-
Habbas Associates
October 6, 2026
Habbas Associates was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Country: United States of America. Website: habbaslaw.com. habbaslaw.com zoominfo.com/c/habbas--associates/348628386 Habbas & Associates (Habbas Law) is a private, family-owned personal injury law firm founded in 1988 by Omar Habbas in San Jose, California, now operating 6 offices statewide (San Jose, Oakland, SF, LA, Modesto, Rocklin). It generates estimated annual revenue of ~$2021M with 2044 employees, working on a contingency fee basis ("No Recovery, No Fee"). Over 38 years the firm has resolved 20,000+ cases and secured $750M+ in total client recoveries, with founder Omar Habbas alone accounting for $450M+ he holds an AV Preeminent rating, Super Lawyers status, and was admitted to the U.S. Supreme Court in 2019. The firm is now transitioning to its second generation: son Tarik Habbas (Partner, 3 Super Lawyers Rising Star) and son Nicholas Habbas (admitted to the CA Bar in 2026). Core practice areas: car/truck accidents, wrongful death, brain/spinal injuries, medical malpractice, and employment law. Client ratings are strong
-
Mabris
October 6, 2026
•
[ ransomware, manufacturing, energy ]
Mabris was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Country: France. Website: mabris.fr. mabris.fr) zoominfo.com/c/mabris/513443412MABRIS is a French family-owned industrial contractor based in Saint-Pierre-la-Cour (Mayenne), founded in the 1980s and registered as an SAS in 1999, with a second workshop in Airvault under the OPTEOR banner since 2006. It provides end-to-end services boilerwork (chaudronnerie), industrial piping, metalwork, and industrial mechanics/maintenance split ~60% maintenance / 40% design, with an in-house design office using AutoCAD, SolidWorks, and 3D point-cloud scanning. Working B2B-only across 18 departments in western France (zero export), it serves chemical, food, and energy industry clients, and partners with neighboring firm AROM for tungsten-carbide hardfacing (whose facility it acquired in 2022 for 45,000). Led by president Jacques Belaud since 2011, it employs ~26 people and holds MASE safety certification (renewed November 2025). Financially it staged a strong turnaround: revenue grew from 6.37M (2021) to a record 7.97M (2024)
-
Ability Enterprise
October 6, 2026
•
[ ransomware, technology, manufacturing ]
Ability Enterprise was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Country: Taiwan. Website: abilitytw.com. abilitytw.com zoominfo.com/c/ability-enterprise-co-ltd/1340859360 Ability Enterprise is a Taiwan-based ODM/OEM manufacturer founded in 1965, headquartered in New Taipei City, and one of the world's leading producers of digital imaging and optical camera products. The company designs and manufactures camera modules, action cameras, Edge AI webcams, automotive cameras, and security/surveillance systems for global brands, with factories in Taiwan, China (Dongguan), and Vietnam. Roughly half of its workforce is in R&D, and the company holds 42 patents from the last three years, focusing on AI vision, 3D ToF, and robotics. Financially, it's on a strong growth run: FY2025 revenue hit NT$9.91 billion (+60% YoY), and 2026 revenue is tracking above NT$10 billion with an ambitious NT$30 billion target by 2028. Its strategic pivot "Transformation 3.0" positions it as the "eyes for AI robots," supplying vision modules for humanoid robots (Agility Robotics, Mantis Robotics) and drones
-
Maverick Desk
October 6, 2026
•
[ ransomware, manufacturing ]
Maverick Desk was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Other. Country: United States of America. Website: myworkstream.com. myworkstream.com maverickdesk.com Maverick Desk is a private, U.S.-based office furniture manufacturer founded in 1992 in Gardena, California, with a second production plant in Fairfield, Ohio, and estimated annual revenue of $19.1M with ~2350 employees. It produces 9+ collections of casegoods desks, credenzas, conference tables, height-adjustable workstations, and school furniture using thermally fused melamine with 20 colors and free mix-and-match customization. Its standout competitive edge is QuickShip in 4872 hours on 400+ SKUs (fastest in the industry) and full custom builds under the motto "If you can draw it, we can make it." All products are Made in the USA (CARB-compliant) and backed by a 10-year warranty, and the company is GSA Approved for U.S. government procurement. Led by President Tony Pacheco and VP Operations Ramiro Serna, it distributes across North America through a dealer network.
-
All Souls St Gabriels School
October 6, 2026
All Souls St Gabriels School was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Education. Country: Australia. Website: allsouls.qld.edu.au. allsouls.qld.edu.au zoominfo.com/c/all-souls-st-gabriels-school/350907535 All Souls St Gabriels School (ASSG) is an independent Anglican co-educational boarding and day school founded in 1920 in Charters Towers, North Queensland, serving ~431459 students (Pre-Prep to Year 12) on a 45-hectare campus, with 186200 boarders (one of the region's largest boarding programs). It employs ~6679 staff (44 teachers, 1:81:10 student ratio) under Headmaster Shannon Lee (since 2022). Annual fees range from $4,675 (primary) to $14,620 (Year 12) plus $28,800 boarding, generating estimated revenue of ~$1014M AUD with healthy $2.5M cash reserves and $3.2M in debt-free capital expenditure (new Aquatic Centre, 2024). Founded as two single-sex schools merged in 1990, it famously closed in 2000 and was rescued by the community reopened under a new incorporated board. Academically, 14% of graduates achieve OP 15, and the school has produced 3 Rhodes Scholars across its history.
-
Ansonia Public Schools
October 6, 2026
•
[ ransomware, education ]
Ansonia Public Schools was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Education. Country: United States of America. Website: ansonia.org. ansonia.org zoominfo.com/c/ansonia-public-schools/6671532 Ansonia Public Schools is a public PK12 school district in Ansonia, Connecticut (Naugatuck Valley), serving ~2,3322,404 students across 4 schools with 166 teachers (14.5:1 ratio, avg salary $99K) under Superintendent Dr. Joseph DiBacco. Annual BOE budget is $39.5M (2026-27), spending $19,869 per pupil ($2,185 below CT state average), funded 54% by state aid, 34% local property taxes, and 13% federal. The district faces severe academic challenges: math proficiency at just 1215% (state: 41%) and reading at 2425% (state: 51%), ranking it in the bottom 50% of Connecticut districts (1/10 rating). Demographics are high-need 80% minority enrollment, 63.6% on free/reduced meals, and 23.1% chronic absenteeism. Graduation rate is 85.7% (state: 88.9%), with strong positives in college-prep course-taking (95.7%) and on-track graduation (92.5%). Financially fragile: the city has been a "distressed municipality" since 2010, fund balance
-
Santee School District Foundation
October 6, 2026
•
[ ransomware, education ]
Santee School District Foundation was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Education. Country: United States of America. Website: santeesd.net. santeesd.net zoominfo.com/c/santee-school-district-foundation/153059622 Santee School District is a public K8 school district founded in 1891 in Santee, California (San Diego County), operating 9 schools serving approximately 5,9225,990 students (ages 214, including Pre-K/TK). It employs ~640846 FTE staff (355 certificated teachers + 488 classified staff) under Superintendent Dr. Kristin Baranski, with a student-teacher ratio of ~23:1. Annual budget: ~$99.3M expenditures vs $90.7M revenue (2025-26), funded 77% by the state (LCFF), with ~$15,80018,900 spent per student. Demographics: 49% White, 31% Hispanic, 20.5% special education, 37% socio-economically disadvantaged, 3640 languages spoken. The district is known for its innovative PreschoolGrade 8 model and 1:1 iPad program, with strong SPED and Prop 28 arts funding. However, it faces serious financial headwinds: enrollment declining ~5% (projected 5,778 by 2026-27), expenditures exceeding revenue, reserve dropping from 16.5%
-
PIR Sales
October 6, 2026
•
[ ransomware, leak, manufacturing ]
PIR Sales was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Other. Country: United States of America. Website: pirsales.com. pirsales.com zoominfo.com/c/pir-sales-inc/84001098 PIR Sales, Inc. is a private, independent manufacturers' representative firm founded in 1992 in Chandler, Arizona, serving plumbing, irrigation, waterworks, fire/life safety, and HVAC markets across Arizona, Southern Nevada, New Mexico, and El Paso TX. It generates estimated annual revenue of $2023M with only ~1719 employees (9 outside + 8 inside sales) an exceptional ~$1.21.35M revenue per employee. The firm represents 40+ premium brands including A.O. Smith, Watts Water Technologies, Bradley Corp., Panasonic HVAC, Stiebel Eltron, and Highland Tank, backed by 25+ year manufacturer relationships and a 27,000 sq ft warehouse offering 24/7 commercial water heater pickup. It serves 20 distribution channels (architects, engineers, contractors, municipalities, utilities) and employs dedicated Specification Consultants for architects in both Arizona and Las Vegas. Led by President Bob Saylor (29 years at PIR) and VP Craig Addington
-
Saskatoon Tribal Council
October 5, 2026
•
[ ransomware, government, healthcare ]
Saskatoon Tribal Council was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-05. Sector: Government & Defense. Country: Canada. Website: sktc.sk.ca. sktc.sk.ca zoominfo.com/c/saskatoon-tribal-council-inc/215335121 Saskatoon Tribal Council (STC) is a non-profit tribal council founded in 1982 in Saskatoon, Saskatchewan (Treaty 6), uniting 7 First Nations with 14,000+ members. Led by Tribal Chief Mark Arcand (since 2017), STC employs 500600+ people across 5 corporations (health, housing, urban services, investments, community development). Head-body revenue is $1417M/year (federal ISC funding being the largest source), while the whole group is estimated at ~$45M. Its biggest asset is a stake in Dakota Dunes Casino & Resort ($70M facility, 620+ slots), with its development arm DDCDC generating a record $10.1M gaming revenue in 2023/24 (+33% YoY) and $75M reinvested into communities over 10 years (5,300+ projects). Key operations: 453+ housing units (1,068 waitlisted applications), an Emergency Wellness Centre (2,501 admissions), 17,460 health clients, and employment services placing 276 people in jobs. STC holds Accreditation Canada.
-
Glenhardie Country Club
October 10, 2026
•
[ ransomware, leak ]
Glenhardie Country Club was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-10. Sector: Hospitality. Country: United States of America. Website: www.glenhardiecc.com.
-
ACI Proyectos SAS
October 10, 2026
•
[ ransomware, manufacturing ]
ACI Proyectos SAS was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-10. Sector: Other. Country: Colombia. Website: www.aciproyectos.com.
-
Royal Thai Air Force
October 10, 2026
•
[ ransomware, government, technology ]
Royal Thai Air Force was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-10. Sector: Government & Defense. Country: Thailand. Website: rtaf.mi.th. rtaf.mi.th is the official portal of the Royal Thai Air Force, one of Asia's oldest air forces (founded November 2, 1913; independent since 1937), with ~46,000 personnel and 11 combat wings, now running a modern Odoo-based portal publishing financial reports, procurement plans, and White Papers on its "Unbeatable Air Force" roadmap to 2037. Its fleet spans 46 F-16s, 11 Gripen C/D, 13 F-5TH Super Tigris, Saab 340 Erieye AEW&C, C-130s, and a VIP fleet including an ex-Thai Airways A340-500. In July 2025 the RTAF fought its first combat since 1988 in the Thai-Cambodian border conflict, with its Gripens achieving the type's first-ever combat weapons launch. The centerpiece modernization is the Gripen E/F program: Thailand signed the $550M "Peace Burapha 1" contract in August 2025 first in APAC with deliveries from 2029 and 8 more jets sought toward a 12-aircraft squadron by 2037. Air Chief Marshal Seksan Kantha, the 31st commander since October 2025
-
TEXMA International Co., Ltd
October 10, 2026
•
[ ransomware, manufacturing ]
TEXMA International Co., Ltd was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-10-10. Sector: Manufacturing. Country: Taiwan. Website: texma.com.tw. TEXMA International Co., Ltd. is a leading Taiwanese apparel manufacturer specializing in high-quality women's woven apparel, activewear, and sportswear. Founded in 1975, the company operates under a "Taiwan orders, global production" business model, supplying some of the world's most recognizable fashion brands.
-
Goccia S.p.A.
August 3, 2026
•
[ ransomware, manufacturing, retail ]
Goccia S.p.A. was listed as a victim on the leak site of the Majinahanashi ransomware group; the attack is estimated to have taken place on 2026-08-03. Sector: Manufacturing. Country: Italy. Website: gocciaspa.com. Goccia S.p.A. is a major Italian jewelry corporation headquartered in Cocconato, Piedmont, which owns the well-known retail chain and popular online store JOY Gioielli. The company is an official d...
-
WONDR DIAMONDS & D GEM MOUNT
July 8, 2026
WONDR DIAMONDS & D GEM MOUNT was listed as a victim on the leak site of the Majinahanashi ransomware group; the attack is estimated to have taken place on 2026-07-08. Sector: Retail & E-Commerce. Country: India. Website: wondrdiamonds.com. - Tally Backups - CRM Backups Wondr Diamonds is a lab-grown diamond and fine jewelry retailer operating in the United States and India. Gem Mount (D Gem Mount) is an Indian diamond jewellery manufa...
-
KT RESTAURANT
July 2, 2026
•
[ ransomware, retail, hack ]
KT RESTAURANT was listed as a victim on the leak site of the Majinahanashi ransomware group; the attack is estimated to have taken place on 2026-07-02. Sector: Hospitality. Website: ktrestaurants.com. KT Restaurant is a Thai restaurant operator, owner of the Santa Fe steakhouse chain in Bangkok, Thailand. The company was acquired by Boon Rawd Brewery (Singha Corporation) one of Thailand's larg...
-
BONJOUR GROUP
July 2, 2026
•
[ ransomware, manufacturing ]
BONJOUR GROUP was listed as a victim on the leak site of the Majinahanashi ransomware group; the attack is estimated to have taken place on 2026-07-02. Sector: Other. Country: India. Website: bonjourgroup.net. Bonjour Group (brand BONJOUR) is India's largest socks manufacturing company. Founded in 1988. Headquartered in Greater Noida, Uttar Pradesh, India. Legal entity: Bonjour Group (privately held) Fou...
-
Charles E. Tabor AAL LLC
October 11, 2026
Charles E. Tabor AAL LLC was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-10-11. Sector: Other. Country: United States of America. Charles E. Tabor AAL LLC 96,456 files / ~114.5 GBSettlement checks 2026: $600,000 (USAA / Hailey), $587,500 (Travelers / Young), $350,000 (Caddo Parish School Board / Hoffman), $50,000 (USAA UM / Paul).Complete client database - PII for all cases spanning years, consolidated in a single file.Hospital and insurance scans across dozens of cases.Medical scans and HIPAA authorization forms.Driver's licenses and IDs of minor victims.Tax forms containing SSNs.Louisiana state death certificate (evidence item 'plaintiff's exhibit D7').Settlement artifacts: endorsement authorizations with signature lines (2026), signed releases, HIPAA authorizations.Scans of large settlement checks bearing signatures and MICR lines - a ready-made toolkit for check fraud; includes the $350,000 check from the high-profile child case Hoffman. More
-
Friendship Christian School
October 11, 2026
•
[ ransomware, education ]
Friendship Christian School was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-11. Sector: Education. Country: United States of America. Website: www.friendshipchristian.net.
-
Company #20
October 11, 2026
•
[ ransomware, retail ]
Company #20 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-11. cannabis operator Michigan, USA | [PENDING EXPOSURE: data publishes 2026-10-13 09:40 UTC]