-
Gate | Crypto Exchange
October 7, 2026
Gate | Crypto Exchange was listed as a victim on the leak site of the BYOD ransomware group; the attack is estimated to have taken place on 2026-10-07. Sector: Financial Services. Country: Singapore. 12 Million Users, Phone numbers, Nicknames, Balance/VIP Tier List, 2FA Indicator (differentiates, Passkey/Auth) Region, UIDs, Gender, Position, AUM, Profit Rates, Verification Status, City, Strategy, Account Age, Profile Key, and SO much more. This is terrible, for you guys of course, we wonder what will happen if this ever gets out onto the corners of the internet it shouldn't. Anyways, you know where to find us (contact tab). We will take you down when communication has been established between our team and yours.
-
Petrosul Distribuidora, Transportadora e Comércio de Combustíveis Ltda.
October 7, 2026
Petrosul Distribuidora, Transportadora e Comrcio de Combustveis Ltda. was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-10-07. Sector: Energy & Utilities. Country: Brazil. Website: petrosul.com.br. Petrosul is a Brazilian company established in 1994, specializing in fuel storage terminal operations since 2015. The company offers state-of-the-art infrastructure, real-time control, and efficient management to ensure quality service. Its primary clients include businesses in need of reliable fuel storage solutions. Petrosul operates terminals in Sorocaba, Paulnia, and Senador Canedo.
-
Deese and Locklear Chiropractic Center
July 12, 2026
•
[ ransomware, healthcare ]
Deese and Locklear Chiropractic Center was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-07-12. Sector: Healthcare. Country: United States of America. [AI generated] N/A
I don't have reliable, verifiable information about a specific company called "Deese and Locklear Chiropractic Center." While this sounds like it could plausibly be a small, local chiropractic practice (based on the naming convention, likely in the United States, possibly the Carolinas given the surname "Locklear"), I cannot confirm its existence, operations, or details with confidence, and providing fabricated information would not be appropriate for threat intelligence purposes.
-
Sociedad Portuaria Mardique S.A.
July 3, 2026
•
[ ransomware, leak ]
Sociedad Portuaria Mardique S.A. was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-07-03. Sector: Transportation. Country: Colombia. Website: spmardique.com.
-
yalebooks.yale.edu
October 5, 2026
yalebooks.yale.edu was listed as a victim on the leak site of the Scarlettgroup ransomware group; the attack is estimated to have taken place on 2026-10-05. Sector: Education. Country: United States of America. Website: yalebooks.yale.edu. Yale University Presss Yale Books website showcases and sells scholarly, academic, and general-interest books.
-
simplexengg.in
October 8, 2026
•
[ ransomware, manufacturing ]
simplexengg.in was listed as a victim on the leak site of the Eclipse ransomware group; the attack is estimated to have taken place on 2026-10-08. Sector: Manufacturing. Country: India. Website: simplexengg.in.
-
MCM Telecom
October 8, 2026
•
[ ransomware, technology ]
MCM Telecom was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-08. Sector: Technology. Country: Mexico. Website: www.mcmtelecom.com.
-
O'Hagan Meyer
October 8, 2026
•
[ ransomware, finance ]
O'Hagan Meyer was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-10-08. Sector: Professional Services. Website: ohaganmeyer.com. U.S. national law firm focused primarily on business litigation and labor & employment law. It was fou
-
Vietnam SuperPort
July 20, 2026
•
[ ransomware, manufacturing, technology ]
Vietnam SuperPort was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-07-20. Sector: Transportation. Country: Vietnam. Website: superport.vn. [AI generated] N/A
I don't have verified, reliable information about a specific company called "Vietnam SuperPort." There is a known logistics project called "Vietnam SuperPort" associated with YCH Group (a Singapore-based logistics company) and intended to be a smart logistics hub in Vinh Phuc province, Vietnam, but I cannot confirm sufficient reliable details to provide an accurate factual description without risking inaccuracy.
-
Hagiva Yh
October 9, 2026
•
[ ransomware, technology ]
Hagiva Yh was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-09. Country: Israel. Website: www.hagiva.co.il.
-
RealManage
October 9, 2026
•
[ ransomware, finance, technology ]
RealManage was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-10-09. Sector: Professional Services. Country: United States of America. RealManage RealManage is a privately held, tech-enabled community association management company headquartered in Plano, Texas. Founded in 2002 and backed by American Securities, the company has grown into one of the largest and fastest-growing community association management firms in the United States, having been recognized on the Inc.1.84 TBThe tax, banking and debt secrets of hundreds of American HOAs and thousands of homeowners - complete with SSNs, account numbers and signatures.Genuine W-9 forms with Social Security numbers, addresses and signatures; IRS 1099-MISC/NEC e-file transmissions for 20142025 - thousands of vendor TINs/SSNsHomeowners' banking keys: ACH debit files with routing and account numbers, USAA brokerage statements, signed bank signature cardsPeople's debts by name: assessments through September 2026, bankruptcies, late-fee waivers, hardship letters from debtors begging for payment plansPersonal documents: HUD-1 home purchase settlements (names, prices, mortgages), signed waivers with addresses, HOA election ballots with voter namesFull SQL Server databases: RM_Warehouse, RM_Sales, RM_Portals, CiraNetIdentity (portal accounts), CiraBooks_GL (general ledger)Mail and document flow: CiraMail$, CiraDocs$, SalesDocs$ More
-
Design Electric
October 9, 2026
•
[ ransomware, manufacturing, leak ]
Design Electric was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-10-09. Sector: Manufacturing. Design Electric is a company specializing in industrial, government & transportation electrical
in St. Cloud, MN.
We will upload 15gb of corporate data soon. Detailed employee information (passports, DLs of mo
re than 100 employees, about 350 SSN numbers, addresses, phones and so on), projects, lots of c
ontacts, client info, NDA and so on.
-
iDentalSoft
October 9, 2026
•
[ ransomware, healthcare, technology ]
iDentalSoft was listed as a victim on the leak site of the termite ransomware group; the attack is estimated to have taken place on 2026-10-09. Sector: Healthcare. Country: Brazil. Website: www.identalsoft.com. iDentalSoft offers a cloud-based dental practice management software that is secure, modern, and designed for efficiency. The software provides comprehensive features such as smart scheduling, advanced clinical charting, and patient communication tools, making it suitable for both single and multi-practice management.
-
Ladrillera Mecanizada
October 9, 2026
•
[ ransomware, manufacturing ]
Ladrillera Mecanizada was listed as a victim on the leak site of the arcusmedia ransomware group; the attack is estimated to have taken place on 2026-10-09. Sector: Manufacturing. Country: Mexico. Website: ladrillera.mx. ladrillera.mx/Ladrillera Mecanizada is the largest producer and exporter of 100% natural Deadline: 2026-10-16 12:44:00.000000
-
mblllp
October 9, 2026
•
[ ransomware, finance ]
mblllp was listed as a victim on the leak site of the arcusmedia ransomware group; the attack is estimated to have taken place on 2026-10-09. Country: Canada. Website: mblllp.ca. mblllp.caOur objective at MBL LLP is simple: To always exceed the expectations of our cli Deadline: 2026-10-16 12:44:00.000000
-
AETHOS
October 9, 2026
•
[ ransomware, leak, technology ]
AETHOS was listed as a victim on the leak site of the arcusmedia ransomware group; the attack is estimated to have taken place on 2026-10-09. Country: Brazil. Website: aethosconsultoria.com.br. Aethos Sistemas offers a comprehensive suite of software solutions designed to streamline Deadline: 2026-10-16 12:44:00.000000
-
Melchioni Spa
October 9, 2026
•
[ ransomware, manufacturing ]
Melchioni Spa was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-09. Sector: Manufacturing. Country: Italy. Website: www.melchioni.com.
-
Imperial Diamond Jewellery
October 9, 2026
Imperial Diamond Jewellery was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-10-09. Sector: Retail & E-Commerce. Engaged in the sale of jewelry made of precious metals,
diamond jewelry and the manufacture of custom jewelry.
Country: Hong Kong, China. Year of foundation: 2011
Financial documents, personal and customer data. [Sector: Manufacturing, Finance]
-
lopay
October 9, 2026
•
[ ransomware, finance, technology ]
lopay was listed as a victim on the leak site of the Black X ransomware group; the attack is estimated to have taken place on 2026-10-09. Sector: Financial Services. Country: United Kingdom of Great Britain and Northern Ireland. Website: lopay.com. Lopay is a UK-based fintech company that provides a payment platform enabling small and medium-sized enterprises (SMEs) and sole traders to accept credit card and mobile payments, as well as manage their sales and settlements. This includes financial information belonging to client companies, such as customer payment details, card information, banking data, transaction history, and payment terminal information.
-
Polishing Proz
October 6, 2026
•
[ ransomware, retail ]
Polishing Proz was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Other. Country: United States of America. Website: polishingproz.com. polishingproz.com zoominfo.com/c/polishing-proz-inc/409891680 Polishing Proz LLC is a small, family-owned marble and natural stone care company based in Centennial, Colorado (Denver metro), founded around 20082012 with 13+ years of experience. It generates estimated revenue of $200K$500K/year with just ~36 employees, led by owner-founder James Medina. Core services include marble crystallization, polishing, grinding, sealing, grout cleaning, and full restoration of marble, granite, travertine, limestone, and polished concrete for both residential and commercial clients. The company serves the greater Denver area with free estimates and a hands-on, owner-operated approach. It specializes in high-end restoration work such as marble fireplaces, countertops, staircases, and commercial floors. With minimal online presence and zero external funding, Polishing Proz competes against larger stone care franchises (ServPro, Stanley Steemer, local stone specialists) through reputation