-
BigID
October 10, 2026
•
[ ransomware, technology ]
BigID was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-10. Sector: Technology. Country: United States of America. Website: bigid.com. bigid.com Revenue $100 Million BigID is the enterprise data security platform that finds and classifies sensitive data across cloud apps, databases and files, showing where private data lives and who can access it. It now focuses on AI, spotting shadow AI tools and checking what data Copilots and agents reach, and in September 2026 launched AgentIQ letting AI assistants trigger data cleanup and access reviews from Claude, Copilot or ChatGPT. It serves hundreds of enterprise clients like Telenor and Fiserv, one of which deleted 27,000 sensitive records from 2.5 petabytes of storage. Money comes from enterprise subscriptions priced per data source, with $175K as one AWS Marketplace benchmark. Around 600 employees work there after cutting 150 roles in May 2026 to go AI-first. It raised $320M at a $1B+ valuation and owns no factories or stores.
-
Eurogate Tanger (container terminal operations)
October 12, 2026
•
[ ransomware, leak, technology ]
Eurogate Tanger (container terminal operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: Morocco. Port terminal operations Morocco | Terminal commercial operation configuration records and systems release documentation | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
-
T2S (terminal systems operations)
October 12, 2026
•
[ ransomware, technology ]
T2S (terminal systems operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: Brazil. Port terminal operations Brazil | Terminal systems gap-analysis documentation and internal database material | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
-
Korea Ferry (ferry operations)
October 12, 2026
•
[ ransomware, financial ]
Korea Ferry (ferry operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: South Korea. Ferry / RoRo shipping South Korea | Internal staff account records with plaintext credentials and financial receipt records | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
-
BKH ICD (inland container depot operations)
October 12, 2026
•
[ ransomware, manufacturing, hack ]
BKH ICD (inland container depot operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: South Korea. Inland container depot South Korea | Commercial invoice records and systems release documentation | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
-
BMT IQ (marine surveying and inspection)
October 12, 2026
•
[ ransomware, leak, manufacturing ]
BMT IQ (marine surveying and inspection) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: United Kingdom of Great Britain and Northern Ireland. Marine surveying United Kingdom | Commercial e-invoice records and equipment interchange receipts | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
-
Dong-A Tanker (oil tanker operations)
October 12, 2026
Dong-A Tanker (oil tanker operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: South Korea. Oil tanker shipping South Korea | Internal financial records (demurrage/despatch and performance data) | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
-
GNCNet / DGT Busan (port community IT)
October 12, 2026
•
[ ransomware, technology ]
GNCNet / DGT Busan (port community IT) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: South Korea. Port IT services South Korea | Billing service records and operational EDI sample material | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
-
NEOM Ports (industrial port operations)
October 12, 2026
•
[ ransomware, technology ]
NEOM Ports (industrial port operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: Saudi Arabia. Industrial port operations Saudi Arabia | Commercial tariff documentation and invoicing records | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
-
Yusen Logistics Hong Kong (3PL logistics)
October 12, 2026
Yusen Logistics Hong Kong (3PL logistics) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: Hong Kong. 3PL logistics Hong Kong | Commercial tariff documentation | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
-
ZPMC (port machinery and terminal engineering)
October 12, 2026
•
[ ransomware, leak, manufacturing ]
ZPMC (port machinery and terminal engineering) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Manufacturing. Country: China. Port machinery / engineering China | Operational EDI archives and cargo loading records | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
-
MGNP (port terminal operations)
October 12, 2026
MGNP (port terminal operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: South Korea. Port terminal operations South Korea | Commercial invoice records and billing system material | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
-
Concord Eye Center
October 12, 2026
•
[ ransomware, healthcare, leak ]
Concord Eye Center was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Healthcare. Country: United States of America. Website: http:www.concordeyecenternh.com. A private ophthalmology clinic specializing in various fields. However, it completely fails to ensure the security of itself and its clients and is extremely lax in its recordkeeping. The structure of its confidential records is determined by the categories of protected health information (PHI) it creates and stores. Because Concord Eye Center makes no attempt to regulate security, we provide you with the following information: patient identification and administrative data: this includes names, addresses, dates of birth, social security numbers, and contact information; clinical and medical history: detailed symptom records, ophthalmological and systemic medical history, and family history; diagnostic and lab results; surgical and treatment documentation; billing and financial information: insurance information, claims data, and payment records. Leaking these documents would primarily violate the HIPAA Privacy and Security Rules (45 CFR Parts 160 and 164) and the HITECH Act, which provide for tiered civil penalties for each category of violation, leading to distrust of their business by customers and partners and its collapse.
-
Pedigo Products, Inc.
October 12, 2026
•
[ ransomware, manufacturing, healthcare ]
Pedigo Products, Inc. was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Manufacturing. Country: United States of America. Website: https:pedigo-usa.com. Pedigo Products, Inc. is a privately held American manufacturer of stainless steel and chromium medical equipment for the healthcare industry. It disregards its own security, as well as that of its customers and employees, and makes no attempt to negotiate agreements to prevent data leaks. As a result, we provide you with 1.3 TB of sensitive corporate data, such as: carrier account numbers, customer-specific pricing, commission adjustments, customs/MDEL identifiers and customer/employee contact information, customer contracts, price and discount schedules, shipping and routing instructions, employee and customer personal data, FDA quality records (DMR, DHR, DHF, CAPA, complaints, MDR), CAD files and trade secrets, intellectual property and non-disclosure agreements, financial statements, tax returns, payroll records, bank details, and legal documents. Contractual obligations to customers and confidentiality, as well as HIPAA/GDPR/CCPA/PIPEDA regulations, were violated. We urge the authorities to pay attention to these issues. Due to Pedigo's negligence, it will also suffer losses in the form of loss of trade secrets and intellectual property protection, copying by competitors, loss of business with hospitals and dealers, and serious reputational and financial damage.
-
The Park Lane Hong Kong
October 12, 2026
The Park Lane Hong Kong was listed as a victim on the leak site of the Orova ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Hospitality. Country: Hong Kong. Website: www.parklane.com.hk. The Park Lane Hong Kong, Autograph Collection - A Signature Hotel in the Marriott Bonvoy Collection - blends heritage with the citys modern spirit, letting you enjoy business, leisure, and connection all just moments from the citys best.
-
The Innovation Group
October 13, 2026
•
[ ransomware, leak ]
The Innovation Group was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-10-13. Sector: Other. Country: United States of America. Website: www.theinnovationgroup.com. United States
-
Decorolala
October 13, 2026
Decorolala was listed as a victim on the leak site of the BYOD ransomware group; the attack is estimated to have taken place on 2026-10-13. Sector: Retail & E-Commerce. Canaidan based home essentials, 60,544 customers, Home addresses + ZIP Code, longitude + latitude, Phone Numbers, Emails, First Name, Last Name, UPS Tracking Number & URL (includes photos of outside house), Total Price at Checkout, Device Used at Checkout, Prodcut ID ordered, Time ordered, you get the idea as we go along. Anyways, you know where to find us (contact tab). We will take you down when communication has been established between our team and yours.
-
CMC AUDITORES SRL
October 13, 2026
•
[ ransomware, finance ]
CMC AUDITORES SRL was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-10-13. Sector: Professional Services. Country: Argentina. An Argentine auditing and accounting consulting
company that works with businesses in the field of accounting,
taxes and financial audit.
The archives contain several thousand documents with
personnel and customer data. [Sector: Finance]
-
Company #64
October 13, 2026
•
[ ransomware, healthcare ]
Company #64 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-13. dental laboratory (CAD/CAM) Missouri, USA | [PENDING EXPOSURE]
-
victim
October 13, 2026
•
[ ransomware, leak ]
victim was listed as a victim on the leak site of the sarcoma ransomware group; the attack is estimated to have taken place on 2026-10-13. victimGeo: USA - Leak size: 1.2 TB - Contains: files.dump pst