-
Company #23
October 11, 2026
•
[ ransomware, technology ]
Company #23 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-11. smart building & surveillance integration California, USA | [PENDING EXPOSURE: data publishes 2026-10-14 18:00 UTC]
-
Company #24
October 11, 2026
•
[ ransomware, technology ]
Company #24 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-11. smart building & surveillance integration California, USA | [PENDING EXPOSURE: data publishes 2026-10-14 18:00 UTC]
-
MGT Lojistik AŞ
July 22, 2026
MGT Lojistik A was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-07-22. Sector: Transportation. Country: Turkey. Website: www.mgtlog.com. [AI generated] N/A
I don't have verified, reliable information about a company called "MGT Lojistik A" in my knowledge base. While "Lojistik" suggests a Turkish logistics company (A being a common Turkish corporate suffix for "Anonim irketi," or joint-stock company), I cannot confirm specific details about this entity's operations, services, founding, or business activities with confidence. Providing fabricated details would be inappropriate for threat intelligence purposes, where accuracy is critical. If you have additional context, source documents, or details about this company, I'd be glad to help analyze that information instead.
-
MoneyGram
October 10, 2026
•
[ ransomware, finance, technology ]
MoneyGram was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-10. Sector: Financial Services. Country: United States of America. Website: moneygram.com. moneygram.com Revenue $2.1 Billion MoneyGram global money transfer network moving nearly $200 billion a year through almost 500,000 retail agent locations in 200+ countries and serving 60 million+ active customers, with over 70% of transactions now digital. It earns mainly from transfer fees plus currency exchange spreads, not from owning stores, since almost all locations are partner agents like post offices and grocery chains. In 2025 it cut 449 jobs to speed up digital growth and in 2026 launched its own MGUSD dollar stablecoin and a Visa card that spends digital dollars anywhere Visa works. MoneyGram owns no factories or stores, it is a licensed money transmitter with 75+ regulatory approvals, around 2,000 employees in 36 countries, and was taken private in 2023 for $1.8 billion.
-
BigID
October 10, 2026
•
[ ransomware, technology ]
BigID was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-10. Sector: Technology. Country: United States of America. Website: bigid.com. bigid.com Revenue $100 Million BigID is the enterprise data security platform that finds and classifies sensitive data across cloud apps, databases and files, showing where private data lives and who can access it. It now focuses on AI, spotting shadow AI tools and checking what data Copilots and agents reach, and in September 2026 launched AgentIQ letting AI assistants trigger data cleanup and access reviews from Claude, Copilot or ChatGPT. It serves hundreds of enterprise clients like Telenor and Fiserv, one of which deleted 27,000 sensitive records from 2.5 petabytes of storage. Money comes from enterprise subscriptions priced per data source, with $175K as one AWS Marketplace benchmark. Around 600 employees work there after cutting 150 roles in May 2026 to go AI-first. It raised $320M at a $1B+ valuation and owns no factories or stores.
-
Eurogate Tanger (container terminal operations)
October 12, 2026
•
[ ransomware, leak, technology ]
Eurogate Tanger (container terminal operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: Morocco. Port terminal operations Morocco | Terminal commercial operation configuration records and systems release documentation | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
-
T2S (terminal systems operations)
October 12, 2026
•
[ ransomware, technology ]
T2S (terminal systems operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: Brazil. Port terminal operations Brazil | Terminal systems gap-analysis documentation and internal database material | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
-
Korea Ferry (ferry operations)
October 12, 2026
•
[ ransomware, financial ]
Korea Ferry (ferry operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: South Korea. Ferry / RoRo shipping South Korea | Internal staff account records with plaintext credentials and financial receipt records | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
-
BKH ICD (inland container depot operations)
October 12, 2026
•
[ ransomware, manufacturing, hack ]
BKH ICD (inland container depot operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: South Korea. Inland container depot South Korea | Commercial invoice records and systems release documentation | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
-
BMT IQ (marine surveying and inspection)
October 12, 2026
•
[ ransomware, leak, manufacturing ]
BMT IQ (marine surveying and inspection) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: United Kingdom of Great Britain and Northern Ireland. Marine surveying United Kingdom | Commercial e-invoice records and equipment interchange receipts | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
-
Dong-A Tanker (oil tanker operations)
October 12, 2026
Dong-A Tanker (oil tanker operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: South Korea. Oil tanker shipping South Korea | Internal financial records (demurrage/despatch and performance data) | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
-
GNCNet / DGT Busan (port community IT)
October 12, 2026
•
[ ransomware, technology ]
GNCNet / DGT Busan (port community IT) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: South Korea. Port IT services South Korea | Billing service records and operational EDI sample material | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
-
NEOM Ports (industrial port operations)
October 12, 2026
•
[ ransomware, technology ]
NEOM Ports (industrial port operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: Saudi Arabia. Industrial port operations Saudi Arabia | Commercial tariff documentation and invoicing records | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
-
Yusen Logistics Hong Kong (3PL logistics)
October 12, 2026
Yusen Logistics Hong Kong (3PL logistics) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: Hong Kong. 3PL logistics Hong Kong | Commercial tariff documentation | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
-
ZPMC (port machinery and terminal engineering)
October 12, 2026
•
[ ransomware, leak, manufacturing ]
ZPMC (port machinery and terminal engineering) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Manufacturing. Country: China. Port machinery / engineering China | Operational EDI archives and cargo loading records | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
-
MGNP (port terminal operations)
October 12, 2026
MGNP (port terminal operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: South Korea. Port terminal operations South Korea | Commercial invoice records and billing system material | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
-
Concord Eye Center
October 12, 2026
•
[ ransomware, healthcare, leak ]
Concord Eye Center was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Healthcare. Country: United States of America. Website: http:www.concordeyecenternh.com. A private ophthalmology clinic specializing in various fields. However, it completely fails to ensure the security of itself and its clients and is extremely lax in its recordkeeping. The structure of its confidential records is determined by the categories of protected health information (PHI) it creates and stores. Because Concord Eye Center makes no attempt to regulate security, we provide you with the following information: patient identification and administrative data: this includes names, addresses, dates of birth, social security numbers, and contact information; clinical and medical history: detailed symptom records, ophthalmological and systemic medical history, and family history; diagnostic and lab results; surgical and treatment documentation; billing and financial information: insurance information, claims data, and payment records. Leaking these documents would primarily violate the HIPAA Privacy and Security Rules (45 CFR Parts 160 and 164) and the HITECH Act, which provide for tiered civil penalties for each category of violation, leading to distrust of their business by customers and partners and its collapse.
-
Pedigo Products, Inc.
October 12, 2026
•
[ ransomware, manufacturing, healthcare ]
Pedigo Products, Inc. was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Manufacturing. Country: United States of America. Website: https:pedigo-usa.com. Pedigo Products, Inc. is a privately held American manufacturer of stainless steel and chromium medical equipment for the healthcare industry. It disregards its own security, as well as that of its customers and employees, and makes no attempt to negotiate agreements to prevent data leaks. As a result, we provide you with 1.3 TB of sensitive corporate data, such as: carrier account numbers, customer-specific pricing, commission adjustments, customs/MDEL identifiers and customer/employee contact information, customer contracts, price and discount schedules, shipping and routing instructions, employee and customer personal data, FDA quality records (DMR, DHR, DHF, CAPA, complaints, MDR), CAD files and trade secrets, intellectual property and non-disclosure agreements, financial statements, tax returns, payroll records, bank details, and legal documents. Contractual obligations to customers and confidentiality, as well as HIPAA/GDPR/CCPA/PIPEDA regulations, were violated. We urge the authorities to pay attention to these issues. Due to Pedigo's negligence, it will also suffer losses in the form of loss of trade secrets and intellectual property protection, copying by competitors, loss of business with hospitals and dealers, and serious reputational and financial damage.
-
The Park Lane Hong Kong
October 12, 2026
The Park Lane Hong Kong was listed as a victim on the leak site of the Orova ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Hospitality. Country: Hong Kong. Website: www.parklane.com.hk. The Park Lane Hong Kong, Autograph Collection - A Signature Hotel in the Marriott Bonvoy Collection - blends heritage with the citys modern spirit, letting you enjoy business, leisure, and connection all just moments from the citys best.
-
The Innovation Group
October 13, 2026
•
[ ransomware, leak ]
The Innovation Group was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-10-13. Sector: Other. Country: United States of America. Website: www.theinnovationgroup.com. United States