-
Refako Autodele
October 6, 2026
•
[ ransomware, manufacturing, retail ]
Refako Autodele was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Manufacturing. Country: Denmark. Website: refako.dk. refako.dk REFAKO ApS (Refako Autodele) is a Danish family-owned truck and trailer parts retailer founded in 1975 in Odense, Denmark, celebrating its 50th anniversary in 2025. It operates 13 stores nationwide with 200,000+ SKUs (290,000 for B2B) and employs 5970+ people. Annual gross profit is ~2627M DKK (~$3.7M), but the company has been loss-making for 6 consecutive years (20202025), with equity saved by owner injections (16.3M DKK in 2025) after hitting a crisis low of 2.7M in 2022. It turned operationally profitable in 2024 (+0.46M DKK) under new sole owner Klaus Allan Jrgensen (KJ Holding took 100% in May 2024), but slipped back into losses in 2025. Refako is Denmark's only authorized SAF-Holland partner (global leader in trailer axles/suspension) and carries premium brands like WABCO, Knorr-Bremse, JOST, Dinex, and Exide. Customer reputation is excellent Trustpilot 4.8/5 from 2,695 reviews with same-day shipping and 30-minute Click & Collect across its store network.
-
Skyplan Services
October 6, 2026
Skyplan Services was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Professional Services. Website: skyplan.com. skyplan.com zoominfo.com/c/skyplan-services-ltd/81691062 Skyplan Services Limited is a private, self-funded aviation flight planning and dispatch company founded in 1983 in Calgary, Alberta, Canada, with major operations in Dubai (UAE), China, and Finland, employing ~85 people. It generates estimated annual revenue of ~$7M with zero external investment over its 43-year history. Its flagship Aurora Flight Planning System (SaaS, web-based since 1998 a global pioneer) covers 24,000+ airports, 450+ aircraft types, and 1,600+ fuel locations worldwide. Services include contract flight planning, international trip support, aviation fuel sales, permits/slots, ground handling, and 24/7 dispatch saving airlines up to 5% in fuel costs through route optimization. The company is ranked #1 among independent flight planning competitors (Tracxn), led by CEO Mohammad Sami, competing against giants like Jeppesen (Boeing), ARINCDirect (Collins Aerospace), and Lido (Lufthansa Systems).
-
Kooltronic
October 6, 2026
•
[ ransomware, manufacturing, technology ]
Kooltronic was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Manufacturing. Country: United States of America. Website: kooltronic.com. kooltronic.com Kooltronic, Inc. is a private, family-owned manufacturer of enclosure cooling products (air conditioners, heat exchangers, fans) founded in 1956 in Princeton, NJ, now based in Pennington, NJ on a 170,000 sq ft facility powered by 90% solar energy. Owned by the Freedman family since 1970 (President: Barry Freedman), the company generates estimated annual revenue of $3545M with 5887 employees (~$650K$750K revenue per employee very high for a manufacturer). Kooltronic invented the world's first closed-loop enclosure air conditioner in 1967 and holds a US patent for Hazardous Location AC systems (NEC Class I Div 1&2), giving it a unique market niche. It offers the industry's widest range 2,00030,000 BTU/H units across all NEMA ratings with 100% in-house production, UL-certified testing labs, and ISO 9001:2015 certification. The company is women-owned (WBE) (CEO Anne Freedman), holds $20.5M in 401(k) assets (stable finances), and is expanding into fast-growing BESS
-
Smart Value
October 6, 2026
•
[ ransomware, retail, leak ]
Smart Value was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Retail & E-Commerce. Country: Belize. Website: smartvalue.biz. smartvalue.biz zoominfo.com/c/smart-value/408286294 Smart Value Limited is an Indian MLM (multi-level marketing) / network marketing company founded in 20032004 in New Delhi by Manoj Kumar Gupta, operating 100+ offices across India with a claimed 2,000,000+ distributors (IBAs). The company sells health supplements, personal care, household products, and educational courses but revenue is not publicly disclosed (private MLM). Its core business model relies on recruiting new distributors rather than actual retail sales, with heavily inflated product pricing (200500% above market) to fund multi-level commissions. The company faces serious and widespread allegations: consumer complaints about pyramid-like structure, inability to recover investments, fake income claims on social media, and reported law enforcement scrutiny in India. ~99% of participants lose money (standard MLM economics), while only top recruitment leaders profit. Despite 20+ years of operation and membership in Indian
-
Galil Engineering
October 6, 2026
Galil Engineering was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Manufacturing. Country: Israel. Website: galileng.com. galileng.com zoominfo.com/c/galil-engineering/346973568 Galil Group (Y.W. Galil Engineering) is a private, family-owned EPC (Engineering, Procurement & Construction) firm founded in 1984 by Yossi Weiss in Ramat Yishai, Israel, now run jointly by his three sons (Nimrod, Nitzan, and Or Weiss as Co-CEOs/Deputy CEO). It employs ~190250 people (engineers, technicians, managers) with estimated annual revenue of $50100M fully self-funded with no external investors. Over 42 years, Galil has completed full turnkey industrial projects across 8+ countries (Israel, Romania, Croatia, Rwanda, Chile, Botswana, Canada, USA), spanning defense, energy, pharmaceuticals (Teva, Intel), petrochemicals, food, and microelectronics. Key projects include a 344 MW pumped storage plant, a 144 MW dual-fuel cogeneration station, Chile's Aconcagua desalination plant, and Israel's first-ever NGA gasification permit for an industrial site. The company offers 10+ in-house engineering disciplines
-
TGN
October 6, 2026
•
[ ransomware, energy ]
TGN was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Country: Argentina. Website: tgn.com.ar. tgn.com.ar zoominfo.com/c/transportadora-de-gas-del-norte/372392284 Transportadora de Gas del Norte (TGN) is Argentina's largest natural gas transporter, publicly traded on BYMA (TGNO4), founded in 1992 and operating 11,317 km of pipelines and 22 compressor stations across 17 provinces. It moves 40% of all natural gas in Argentina's pipeline system (~20% of the national energy matrix) and is the only operator connecting Argentina to Chile, Brazil, Bolivia, and Uruguay. FY2025 revenue was ~$483M (AR$600.6B, +20%), EBITDA ~$260M (55% margin), and net income surged +351% to ~$176M, driven by tariff reforms and Vaca Muerta export growth. The company has virtually zero debt (Debt/EBITDA 0.2x), $250M cash, and pays record dividends of AR$577/share (~10% yield), with a AA-(arg) credit rating (Fitch, positive outlook). It employs 6001,153 people, is controlled by Gasinvest (56%) a Techint/Tecpetrol + CGC/Eurnekian joint venture and was named a Great Place to Work Top-25 in Argentina 2025
-
Aquatech
October 6, 2026
•
[ ransomware, energy, technology ]
Aquatech was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Energy & Utilities. Country: United States of America. Website: aquatech.com. aquatech.com zoominfo.com/c/aquatech-international-llc/2523742 Aquatech International Corporation is a private water treatment technology company founded in 1981 and headquartered in Canonsburg, Pennsylvania, with operations in 26 countries and 1,000+ projects across 60+ countries. It generates estimated annual revenue of $105165M and employs 9001,368 people globally (growing +31% per year). Aquatech is the world's leading Zero Liquid Discharge (ZLD) provider (160+ installations) and a major desalination player its Corpus Christi, Texas plant (30 MGD) will be the third-largest SWRO facility in the Americas. The company won the prestigious "Water Technology Company of the Year 2025" (Global Water Awards) and acquired three companies in 2025 (Century Water, Koch Li-Pro DLE, FTS H2O) to dominate lithium extraction (PEARL platform) and ultrapure water for semiconductors. Led by CEO Devesh Sharma and President/CTO Ravi Chidambaran, with a private equity investor entering in 2025.
-
fleetworksinc.com
October 9, 2026
•
[ ransomware, manufacturing ]
fleetworksinc.com was listed as a victim on the leak site of the threeam ransomware group; the attack is estimated to have taken place on 2026-10-09. Sector: Transportation. Country: United States of America. Website: fleetworksinc.com. Fleetworks Inc. offers comprehensive heavy-duty truck repair and fleet services across California, with locations in Oakland, Santa Fe Springs, and Riverside. Their skilled team specializes in a wide range of services including diesel repair, flee
-
Anne Arundel County
October 9, 2026
Anne Arundel County was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-10-09. Sector: Government & Defense. Country: United States of America. Website: aacounty.org. Anne Arundel County Established in 1964, Anne Arundel County is a governmental body, consisting of numerous departments, services and sections all working together to serve the residents. This company is headquartered in Anne Arundel County, Maryland.814,500 files, 2.6 TB721 background-check dossiers with full SSNs in filenames, including 2026 records.Tens of thousands of medical faxes, 2022 to 2026, with patient names and diagnoses.Methadone clinic records under 42 CFR Part 2, the strictest US confidentiality regime.47,602 medical-assistance files with driver licenses, Green Cards, SSN cards, tax forms and bank data.County payroll registers with all salaries, HR memos, contracts, pension and discipline databases.Jail gang-intelligence files with a gang-member master list. More
-
Supreme Energy
October 9, 2026
•
[ ransomware, energy ]
Supreme Energy was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-10-09. Sector: Energy & Utilities. Country: Indonesia. Supreme Energy is an Indonesian renewable-energy company that develops geothermal power projects to generate clean electricity.
-
astranahealth.com
October 9, 2026
•
[ ransomware, healthcare, technology ]
astranahealth.com was listed as a victim on the leak site of the chaos ransomware group; the attack is estimated to have taken place on 2026-10-09. Sector: Healthcare. Country: United States of America. Website: astranahealth.com. The company's management decided to pull out of the deal with us in order to save money. The data and diagnoses of millions of patients have been published in their entirety. The total data volume is 1,500 GB.
Astrana Health, Inc. is a physician-centric, technology-powered healthcare company headqu
-
dwi-bau.de
October 9, 2026
•
[ ransomware, manufacturing ]
dwi-bau.de was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-10-09. Sector: Other. Country: Germany. Website: dwi-bau.de. The company specializes in building systems for metal roofs and facades, serving customers in the construction and building sectors. Its
-
KOIKE Sanso Kogoyo Co. Ltd.
October 10, 2026
•
[ ransomware, manufacturing ]
KOIKE Sanso Kogoyo Co. Ltd. was listed as a victim on the leak site of the exitium ransomware group; the attack is estimated to have taken place on 2026-10-10. Sector: Manufacturing. Country: Japan. Website: koike-asia.com. Website: koike-japan.com
You have time until Tuesday(10.13.2026). If you wouldn't contact us we will start selling data.
We have 5.8 TB of data:
agreements
confidential data
correspondence files
all customers and clients data
engineering drawings
AND MUCH MORE...
Contact us until your time runs out.
-
Secretaría de Modernización e Innovación del Municipio
October 10, 2026
•
[ ransomware, government, technology ]
Secretara de Modernizacin e Innovacin del Municipio was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-10. Sector: Government & Defense. Country: Argentina. Website: www.riogrande.gob.ar.
-
DexCom
October 10, 2026
DexCom was listed as a victim on the leak site of the Redact ransomware group; the attack is estimated to have taken place on 2026-10-10. Sector: Healthcare. Country: United States of America. Website: dexcom.com. Sector: Medical Equipment | Revenue: $4.97B USD
-
Helwan University (HITU)
October 10, 2026
•
[ ransomware, education, technology ]
Helwan University (HITU) was listed as a victim on the leak site of the UmBra ransomware group; the attack is estimated to have taken place on 2026-10-10. Sector: Education. Country: Egypt. Website: helwan.edu.eg. Helwan International Technological University a pioneering Egyptian institution offering cutting-edge programs in Cybersecurity, Data Science, Artificial Intelligence, and Mechatronics, equipped with advanced labs and strong industry partnerships to prepare students for the digital future.
-
HYSYTECH S.r.l.
October 2, 2026
•
[ ransomware, manufacturing, technology ]
HYSYTECH S.r.l. was listed as a victim on the leak site of the Majinahanashi ransomware group; the attack is estimated to have taken place on 2026-10-02. Sector: Manufacturing. Country: Italy. HYSYTECH S.r.l. is an Italian engineering and technology company that designs and builds industrial processing plants, specifically systems for the production and processing of hydrogen, biomethane...
-
PCA Group Sdn. Bhd.
August 21, 2026
•
[ ransomware, manufacturing ]
PCA Group Sdn. Bhd. was listed as a victim on the leak site of the Majinahanashi ransomware group; the attack is estimated to have taken place on 2026-08-21. Sector: Other. Country: Malaysia. PCA Group is a Malaysian industrial, engineering, and manufacturing company founded in 1989 that designs, manufactures, installs, and maintains infrastructure and equipment for major international...
-
Grand Ion Delemen Hotel
August 19, 2026
Grand Ion Delemen Hotel was listed as a victim on the leak site of the Majinahanashi ransomware group; the attack is estimated to have taken place on 2026-08-19. Sector: Hospitality. Country: Turkey. The Grand Ion Delemen Hotel is a high-rise, five-star resort complex in Genting Highlands (Malaysia) that offers premium accommodations and a relaxing getaway in a cool mountain climate. HQ: Jalan...
-
ETICOD
August 9, 2026
•
[ ransomware, manufacturing, technology ]
ETICOD was listed as a victim on the leak site of the Majinahanashi ransomware group; the attack is estimated to have taken place on 2026-08-09. Country: Poland. Website: eticod.pl. Eticod is a family-run, prominent label printing house based in Katowice, Poland, founded in 1994. It specializes in self-adhesive labels, barcodes, thermal transfer ribbons, and advanced packaging...
