Full List

Search

Recent Breaches

• Rag Electric October 6, 2026 Rag Electric was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Energy & Utilities. Country: United States of America. Website: ragelectric.com. ragelectric.com zoominfo.com/c/rag-electric-inc/401375471 RAG Electric, Inc. is a private, family-owned electrical contractor founded in 1987 (originally as FEIZ Electric) in Los Angeles, California, incorporated in 2001 and run by founder Farshad Feizbakhsh and his son Matthew. It generates estimated revenue of $25M/year with ~611 employees, holding a clean C-10 electrical license (#510327) active for 38 years with zero violations in CSLB records. Over four decades RAG has powered 7,500+ residential units across the LA metro area, specializing in ground-up multifamily construction, assisted living/senior care, and historic rehabilitation. Recent flagship projects include Vered on Ventura (123-unit assisted living in Encino), Rolling Hills Estates (114-unit memory care), and Sync on Canoga (220-unit multifamily in Canoga Park). Services span full design-build, tenant improvements, underground site work, and emergency troubleshooting all fully NEC/LADBS-compliant, licensed, bonded
• SAS H2O MICHEL October 6, 2026 • [ ransomware, finance ] SAS H2O MICHEL was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Other. Country: France. Website: h2o-michel.fr. h2o-michel.fr huissiers-bordeaux.com SAS H2O MICHEL is a French commissaire de justice firm (public judicial officer serving court documents, enforcing judgments, debt recovery) created in 2018 and based in Tours/Chinon, Val de Loire (Indre-et-Loire). It is led by President Alexandra Michel and operates 5 offices (Tours, Chinon, Bourgueil, Langeais, Chteau-la-Vallire) with a small team of 37 employees. Revenue grew rapidly from 223K in 2018 to 631K in 2019 (+183%), with a strong 16.4% net margin (103.5K net profit, ROE 85.8%) though all accounts since 2020 are filed confidentially (estimated 600K1M today). The firm is part of H2O Rseau National, France's first national network of commissaires de justice specialized in debt recovery (group network: 160+ staff, 6 major offices). Core services: enforcement of court decisions (saisie-attribution, wage garnishment, evictions, property seizures), debt collection, legal constats, and auction sales.
• Greenbrook Engineering October 6, 2026 Greenbrook Engineering was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Manufacturing. Country: United Kingdom of Great Britain and Northern Ireland. Website: greenbrookengineering.com. greenbrookengineering.com zoominfo.com/c/greenbrook-engineering/346757767 Greenbrook Engineering Services is a private, MBE-certified steel detailing and engineering firm founded in 2000, headquartered in Middlesex, New Jersey, with 5 offices in India (Bengaluru, Chennai, Nashik, Mysuru). It employs 350756 people (mostly offshore in India) and generates estimated group revenue of $2030M/year, with the India entity alone growing +22% YoY (25.3 crore FY2025). Over 25 years it has completed 3,000+ projects (Hollywood Burbank Airport, semiconductor fabs, Fiat Chrysler, military bases) with capacity of 50,000+ engineering hours per month. Core services: steel detailing, PE-stamped connection design, BIM coordination, and HVAC using Tekla/SDS2. It is the only steel detailing firm in the world with Great Place to Work certification and won Trimble's "Feature Company of the Month" (2025) and the NISD Detailing Edge Award (2026). Led by Chairman Mukul Mehta (Wharton PhD) and MD Vasan H.R.K.
• DW McMillan Memorial Hospital September 21, 2026 • [ ransomware, healthcare ] DW McMillan Memorial Hospital was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Healthcare. Country: United States of America. Website: dwmmh.org. dwmmh.org zoominfo.com/c/dw-mcmillan-memorial-hospital/77170917 D.W. McMillan Memorial Hospital is a small rural hospital in Brewton, Alabama, operating since 1954. It provides a 24/7 emergency room, ICU, surgery, obstetrics, outpatient chemotherapy, lab, imaging, and rehabilitation serving as the main acute-care provider for the county. It has about 3949 beds and employs roughly 85 staff, generating approximately $15 million in annual revenue. The hospital is part of a small county healthcare system that also runs clinics, EMS, and home health services. It has faced serious financial pressure a $6 million deficit but survived after county voters approved a tax increase in December 2025 expected to bring ~$1.8 million per year starting 2027.
• Vadeto Group October 9, 2026 • [ ransomware, technology ] Vadeto Group was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-09. Country: Sweden. Website: www.vadetogroup.com.
• solutend October 9, 2026 • [ ransomware, technology ] solutend was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-10-09. Sector: Technology. Bolivian technology company that provides audiovisual systems, digital signage, interactive displays, and business computing solutions.
• Saber1 October 9, 2026 Saber1 was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-10-09. Country: United States of America. Website: saber1.com. Saber1 Technologies LLC is a American supplier and distributor of machine vision components, industrial cameras and image processing systems.
• The Margo Hotel August 19, 2026 • [ ransomware, retail ] The Margo Hotel was listed as a victim on the leak site of the Majinahanashi ransomware group; the attack is estimated to have taken place on 2026-08-19. Sector: Hospitality. Country: United Kingdom of Great Britain and Northern Ireland. Website: themargohotel.com. The Margo Hotel is a leading 4-star business hotel in Depok that offers premium service, modern facilities for large-scale conferences, and a comfortable stay, and regularly receives top ratings fr...
• CALICHE August 11, 2026 CALICHE was listed as a victim on the leak site of the Majinahanashi ransomware group; the attack is estimated to have taken place on 2026-08-11. Sector: Energy & Utilities. Country: Chile. Grupo Caliche is a major Spanish corporation engaged in international logistics, freight transportation, and the provision of telecommunications services. The company coordinates the delivery of go...
• Camandona SA August 4, 2026 • [ ransomware, manufacturing ] Camandona SA was listed as a victim on the leak site of the Majinahanashi ransomware group; the attack is estimated to have taken place on 2026-08-04. Country: Switzerland. Website: camandona.ch. Camandona SA is a major Swiss construction and road-building company founded in 1948 and based in the French-speaking canton of Vaud. It specializes in asphalt paving, road construction, civil engi...
• hsc.mb.ca October 10, 2026 • [ ransomware, healthcare, leak ] hsc.mb.ca was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-10-10. Sector: Healthcare. Country: Canada. Website: hsc.mb.ca. The Health Sciences Centre in Winnipeg, one of the largest medical institutions, was targeted by us that resulted in the largest data breach among healthcare institutions. Our group chose not to completely disrupt the facilitys operations, recognizing the potentially devastating consequences that such an action could have had on patients lives and health. Nevertheless, Health Sciences Centre management stated that no sensitive data had been affected, despite having been informed otherwise. The data included, but was not limited to, the following information: Patient medical records: Full name, date of birth, address and phone number Hospital medical record number Diagnoses, medical history, allergies and medications Laboratory results, imaging reports Appointment dates, treatment details and physician information. Employee and healthcare professional information: Names, contact details, dates of birth and employee numbers Employment, payroll and banking information Professional credentials, work schedules and departmental assignments. Financial and insurance information: Billing records and payment histories Insurance or benefits claim information. Confidential hospital documents: Internal emails and staff communications System configurations, network diagrams and security procedures Database backups and exported spreadsheets. We would have very much preferred to avoid making this data breach public, but the management has left us with no other choice.
• Confipetrol October 11, 2026 • [ ransomware, energy ] Confipetrol was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-11. Sector: Energy & Utilities. Country: Colombia. Website: www.confipetrol.com.
• Company #27 October 11, 2026 • [ ransomware, healthcare ] Company #27 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-11. Sector: Healthcare. Country: Australia. neurology practice New South Wales, Australia | [PENDING EXPOSURE: data publishes 2026-10-13 12:37 UTC]
• Company #28 October 11, 2026 Company #28 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-11. Sector: Professional Services. Country: United States of America. architecture & design Florida, USA | [PENDING EXPOSURE: data publishes 2026-10-14 12:00 UTC]
• Company #29 October 11, 2026 Company #29 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-11. Sector: Technology. Country: United States of America. smart building & surveillance integration California, USA | [PENDING EXPOSURE: data publishes 2026-10-14 18:00 UTC]
• Reed & Giordano PA October 11, 2026 Reed & Giordano PA was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-10-11. Sector: Professional Services. Country: United States of America. Reed & Giordano PA 94,604 files / ~51.3 GBACH instructions for the firm's client trust account (IOLTA) with complete account details; clients' wire-transfer details.PII: W-9/W-2 forms with SSNs, Massachusetts driver's licenses, birth certificate, personal UBS documents of a financial advisor.Client money flows (incoming/outgoing funds by case).Signed conflict-of-interest letter (matter - Alhassan) - a direct written admission of an internal firm problem. More
• Company #23 October 11, 2026 • [ ransomware, technology ] Company #23 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-11. smart building & surveillance integration California, USA | [PENDING EXPOSURE: data publishes 2026-10-14 18:00 UTC]
• Company #24 October 11, 2026 • [ ransomware, technology ] Company #24 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-11. smart building & surveillance integration California, USA | [PENDING EXPOSURE: data publishes 2026-10-14 18:00 UTC]
• MGT Lojistik AŞ July 22, 2026 MGT Lojistik A was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-07-22. Sector: Transportation. Country: Turkey. Website: www.mgtlog.com. [AI generated] N/A I don't have verified, reliable information about a company called "MGT Lojistik A" in my knowledge base. While "Lojistik" suggests a Turkish logistics company (A being a common Turkish corporate suffix for "Anonim irketi," or joint-stock company), I cannot confirm specific details about this entity's operations, services, founding, or business activities with confidence. Providing fabricated details would be inappropriate for threat intelligence purposes, where accuracy is critical. If you have additional context, source documents, or details about this company, I'd be glad to help analyze that information instead.
• MoneyGram October 10, 2026 • [ ransomware, finance, technology ] MoneyGram was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-10. Sector: Financial Services. Country: United States of America. Website: moneygram.com. moneygram.com Revenue $2.1 Billion MoneyGram global money transfer network moving nearly $200 billion a year through almost 500,000 retail agent locations in 200+ countries and serving 60 million+ active customers, with over 70% of transactions now digital. It earns mainly from transfer fees plus currency exchange spreads, not from owning stores, since almost all locations are partner agents like post offices and grocery chains. In 2025 it cut 449 jobs to speed up digital growth and in 2026 launched its own MGUSD dollar stablecoin and a Visa card that spends digital dollars anywhere Visa works. MoneyGram owns no factories or stores, it is a licensed money transmitter with 75+ regulatory approvals, around 2,000 employees in 36 countries, and was taken private in 2023 for $1.8 billion.