-
BKH ICD (inland container depot operations)
October 12, 2026
•
[ ransomware, manufacturing, hack ]
BKH ICD (inland container depot operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: South Korea. Inland container depot South Korea | Commercial invoice records and systems release documentation | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
-
BMT IQ (marine surveying and inspection)
October 12, 2026
•
[ ransomware, leak, manufacturing ]
BMT IQ (marine surveying and inspection) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: United Kingdom of Great Britain and Northern Ireland. Marine surveying United Kingdom | Commercial e-invoice records and equipment interchange receipts | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
-
Dong-A Tanker (oil tanker operations)
October 12, 2026
Dong-A Tanker (oil tanker operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: South Korea. Oil tanker shipping South Korea | Internal financial records (demurrage/despatch and performance data) | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
-
GNCNet / DGT Busan (port community IT)
October 12, 2026
•
[ ransomware, technology ]
GNCNet / DGT Busan (port community IT) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: South Korea. Port IT services South Korea | Billing service records and operational EDI sample material | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
-
NEOM Ports (industrial port operations)
October 12, 2026
•
[ ransomware, technology ]
NEOM Ports (industrial port operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: Saudi Arabia. Industrial port operations Saudi Arabia | Commercial tariff documentation and invoicing records | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
-
Yusen Logistics Hong Kong (3PL logistics)
October 12, 2026
Yusen Logistics Hong Kong (3PL logistics) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: Hong Kong. 3PL logistics Hong Kong | Commercial tariff documentation | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
-
ZPMC (port machinery and terminal engineering)
October 12, 2026
•
[ ransomware, leak, manufacturing ]
ZPMC (port machinery and terminal engineering) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Manufacturing. Country: China. Port machinery / engineering China | Operational EDI archives and cargo loading records | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
-
MGNP (port terminal operations)
October 12, 2026
MGNP (port terminal operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: South Korea. Port terminal operations South Korea | Commercial invoice records and billing system material | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
-
Concord Eye Center
October 12, 2026
•
[ ransomware, healthcare, leak ]
Concord Eye Center was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Healthcare. Country: United States of America. Website: http:www.concordeyecenternh.com. A private ophthalmology clinic specializing in various fields. However, it completely fails to ensure the security of itself and its clients and is extremely lax in its recordkeeping. The structure of its confidential records is determined by the categories of protected health information (PHI) it creates and stores. Because Concord Eye Center makes no attempt to regulate security, we provide you with the following information: patient identification and administrative data: this includes names, addresses, dates of birth, social security numbers, and contact information; clinical and medical history: detailed symptom records, ophthalmological and systemic medical history, and family history; diagnostic and lab results; surgical and treatment documentation; billing and financial information: insurance information, claims data, and payment records. Leaking these documents would primarily violate the HIPAA Privacy and Security Rules (45 CFR Parts 160 and 164) and the HITECH Act, which provide for tiered civil penalties for each category of violation, leading to distrust of their business by customers and partners and its collapse.
-
Pedigo Products, Inc.
October 12, 2026
•
[ ransomware, manufacturing, healthcare ]
Pedigo Products, Inc. was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Manufacturing. Country: United States of America. Website: https:pedigo-usa.com. Pedigo Products, Inc. is a privately held American manufacturer of stainless steel and chromium medical equipment for the healthcare industry. It disregards its own security, as well as that of its customers and employees, and makes no attempt to negotiate agreements to prevent data leaks. As a result, we provide you with 1.3 TB of sensitive corporate data, such as: carrier account numbers, customer-specific pricing, commission adjustments, customs/MDEL identifiers and customer/employee contact information, customer contracts, price and discount schedules, shipping and routing instructions, employee and customer personal data, FDA quality records (DMR, DHR, DHF, CAPA, complaints, MDR), CAD files and trade secrets, intellectual property and non-disclosure agreements, financial statements, tax returns, payroll records, bank details, and legal documents. Contractual obligations to customers and confidentiality, as well as HIPAA/GDPR/CCPA/PIPEDA regulations, were violated. We urge the authorities to pay attention to these issues. Due to Pedigo's negligence, it will also suffer losses in the form of loss of trade secrets and intellectual property protection, copying by competitors, loss of business with hospitals and dealers, and serious reputational and financial damage.
-
The Park Lane Hong Kong
October 12, 2026
The Park Lane Hong Kong was listed as a victim on the leak site of the Orova ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Hospitality. Country: Hong Kong. Website: www.parklane.com.hk. The Park Lane Hong Kong, Autograph Collection - A Signature Hotel in the Marriott Bonvoy Collection - blends heritage with the citys modern spirit, letting you enjoy business, leisure, and connection all just moments from the citys best.
-
The Innovation Group
October 13, 2026
•
[ ransomware, leak ]
The Innovation Group was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-10-13. Sector: Other. Country: United States of America. Website: www.theinnovationgroup.com. United States
-
Decorolala
October 13, 2026
Decorolala was listed as a victim on the leak site of the BYOD ransomware group; the attack is estimated to have taken place on 2026-10-13. Sector: Retail & E-Commerce. Canaidan based home essentials, 60,544 customers, Home addresses + ZIP Code, longitude + latitude, Phone Numbers, Emails, First Name, Last Name, UPS Tracking Number & URL (includes photos of outside house), Total Price at Checkout, Device Used at Checkout, Prodcut ID ordered, Time ordered, you get the idea as we go along. Anyways, you know where to find us (contact tab). We will take you down when communication has been established between our team and yours.
-
CMC AUDITORES SRL
October 13, 2026
•
[ ransomware, finance ]
CMC AUDITORES SRL was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-10-13. Sector: Professional Services. Country: Argentina. An Argentine auditing and accounting consulting
company that works with businesses in the field of accounting,
taxes and financial audit.
The archives contain several thousand documents with
personnel and customer data. [Sector: Finance]
-
Company #64
October 13, 2026
•
[ ransomware, healthcare ]
Company #64 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-13. dental laboratory (CAD/CAM) Missouri, USA | [PENDING EXPOSURE]
-
victim
October 13, 2026
•
[ ransomware, leak ]
victim was listed as a victim on the leak site of the sarcoma ransomware group; the attack is estimated to have taken place on 2026-10-13. victimGeo: USA - Leak size: 1.2 TB - Contains: files.dump pst
-
Laerdal
October 13, 2026
Laerdal was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-10-13. Sector: Healthcare. Country: Norway. [AI generated] Laerdal Medical is a Norwegian company specializing in medical training equipment, simulation technology, and healthcare education solutions. It designs manikins, simulators, and resuscitation training tools used by hospitals, emergency services, and educational institutions worldwide. Headquartered in Stavanger, Norway, the company operates in the medical devices and healthcare training industry, supporting patient safety initiatives, CPR training, and lifesaving skills education globally.
-
KVH
October 13, 2026
•
[ ransomware, technology, leak ]
KVH was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-10-13. Sector: Technology. Country: United States of America. [AI generated] KVH Industries is a U.S.-based company headquartered in Middletown, Rhode Island, operating in the satellite communications and connectivity industry. It provides mobile connectivity services, including satellite TV, internet, and VSAT solutions, primarily serving maritime, leisure marine, and land mobile markets worldwide. KVH also develops navigation and stabilization products such as fiber optic gyros used in defense and commercial applications.
-
Danvikshem (Stiftelsen Danviks Hospital)
October 13, 2026
•
[ ransomware, healthcare ]
Danvikshem (Stiftelsen Danviks Hospital) was listed as a victim on the leak site of the Wallstreet ransomware group; the attack is estimated to have taken place on 2026-10-13. Sector: Healthcare. Country: Sweden. A Swedish foundation that operates elder-care services, including residential care at Danvikshem in Nacka
-
Briab Group AB
October 13, 2026
•
[ ransomware, manufacturing, hack ]
Briab Group AB was listed as a victim on the leak site of the Wallstreet ransomware group; the attack is estimated to have taken place on 2026-10-13. Country: Sweden. [AI generated] N/A
I don't have reliable, verified information about a specific company called "Briab Group AB." Rather than provide potentially fabricated details about its operations, industry specifics, or founding information, I'm indicating this as unknown to avoid generating inaccurate threat intelligence. If you have source material or additional context about this company, please share it and I can help analyze it.