Full List

Search

Recent Breaches

• Confluent October 10, 2026 • [ ransomware, technology ] Confluent was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-10. Sector: Technology. Country: United States of America. Website: confluent.io. confluent.io Revenue $1.16 Billion Confluent is the enterprise data streaming platform built on Apache Kafka that lets companies process live events like payments, orders and sensor data in real time, and it is now owned by IBM which bought it for about $11 billion in March 2026. It ended 2025 with 6,690 customers including roughly 40% of the Fortune 500 and grew revenue 21% with its cloud segment alone growing 27%. Customers include BMW, L'Oreal, Michelin and Ticketmaster and the platform runs across 60+ cloud regions on AWS, Azure and Google Cloud. Money comes from cloud usage and software subscriptions, about 96% of revenue, paid for compute and data transfer rather than per-seat fees. Around 3,241 employees worked at Confluent across 27 countries before the IBM deal and it owns no factories or stores because its product is pure software and cloud. Confluent was still unprofitable with a $295 million loss in 2025 though it earned positive operating income excluding stock pay.
• Placer AI October 10, 2026 • [ ransomware, technology, retail ] Placer AI was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-10. Sector: Technology. Country: United States of America. Website: placer.ai. placer.ai Revenue $136.5 Million private US company valued at $1.5 billion that sells foot traffic analytics for physical locations, estimating visits to stores, malls and offices from anonymized data on tens of millions of mobile phones with 92%+ claimed accuracy. It hit $100 million annual recurring revenue in 2024 after growing 80% in a year and serves 4,000+ customers including Sony, Wegmans, BJ's Wholesale, SeaWorld and Bloomberg, which puts Placer data into its Terminal so investors can track company performance before earnings. Money comes from SaaS subscriptions starting around $12,000 a year, API data feeds and add-on datasets, and it has raised $268 million in total funding. Around 630 employees work at Placer.ai after 150 layoffs in January 2025 aimed at reaching profitability, and it owns no factories or stores because its product is pure software and data.
• Louis Fusco October 12, 2026 • [ ransomware, leak, technology ] Louis Fusco was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-10-12. Louis Fusco Landscape Architects is a full-service landscape architectural design firm led by p rincipal Louis Fusco. The firm is recognized for its site-sensitive creative designs and meticu lous attention to detail, resulting in award-winning projects featured in landscape journals. We will upload 465gb of corporate data soon. Employee information (passport and DLs scans and s o on), projects (drawings, specifications), clients and partners info, lots of agreements and s o on.
• Nam Dinh Vu Port (container terminal operations) October 12, 2026 • [ ransomware, leak, manufacturing ] Nam Dinh Vu Port (container terminal operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: Vietnam. Port terminal operations / maritime logistics Vietnam | The full EDI message archive of the terminal's operations server: vessel schedules, container manifests (BAPLIE), gate movement records (CODECO), booking messages (COPARN) covering multiple international shipping lines; Internal system configuration files of the operations server | [NOT PAID EXPOSED: files publish 2026-10-19 13:19 UTC]
• NCT Kandla (container terminal operations) October 12, 2026 • [ ransomware, leak ] NCT Kandla (container terminal operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: India. Port terminal operations India | Operational EDI correspondence and internal systems logs | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
• HPC Hamburg Port Consulting (port operations) October 12, 2026 • [ ransomware, leak, manufacturing ] HPC Hamburg Port Consulting (port operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: Germany. Port consulting / terminal operations Germany | Operational EDI archives and cargo/bill-of-lading records | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
• T.S. Lines (intra-Asia container shipping) October 12, 2026 T.S. Lines (intra-Asia container shipping) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: Taiwan. Container shipping Taiwan | Operational EDI message archives (container manifests, gate movement and booking records), internal systems master data, and internal credential material | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
• CULines (container shipping) October 12, 2026 • [ ransomware, technology, manufacturing ] CULines (container shipping) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: China. Container shipping China | Operational EDI message archives (booking and container manifest records) | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
• Premier Alliance (shipping network operations) October 12, 2026 • [ ransomware, leak, transportation ] Premier Alliance (shipping network operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: Netherlands. Shipping / terminal services Netherlands | Terminal network documentation and operational EDI archives | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
• Ocean Network Express (container shipping) October 12, 2026 • [ ransomware, financial ] Ocean Network Express (container shipping) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: Singapore. Container shipping Singapore | Internal staff directories, operational voyage and fuel-consumption records, and financial-adjacent planning material | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
• GlobalNet LCL (port agency operations) October 12, 2026 • [ ransomware, leak ] GlobalNet LCL (port agency operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: Indonesia. Port agency / logistics Indonesia | Container gate movement and damage management records | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
• Nu-Quest Distribution Inc October 12, 2026 Nu-Quest Distribution Inc was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Retail & E-Commerce. Country: United States of America. Website: https:nuquest.com. Nu-Quest Distribution Inc. is a privately held pharmaceutical wholesaler based in Newfoundland and Labrador. The company specializes in the distribution of brand-name and generic medications, as well as medical devices. Its negligent attitude toward security and unwillingness to negotiate led to the leak of confidential documents, including supplier/customer pricing and price lists, drug transaction and compliance records, financial statements, employee personnel files, and legal documents. Due to our disclosure of these details, the company faces regulatory fines, license revocation, lawsuits, and damage to its competition and reputation.
• Franklin Miller Inc. October 12, 2026 Franklin Miller Inc. was listed as a victim on the leak site of the Dark Project ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Manufacturing. Country: United States of America. Website: www.franklinmiller.com. About Franklin Miller Inc. Franklin Miller has been engineering wastewater grinders, crushers, shredders, and screens for municipal and industrial applications since 1918. Their products are designed for reliability and efficiency, catering to industries such as wastewater treatment, food processing, mining, oil and gas, and recycling. The company is committed to providing comprehensive post-sale support, ensuring that their equipment operates at peak performance. Trusted by industry leaders worldwide, Franklin Miller's equipment is precision manufactured in the USA to handle the toughest jobs. As a result of the attack on "Franklin Miller", more than 250 GB of confidential data were stolen. The organization lost control over documents such as drawings and project documentation, confidential agreements, banking and other financial information, as well as employees personal data.
• Advanced Imaging Solutions October 13, 2026 Advanced Imaging Solutions was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-10-13. Sector: Technology. Country: Mongolia. Website: www.ais-mn.com. United States
• DFK Group October 13, 2026 • [ ransomware, finance ] DFK Group was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-10-13. Sector: Professional Services. Country: Germany. Website: www.dfkgroup.de. Germany
• The Buckner Company, Inc. October 13, 2026 • [ ransomware, leak, finance ] The Buckner Company, Inc. was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-10-13. Sector: Other. Country: United States of America. Website: The Buckner Company, Inc.. [insurance] The Buckner Company, Inc. is a commercial property & casualty insurance brokerage headquartered in Salt Lake City, Utah, with a second office in Denver, Colorado. The exfiltrated dataset includes: 1,500+ plaintext credentials Chrome, Edge, and Google password exports from 8+ employees, plus 20+ password spreadsheets. Verified: kbennetts file alone contains 503 entries covering Hartford, Travelers, Chubb, Progressive, Sedgwick, mortgage portals, banking, and personal accounts. Employee SSNs for 150250 individuals W-2 reports across three entities (TBC, TBI, COL) spanning four tax years (20192022), plus 2023 W-2 and 1099-NEC reports. 316 individual Total Compensation PDFs and 3+ years of Paycom payroll rate history every employees salary, bonus, and benefits laid bare. A complete M&A acquisition pipeline 60+ prospect folders with due diligence, LOIs, valuations, and the full BroadStreet Partners closing package (52 exhibits including Disclosure Schedules, MIPA, corporate structure documents). 128 Outlook PST email archives spanning years of business correspondence. Corporate tax returns for Buckner (20042024), Citrus Insurance LLC (20212023), and Consolidated Agencies (20222023). 7 named individuals driver license scans and the Applied Epic insurance management database (Epic.mdf).
• PG Group (Pure Options) October 13, 2026 • [ ransomware, finance, retail ] PG Group (Pure Options) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-13. Sector: Financial Services. cannabis operator (US) Lansing, Michigan, USA | Complete directory database of a Michigan cannabis operator: password data for all 577 accounts; Working password corpus for dozens of staff and administrator accounts; Financial and contract backups: payroll reports, general ledgers, signed operating and lease agreements; Complete inventory of the shared data volume | [NOT PAID EXPOSED]
• Wolf & Sofsky GmbH December 10, 2025 • [ ransomware, manufacturing ] Wolf & Sofsky GmbH was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2025-12-10. Sector: Manufacturing. Country: Germany. Wolf & Sofsky GmbH is a construction company with a 75-year history, based in Zweibrcken, Germany. The company operates on highly complex projects and maintains a significant financial position. Critical Information We Possess Financial Data: Complete spectrum of financial information (reports, budgets, cost estimates), revealing project profitability, total revenue, cost structure, and financial stability of the company. Commercial Information: Contracts with clients, commercial offers, contract terms these form the foundation of Wolf & Sofsky's competitive advantage. Personal Data: Information about employees and clients (names, contacts, job titles, possibly salaries), which falls under GDPR legislation. Technical Assets: Technical plans, project drawings, architectural solutions the company's unique intellectual property. Strategic Plans: Business plans and strategic documents, revealing development directions, new markets, and future projects.
• Excess Baggage October 5, 2026 • [ ransomware, leak ] Excess Baggage was listed as a victim on the leak site of the ransomhouse ransomware group; the attack is estimated to have taken place on 2026-10-05. Sector: Transportation. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.excess-baggage.com. Baggage Express is a dynamic national and international excess baggage shipping company with a heritage stretching back some 25 years. We're dedicated to the task of moving the holdalls, cartons, computers, bikes, luggage and material lives of students, backpackers, expats and anyone else who has found themselves in the UK needing their belongings sent elsewhere. Flexibility is the key to the company's success, tailoring the company's baggage shipping services to the specific individual needs of the company's customers.
• Watermark Retirement Communities August 24, 2026 • [ ransomware, healthcare, leak ] Watermark Retirement Communities was listed as a victim on the leak site of the payoutsking ransomware group; the attack is estimated to have taken place on 2026-08-24. Sector: Healthcare. Country: United States of America. Website: watermarkcommunities.com. [AI generated] Watermark Retirement Communities is a U.S.-based senior living company that develops, manages, and operates retirement communities offering independent living, assisted living, memory care, and skilled nursing services. Headquartered in Tucson, Arizona, it operates numerous communities across the United States. The company belongs to the senior care and hospitality-adjacent real estate industry, focusing on resident-centered lifestyle programming and care.