Recent Breaches
-
October 12, 2026 • Samudera (coastal shipping operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: Indonesia. Coastal shipping Indonesia | Charter party records and dangerous-goods operational documentation | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
-
October 12, 2026 • GCS Kuwait (port community system operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: Kuwait. Port community IT Kuwait | Container movement records and operational EDI archives | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
-
October 12, 2026 • BNCT Busan New Container Terminal was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: South Korea. Port terminal operations South Korea | Operational EDI archives and internal database scripts | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
-
October 12, 2026 • Tsuneishi / Kambara Kisen (shipbuilding and ship management) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Manufacturing. Country: Japan. Shipbuilding / ship management Japan | Operational EDI archives and commercial contract records | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
-
October 12, 2026 • Polaris Shipping (dry bulk shipping) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: South Korea. Dry bulk shipping South Korea | Internal financial records (sales vouchers) and vessel operational reports | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
-
October 12, 2026 • Portonave (container terminal operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: Brazil. Port terminal operations Brazil | Terminal operating system database material and operational EDI archives | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
-
October 12, 2026 • Santos Brasil (port operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: Brazil. Port terminal operations Brazil | Terminal operating system database scripts and operational records | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
-
October 12, 2026 • brookslawfirm.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Professional Services. Country: United States of America. Website: brookslawfirm.com. personal data 8200 client hippa etc
-
October 12, 2026 • Engineers Contractors Fabricators Inc. (ECF) was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Manufacturing. Country: United States of America. Website: https:ecfinc.net. ECF, Inc., a piping and insulation contractor specializing in the design and construction of terminals for the transshipment of liquid hydrocarbons such as asphalt, crude oil, and renewable fuels, has completely failed to ensure the security of its systems and is unwilling to compromise. Therefore, we are providing you with access to confidential information (proprietary pipeline designs, CAD drawings, customer lists, pricing models, financial data, employee information, and trade secrets), which violates the Complaints and Abuse Act (CFAA) and state civil liability laws and may result in injunctions, damages, fines, mandatory notices, class actions, loss of competitive advantage, and possibly termination of operations.
-
October 12, 2026 • Greentech Environmental was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Energy & Utilities. Website: https:greentechenv.com. Greentech Environmental LLC, a manufacturer of air purification systems using patented ODOGard and ARC technologies, has failed to fully secure and address the breach, and therefore we are publishing their confidential information such as (intellectual property/trade secrets, financial statements, employee data, operational/strategic plans, legal documents, corporate governance documents, and manufacturing drawings) that would violate the Defend Trade Secrets Act (CFAA) and state privacy laws, which would subject us to injunctive relief, treble damages, penalties, mandatory notification, class action lawsuits, loss of patent rights and competitive advantage, and possible business failure.
-
October 12, 2026 • Rechtsanwaltskanzlei Dr. Bien was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Professional Services. Country: Germany. Website: Rechtsanwaltskanzlei Dr. Bien. [law] Rechtsanwaltskanzlei Dr. Bien a specialist insolvency law firm in Hamm, NRW, appointed as insolvency administrator by 12 Amtsgerichte across Westfalen. The exposed material includes: 2,387 WinSolvenz case databases each a Microsoft Access MDB containing the complete financial dossier of an insolvency debtor: creditor lists, claim amounts, distribution plans, asset inventories, court appointments, and bank account details. 492+ forced administration (Zwangsverwaltung) case files property addresses, tenant data, rent records, utility accounts, insurance details, court-directed property management reports.
80 GB MailStore email archive the firm's complete email history in MailStoreContainer-v1 format: attorney-client communications, court correspondence, creditor negotiations, debtor disclosures. 1.7 GB beA backup (besonderes elektronisches Anwaltspostfach) three MSSQL database backups containing every electronic communication between the firm and every German court. 35 employee records 25 former + ~10 current staff: contracts, salary, overtime, vacation, pension, disability status, termination agreements. DATEV tax/accounting archives 33 directories of income tax backups, insolvency accounting, third-party mandates. -
October 12, 2026 • RingSide Creative was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Professional Services. Country: United States of America. Website: ringsidecreative.com.
-
October 2, 2026 hiqbio.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-10-02. Sector: Healthcare. Country: United States of America. Website: hiqbio.com. The company focuses on applying marine biotechnology to human health, animal health, functional foods and sustainable aquaculture. Its official website
-
October 12, 2026 • AAA Architectural Hardware was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Manufacturing. AAA Architectural Hardware Co. has been a leader in architectural hardware for over 80 years, o ffering a wide range of products and services including keying systems, electronic security, an d custom design requests. We will upload 64gb of corporate data soon. Employee information (name, address and so on), pro jects, clients and partners info, NDAs and so on.
-
October 13, 2026 • MarieBelle New York was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-13. Sector: Retail & E-Commerce. Country: United States of America. confectionery & telehealth (US) New York, USA | Complete QuickBooks company file of a New York confectionery and luxury foods company: every transaction, customer, vendor and payroll record; Complete inventory database with product, cost and supplier data; Telehealth platform files and clinical system records from hospital partner infrastructure | [NOT PAID EXPOSED]
-
October 13, 2026 • Zenidoc was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-10-13. Sector: Professional Services. a French healthcare software company that helps hospitals and medical professionals automate documentation, transcribe medical dictation, manage patient records, and streamline workflows using AI and voice-recognition technology. Data Content : - 605k Patient Data, Names, Phone, SSN and more. - Zenidoc Cloud Dev, Data, Prod, Support Chats, Source Codes and more.
-
October 13, 2026 Valode & Pistre was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-10-13. Sector: Professional Services. Country: France. Website: v-p.com. Valode & Pistre is today one of Frances premier architecture and engineering firms. Based in Paris with a branch operating for over ten years in Beijing, the firm works on projects both in France and across the globe in Europe, Asia, the Middle East, North and Sub-Saharan Africa, Russia and Central America. Valode & Pistres practice focuses on very diverse scales, from developing comprehensive plans for brand new cities to designing furniture. It also includes very diverse briefs.
-
October 2, 2026 • Admirals Trading was listed as a victim on the leak site of the AuditTeam ransomware group; the attack is estimated to have taken place on 2026-10-02. Sector: Financial Services. Country: United Arab Emirates. Admirals Trading LLC (admirals.ae) is a Dubai-based food and beverage company under the Saudi conglomerate Rashed Abdul Rahman Al Rashed & Sons Group, with over 20 years of experience in the UAE market, specializing in the distribution of 60+ international and local F&B brands, food manufacturing and processing, and third-party logistics services across retail, food service, van sales, and wholesale channels, having recently expanded its operations from the UAE into Saudi Arabia while also running an online store called "Buy Like Chefs."
-
October 13, 2026 • Guarufilme was listed as a victim on the leak site of the Vexy Ransomware ransomware group; the attack is estimated to have taken place on 2026-10-13. Sector: Other. Country: Brazil. Website: www.guarufilme.com.br. The company has operated in the packaging sector since 2006, manufacturing PVC and polyethylene films for domestic and industrial applications.
-
October 7, 2026 • Matadero Frigorfico Aviny was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-07. Sector: Agriculture and Food Production. Country: Spain. Website: www.avinyo.net.