-
Vendus Sweden AB
October 13, 2026
Vendus Sweden AB was listed as a victim on the leak site of the Wallstreet ransomware group; the attack is estimated to have taken place on 2026-10-13. Sector: Other. Country: Sweden. Swedish property company that acquires, owns, and manages properties, with a focus on grocery-anchored retail real estate
-
Ecuador police headquarters
October 12, 2026
•
[ ransomware, government ]
Ecuador police headquarters was listed as a victim on the leak site of the HYFLOCK ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Government & Defense. Country: Ecuador. Website: policia.gob.ec. The Command of the National Police of Ecuador (Comandancia General de la Polica Nacional) is the country's top-level police administrative and command center. Heres a breakdown of the key details: Basic Info & Location Headquarters Address: Av. Ro Amazonas N36-152, Quito 170135, Ecuador (located on the main avenue, Amazonas Avenue, in the capital city, Quito). Supervising Body: Directly under the Ministry of Interior of Ecuador, responsible for nationwide internal security and public order. Official Website: Polica Nacional del Ecuador Core Organization & Department Structure Inside the General Command, there are multiple national-level core police and criminal investigation departments: 1. Top Command Layer (Mando Institucional): Led by the General Commander, with Deputy General Commander, Chief Inspector General, and directors in charge of public security, education, finances, and other areas. 2. Criminal Investigations Department: This is the headquarters' main operational unit, responsible for investigating major crimes, organized crimes, and cross-border crimes nationwide. 3. INTERPOL Quito National Central Bureau (NCB Quito): Located within the Criminal Investigations Department at the HQ, it provides 24/7 global intelligence connectivity, real-time access to INTERPOL databases, and leads nationwide cross-border wanted cases and law enforcement.
-
Estrategias BigMat S.L.U.
October 14, 2026
•
[ ransomware, retail, financial ]
Estrategias BigMat S.L.U. was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Retail & E-Commerce. Country: Spain. Website: Estrategias BigMat S.L.U.. [distribution] Estrategias BigMat S.L.U. the Spanish master franchisee of BigMat International, a French cooperative and one of Europe's largest building materials distribution networks.
624 SEPA payroll XML files (20222025) every monthly salary payment for 300500 employees across 15+ entities, with full names, DNI/NIE numbers, IBANs, and exact euro amounts.
20 SILTRA Social Security databases the complete filing history for every subsidiary's workforce, containing nmeros de afiliacin, contribution bases, and employment records.
2,690 customer loyalty cards with DNI/NIF identifiers the entire customer-identity database.
888 Modelo 347 tax notifications annual declarations to the Agencia Tributaria naming customers and suppliers with their DNI and transaction amounts.
Complete financial records 5 years of accounting journals, bank reconciliations, insurance policies, loan agreements, and invoices.
Occupational health data (PRL) for 12+ subsidiaries workplace injury reports, medical certificates, and risk assessments.
-
E-Z Pack Trucks
October 14, 2026
E-Z Pack Trucks was listed as a victim on the leak site of the Wallstreet ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Transportation. Country: United States of America. Website: ezpacktrucks.com. E-Z Pack Trucks (E-Z Pack Manufacturing) is a U.S. maker of refuse and recycling truck bodies and related parts. Its product range includes front loaders, rear loaders, and automated or manual side loaders, designed for municipal and commercial waste-collection fleets. The company emphasizes durable equipment, hydraulics, and support for demanding collection routes. Its headquarters are in Cynthiana, Kentucky.
-
Joliet Public Schools District 86
October 14, 2026
•
[ ransomware, education ]
Joliet Public Schools District 86 was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Education. Country: United States of America. Website: www.joliet86.org.
-
Oceania Digital Communications
October 14, 2026
Oceania Digital Communications was listed as a victim on the leak site of the kairos ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Technology. Country: Vanuatu. Oceania Digital Communications (ODC Ltd) is a managed IT services provider and business technology company based in Port Vila, Vanuatu
-
FOODMatch
October 14, 2026
•
[ ransomware, retail ]
FOODMatch was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Agriculture and Food Production. FOODMatch DIVINA is a producer and importer of Mediterranean specialty foods, offering a wide
range of products including olives, antipasti, spreads, sauces, and condiments. The company fo
cuses on responsibly and traditionally crafted foods that enhance community and quality of life
.
We will upload 55gb of corporate data soon. Detailed employee information (passports, DLs, SSNs
, complete forms), client information, contracts and agreements, payment details, NDA, etc.
-
Amity University Dubai
September 17, 2026
•
[ ransomware, education ]
Amity University Dubai was listed as a victim on the leak site of the blacknevas ransomware group; the attack is estimated to have taken place on 2026-09-17. Sector: Education. Country: United Arab Emirates. 1. Personal data of students and staffFull name, date of birth, address, telephone numbers, e-mailPhotographs; passport, ID, or national identity document numbers2. Academic recordsDisciplinary records and remarksInformation on expulsion or academic leaves of absenceData on scholarships and academic achievements3. Financial informationBank account detailsBank card detailsTuition payment historyInformation on student loans and outstanding debtsData on grants and scholarships4. Research and commercial dataUnpublished research papers and studiesIntellectual propertyConfidential data of partners and sponsorsGrant and contract data5. Data on parents/guardiansContact informationFinancial details
-
camden-living
October 15, 2026
•
[ ransomware, retail ]
camden-living was listed as a victim on the leak site of the iah6477 ransomware group; the attack is estimated to have taken place on 2026-10-15. Sector: Hospitality. Country: United Kingdom of Great Britain and Northern Ireland. [AI generated] Camden Living, operating through Camden Property Trust, is a United States-based real estate company specializing in the development, ownership, management, and leasing of multifamily residential apartment communities. It operates within the real estate and property management industry, serving residents across major metropolitan markets in the U.S., particularly in the Sun Belt region, including Texas, Florida, and other southern and western states.
-
buckle
October 15, 2026
buckle was listed as a victim on the leak site of the iah6477 ransomware group; the attack is estimated to have taken place on 2026-10-15. Sector: Retail & E-Commerce. [AI generated] Buckle, Inc. is a United States-based specialty retailer operating in the apparel and fashion industry. Founded in 1948 and headquartered in Kearney, Nebraska, the company sells clothing, footwear, and accessories for men, women, and children through brand-name and private label merchandise. It operates physical retail stores across the U.S. as well as an online e-commerce platform for direct consumer sales.
-
Enchanted Fine Jewellery
October 15, 2026
•
[ ransomware, retail ]
Enchanted Fine Jewellery was listed as a victim on the leak site of the Vexy Ransomware ransomware group; the attack is estimated to have taken place on 2026-10-15. Sector: Retail & E-Commerce. Country: India. Website: enchantedfinejewellery.in. enchantedfinejewellery.in
-
Brame Telecom
October 15, 2026
•
[ ransomware, technology ]
Brame Telecom was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-15. Sector: Technology. Country: Brazil. Website: www.brametelecom.com.
-
Company #73
October 15, 2026
•
[ ransomware, technology, manufacturing ]
Company #73 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-15. Semiconductor manufacturing California, USA | [PENDING EXPOSURE]
-
Segres Systec
October 15, 2026
•
[ ransomware, technology ]
Segres Systec was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-15. Sector: Technology. Country: Spain. Website: www.segres.com.
-
Telcoe Federal Credit Union
October 15, 2026
•
[ ransomware, finance ]
Telcoe Federal Credit Union was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-15. Sector: Financial Services. Country: United States of America. Website: www.telcoe.com.
-
nowaszkola.com
October 15, 2026
•
[ ransomware, education ]
nowaszkola.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-10-15. Sector: Education. Country: Poland. Website: nowaszkola.com. /
-
CureMetrix, Inc.
September 21, 2026
•
[ ransomware, healthcare, technology ]
CureMetrix, Inc. was listed as a victim on the leak site of the THE SEVEN DEADLY SINS ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Healthcare. Country: United States of America. Website: curemetrix.com.
-
Via Credit Union
October 16, 2026
•
[ ransomware, finance ]
Via Credit Union was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-16. Sector: Financial Services. Country: United States of America. Website: www.viacu.org.
-
Campbell Rhea
October 14, 2026
•
[ ransomware, manufacturing, education ]
Campbell Rhea was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Country: United States of America. Website: campbellrhea.com. campbellrhea.com Campbell Rhea US manufacturer of laboratory and educational casework legal entity Institutional Casework, Inc. (ICI) with roots to 1951 in Paris, TN. The brand survived a 2005 tornado that destroyed its former parent Mohon International, was relaunched by local investors in 2006 (CEO Jim Arthurs ever since), and acquired Jamestown Metal Products (NY) plus a steel plant in Union City, TN 650,000 sq ft of manufacturing total. Products: wood/steel/stainless lab casework, ISOLATOR fume hoods, countertops, athletic lockers (Olympian), Patriot tables certified SEFA-8, FSC, AIA CES. Revenue $32.1M (2025) per FDMC 300, down from a $63.5M COVID-era peak (2022); ~250 employees, 35+ US dealers, projects at Penn State, UC Davis, Vanderbilt, Case Western, U of Missouri.
-
CLIMEDI
October 14, 2026
CLIMEDI was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Healthcare. Country: Brazil. Website: climedi.com.br. climedi.com.br CLIMEDI private multidisciplinary medical clinic and diagnostic center in Aracaju, Sergipe, Brazil founded 5 Oct 1977 by Dr. Joo Antnio Macedo Santana (endocrinologist & nuclear medicine physician, UFS professor, SUNY Upstate NYtrained). Family-run (Santana-Macedo dynasty: Joo, son Gustavo, daughter Sara), with 76121 staff, 50+ physicians across 3 units. Its unique regional edge: full nuclear medicine PET-CT, scintigraphy, and I-131 thyroid cancer therapy with 5 CNEN-compliant isolation suites plus 20+ specialties (endocrinology, cardiology, gastro, mastology, orthopedics, ENT, neuro) and complete diagnostics (MRI, CT, mammography, endoscopy, bone densitometry, 54+ tests). Quality credentials: PNCQ "Excelente" (highest tier), SBAC, DICQ; registered in CNES, works with SUS, private insurers, and union health plans (APCEF+). Government payments total R$ 11M+ (Portal da Transparncia); private revenue undisclosed (est. R$ 2050M/yr).