-
Amity University Dubai
September 17, 2026
•
[ ransomware, education ]
Amity University Dubai was listed as a victim on the leak site of the blacknevas ransomware group; the attack is estimated to have taken place on 2026-09-17. Sector: Education. Country: United Arab Emirates. 1. Personal data of students and staffFull name, date of birth, address, telephone numbers, e-mailPhotographs; passport, ID, or national identity document numbers2. Academic recordsDisciplinary records and remarksInformation on expulsion or academic leaves of absenceData on scholarships and academic achievements3. Financial informationBank account detailsBank card detailsTuition payment historyInformation on student loans and outstanding debtsData on grants and scholarships4. Research and commercial dataUnpublished research papers and studiesIntellectual propertyConfidential data of partners and sponsorsGrant and contract data5. Data on parents/guardiansContact informationFinancial details
-
camden-living
October 15, 2026
•
[ ransomware, retail ]
camden-living was listed as a victim on the leak site of the iah6477 ransomware group; the attack is estimated to have taken place on 2026-10-15. Sector: Hospitality. Country: United Kingdom of Great Britain and Northern Ireland. [AI generated] Camden Living, operating through Camden Property Trust, is a United States-based real estate company specializing in the development, ownership, management, and leasing of multifamily residential apartment communities. It operates within the real estate and property management industry, serving residents across major metropolitan markets in the U.S., particularly in the Sun Belt region, including Texas, Florida, and other southern and western states.
-
buckle
October 15, 2026
buckle was listed as a victim on the leak site of the iah6477 ransomware group; the attack is estimated to have taken place on 2026-10-15. Sector: Retail & E-Commerce. [AI generated] Buckle, Inc. is a United States-based specialty retailer operating in the apparel and fashion industry. Founded in 1948 and headquartered in Kearney, Nebraska, the company sells clothing, footwear, and accessories for men, women, and children through brand-name and private label merchandise. It operates physical retail stores across the U.S. as well as an online e-commerce platform for direct consumer sales.
-
Enchanted Fine Jewellery
October 15, 2026
•
[ ransomware, retail ]
Enchanted Fine Jewellery was listed as a victim on the leak site of the Vexy Ransomware ransomware group; the attack is estimated to have taken place on 2026-10-15. Sector: Retail & E-Commerce. Country: India. Website: enchantedfinejewellery.in. enchantedfinejewellery.in
-
Brame Telecom
October 15, 2026
•
[ ransomware, technology ]
Brame Telecom was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-15. Sector: Technology. Country: Brazil. Website: www.brametelecom.com.
-
Company #73
October 15, 2026
•
[ ransomware, technology, manufacturing ]
Company #73 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-15. Semiconductor manufacturing California, USA | [PENDING EXPOSURE]
-
Segres Systec
October 15, 2026
•
[ ransomware, technology ]
Segres Systec was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-15. Sector: Technology. Country: Spain. Website: www.segres.com.
-
Telcoe Federal Credit Union
October 15, 2026
•
[ ransomware, finance ]
Telcoe Federal Credit Union was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-15. Sector: Financial Services. Country: United States of America. Website: www.telcoe.com.
-
nowaszkola.com
October 15, 2026
•
[ ransomware, education ]
nowaszkola.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-10-15. Sector: Education. Country: Poland. Website: nowaszkola.com. /
-
CureMetrix, Inc.
September 21, 2026
•
[ ransomware, healthcare, technology ]
CureMetrix, Inc. was listed as a victim on the leak site of the THE SEVEN DEADLY SINS ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Healthcare. Country: United States of America. Website: curemetrix.com.
-
Via Credit Union
October 16, 2026
•
[ ransomware, finance ]
Via Credit Union was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-16. Sector: Financial Services. Country: United States of America. Website: www.viacu.org.
-
Campbell Rhea
October 14, 2026
•
[ ransomware, manufacturing, education ]
Campbell Rhea was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Country: United States of America. Website: campbellrhea.com. campbellrhea.com Campbell Rhea US manufacturer of laboratory and educational casework legal entity Institutional Casework, Inc. (ICI) with roots to 1951 in Paris, TN. The brand survived a 2005 tornado that destroyed its former parent Mohon International, was relaunched by local investors in 2006 (CEO Jim Arthurs ever since), and acquired Jamestown Metal Products (NY) plus a steel plant in Union City, TN 650,000 sq ft of manufacturing total. Products: wood/steel/stainless lab casework, ISOLATOR fume hoods, countertops, athletic lockers (Olympian), Patriot tables certified SEFA-8, FSC, AIA CES. Revenue $32.1M (2025) per FDMC 300, down from a $63.5M COVID-era peak (2022); ~250 employees, 35+ US dealers, projects at Penn State, UC Davis, Vanderbilt, Case Western, U of Missouri.
-
CLIMEDI
October 14, 2026
CLIMEDI was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Healthcare. Country: Brazil. Website: climedi.com.br. climedi.com.br CLIMEDI private multidisciplinary medical clinic and diagnostic center in Aracaju, Sergipe, Brazil founded 5 Oct 1977 by Dr. Joo Antnio Macedo Santana (endocrinologist & nuclear medicine physician, UFS professor, SUNY Upstate NYtrained). Family-run (Santana-Macedo dynasty: Joo, son Gustavo, daughter Sara), with 76121 staff, 50+ physicians across 3 units. Its unique regional edge: full nuclear medicine PET-CT, scintigraphy, and I-131 thyroid cancer therapy with 5 CNEN-compliant isolation suites plus 20+ specialties (endocrinology, cardiology, gastro, mastology, orthopedics, ENT, neuro) and complete diagnostics (MRI, CT, mammography, endoscopy, bone densitometry, 54+ tests). Quality credentials: PNCQ "Excelente" (highest tier), SBAC, DICQ; registered in CNES, works with SUS, private insurers, and union health plans (APCEF+). Government payments total R$ 11M+ (Portal da Transparncia); private revenue undisclosed (est. R$ 2050M/yr).
-
Taiwan Otsuka Pharmaceutical
October 14, 2026
Taiwan Otsuka Pharmaceutical was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Healthcare. Country: Taiwan. Website: otsuka.com.tw. otsuka.com.tw Revenue $278.3 Million Otsuka Pharmaceutical (Taiwan) Co., Ltd. Taiwanese arm of Japan's Otsuka Holdings (TSE: 4578), operating since 1974 first as a JV, wholly owned since 1995. HQ in Taipei's Daan District with plants in Guandu and Kaohsiung, ~5001,000 staff, capital NT$531M, president Ryoichi Fukumoto. Core business: prescription drugs (Abilify, Mucosta, nephrology/oncology lines), consumer brands (Pocari Sweat, Nature Made, CalorieMate, SOYJOY), medical devices, and a new insurance services arm. The group posted record 2025 pharma results (+22% revenue, +43% operating profit) across 84+ countries. Taiwan-specific financials aren't published (subsidiary of a listed parent), but the entity has 52 years on the market, TFDA-registered products, and a solid employer brand with active hiring since 2024.
-
Harness Inc.
October 16, 2026
•
[ ransomware, technology ]
Harness Inc. was listed as a victim on the leak site of the THE SEVEN DEADLY SINS ransomware group; the attack is estimated to have taken place on 2026-10-16. Sector: Technology. Country: United States of America. Website: harness.io. Enterprise continuous delivery platform; entire Salesforce org with global prospect and customer pipeline.
-
JJS Justice
October 14, 2026
•
[ ransomware, government ]
JJS Justice was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Government & Defense. Country: United Kingdom of Great Britain and Northern Ireland. Website: jjsjustice.com. jjsjustice.com JJS Justice (Janet, Janet & Suggs, LLC) is a national plaintiff-side firm based in Baltimore/Pikesville, MD, founded 1996 (practice since 1978) specializing in birth injuries/CP, medical malpractice, sexual abuse (clergy, USC/Johns Hopkins), mass torts, and whistleblower cases. Record: $3B+ in verdicts and settlements over 40 years, including the largest US sexual-abuse settlement ($852M vs. USC/Dr. Tyndall, 2021), $190M vs. Johns Hopkins, $225M NJ v. ExxonMobil, and multiple record birth-injury verdicts. Led since Sept 2025 by Andrew S. Janet after founder Howard A. Janet died at 70; core team includes Kenneth M. Suggs (ex-ATLA president) and Dr. Giles Manley (OBGYN turned lawyer). Chambers USA Band 2 (MD plaintiffs), Best Lawyers "Lawyer of the Year" 2025, Super Lawyers, Lawdragon 500, AV Preeminent, ABOTA. Contingency model (no fee unless they win), 10+ states + DC, ~17 lawyers, ~60 staff.
-
Cradlewise Inc.
October 16, 2026
•
[ ransomware, technology, retail ]
Cradlewise Inc. was listed as a victim on the leak site of the THE SEVEN DEADLY SINS ransomware group; the attack is estimated to have taken place on 2026-10-16. Sector: Technology. Country: United States of America. Website: cradlewise.com. VC-backed smart crib manufacturer; ~$14M/yr DTC revenue plus Nurture subscription layer.
-
Inovar Packaging Group
October 14, 2026
Inovar Packaging Group was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Manufacturing. Country: Australia. Website: inovarpackaging.com. inovarpackaging.com Inovar Packaging Group (Irving, TX) is a PE-backed buy-and-build platform producing pressure-sensitive labels, shrink sleeves, flexible packaging, and RFID 14 US plants, 12+ acquisitions since 2016 (latest: Kiliper Corp, Feb 2026). Owned by Kelso & Company since May 2022 (previously AEA Investors); CEO/Chairman Jeff Brezek leads, with deal advisors Milbank and Mesirow confirming real M&A scale. Revenue is private and undisclosed realistic estimates put it at $100250M, with ~500750 employees (Form 5500 filings show plan participants growing 121743 in 20202024). Certifications are strong: ISO 9001/14001, first US printer with GMI Platinum (both digital + flexo; serves CVS, Target, Walgreens, Home Depot), FDA 21 CFR 11 / EU Annex 11, EcoVadis Gold; won the 2024 TLMI Eugene Singer Award. Clients: food & beverage, healthcare, ag-chem, supplements, personal care with built-in redundancy across plants for continuity.
-
Thai Ha PCL KASET
October 14, 2026
Thai Ha PCL KASET was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Agriculture and Food Production. Country: Thailand. Website: kasetbrand.co.th. kasetbrand.co.th Thai Ha PCL (SET: KASET) is a Thai public company founded 1993, listed since 2005, exporting jasmine rice, mung bean noodles, and snacks (brands KASET, SMART CHEF, IMPERIAL TASTE) to 80+ countries the US is its largest market (902+ shipments, active as of Oct 2026). Core assets: a rice mill in Nakhon Pathom (100K tons/yr capacity) and a noodle factory in Nakhon Sawan; certified BRC Grade A+, US FDA, Halal, KOSHER, SMETA. The family Tangpiroonthum controls ~42% via Cheer Group Holdings, CEO Somroek Tangpiroonthum in place since 2004. But financially it's been bleeding: revenue fell from 611M (2020) to 302M (2025), six consecutive years of losses totaling ~330M, negative operating cash flow, debt/equity ~143%. A turnaround plan launched in 2024 including halving par value (1.000.50) to wipe ~139M accumulated deficit is narrowing losses (Q2 2026 66% YoY) but the company is still unprofitable.
-
Skin Center
October 14, 2026
•
[ ransomware, healthcare ]
Skin Center was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Healthcare. Country: United States of America. Website: skincenter.com. skincenter.com Skin Center dermatology clinic in Fort Lauderdale, FL (6550 N Federal Hwy, Suite 320) with 40+ years of practice roots (formerly Dr. Roger Stewart's clinic, led by Dr. Barry Galitzer since the 2010s). Full spectrum: medical dermatology, Mohs surgery for skin cancer, cosmetic injectables/lasers (Botox, CoolSculpting, Ultherapy, Fraxel), an Acne Center, aesthetics, and massage. The hidden headline: since 2021 it's owned by Forefront Dermatology (125+ clinics, backed by Canadian pension fund OMERS Private Equity) billing, records, and HR run through the network, not the local brand. Doctors rate excellent (Galitzer 4.7/5 on Healthgrades; Castle Connolly Top Doctor), but admin/office process is the weak spot complaints cite long waits, forgotten patients, and a brusque bedside manner. Team: ~10 providers (Galitzer, Fien, Perrotto, Soro, White, Brown + PAs), plus a second office in Pompano Beach; 200+ patients/day, 10,000 sq ft.