-
Company #73
October 15, 2026
•
[ ransomware, technology, manufacturing ]
Company #73 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-15. Semiconductor manufacturing California, USA | [PENDING EXPOSURE]
-
Segres Systec
October 15, 2026
•
[ ransomware, technology ]
Segres Systec was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-15. Sector: Technology. Country: Spain. Website: www.segres.com.
-
Telcoe Federal Credit Union
October 15, 2026
•
[ ransomware, finance ]
Telcoe Federal Credit Union was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-15. Sector: Financial Services. Country: United States of America. Website: www.telcoe.com.
-
nowaszkola.com
October 15, 2026
•
[ ransomware, education ]
nowaszkola.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-10-15. Sector: Education. Country: Poland. Website: nowaszkola.com. /
-
CureMetrix, Inc.
September 21, 2026
•
[ ransomware, healthcare, technology ]
CureMetrix, Inc. was listed as a victim on the leak site of the THE SEVEN DEADLY SINS ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Healthcare. Country: United States of America. Website: curemetrix.com.
-
Via Credit Union
October 16, 2026
•
[ ransomware, finance ]
Via Credit Union was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-16. Sector: Financial Services. Country: United States of America. Website: www.viacu.org.
-
Campbell Rhea
October 14, 2026
•
[ ransomware, manufacturing, education ]
Campbell Rhea was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Country: United States of America. Website: campbellrhea.com. campbellrhea.com Campbell Rhea US manufacturer of laboratory and educational casework legal entity Institutional Casework, Inc. (ICI) with roots to 1951 in Paris, TN. The brand survived a 2005 tornado that destroyed its former parent Mohon International, was relaunched by local investors in 2006 (CEO Jim Arthurs ever since), and acquired Jamestown Metal Products (NY) plus a steel plant in Union City, TN 650,000 sq ft of manufacturing total. Products: wood/steel/stainless lab casework, ISOLATOR fume hoods, countertops, athletic lockers (Olympian), Patriot tables certified SEFA-8, FSC, AIA CES. Revenue $32.1M (2025) per FDMC 300, down from a $63.5M COVID-era peak (2022); ~250 employees, 35+ US dealers, projects at Penn State, UC Davis, Vanderbilt, Case Western, U of Missouri.
-
CLIMEDI
October 14, 2026
CLIMEDI was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Healthcare. Country: Brazil. Website: climedi.com.br. climedi.com.br CLIMEDI private multidisciplinary medical clinic and diagnostic center in Aracaju, Sergipe, Brazil founded 5 Oct 1977 by Dr. Joo Antnio Macedo Santana (endocrinologist & nuclear medicine physician, UFS professor, SUNY Upstate NYtrained). Family-run (Santana-Macedo dynasty: Joo, son Gustavo, daughter Sara), with 76121 staff, 50+ physicians across 3 units. Its unique regional edge: full nuclear medicine PET-CT, scintigraphy, and I-131 thyroid cancer therapy with 5 CNEN-compliant isolation suites plus 20+ specialties (endocrinology, cardiology, gastro, mastology, orthopedics, ENT, neuro) and complete diagnostics (MRI, CT, mammography, endoscopy, bone densitometry, 54+ tests). Quality credentials: PNCQ "Excelente" (highest tier), SBAC, DICQ; registered in CNES, works with SUS, private insurers, and union health plans (APCEF+). Government payments total R$ 11M+ (Portal da Transparncia); private revenue undisclosed (est. R$ 2050M/yr).
-
Taiwan Otsuka Pharmaceutical
October 14, 2026
Taiwan Otsuka Pharmaceutical was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Healthcare. Country: Taiwan. Website: otsuka.com.tw. otsuka.com.tw Revenue $278.3 Million Otsuka Pharmaceutical (Taiwan) Co., Ltd. Taiwanese arm of Japan's Otsuka Holdings (TSE: 4578), operating since 1974 first as a JV, wholly owned since 1995. HQ in Taipei's Daan District with plants in Guandu and Kaohsiung, ~5001,000 staff, capital NT$531M, president Ryoichi Fukumoto. Core business: prescription drugs (Abilify, Mucosta, nephrology/oncology lines), consumer brands (Pocari Sweat, Nature Made, CalorieMate, SOYJOY), medical devices, and a new insurance services arm. The group posted record 2025 pharma results (+22% revenue, +43% operating profit) across 84+ countries. Taiwan-specific financials aren't published (subsidiary of a listed parent), but the entity has 52 years on the market, TFDA-registered products, and a solid employer brand with active hiring since 2024.
-
Harness Inc.
October 16, 2026
•
[ ransomware, technology ]
Harness Inc. was listed as a victim on the leak site of the THE SEVEN DEADLY SINS ransomware group; the attack is estimated to have taken place on 2026-10-16. Sector: Technology. Country: United States of America. Website: harness.io. Enterprise continuous delivery platform; entire Salesforce org with global prospect and customer pipeline.
-
JJS Justice
October 14, 2026
•
[ ransomware, government ]
JJS Justice was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Government & Defense. Country: United Kingdom of Great Britain and Northern Ireland. Website: jjsjustice.com. jjsjustice.com JJS Justice (Janet, Janet & Suggs, LLC) is a national plaintiff-side firm based in Baltimore/Pikesville, MD, founded 1996 (practice since 1978) specializing in birth injuries/CP, medical malpractice, sexual abuse (clergy, USC/Johns Hopkins), mass torts, and whistleblower cases. Record: $3B+ in verdicts and settlements over 40 years, including the largest US sexual-abuse settlement ($852M vs. USC/Dr. Tyndall, 2021), $190M vs. Johns Hopkins, $225M NJ v. ExxonMobil, and multiple record birth-injury verdicts. Led since Sept 2025 by Andrew S. Janet after founder Howard A. Janet died at 70; core team includes Kenneth M. Suggs (ex-ATLA president) and Dr. Giles Manley (OBGYN turned lawyer). Chambers USA Band 2 (MD plaintiffs), Best Lawyers "Lawyer of the Year" 2025, Super Lawyers, Lawdragon 500, AV Preeminent, ABOTA. Contingency model (no fee unless they win), 10+ states + DC, ~17 lawyers, ~60 staff.
-
Cradlewise Inc.
October 16, 2026
•
[ ransomware, technology, retail ]
Cradlewise Inc. was listed as a victim on the leak site of the THE SEVEN DEADLY SINS ransomware group; the attack is estimated to have taken place on 2026-10-16. Sector: Technology. Country: United States of America. Website: cradlewise.com. VC-backed smart crib manufacturer; ~$14M/yr DTC revenue plus Nurture subscription layer.
-
Inovar Packaging Group
October 14, 2026
Inovar Packaging Group was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Manufacturing. Country: Australia. Website: inovarpackaging.com. inovarpackaging.com Inovar Packaging Group (Irving, TX) is a PE-backed buy-and-build platform producing pressure-sensitive labels, shrink sleeves, flexible packaging, and RFID 14 US plants, 12+ acquisitions since 2016 (latest: Kiliper Corp, Feb 2026). Owned by Kelso & Company since May 2022 (previously AEA Investors); CEO/Chairman Jeff Brezek leads, with deal advisors Milbank and Mesirow confirming real M&A scale. Revenue is private and undisclosed realistic estimates put it at $100250M, with ~500750 employees (Form 5500 filings show plan participants growing 121743 in 20202024). Certifications are strong: ISO 9001/14001, first US printer with GMI Platinum (both digital + flexo; serves CVS, Target, Walgreens, Home Depot), FDA 21 CFR 11 / EU Annex 11, EcoVadis Gold; won the 2024 TLMI Eugene Singer Award. Clients: food & beverage, healthcare, ag-chem, supplements, personal care with built-in redundancy across plants for continuity.
-
Thai Ha PCL KASET
October 14, 2026
Thai Ha PCL KASET was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Agriculture and Food Production. Country: Thailand. Website: kasetbrand.co.th. kasetbrand.co.th Thai Ha PCL (SET: KASET) is a Thai public company founded 1993, listed since 2005, exporting jasmine rice, mung bean noodles, and snacks (brands KASET, SMART CHEF, IMPERIAL TASTE) to 80+ countries the US is its largest market (902+ shipments, active as of Oct 2026). Core assets: a rice mill in Nakhon Pathom (100K tons/yr capacity) and a noodle factory in Nakhon Sawan; certified BRC Grade A+, US FDA, Halal, KOSHER, SMETA. The family Tangpiroonthum controls ~42% via Cheer Group Holdings, CEO Somroek Tangpiroonthum in place since 2004. But financially it's been bleeding: revenue fell from 611M (2020) to 302M (2025), six consecutive years of losses totaling ~330M, negative operating cash flow, debt/equity ~143%. A turnaround plan launched in 2024 including halving par value (1.000.50) to wipe ~139M accumulated deficit is narrowing losses (Q2 2026 66% YoY) but the company is still unprofitable.
-
Skin Center
October 14, 2026
•
[ ransomware, healthcare ]
Skin Center was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Healthcare. Country: United States of America. Website: skincenter.com. skincenter.com Skin Center dermatology clinic in Fort Lauderdale, FL (6550 N Federal Hwy, Suite 320) with 40+ years of practice roots (formerly Dr. Roger Stewart's clinic, led by Dr. Barry Galitzer since the 2010s). Full spectrum: medical dermatology, Mohs surgery for skin cancer, cosmetic injectables/lasers (Botox, CoolSculpting, Ultherapy, Fraxel), an Acne Center, aesthetics, and massage. The hidden headline: since 2021 it's owned by Forefront Dermatology (125+ clinics, backed by Canadian pension fund OMERS Private Equity) billing, records, and HR run through the network, not the local brand. Doctors rate excellent (Galitzer 4.7/5 on Healthgrades; Castle Connolly Top Doctor), but admin/office process is the weak spot complaints cite long waits, forgotten patients, and a brusque bedside manner. Team: ~10 providers (Galitzer, Fien, Perrotto, Soro, White, Brown + PAs), plus a second office in Pompano Beach; 200+ patients/day, 10,000 sq ft.
-
REGiO Nord
October 14, 2026
•
[ ransomware, government, finance ]
REGiO Nord was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Other. Country: Germany. Website: regio-nord.com. regio-nord.com REGiO-Nord mbH (HRB 1203, Amtsgericht Neuruppin) is a municipal regional-development company in Gransee, Brandenburg, founded 20082009 to run the shared "Mittelzentrum" of GranseeZehdenickFrstenberg/Havel. It is 100% publicly owned (Zehdenick 1/3, Frstenberg 1/3, Gransee 1/6, Amt Gransee 1/6), led by sole managing director Olaf Bechert with a staff of ~5 plus two tourist info offices. Its real money flows through the Kooperationsfonds ~8.9M in projects since 2008, with 538K spent in 2025 and 563K budgeted for 2026, of which 312K funds the company's own coordination work. Four workstreams: education (teacher recruitment, apprenticeship exchange), economy (business services, doctor recruitment, arztidylle.de), tourism (two info stations, region portals, RegioApp), and regional marketing (REGiO-Card, library network). Finances are project-transparent (open budget reports) but the GmbH's own annual accounts are only public through 2022 request 20232025.
-
Adams Warehouse & Delivery, Inc.
October 16, 2026
•
[ ransomware, leak, manufacturing ]
Adams Warehouse & Delivery, Inc. was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-10-16. Sector: Transportation. Country: United States of America. Website: Adams Warehouse & Delivery, Inc.. Adams Warehouse & Delivery, Inc. a family-owned freight and logistics company operating 11 warehouse facilities in the Houston metro area since 1976.
The dataset includes complete server backup mirrors from multiple drives (D:, E:, Data, Network Shares), capturing the company's entire digital footprint:
Sage/Peachtree accounting system for 8 entities spanning FY2007FY2025+, containing payroll, AR, AP, general ledger, and W-2 filing histories
5272 Social Security Numbers with full identity packages (name, DOB, address, phone, emergency contacts, health insurance IDs) across 4 entities
Domain administrator passwords saved in 4 RDP files, plus plaintext VPN credentials, WiFi passwords, and 18 database connections with blank passwords
WDS source code the company's custom warehouse distribution management system (VB6/.NET, multiple versions)
20+ years of customer data rate cards, operations logs, and contact lists for 100+ warehouse customers including Honeywell, Hospira, Amway, and Kaiser
Medical clinic employee data South Main Medical Clinic's bookkeeping within the Sage system, including physician SSN
11 Outlook PST email archives (largest: 1.5 GB)
-
Company #71
October 16, 2026
•
[ ransomware, manufacturing ]
Company #71 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-16. Country: United States of America. manufacturing USA | [PENDING EXPOSURE]
-
Company #76
October 16, 2026
•
[ ransomware, finance, technology ]
Company #76 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-16. Country: United States of America. fintech payments US | [PENDING EXPOSURE]
-
Company #79
October 16, 2026
Company #79 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-16. Country: United States of America. hospitality United States | [PENDING EXPOSURE]