey D. Taylor. Two names and not a single public word about what lies behind them.
• SMIC US Company (Sunnyvale, CA — US arm of Semiconductor Manufacturing International Corpo... October 18, 2026 • [ ransomware, leak, manufacturing ] SMIC US Company (Sunnyvale, CA US arm of Semiconductor Manufacturing International Corpo... was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-18. Sector: Manufacturing. Country: United States of America. Semiconductor manufacturing California, USA | Corporate business records and working files from the company's file servers; Employee and payroll related records; Financial and accounting documents | [NOT PAID EXPOSED]