-
Merrill Iron & Steel
August 13, 2026
•
[ ransomware, manufacturing ]
Merrill Iron & Steel was listed as a victim on the leak site of the payoutsking ransomware group; the attack is estimated to have taken place on 2026-08-13. Sector: Manufacturing. Country: United States of America. Website: merrillsteel.com.
-
Palma
October 6, 2026
•
[ ransomware, manufacturing, leak ]
Palma was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Other. Country: United States of America. Website: palmainc.com. palmainc.com zoominfo.com/c/palma-inc/344828237 Palma, Inc. is a private, family-owned epoxy flooring manufacturer and installer founded in 1927 in Whippany, New Jersey now in its third generation (CEO Fred Palma III). It generates estimated annual revenue of $2542M with only ~1015 direct employees (heavy use of subcontractors), completing millions of square feet of industrial flooring over 99 years. The company is a rare single-source formulator/applicator it develops its own products (PalmaLite, PaliKrete, PaliFlake) and installs them, with every square meter personally approved by a family member. Its average project size is $15.3M (Procore data: 122 projects, 76 active simultaneously), serving auto dealerships, jails, hospitals, chemical plants, and government facilities across the U.S. and Canada. Key differentiators: 5-year industry-leading warranty, no membrane required (3040% cost savings), and full ASTM C722-89 compliance. The company's name "A Palma, Manton, Palma Co
-
Majestic Holidays India Private Limited
October 6, 2026
Majestic Holidays India Private Limited was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Hospitality. Country: India. Website: ajesticindiaholidays.com. ajesticindiaholidays.com datanyze.com/companies/majestic-holidays-india/347590614 Majestic Holidays India Private Limited is a micro-sized travel and transport operator based at 2N/72, B.P., NIT Faridabad, Haryana (Delhi NCR), incorporated on 26 March 2015 (CIN U74900HR2015PTC055011, ROC Haryana, GSTIN 06AAJCM6666Q1ZK, DPIIT-recognized startup). Registered activity is "travel agency and tour operators," but the business has pivoted to corporate/government vehicle rental sedans, SUVs, vans, and buses with professional drivers serving institutional clients including BPCL, the Regional Centre for Biotechnology (RCB), THSTI, and AJNIFM; in July 2026 it won THSTI's monthly cab-hiring tender (20 lakh value) as L1 bidder at 16.2 lakh, beating 14 competitors. The company is run by promoter-directors Priyanka Devi (since inception) and Harinder Yadav (since December 2019), a family that controls a small cluster
-
All Smiles Dental of Falls Church
October 6, 2026
All Smiles Dental of Falls Church was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Healthcare. Country: United States of America. Website: allsmilesnova.com. allsmilesnova.com zoominfo.com/c/all-smiles-dental-of-falls-church/357420653 All Smiles Dental is a family-owned dental practice at 6400 Seven Corners Pl, Suite K, Falls Church, VA (Washington DC suburbs), serving Northern Virginia for over three decades founded in the early 1990s by Vietnamese-immigrant dentists Dr. Thang Pham and Dr. Nu Dang, who met at Saigon Dental School and retrained cum laude at MCV/VCU. Their son Dr. Long Pham (Virginia Tech summa cum laude, VCU DDS 2008) joined in 2008 and now leads the practice alongside Dr. Jennifer Lee and Dr. Tuan Anh Ta; the family also runs two related practices Nova Dental Practice in Herndon and All Smiles Dental PLLC in Great Falls (owned by Dr. Long's wife, Dr. Erica Sok). The practice offers full-service dentistry with a flagship focus on biomimetic dentistry Dr. Long Pham is one of the few US dentists with mastership from the Alleman Center for Biomimetic Dentistry plus CEREC same-day crowns, Invisalign/SureSmile aligners
-
The Law Office of James R Walsh
October 6, 2026
•
[ ransomware, leak ]
The Law Office of James R Walsh was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Professional Services. Country: United States of America. Website: jrwalshlaw.com. jrwalshlaw.com The Law Office of James R. Walsh is a small plaintiff-side law firm in Lynnwood, WA (north of Seattle), specializing in workers' compensation (L&I claims), personal injury, maritime, and Social Security cases. Founder James R. Walsh (admitted 1981) has practiced for 44+ years and was named to "Top Attorneys of North America 2015-16." The firm fights for injured workers against Washington's Dept. of Labor & Industries and self-insured employers, with published precedents including Elliott v. L&I (2009) and ITT Rayonier v. Dalman (1992). It acts as a talent incubator attorney Joshua L. Hughes (UW Law, JD with honors) rose from paralegal (2017) to attorney (2022), following the path of earlier associates.
-
Potomac Animal Hospital
October 6, 2026
•
[ ransomware, healthcare ]
Potomac Animal Hospital was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Healthcare. Country: United States of America. Website: potomacanimalhospital.com. potomacanimalhospital.com zoominfo.com/c/potomac-animal-hospital/183255483 Potomac Animal Hospital is a family-owned, full-service small animal medical and surgical facility at 10020 River Road in Potomac, Maryland, an affluent Washington, DC suburb, founded in 1973 and led since 1983 by Air Force veteran Dr. Michael Scott (CSU DVM 1969; former officer in charge of the Europe Military Working Dog Referral Center in Ramstein). His son Dr. Jason Scott joined in 1999 hooded at graduation by his father exactly 30 years to the day after his own and now leads a team including Dr. Sarah Orloff (2021) and Dr. Kimber Wagner (2025); Dr. Michael retired in 2018 but remains owner. Beyond medicine (wellness exams, international health certificates, laser surgery, dentistry with digital oral radiography, in-house lab), the hospital runs a separate boarding kennel ($42.50$72.50/night, dogs exercised every 23 hours, VIP suites) and a grooming salon all powered through outages by an industria
-
Machine sro
October 6, 2026
•
[ ransomware, manufacturing, automotive ]
Machine sro was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Manufacturing. Country: Czechia. Website: k2machine.cz. k2machine.cz zoominfo.com/c/machine-sro/537154777 K2 Machine s.r.o. is a private Czech industrial machinery manufacturer founded in 2011 in Pardubice, Czech Republic, growing from 3 founders in a small office to ~2550 employees and 400+ completed projects over 15 years. Annual turnover is 100+ million CZK (~4M), though 2024 saw a sharp 18.7% revenue decline (operating revenue 27.7%). The company designs and builds special-purpose machines, automated production lines, robotic cells (including 3D Bin Picking), conveyor systems, and performs CNC machining, equipment repowering, and line relocation serving primarily the automotive and consumer industries. Its full-cycle capability spans Solid Edge 3D design, EPLAN electrical engineering, CNC production, assembly, commissioning, and after-sales service under one roof at its own Semtn campus (since 2020).
-
University of Buraimi
October 6, 2026
•
[ ransomware, education ]
University of Buraimi was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Education. Country: Oman. Website: uob.edu.om. uob.edu.om zoominfo.com/c/university-of-buraimi/464061196 University of Buraimi (UOB) is a private higher education institution founded in 2016 (originally College of Banking & Financial Studies, upgraded to university status in 2024) in Buraimi, Oman, just 5 minutes from the UAE border (Al Ain). Licensed by Oman's Ministry of Higher Education (MOHERI), it operates 4 faculties (Computing & IT, Engineering, Business, Health Sciences) with 11 departments offering programs in AI, cybersecurity, civil/electrical/mechanical engineering, nursing, architecture, business, and MBA. It serves ~5001,500 students from 40+ countries (3040% international) with ~5082 staff (PhD-holders from UK, USA, Canada, Malaysia). Tuition runs ~$6,00012,000/year with extensive scholarships. The university follows a US academic model, earned a spot in UI GreenMetric World Rankings 2025 (289th for sustainability), and is currently undergoing OAAA accreditation. Led by Chancellor HE Sheikh Saif Al-Mamari
-
Refako Autodele
October 6, 2026
•
[ ransomware, manufacturing, retail ]
Refako Autodele was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Manufacturing. Country: Denmark. Website: refako.dk. refako.dk REFAKO ApS (Refako Autodele) is a Danish family-owned truck and trailer parts retailer founded in 1975 in Odense, Denmark, celebrating its 50th anniversary in 2025. It operates 13 stores nationwide with 200,000+ SKUs (290,000 for B2B) and employs 5970+ people. Annual gross profit is ~2627M DKK (~$3.7M), but the company has been loss-making for 6 consecutive years (20202025), with equity saved by owner injections (16.3M DKK in 2025) after hitting a crisis low of 2.7M in 2022. It turned operationally profitable in 2024 (+0.46M DKK) under new sole owner Klaus Allan Jrgensen (KJ Holding took 100% in May 2024), but slipped back into losses in 2025. Refako is Denmark's only authorized SAF-Holland partner (global leader in trailer axles/suspension) and carries premium brands like WABCO, Knorr-Bremse, JOST, Dinex, and Exide. Customer reputation is excellent Trustpilot 4.8/5 from 2,695 reviews with same-day shipping and 30-minute Click & Collect across its store network.
-
Skyplan Services
October 6, 2026
Skyplan Services was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Professional Services. Website: skyplan.com. skyplan.com zoominfo.com/c/skyplan-services-ltd/81691062 Skyplan Services Limited is a private, self-funded aviation flight planning and dispatch company founded in 1983 in Calgary, Alberta, Canada, with major operations in Dubai (UAE), China, and Finland, employing ~85 people. It generates estimated annual revenue of ~$7M with zero external investment over its 43-year history. Its flagship Aurora Flight Planning System (SaaS, web-based since 1998 a global pioneer) covers 24,000+ airports, 450+ aircraft types, and 1,600+ fuel locations worldwide. Services include contract flight planning, international trip support, aviation fuel sales, permits/slots, ground handling, and 24/7 dispatch saving airlines up to 5% in fuel costs through route optimization. The company is ranked #1 among independent flight planning competitors (Tracxn), led by CEO Mohammad Sami, competing against giants like Jeppesen (Boeing), ARINCDirect (Collins Aerospace), and Lido (Lufthansa Systems).
-
Kooltronic
October 6, 2026
•
[ ransomware, manufacturing, technology ]
Kooltronic was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Manufacturing. Country: United States of America. Website: kooltronic.com. kooltronic.com Kooltronic, Inc. is a private, family-owned manufacturer of enclosure cooling products (air conditioners, heat exchangers, fans) founded in 1956 in Princeton, NJ, now based in Pennington, NJ on a 170,000 sq ft facility powered by 90% solar energy. Owned by the Freedman family since 1970 (President: Barry Freedman), the company generates estimated annual revenue of $3545M with 5887 employees (~$650K$750K revenue per employee very high for a manufacturer). Kooltronic invented the world's first closed-loop enclosure air conditioner in 1967 and holds a US patent for Hazardous Location AC systems (NEC Class I Div 1&2), giving it a unique market niche. It offers the industry's widest range 2,00030,000 BTU/H units across all NEMA ratings with 100% in-house production, UL-certified testing labs, and ISO 9001:2015 certification. The company is women-owned (WBE) (CEO Anne Freedman), holds $20.5M in 401(k) assets (stable finances), and is expanding into fast-growing BESS
-
Smart Value
October 6, 2026
•
[ ransomware, retail, leak ]
Smart Value was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Retail & E-Commerce. Country: Belize. Website: smartvalue.biz. smartvalue.biz zoominfo.com/c/smart-value/408286294 Smart Value Limited is an Indian MLM (multi-level marketing) / network marketing company founded in 20032004 in New Delhi by Manoj Kumar Gupta, operating 100+ offices across India with a claimed 2,000,000+ distributors (IBAs). The company sells health supplements, personal care, household products, and educational courses but revenue is not publicly disclosed (private MLM). Its core business model relies on recruiting new distributors rather than actual retail sales, with heavily inflated product pricing (200500% above market) to fund multi-level commissions. The company faces serious and widespread allegations: consumer complaints about pyramid-like structure, inability to recover investments, fake income claims on social media, and reported law enforcement scrutiny in India. ~99% of participants lose money (standard MLM economics), while only top recruitment leaders profit. Despite 20+ years of operation and membership in Indian
-
Galil Engineering
October 6, 2026
Galil Engineering was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Manufacturing. Country: Israel. Website: galileng.com. galileng.com zoominfo.com/c/galil-engineering/346973568 Galil Group (Y.W. Galil Engineering) is a private, family-owned EPC (Engineering, Procurement & Construction) firm founded in 1984 by Yossi Weiss in Ramat Yishai, Israel, now run jointly by his three sons (Nimrod, Nitzan, and Or Weiss as Co-CEOs/Deputy CEO). It employs ~190250 people (engineers, technicians, managers) with estimated annual revenue of $50100M fully self-funded with no external investors. Over 42 years, Galil has completed full turnkey industrial projects across 8+ countries (Israel, Romania, Croatia, Rwanda, Chile, Botswana, Canada, USA), spanning defense, energy, pharmaceuticals (Teva, Intel), petrochemicals, food, and microelectronics. Key projects include a 344 MW pumped storage plant, a 144 MW dual-fuel cogeneration station, Chile's Aconcagua desalination plant, and Israel's first-ever NGA gasification permit for an industrial site. The company offers 10+ in-house engineering disciplines
-
TGN
October 6, 2026
•
[ ransomware, energy ]
TGN was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Country: Argentina. Website: tgn.com.ar. tgn.com.ar zoominfo.com/c/transportadora-de-gas-del-norte/372392284 Transportadora de Gas del Norte (TGN) is Argentina's largest natural gas transporter, publicly traded on BYMA (TGNO4), founded in 1992 and operating 11,317 km of pipelines and 22 compressor stations across 17 provinces. It moves 40% of all natural gas in Argentina's pipeline system (~20% of the national energy matrix) and is the only operator connecting Argentina to Chile, Brazil, Bolivia, and Uruguay. FY2025 revenue was ~$483M (AR$600.6B, +20%), EBITDA ~$260M (55% margin), and net income surged +351% to ~$176M, driven by tariff reforms and Vaca Muerta export growth. The company has virtually zero debt (Debt/EBITDA 0.2x), $250M cash, and pays record dividends of AR$577/share (~10% yield), with a AA-(arg) credit rating (Fitch, positive outlook). It employs 6001,153 people, is controlled by Gasinvest (56%) a Techint/Tecpetrol + CGC/Eurnekian joint venture and was named a Great Place to Work Top-25 in Argentina 2025
-
Aquatech
October 6, 2026
•
[ ransomware, energy, technology ]
Aquatech was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Energy & Utilities. Country: United States of America. Website: aquatech.com. aquatech.com zoominfo.com/c/aquatech-international-llc/2523742 Aquatech International Corporation is a private water treatment technology company founded in 1981 and headquartered in Canonsburg, Pennsylvania, with operations in 26 countries and 1,000+ projects across 60+ countries. It generates estimated annual revenue of $105165M and employs 9001,368 people globally (growing +31% per year). Aquatech is the world's leading Zero Liquid Discharge (ZLD) provider (160+ installations) and a major desalination player its Corpus Christi, Texas plant (30 MGD) will be the third-largest SWRO facility in the Americas. The company won the prestigious "Water Technology Company of the Year 2025" (Global Water Awards) and acquired three companies in 2025 (Century Water, Koch Li-Pro DLE, FTS H2O) to dominate lithium extraction (PEARL platform) and ultrapure water for semiconductors. Led by CEO Devesh Sharma and President/CTO Ravi Chidambaran, with a private equity investor entering in 2025.
-
fleetworksinc.com
October 9, 2026
•
[ ransomware, manufacturing ]
fleetworksinc.com was listed as a victim on the leak site of the threeam ransomware group; the attack is estimated to have taken place on 2026-10-09. Sector: Transportation. Country: United States of America. Website: fleetworksinc.com. Fleetworks Inc. offers comprehensive heavy-duty truck repair and fleet services across California, with locations in Oakland, Santa Fe Springs, and Riverside. Their skilled team specializes in a wide range of services including diesel repair, flee
-
Anne Arundel County
October 9, 2026
Anne Arundel County was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-10-09. Sector: Government & Defense. Country: United States of America. Website: aacounty.org. Anne Arundel County Established in 1964, Anne Arundel County is a governmental body, consisting of numerous departments, services and sections all working together to serve the residents. This company is headquartered in Anne Arundel County, Maryland.814,500 files, 2.6 TB721 background-check dossiers with full SSNs in filenames, including 2026 records.Tens of thousands of medical faxes, 2022 to 2026, with patient names and diagnoses.Methadone clinic records under 42 CFR Part 2, the strictest US confidentiality regime.47,602 medical-assistance files with driver licenses, Green Cards, SSN cards, tax forms and bank data.County payroll registers with all salaries, HR memos, contracts, pension and discipline databases.Jail gang-intelligence files with a gang-member master list. More
-
Supreme Energy
October 9, 2026
•
[ ransomware, energy ]
Supreme Energy was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-10-09. Sector: Energy & Utilities. Country: Indonesia. Supreme Energy is an Indonesian renewable-energy company that develops geothermal power projects to generate clean electricity.
-
astranahealth.com
October 9, 2026
•
[ ransomware, healthcare, technology ]
astranahealth.com was listed as a victim on the leak site of the chaos ransomware group; the attack is estimated to have taken place on 2026-10-09. Sector: Healthcare. Country: United States of America. Website: astranahealth.com. The company's management decided to pull out of the deal with us in order to save money. The data and diagnoses of millions of patients have been published in their entirety. The total data volume is 1,500 GB.
Astrana Health, Inc. is a physician-centric, technology-powered healthcare company headqu
-
dwi-bau.de
October 9, 2026
•
[ ransomware, manufacturing ]
dwi-bau.de was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-10-09. Sector: Other. Country: Germany. Website: dwi-bau.de. The company specializes in building systems for metal roofs and facades, serving customers in the construction and building sectors. Its
