Full List

Search

Recent Breaches

• Vadeto Group October 9, 2026 • [ ransomware, technology ] Vadeto Group was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-09. Country: Sweden. Website: www.vadetogroup.com.
• solutend October 9, 2026 • [ ransomware, technology ] solutend was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-10-09. Sector: Technology. Bolivian technology company that provides audiovisual systems, digital signage, interactive displays, and business computing solutions.
• Saber1 October 9, 2026 Saber1 was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-10-09. Country: United States of America. Website: saber1.com. Saber1 Technologies LLC is a American supplier and distributor of machine vision components, industrial cameras and image processing systems.
• The Margo Hotel August 19, 2026 • [ ransomware, retail ] The Margo Hotel was listed as a victim on the leak site of the Majinahanashi ransomware group; the attack is estimated to have taken place on 2026-08-19. Sector: Hospitality. Country: United Kingdom of Great Britain and Northern Ireland. Website: themargohotel.com. The Margo Hotel is a leading 4-star business hotel in Depok that offers premium service, modern facilities for large-scale conferences, and a comfortable stay, and regularly receives top ratings fr...
• CALICHE August 11, 2026 CALICHE was listed as a victim on the leak site of the Majinahanashi ransomware group; the attack is estimated to have taken place on 2026-08-11. Sector: Energy & Utilities. Country: Chile. Grupo Caliche is a major Spanish corporation engaged in international logistics, freight transportation, and the provision of telecommunications services. The company coordinates the delivery of go...
• Camandona SA August 4, 2026 • [ ransomware, manufacturing ] Camandona SA was listed as a victim on the leak site of the Majinahanashi ransomware group; the attack is estimated to have taken place on 2026-08-04. Country: Switzerland. Website: camandona.ch. Camandona SA is a major Swiss construction and road-building company founded in 1948 and based in the French-speaking canton of Vaud. It specializes in asphalt paving, road construction, civil engi...
• hsc.mb.ca October 10, 2026 • [ ransomware, healthcare, leak ] hsc.mb.ca was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-10-10. Sector: Healthcare. Country: Canada. Website: hsc.mb.ca. The Health Sciences Centre in Winnipeg, one of the largest medical institutions, was targeted by us that resulted in the largest data breach among healthcare institutions. Our group chose not to completely disrupt the facilitys operations, recognizing the potentially devastating consequences that such an action could have had on patients lives and health. Nevertheless, Health Sciences Centre management stated that no sensitive data had been affected, despite having been informed otherwise. The data included, but was not limited to, the following information: Patient medical records: Full name, date of birth, address and phone number Hospital medical record number Diagnoses, medical history, allergies and medications Laboratory results, imaging reports Appointment dates, treatment details and physician information. Employee and healthcare professional information: Names, contact details, dates of birth and employee numbers Employment, payroll and banking information Professional credentials, work schedules and departmental assignments. Financial and insurance information: Billing records and payment histories Insurance or benefits claim information. Confidential hospital documents: Internal emails and staff communications System configurations, network diagrams and security procedures Database backups and exported spreadsheets. We would have very much preferred to avoid making this data breach public, but the management has left us with no other choice.
• Confipetrol October 11, 2026 • [ ransomware, energy ] Confipetrol was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-11. Sector: Energy & Utilities. Country: Colombia. Website: www.confipetrol.com.
• Company #27 October 11, 2026 • [ ransomware, healthcare ] Company #27 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-11. Sector: Healthcare. Country: Australia. neurology practice New South Wales, Australia | [PENDING EXPOSURE: data publishes 2026-10-13 12:37 UTC]
• Company #28 October 11, 2026 Company #28 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-11. Sector: Professional Services. Country: United States of America. architecture & design Florida, USA | [PENDING EXPOSURE: data publishes 2026-10-14 12:00 UTC]
• Company #29 October 11, 2026 Company #29 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-11. Sector: Technology. Country: United States of America. smart building & surveillance integration California, USA | [PENDING EXPOSURE: data publishes 2026-10-14 18:00 UTC]
• Reed & Giordano PA October 11, 2026 Reed & Giordano PA was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-10-11. Sector: Professional Services. Country: United States of America. Reed & Giordano PA 94,604 files / ~51.3 GBACH instructions for the firm's client trust account (IOLTA) with complete account details; clients' wire-transfer details.PII: W-9/W-2 forms with SSNs, Massachusetts driver's licenses, birth certificate, personal UBS documents of a financial advisor.Client money flows (incoming/outgoing funds by case).Signed conflict-of-interest letter (matter - Alhassan) - a direct written admission of an internal firm problem. More
• Company #23 October 11, 2026 • [ ransomware, technology ] Company #23 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-11. smart building & surveillance integration California, USA | [PENDING EXPOSURE: data publishes 2026-10-14 18:00 UTC]
• Company #24 October 11, 2026 • [ ransomware, technology ] Company #24 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-11. smart building & surveillance integration California, USA | [PENDING EXPOSURE: data publishes 2026-10-14 18:00 UTC]
• MGT Lojistik AŞ July 22, 2026 MGT Lojistik A was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-07-22. Sector: Transportation. Country: Turkey. Website: www.mgtlog.com. [AI generated] N/A I don't have verified, reliable information about a company called "MGT Lojistik A" in my knowledge base. While "Lojistik" suggests a Turkish logistics company (A being a common Turkish corporate suffix for "Anonim irketi," or joint-stock company), I cannot confirm specific details about this entity's operations, services, founding, or business activities with confidence. Providing fabricated details would be inappropriate for threat intelligence purposes, where accuracy is critical. If you have additional context, source documents, or details about this company, I'd be glad to help analyze that information instead.
• MoneyGram October 10, 2026 • [ ransomware, finance, technology ] MoneyGram was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-10. Sector: Financial Services. Country: United States of America. Website: moneygram.com. moneygram.com Revenue $2.1 Billion MoneyGram global money transfer network moving nearly $200 billion a year through almost 500,000 retail agent locations in 200+ countries and serving 60 million+ active customers, with over 70% of transactions now digital. It earns mainly from transfer fees plus currency exchange spreads, not from owning stores, since almost all locations are partner agents like post offices and grocery chains. In 2025 it cut 449 jobs to speed up digital growth and in 2026 launched its own MGUSD dollar stablecoin and a Visa card that spends digital dollars anywhere Visa works. MoneyGram owns no factories or stores, it is a licensed money transmitter with 75+ regulatory approvals, around 2,000 employees in 36 countries, and was taken private in 2023 for $1.8 billion.
• BigID October 10, 2026 • [ ransomware, technology ] BigID was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-10. Sector: Technology. Country: United States of America. Website: bigid.com. bigid.com Revenue $100 Million BigID is the enterprise data security platform that finds and classifies sensitive data across cloud apps, databases and files, showing where private data lives and who can access it. It now focuses on AI, spotting shadow AI tools and checking what data Copilots and agents reach, and in September 2026 launched AgentIQ letting AI assistants trigger data cleanup and access reviews from Claude, Copilot or ChatGPT. It serves hundreds of enterprise clients like Telenor and Fiserv, one of which deleted 27,000 sensitive records from 2.5 petabytes of storage. Money comes from enterprise subscriptions priced per data source, with $175K as one AWS Marketplace benchmark. Around 600 employees work there after cutting 150 roles in May 2026 to go AI-first. It raised $320M at a $1B+ valuation and owns no factories or stores.
• Eurogate Tanger (container terminal operations) October 12, 2026 • [ ransomware, leak, technology ] Eurogate Tanger (container terminal operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: Morocco. Port terminal operations Morocco | Terminal commercial operation configuration records and systems release documentation | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
• T2S (terminal systems operations) October 12, 2026 • [ ransomware, technology ] T2S (terminal systems operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: Brazil. Port terminal operations Brazil | Terminal systems gap-analysis documentation and internal database material | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
• Korea Ferry (ferry operations) October 12, 2026 • [ ransomware, financial ] Korea Ferry (ferry operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: South Korea. Ferry / RoRo shipping South Korea | Internal staff account records with plaintext credentials and financial receipt records | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]