-
bayer
October 9, 2026
•
[ ransomware, healthcare ]
bayer was listed as a victim on the leak site of the Black X ransomware group; the attack is estimated to have taken place on 2026-10-09. Sector: Healthcare. Country: Germany. Website: www.bayer.com/en. Bayer is a global life science company with more than 160 years of innovation behind us. Operating at the intersection of health and nutrition, we are committed to addressing some of society's most pressing challenges and creating lasting value for people, communities, and the world around us.
-
Tec Imports
July 10, 2025
•
[ ransomware, technology, manufacturing ]
Tec Imports was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2025-07-10. Sector: Other. Country: Brazil. Tec Imports group offers a complete range of logistics solutions, from
coordinating shipments from the manufacturer's plant to the end
customer, whether by sea, air, or road.
Commercial Department - contact@dorte.com.br
Importation - alexandre@dorte.com.br
Export - stefani@dorte.com.br
Hospitalar Cosmtico - ricardolinhares@dorte.com.br
Professional Hairdressing Machines -ricardoamaral@dorte.com.br
Tec Zipper - diogo@teczipper.com.br
Phone/Fax: +55 11 3809-6870
Phone/Fax: 55 27 3318-0888
-
Wavecrest HFA
July 7, 2026
•
[ ransomware, finance ]
Wavecrest HFA was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-07-07. Sector: Financial Services. Country: United States of America. 12,143 Files, 267 Folders
23,991,067,648 bytes
-
Riviera Healthcare Center
October 7, 2026
•
[ ransomware, healthcare ]
Riviera Healthcare Center was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-10-07. Sector: Healthcare. Country: United States of America. Website: https:rivierahealthcare.com. Riviera Healthcare Center is a for-profit skilled nursing facility in operation for over 50 years. It provides 24-hour nursing and rehabilitation services. Due to negligence and poor security practices, confidential data was exposed, including patient protected health information (PHI)names, diagnoses, medical histories, fall/fracture and treatment information, payment records, and employee/HR data. This breach violates HIPAA and the California CMIA (and potentially the CCPA/CPRA) and will result in mandatory breach notification, federal and state fines, civil lawsuits, corrective action plans, and significant reputational and financial damage.
-
RÉSO
October 7, 2026
RSO was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-10-07. Sector: Technology. Country: France. Website: www.reso.fr. Rso specializes in secondary works, offering a wide range of products including ceilings, partitions, floors, technical floors, and facades. They provide modular and dry partitions, acoustic products, and various accessories, ensuring a comprehensive solution for construction needs. With numerous agencies across France and a team of specialists trained in the latest innovations, Rso serves a diverse clientele with thousands of available products. Their commitment to quality and service is reflected in their partnerships and significant projects.
676 GB of confidential information about their customers, partners, employees were stolen. The entire network was locked including nearly 8TB of Veeam backups.
The company has failed to reach for an agreement.
-
Gate | Crypto Exchange
October 7, 2026
Gate | Crypto Exchange was listed as a victim on the leak site of the BYOD ransomware group; the attack is estimated to have taken place on 2026-10-07. Sector: Financial Services. Country: Singapore. 12 Million Users, Phone numbers, Nicknames, Balance/VIP Tier List, 2FA Indicator (differentiates, Passkey/Auth) Region, UIDs, Gender, Position, AUM, Profit Rates, Verification Status, City, Strategy, Account Age, Profile Key, and SO much more. This is terrible, for you guys of course, we wonder what will happen if this ever gets out onto the corners of the internet it shouldn't. Anyways, you know where to find us (contact tab). We will take you down when communication has been established between our team and yours.
-
Petrosul Distribuidora, Transportadora e Comércio de Combustíveis Ltda.
October 7, 2026
Petrosul Distribuidora, Transportadora e Comrcio de Combustveis Ltda. was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-10-07. Sector: Energy & Utilities. Country: Brazil. Website: petrosul.com.br. Petrosul is a Brazilian company established in 1994, specializing in fuel storage terminal operations since 2015. The company offers state-of-the-art infrastructure, real-time control, and efficient management to ensure quality service. Its primary clients include businesses in need of reliable fuel storage solutions. Petrosul operates terminals in Sorocaba, Paulnia, and Senador Canedo.
-
Deese and Locklear Chiropractic Center
July 12, 2026
•
[ ransomware, healthcare ]
Deese and Locklear Chiropractic Center was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-07-12. Sector: Healthcare. Country: United States of America. [AI generated] N/A
I don't have reliable, verifiable information about a specific company called "Deese and Locklear Chiropractic Center." While this sounds like it could plausibly be a small, local chiropractic practice (based on the naming convention, likely in the United States, possibly the Carolinas given the surname "Locklear"), I cannot confirm its existence, operations, or details with confidence, and providing fabricated information would not be appropriate for threat intelligence purposes.
-
Sociedad Portuaria Mardique S.A.
July 3, 2026
•
[ ransomware, leak ]
Sociedad Portuaria Mardique S.A. was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-07-03. Sector: Transportation. Country: Colombia. Website: spmardique.com.
-
yalebooks.yale.edu
October 5, 2026
yalebooks.yale.edu was listed as a victim on the leak site of the Scarlettgroup ransomware group; the attack is estimated to have taken place on 2026-10-05. Sector: Education. Country: United States of America. Website: yalebooks.yale.edu. Yale University Presss Yale Books website showcases and sells scholarly, academic, and general-interest books.
-
simplexengg.in
October 8, 2026
•
[ ransomware, manufacturing ]
simplexengg.in was listed as a victim on the leak site of the Eclipse ransomware group; the attack is estimated to have taken place on 2026-10-08. Sector: Manufacturing. Country: India. Website: simplexengg.in.
-
MCM Telecom
October 8, 2026
•
[ ransomware, technology ]
MCM Telecom was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-08. Sector: Technology. Country: Mexico. Website: www.mcmtelecom.com.
-
O'Hagan Meyer
October 8, 2026
•
[ ransomware, finance ]
O'Hagan Meyer was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-10-08. Sector: Professional Services. Website: ohaganmeyer.com. U.S. national law firm focused primarily on business litigation and labor & employment law. It was fou
-
Vietnam SuperPort
July 20, 2026
•
[ ransomware, manufacturing, technology ]
Vietnam SuperPort was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-07-20. Sector: Transportation. Country: Vietnam. Website: superport.vn. [AI generated] N/A
I don't have verified, reliable information about a specific company called "Vietnam SuperPort." There is a known logistics project called "Vietnam SuperPort" associated with YCH Group (a Singapore-based logistics company) and intended to be a smart logistics hub in Vinh Phuc province, Vietnam, but I cannot confirm sufficient reliable details to provide an accurate factual description without risking inaccuracy.
-
Hagiva Yh
October 9, 2026
•
[ ransomware, technology ]
Hagiva Yh was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-09. Country: Israel. Website: www.hagiva.co.il.
-
RealManage
October 9, 2026
•
[ ransomware, finance, technology ]
RealManage was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-10-09. Sector: Professional Services. Country: United States of America. RealManage RealManage is a privately held, tech-enabled community association management company headquartered in Plano, Texas. Founded in 2002 and backed by American Securities, the company has grown into one of the largest and fastest-growing community association management firms in the United States, having been recognized on the Inc.1.84 TBThe tax, banking and debt secrets of hundreds of American HOAs and thousands of homeowners - complete with SSNs, account numbers and signatures.Genuine W-9 forms with Social Security numbers, addresses and signatures; IRS 1099-MISC/NEC e-file transmissions for 20142025 - thousands of vendor TINs/SSNsHomeowners' banking keys: ACH debit files with routing and account numbers, USAA brokerage statements, signed bank signature cardsPeople's debts by name: assessments through September 2026, bankruptcies, late-fee waivers, hardship letters from debtors begging for payment plansPersonal documents: HUD-1 home purchase settlements (names, prices, mortgages), signed waivers with addresses, HOA election ballots with voter namesFull SQL Server databases: RM_Warehouse, RM_Sales, RM_Portals, CiraNetIdentity (portal accounts), CiraBooks_GL (general ledger)Mail and document flow: CiraMail$, CiraDocs$, SalesDocs$ More
-
Design Electric
October 9, 2026
•
[ ransomware, manufacturing, leak ]
Design Electric was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-10-09. Sector: Manufacturing. Design Electric is a company specializing in industrial, government & transportation electrical
in St. Cloud, MN.
We will upload 15gb of corporate data soon. Detailed employee information (passports, DLs of mo
re than 100 employees, about 350 SSN numbers, addresses, phones and so on), projects, lots of c
ontacts, client info, NDA and so on.
-
iDentalSoft
October 9, 2026
•
[ ransomware, healthcare, technology ]
iDentalSoft was listed as a victim on the leak site of the termite ransomware group; the attack is estimated to have taken place on 2026-10-09. Sector: Healthcare. Country: Brazil. Website: www.identalsoft.com. iDentalSoft offers a cloud-based dental practice management software that is secure, modern, and designed for efficiency. The software provides comprehensive features such as smart scheduling, advanced clinical charting, and patient communication tools, making it suitable for both single and multi-practice management.
-
Ladrillera Mecanizada
October 9, 2026
•
[ ransomware, manufacturing ]
Ladrillera Mecanizada was listed as a victim on the leak site of the arcusmedia ransomware group; the attack is estimated to have taken place on 2026-10-09. Sector: Manufacturing. Country: Mexico. Website: ladrillera.mx. ladrillera.mx/Ladrillera Mecanizada is the largest producer and exporter of 100% natural Deadline: 2026-10-16 12:44:00.000000
-
mblllp
October 9, 2026
•
[ ransomware, finance ]
mblllp was listed as a victim on the leak site of the arcusmedia ransomware group; the attack is estimated to have taken place on 2026-10-09. Country: Canada. Website: mblllp.ca. mblllp.caOur objective at MBL LLP is simple: To always exceed the expectations of our cli Deadline: 2026-10-16 12:44:00.000000