Recent Breaches
-
October 6, 2026 • Ansonia Public Schools was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Education. Country: United States of America. Website: ansonia.org. ansonia.org zoominfo.com/c/ansonia-public-schools/6671532 Ansonia Public Schools is a public PK12 school district in Ansonia, Connecticut (Naugatuck Valley), serving ~2,3322,404 students across 4 schools with 166 teachers (14.5:1 ratio, avg salary $99K) under Superintendent Dr. Joseph DiBacco. Annual BOE budget is $39.5M (2026-27), spending $19,869 per pupil ($2,185 below CT state average), funded 54% by state aid, 34% local property taxes, and 13% federal. The district faces severe academic challenges: math proficiency at just 1215% (state: 41%) and reading at 2425% (state: 51%), ranking it in the bottom 50% of Connecticut districts (1/10 rating). Demographics are high-need 80% minority enrollment, 63.6% on free/reduced meals, and 23.1% chronic absenteeism. Graduation rate is 85.7% (state: 88.9%), with strong positives in college-prep course-taking (95.7%) and on-track graduation (92.5%). Financially fragile: the city has been a "distressed municipality" since 2010, fund balance
-
October 6, 2026 • Santee School District Foundation was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Education. Country: United States of America. Website: santeesd.net. santeesd.net zoominfo.com/c/santee-school-district-foundation/153059622 Santee School District is a public K8 school district founded in 1891 in Santee, California (San Diego County), operating 9 schools serving approximately 5,9225,990 students (ages 214, including Pre-K/TK). It employs ~640846 FTE staff (355 certificated teachers + 488 classified staff) under Superintendent Dr. Kristin Baranski, with a student-teacher ratio of ~23:1. Annual budget: ~$99.3M expenditures vs $90.7M revenue (2025-26), funded 77% by the state (LCFF), with ~$15,80018,900 spent per student. Demographics: 49% White, 31% Hispanic, 20.5% special education, 37% socio-economically disadvantaged, 3640 languages spoken. The district is known for its innovative PreschoolGrade 8 model and 1:1 iPad program, with strong SPED and Prop 28 arts funding. However, it faces serious financial headwinds: enrollment declining ~5% (projected 5,778 by 2026-27), expenditures exceeding revenue, reserve dropping from 16.5%
-
October 6, 2026 • PIR Sales was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Other. Country: United States of America. Website: pirsales.com. pirsales.com zoominfo.com/c/pir-sales-inc/84001098 PIR Sales, Inc. is a private, independent manufacturers' representative firm founded in 1992 in Chandler, Arizona, serving plumbing, irrigation, waterworks, fire/life safety, and HVAC markets across Arizona, Southern Nevada, New Mexico, and El Paso TX. It generates estimated annual revenue of $2023M with only ~1719 employees (9 outside + 8 inside sales) an exceptional ~$1.21.35M revenue per employee. The firm represents 40+ premium brands including A.O. Smith, Watts Water Technologies, Bradley Corp., Panasonic HVAC, Stiebel Eltron, and Highland Tank, backed by 25+ year manufacturer relationships and a 27,000 sq ft warehouse offering 24/7 commercial water heater pickup. It serves 20 distribution channels (architects, engineers, contractors, municipalities, utilities) and employs dedicated Specification Consultants for architects in both Arizona and Las Vegas. Led by President Bob Saylor (29 years at PIR) and VP Craig Addington
-
October 5, 2026 • Saskatoon Tribal Council was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-05. Sector: Government & Defense. Country: Canada. Website: sktc.sk.ca. sktc.sk.ca zoominfo.com/c/saskatoon-tribal-council-inc/215335121 Saskatoon Tribal Council (STC) is a non-profit tribal council founded in 1982 in Saskatoon, Saskatchewan (Treaty 6), uniting 7 First Nations with 14,000+ members. Led by Tribal Chief Mark Arcand (since 2017), STC employs 500600+ people across 5 corporations (health, housing, urban services, investments, community development). Head-body revenue is $1417M/year (federal ISC funding being the largest source), while the whole group is estimated at ~$45M. Its biggest asset is a stake in Dakota Dunes Casino & Resort ($70M facility, 620+ slots), with its development arm DDCDC generating a record $10.1M gaming revenue in 2023/24 (+33% YoY) and $75M reinvested into communities over 10 years (5,300+ projects). Key operations: 453+ housing units (1,068 waitlisted applications), an Emergency Wellness Centre (2,501 admissions), 17,460 health clients, and employment services placing 276 people in jobs. STC holds Accreditation Canada.
-
October 10, 2026 • Glenhardie Country Club was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-10. Sector: Hospitality. Country: United States of America. Website: www.glenhardiecc.com.
-
October 10, 2026 • ACI Proyectos SAS was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-10. Sector: Other. Country: Colombia. Website: www.aciproyectos.com.
-
October 10, 2026 • Royal Thai Air Force was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-10. Sector: Government & Defense. Country: Thailand. Website: rtaf.mi.th. rtaf.mi.th is the official portal of the Royal Thai Air Force, one of Asia's oldest air forces (founded November 2, 1913; independent since 1937), with ~46,000 personnel and 11 combat wings, now running a modern Odoo-based portal publishing financial reports, procurement plans, and White Papers on its "Unbeatable Air Force" roadmap to 2037. Its fleet spans 46 F-16s, 11 Gripen C/D, 13 F-5TH Super Tigris, Saab 340 Erieye AEW&C, C-130s, and a VIP fleet including an ex-Thai Airways A340-500. In July 2025 the RTAF fought its first combat since 1988 in the Thai-Cambodian border conflict, with its Gripens achieving the type's first-ever combat weapons launch. The centerpiece modernization is the Gripen E/F program: Thailand signed the $550M "Peace Burapha 1" contract in August 2025 first in APAC with deliveries from 2029 and 8 more jets sought toward a 12-aircraft squadron by 2037. Air Chief Marshal Seksan Kantha, the 31st commander since October 2025
-
October 10, 2026 • TEXMA International Co., Ltd was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-10-10. Sector: Manufacturing. Country: Taiwan. Website: texma.com.tw. TEXMA International Co., Ltd. is a leading Taiwanese apparel manufacturer specializing in high-quality women's woven apparel, activewear, and sportswear. Founded in 1975, the company operates under a "Taiwan orders, global production" business model, supplying some of the world's most recognizable fashion brands.
-
August 3, 2026 • Goccia S.p.A. was listed as a victim on the leak site of the Majinahanashi ransomware group; the attack is estimated to have taken place on 2026-08-03. Sector: Manufacturing. Country: Italy. Website: gocciaspa.com. Goccia S.p.A. is a major Italian jewelry corporation headquartered in Cocconato, Piedmont, which owns the well-known retail chain and popular online store JOY Gioielli. The company is an official d...
-
July 8, 2026 WONDR DIAMONDS & D GEM MOUNT was listed as a victim on the leak site of the Majinahanashi ransomware group; the attack is estimated to have taken place on 2026-07-08. Sector: Retail & E-Commerce. Country: India. Website: wondrdiamonds.com. - Tally Backups - CRM Backups Wondr Diamonds is a lab-grown diamond and fine jewelry retailer operating in the United States and India. Gem Mount (D Gem Mount) is an Indian diamond jewellery manufa...
-
July 2, 2026 • KT RESTAURANT was listed as a victim on the leak site of the Majinahanashi ransomware group; the attack is estimated to have taken place on 2026-07-02. Sector: Hospitality. Website: ktrestaurants.com. KT Restaurant is a Thai restaurant operator, owner of the Santa Fe steakhouse chain in Bangkok, Thailand. The company was acquired by Boon Rawd Brewery (Singha Corporation) one of Thailand's larg...
-
July 2, 2026 • BONJOUR GROUP was listed as a victim on the leak site of the Majinahanashi ransomware group; the attack is estimated to have taken place on 2026-07-02. Sector: Other. Country: India. Website: bonjourgroup.net. Bonjour Group (brand BONJOUR) is India's largest socks manufacturing company. Founded in 1988. Headquartered in Greater Noida, Uttar Pradesh, India. Legal entity: Bonjour Group (privately held) Fou...
-
October 11, 2026 Charles E. Tabor AAL LLC was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-10-11. Sector: Other. Country: United States of America. Charles E. Tabor AAL LLC 96,456 files / ~114.5 GBSettlement checks 2026: $600,000 (USAA / Hailey), $587,500 (Travelers / Young), $350,000 (Caddo Parish School Board / Hoffman), $50,000 (USAA UM / Paul).Complete client database - PII for all cases spanning years, consolidated in a single file.Hospital and insurance scans across dozens of cases.Medical scans and HIPAA authorization forms.Driver's licenses and IDs of minor victims.Tax forms containing SSNs.Louisiana state death certificate (evidence item 'plaintiff's exhibit D7').Settlement artifacts: endorsement authorizations with signature lines (2026), signed releases, HIPAA authorizations.Scans of large settlement checks bearing signatures and MICR lines - a ready-made toolkit for check fraud; includes the $350,000 check from the high-profile child case Hoffman. More
-
October 11, 2026 • Friendship Christian School was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-11. Sector: Education. Country: United States of America. Website: www.friendshipchristian.net.
-
October 11, 2026 • Company #20 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-11. cannabis operator Michigan, USA | [PENDING EXPOSURE: data publishes 2026-10-13 09:40 UTC]
-
October 11, 2026 • Company #21 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-11. neurology practice New South Wales, Australia | [PENDING EXPOSURE: data publishes 2026-10-13 12:37 UTC]
-
October 12, 2026 • Canadian Mennonite University (CMU) was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Education. Country: Canada. Website: cmu.ca. Canadian Mennonite University (CMU) is a Christian institution in Winnipeg, Manitoba, offering undergraduate degrees in various fields such as arts, business, music, and sciences, along with three graduate degree programs. The university focuses on a small community environment that fosters academic, social, and spiritual growth, welcoming students from diverse backgrounds and beliefs. CMU emphasizes preparing students as skilled problem solvers and leaders committed to positive change in their communities and beyond. It offers financial aid and supports approximately 50% of its students through scholarships and bursaries
-
September 15, 2026 • PIC GROUP, INC was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-09-15. Sector: Other. Country: United States of America. Website: picgroupinc.com. PIC Group, Inc. is dedicated to delivering value by providing Operation & Maintenance, Commissi oning and Startup, Documentation & Training and Staffing services to the power generation, oil and gas, petrochemical, pulp and paper and manufacturing industries globally. We will upload 8gb of corporate data soon. Employee information, projects (drawings, specificat ions), clients info, contracts and agreements and so on.
-
October 12, 2026 ILCS Pelindo (port logistics operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: Indonesia. Port logistics Indonesia | Operational EDI archives (container manifests) | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
-
October 12, 2026 • April Asia (port agency operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: Indonesia. Port agency / logistics Indonesia | Container gate movement and damage management records | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]