Recent Breaches
-
October 16, 2026 • Canva was listed as a victim on the leak site of the THE SEVEN DEADLY SINS ransomware group; the attack is estimated to have taken place on 2026-10-16. Sector: Technology. Country: Australia. Website: canva.com. Global design platform; entire Salesforce org plus platform data warehouse export.
-
October 16, 2026 • Globeia Inc. was listed as a victim on the leak site of the THE SEVEN DEADLY SINS ransomware group; the attack is estimated to have taken place on 2026-10-16. Country: United States of America. Website: globeia.com. Document-processing platform for FBI clearance, RCMP criminal records, and Canadian corporate screening via portal.globeia.app.
-
October 14, 2026 • Axle Logistics was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Transportation. Country: United States of America. Website: axlelogistics.com. axlelogistics.com Axle Logistics non-asset freight brokerage founded in 2012 in Knoxville, Tennessee, by Drew Johnson and Jon Clay two University of Tennessee grads who started with two people and one trucking software license. It organizes truckload, LTL, intermodal, and port drayage shipments across the US, Canada, and Mexico by matching loads with third-party carriers, focusing on Fortune 500 shippers and mid-market brands. Revenue exploded from $80M (2018) to over $1.2B gross / $159M net (2025), and headcount grew from 2 to roughly 700 making it one of the fastest-scaling brokers in the country. It's landed on the Inc. 5000 list over a decade straight, ranked #52 among Transport Topics' top 50 logistics companies, and won Knoxville Top Workplaces seven years running. The company invested $38M in a gleaming new 84,000 sq ft HQ with state support and pays employees an average of ~$117K/year. It's a brokerage, not a carrier so shipment quality depends on the carriers.
-
October 14, 2026 • Petroleum Telcom Communications was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Energy & Utilities. Country: Pakistan. Website: ptelcom.com. ptelcom.com Petroleum Telcom, Inc. (dba Telcom, Inc. / Telcom Communications) Southern California communications integrator founded in 1978 in Oxnard, CA specializing in two-way radio for police/fire, microwave links, fiber optics, cell towers, and FCC licensing. Owned and led by Frank R. Hines (president since 1986), now a lean ~6-person shop (peak 35 in 1999), dealer for Motorola, Kenwood, and Bendix-King, with ~200 owned repeaters across CA/NV/AZ/UT. CA contractor license #620689 (B + C7) active since 1991, zero complaints, bonded and insured. Government track record is real and documented: Ventura County since 1982, Stanislaus County $1.2M, Port of LA police radio system $1.19M (201719), City of Oxnard up to $900K (202327), USGS, and 5 DoD contracts. Revenue not disclosed (est. $15M).
-
October 14, 2026 SONGWOOI was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Country: South Korea. Website: songwooi.co.kr. songwooi.co.kr SONGWOOI (Song Woo Industrial Co., Ltd.,) South Korean manufacturer of automotive and industrial rubber hoses intercooler/TCI, heater, fuel, CPF/DPF, and power steering lines founded 1998 in Busan, HQ and plant in Yangsan since 2002. Founder-Chairman Park Su-kon localizated TCI hoses that were 100% imported from Japan, claiming 90% Korean market share; customers include Hyundai, Kia, Renault Samsung, Hyundai Heavy Industries, and Volvo CE. Certifications: IATF 16949, ISO 14001, ISO 9001; Plus Inno-Biz/Main-Biz status and national awards (Bronze Tower Medal 2015 to Park). Revenue 69.9B ($50M) in 2025, down from 104.8B peak (2013) declining four years straight as the industry shifts to EVs but profitability improved (5.2% operating margin, ROE 23%). Financials are unusually strong: zero debt, 80% equity ratio, 52.9B total assets; ~163197 employees. Watch-outs: some databases list a different CEO (Park Eun-chul)
-
October 14, 2026 • Museum Siam was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Hospitality. Country: Thailand. Website: museumsiam.org. museumsiam.org Museum Siam museum in Bangkok run by NDMI under the public organization OKMD the .org domain is real, but it's a government institute, not a private company. It occupies the former Ministry of Commerce building (19211922) and opened as a museum on 2 April 2008. The core exhibit Decoding Thainess (14 rooms on how Thai identity was formed) has run since 2017; there's also a free Underground Museum at MRT Sanam Chai (2020). Attendance is ~250343K per year (different counting methods), 3.8M over 17 years; museum-level revenue isn't disclosed finances publish only at OKMD level. Tickets: 100 THB adult, 50 students, free for kids under 15, 60+, monks, disabled visitors; open TueSun 10:0018:00. Beyond exhibits: a 4,000+ resource library, digital archives, venue rental (580K THB), and a nationwide museum-network support program.
-
October 14, 2026 • Netcore Unbxd was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Technology. Country: India. Website: netcoreunbxd.com. netcoreunbxd.com Netcore Unbxd AI product-discovery platform for enterprise e-commerce: smart site search, 1:1 personalization, recommendations, visual intelligence ("Complete the Look"), catalog enrichment, and its 2026 bet a Shopping Agent (agentic commerce). Owned by India's Netcore Cloud since March 2022 (~$100M deal, 90%), run by founders Pavan Sondur and Prashant Kumar; SaaS sits on composable, API-first infra (Cloudflare, Kubernetes, multi-region), with <10ms response on 95% of queries and 35M documents processed monthly. Recognition: Gartner Magic Quadrant Leader 3 years running, highest "Current Offering" score in Forrester Wave Q3 2025, 7 G2 badges Summer 2025. Claimed customer results (self-reported): +38% AOV, +28% conversion, 60% null searches, 53% bounce. Positioning is sharply anti-native-search and anti-generic-AI, aimed at retail merchandisers with no-code workbenches and full override control. Site's main CTA is a free "personalized site experience audit."
-
October 14, 2026 • Saga University was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Education. Country: Japan. Website: saga-u.ac.jp. saga-u.ac.jp Saga University is a national Japanese university in Saga Prefecture, Kyushu founded in 1949 (roots back to 1875), merged with Saga Medical School in 2003, operating as a national university corporation since 2004. Scale: ~6,600 students, ~3,300 staff, 6 faculties (including medicine with a ~600-bed hospital) across Honjo, Nabeshima, and Arita campuses. Annual revenue 44B ($300M), ~57% of it generated by the university hospital; state capital 47.3B, with a +1.6B surplus in FY2024. Signature strength: the Institute of Ocean Energy (IOES) a world leader in OTEC (ocean thermal energy), pursuing the world's first 1-MW commercial plant ~2026-27 with Mitsui O.S.K. Lines. Rector since Oct 2025: Koichi Node (cardiologist); 2026 launches include Japan's first national-university cosmetic science program (30 students, 7x oversubscribed) and a joint teacher-training degree with Kumamoto University. Weak points: rankings have slid for a decade (QS Asia 801-850, THE 1501+)
-
October 14, 2026 • Suhai Segurana Pessoal was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Professional Services. Country: Brazil. Website: suhaiseguranca.com.br. suhaiseguranca.com.br Suhai Segurana Pessoal Brazilian personal security company founded in 1992 one of the older, established firms in its niche. Core business: bodyguard/executive protection, family and residential security, security drivers, and corporate guarding, delivered nationwide. Teams are described as vetted, licensed professionals backed by 24/7 monitoring and in-house tactical training. The firm claims ISO 9001 and Great Place to Work certification, but doesn't publish certificates claims are self-reported. No revenue, pricing, or verified headcount is public; everything is custom-quoted per job. Critically: since Brazil's 2024 law, security work is only legal if the firm holds a current federal police permit for that specific service and state confirm yours before hiring. Also beware the unrelated "Suhai" auto insurer sharing the name most complaints you'll find online are about insurance, not this company.
-
October 16, 2026 • Minkon was listed as a victim on the leak site of the bravox ransomware group; the attack is estimated to have taken place on 2026-10-16. Country: Germany. Website: www.minkon-international.com. Metallurgical Products and Engineering Solutions for Industry.
-
October 14, 2026 • Solar Communications International was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Technology. Country: United States of America. Website: rftransparent.com. Prominent supplier and developer of RFTransparent products that seamlessly integrate wireless infrastructure into various community settings
-
October 14, 2026 • Macfarlan Capital Partners was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Financial Services. Country: United States of America. Website: macfarlan.com. Equity real estate investment sponsor that serves institutional investors, family offices, wealth management advisors, and high net worth individuals
-
October 16, 2026 • EnVision Eye Care was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-16. Sector: Healthcare. Healthcare - Ophthalmology (US) Mississippi, USA | Patient records of a Mississippi ophthalmology practice: 13,308 patient records with names and dates of birth, taken from the patient database backup of December 2025; The complete patient database backup history of the practice, 2018 through 2025; Patient eye examination records with full ocular, medical and social history; The OCT eye scan archive of the practice | [NOT PAID EXPOSED]
-
October 16, 2026 • Company #83 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-16. managed IT services Texas, USA | [PENDING EXPOSURE]
-
October 16, 2026 • Company #82 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-16. Country: United States of America. hospitality United States | [PENDING EXPOSURE]
-
October 16, 2026 • Company #77 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-16. Country: United States of America. investigations and due diligence USA | [PENDING EXPOSURE]
-
October 16, 2026 • Company #78 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-16. Healthcare - Ambulatory Surgery Center (US) Texas, US | [PENDING EXPOSURE]
-
October 16, 2026 • ock.com.my was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-10-16. Country: Malaysia. Website: ock.com.my. OCK Group Berhad specializes in telco network services and infrastructure in Malaysia, offering solu...
-
October 17, 2026 • PART2 Global AirFreight International was listed as a victim on the leak site of the Eclipse ransomware group; the attack is estimated to have taken place on 2026-10-17. Sector: Transportation. Country: Singapore. Website: www.globalair.com.sg. PART 2 Global Airfreight International is a logistics solution provider specializing in air freight, ocean freight, cross-border trucking, and contract logistics. They cater to various industries including aerospace, healthcare, technology, and general cargo, offering services such as temperature-controlled solutions and project cargo management. The company focuses on delivering high standards of service and innovative solutions to meet customer requirements. Their clients include businesses in need of reliable and efficient supply chain solutions for critical shipments.
-
October 13, 2026 • Milstein Siegel, LLC was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-13. Sector: Professional Services. Country: United States of America. Website: milsteinfamilylaw.com.