-
Polaris Shipping (dry bulk shipping)
October 12, 2026
•
[ ransomware, financial ]
Polaris Shipping (dry bulk shipping) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: South Korea. Dry bulk shipping South Korea | Internal financial records (sales vouchers) and vessel operational reports | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
-
Portonave (container terminal operations)
October 12, 2026
•
[ ransomware, leak, manufacturing ]
Portonave (container terminal operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: Brazil. Port terminal operations Brazil | Terminal operating system database material and operational EDI archives | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
-
Santos Brasil (port operations)
October 12, 2026
•
[ ransomware, transportation ]
Santos Brasil (port operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: Brazil. Port terminal operations Brazil | Terminal operating system database scripts and operational records | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
-
brookslawfirm.com
October 12, 2026
•
[ ransomware, leak, healthcare ]
brookslawfirm.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Professional Services. Country: United States of America. Website: brookslawfirm.com. personal data 8200 client hippa etc
-
Engineers Contractors Fabricators Inc. (ECF)
October 12, 2026
•
[ ransomware, manufacturing, financial ]
Engineers Contractors Fabricators Inc. (ECF) was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Manufacturing. Country: United States of America. Website: https:ecfinc.net. ECF, Inc., a piping and insulation contractor specializing in the design and construction of terminals for the transshipment of liquid hydrocarbons such as asphalt, crude oil, and renewable fuels, has completely failed to ensure the security of its systems and is unwilling to compromise. Therefore, we are providing you with access to confidential information (proprietary pipeline designs, CAD drawings, customer lists, pricing models, financial data, employee information, and trade secrets), which violates the Complaints and Abuse Act (CFAA) and state civil liability laws and may result in injunctions, damages, fines, mandatory notices, class actions, loss of competitive advantage, and possibly termination of operations.
-
Greentech Environmental
October 12, 2026
•
[ ransomware, energy, manufacturing ]
Greentech Environmental was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Energy & Utilities. Website: https:greentechenv.com. Greentech Environmental LLC, a manufacturer of air purification systems using patented ODOGard and ARC technologies, has failed to fully secure and address the breach, and therefore we are publishing their confidential information such as (intellectual property/trade secrets, financial statements, employee data, operational/strategic plans, legal documents, corporate governance documents, and manufacturing drawings) that would violate the Defend Trade Secrets Act (CFAA) and state privacy laws, which would subject us to injunctive relief, treble damages, penalties, mandatory notification, class action lawsuits, loss of patent rights and competitive advantage, and possible business failure.
-
Rechtsanwaltskanzlei Dr. Bien
October 12, 2026
•
[ ransomware, leak, finance ]
Rechtsanwaltskanzlei Dr. Bien was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Professional Services. Country: Germany. Website: Rechtsanwaltskanzlei Dr. Bien. [law] Rechtsanwaltskanzlei Dr. Bien a specialist insolvency law firm in Hamm, NRW, appointed as insolvency administrator by 12 Amtsgerichte across Westfalen.
The exposed material includes:
2,387 WinSolvenz case databases each a Microsoft Access MDB containing the complete financial dossier of an insolvency debtor: creditor lists, claim amounts, distribution plans, asset inventories, court appointments, and bank account details.
492+ forced administration (Zwangsverwaltung) case files property addresses, tenant data, rent records, utility accounts, insurance details, court-directed property management reports.
80 GB MailStore email archive the firm's complete email history in MailStoreContainer-v1 format: attorney-client communications, court correspondence, creditor negotiations, debtor disclosures.
1.7 GB beA backup (besonderes elektronisches Anwaltspostfach) three MSSQL database backups containing every electronic communication between the firm and every German court.
35 employee records 25 former + ~10 current staff: contracts, salary, overtime, vacation, pension, disability status, termination agreements.
DATEV tax/accounting archives 33 directories of income tax backups, insolvency accounting, third-party mandates.
-
RingSide Creative
October 12, 2026
•
[ ransomware, technology ]
RingSide Creative was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Professional Services. Country: United States of America. Website: ringsidecreative.com.
-
hiqbio.com
October 2, 2026
hiqbio.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-10-02. Sector: Healthcare. Country: United States of America. Website: hiqbio.com. The company focuses on applying marine biotechnology to human health, animal health, functional foods and sustainable aquaculture. Its official website
-
AAA Architectural Hardware
October 12, 2026
•
[ ransomware, manufacturing ]
AAA Architectural Hardware was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Manufacturing. AAA Architectural Hardware Co. has been a leader in architectural hardware for over 80 years, o
ffering a wide range of products and services including keying systems, electronic security, an
d custom design requests.
We will upload 64gb of corporate data soon. Employee information (name, address and so on), pro
jects, clients and partners info, NDAs and so on.
-
MarieBelle New York
October 13, 2026
•
[ ransomware, retail, healthcare ]
MarieBelle New York was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-13. Sector: Retail & E-Commerce. Country: United States of America. confectionery & telehealth (US) New York, USA | Complete QuickBooks company file of a New York confectionery and luxury foods company: every transaction, customer, vendor and payroll record; Complete inventory database with product, cost and supplier data; Telehealth platform files and clinical system records from hospital partner infrastructure | [NOT PAID EXPOSED]
-
Zenidoc
October 13, 2026
•
[ ransomware, healthcare, technology ]
Zenidoc was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-10-13. Sector: Professional Services. a French healthcare software company that helps hospitals and medical professionals automate documentation, transcribe medical dictation, manage patient records, and streamline workflows using AI and voice-recognition technology. Data Content : - 605k Patient Data, Names, Phone, SSN and more. - Zenidoc Cloud Dev, Data, Prod, Support Chats, Source Codes and more.
-
Valode & Pistre
October 13, 2026
Valode & Pistre was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-10-13. Sector: Professional Services. Country: France. Website: v-p.com. Valode & Pistre is today one of Frances premier architecture and engineering firms. Based in Paris with a branch operating for over ten years in Beijing, the firm works on projects both in France and across the globe in Europe, Asia, the Middle East, North and Sub-Saharan Africa, Russia and Central America. Valode & Pistres practice focuses on very diverse scales, from developing comprehensive plans for brand new cities to designing furniture. It also includes very diverse briefs.
-
Admirals Trading
October 2, 2026
•
[ ransomware, retail, finance ]
Admirals Trading was listed as a victim on the leak site of the AuditTeam ransomware group; the attack is estimated to have taken place on 2026-10-02. Sector: Financial Services. Country: United Arab Emirates. Admirals Trading LLC (admirals.ae) is a Dubai-based food and beverage company under the Saudi conglomerate Rashed Abdul Rahman Al Rashed & Sons Group, with over 20 years of experience in the UAE market, specializing in the distribution of 60+ international and local F&B brands, food manufacturing and processing, and third-party logistics services across retail, food service, van sales, and wholesale channels, having recently expanded its operations from the UAE into Saudi Arabia while also running an online store called "Buy Like Chefs."
-
Guarufilme
October 13, 2026
•
[ ransomware, manufacturing ]
Guarufilme was listed as a victim on the leak site of the Vexy Ransomware ransomware group; the attack is estimated to have taken place on 2026-10-13. Sector: Other. Country: Brazil. Website: www.guarufilme.com.br. The company has operated in the packaging sector since 2006, manufacturing PVC and polyethylene films for domestic and industrial applications.
-
Matadero Frigorífico Avinyó
October 7, 2026
•
[ ransomware, manufacturing ]
Matadero Frigorfico Aviny was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-07. Sector: Agriculture and Food Production. Country: Spain. Website: www.avinyo.net.
-
Qatar National Import & Export
October 7, 2026
•
[ ransomware, retail, technology ]
Qatar National Import & Export was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-07. Sector: Other. Country: Qatar. Website: www.qnie.com.
-
Nantou Shiuhkuang Senior High School.
October 7, 2026
Nantou Shiuhkuang Senior High School. was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-10-07. Sector: Education. Country: Taiwan.
-
Lumabuilt
July 8, 2026
•
[ ransomware, manufacturing, leak ]
Lumabuilt was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-07-08. Sector: Manufacturing. Country: United States of America. Website: lumabuilt.com. [AI generated] N/A
I don't have reliable, verified information about a company called "Lumabuilt." Rather than provide potentially fabricated details about its industry, operations, or country, I'm flagging this as unknown. If you have additional context (website, location, sector) or if this is a fictional/test entity, please share details and I can help frame a description accordingly.
-
TheraCare
October 6, 2026
•
[ ransomware, healthcare, leak ]
TheraCare was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Healthcare. Country: United States of America. TheraCare is a multi-service healthcare, rehabilitation, developmental, and educational organization founded in 1991 and headquartered in New York. The company provides clinical and educational services for children, families, and clients of different ages across New York, New Jersey, Connecticut, and Maryland. Its key services include early intervention, autism services, preschool and school-age programs, speech-language therapy, occupational therapy, physical therapy, special education, behavioral services, and school district staffing. TheraCare focuses on helping children reach their developmental and educational potential through individualized clinical and educational programs. The organization emphasizes quality assurance, continuous improvement, regulatory compliance, and measurable service outcomes.
The company headquarters is located in 1133 Westchester Avenue, Suite N-230, White Plains, NY 10604, United States. 201-500 Employees
