-
Mid Atlantic Gynecologic Oncology and Pelvic Surgery Associates
October 8, 2026
•
[ ransomware, healthcare ]
Mid Atlantic Gynecologic Oncology and Pelvic Surgery Associates was listed as a victim on the leak site of the netrunner ransomware group; the attack is estimated to have taken place on 2026-10-08. Sector: Healthcare. Country: United States of America. Website: www.magopsa.com. Mid Atlantic Gynecologic Oncology and Pelvic Surgery Associates (MAGOPSA) is one of the largest single groups of gynecologic oncologists in the mid-Atlantic region.
-
KC Pharmaceuticals, Inc
July 14, 2026
KC Pharmaceuticals, Inc was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-07-14. Sector: Healthcare. Country: United States of America. Website: www.kc-ph.com. [AI generated] N/A
I don't have verified, reliable information about a specific company called "KC Pharmaceuticals, Inc" in my knowledge base. There may be multiple companies with similar names, or this could be a smaller/private entity without significant public records. To avoid providing inaccurate or fabricated details in a threat intelligence context, I'm declining to speculate.
If you have additional context (location, products, executives, ticker symbol, or source document mentioning this company), I can help verify or research further.
-
Valvorobica Industirale S.p.A
July 13, 2026
Valvorobica Industirale S.p.A was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-07-13. Sector: Manufacturing. Country: Italy. Website: www.valvorobica.eu. [AI generated] N/A
I don't have reliable, verifiable information about a company by this name ("Valvorobica Industriale S.p.A"). Rather than fabricate details about its operations, industry specifics, or location, I'm flagging this as unknown. If you have source documents or additional context about this company, please share them and I can help analyze that material.
-
WAGA Enterprises Architects LLC
July 16, 2026
•
[ ransomware, technology ]
WAGA Enterprises Architects LLC was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-07-16. Sector: Professional Services. Country: United States of America. Website: www.wearchitects.com. [AI generated] N/A
I don't have reliable, verifiable information about a company specifically named "WAGA Enterprises Architects LLC." To avoid providing inaccurate or fabricated details, I'm unable to generate a factual description. If you have additional context (location, industry sector, registration details, or a website), I can try to help further or you may want to verify through business registries such as state Secretary of State databases, Dun & Bradstreet, or OpenCorporates.
-
Medcom Tech Information
July 15, 2026
•
[ ransomware, healthcare ]
Medcom Tech Information was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-07-15. Sector: Healthcare. Country: Spain. Website: medcomtech.es/en. [AI generated] N/A
I don't have verified, reliable information about a specific company named "Medcom Tech Information." Providing fabricated details about its operations, industry, or country would risk being inaccurate for threat intelligence purposes. If you have additional contextsuch as a website, registration details, or region of operationI can help verify or research further.
-
Ministarstvo poljoprivrede, šumarstva i ribarstva
October 9, 2026
Ministarstvo poljoprivrede, umarstva i ribarstva was listed as a victim on the leak site of the Barracuda ransomware group; the attack is estimated to have taken place on 2026-10-09. Sector: Agriculture and Food Production. Country: Croatia. Website: poljoprivreda.gov.hr. We have complete database dumps from the Ministry of Agriculture and all documents from its main file server. They contain information about residents of Croatia, including agricultural registration records and personal data such as phone numbers, surnames, first names, and photos, as well as details about each residents agricultural activities. We also have Ministry of Agriculture contracts and other confidential documents.
Recently, the authorities claimed that no data breach had occurred. Its unfortunate that this was a lie.
https://mps.hr | Status: selling | $50,000
-
TigerPress (DCC)
October 9, 2026
TigerPress (DCC) was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-10-09. Sector: Other. DCC is a full-service print and packaging provider located in NJ, NY, and MA, specializing in t
ransforming creative ideas into high-quality communication tools. They offer a wide range of se
rvices including offset printing, digital printing, large format printing, and packaging soluti
ons tailored for various industries such as pharmaceuticals, beauty, retail, and consumer goods
.
We will upload 9 gb of corporate data soon. Employee and clients personal information, projects
and so on.
-
Yarema
October 9, 2026
Yarema was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-10-09. Sector: Other. YAREMA specializes in metal fabrication and assembly services. The company offers a range of cu
stom solutions to meet various industrial needs. Their intended clients include manufacturers a
nd businesses requiring precision metalwork.
We will upload 13gb of corporate data soon. Employee information (passports, DLs, SSNs (scans a
nd 45 numbers)), projects, client info, NDAs and so on.
-
Shalom Christian Academy
October 9, 2026
•
[ ransomware, education, leak ]
Shalom Christian Academy was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-10-09. Sector: Education. Country: United States of America. Website: shalomca.com. As a school, Shalom Christian Academy is legally and ethically obligated to maintain a wide range of confidential information. However, they are grossly negligent in protecting their own security and that of their students and staff. Consequently, we provide you with student grades, disciplinary and special education records, health and immunization records, financial aid and tuition information, donation history, employee background checks, salary data, and internal security documents. This leak into the public domain constitutes an unacceptable betrayal that can lead to identity theft, financial fraud, extortion, harassment, and devastating harm to children and families. The school is culpable for this act and must be held accountable to the fullest extent of the law.
-
enTouch
October 9, 2026
•
[ ransomware, technology, healthcare ]
enTouch was listed as a victim on the leak site of the Black X ransomware group; the attack is estimated to have taken place on 2026-10-09. Sector: Technology. Country: Japan. Website: entouch.jp. enTouch is a Japanese IT company specializing in the medical and pharmaceutical sectors, providing services for online consultations, sales activities, and customer data management between pharmaceutical companies and medical institutions. We possess the entire database from data.entouch.jp, the data analysis system used by enTouch. The database contains sensitive customer information, including names, contact details, consultation schedules and records, and sales activity data categorized by pharmaceutical company.
-
MercyMed of Columbus
October 6, 2026
•
[ ransomware, healthcare ]
MercyMed of Columbus was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Healthcare. Country: United States of America. Website: mercymedcolumbus.com. mercymedcolumbus.com zoominfo.com/c/mercymed-of-columbus/409041268 MercyMed of Columbus, Inc. is a 501(c)(3) nonprofit community health center founded in 2011 by Dr. Grant Scarborough, MD in Columbus, Georgia, serving uninsured and low-income patients across 4 clinics. It employs 3285 staff plus ~150 volunteers and generated ~$2.53.9M in revenue (2024), providing $1.51.7M in free care annually with 80 of every dollar going directly to programs. In 2024 it served 7,000+ patients with 20,729 primary care visits, 3,799 dental visits, and 1,566 prescriptions filled, including through its own in-house pharmacy (opened 2024). Services span family medicine, pediatrics, dentistry, ophthalmology, physical therapy, mental health counseling, and nutrition with sliding-scale fees starting at $35/visit and completely free care for the homeless. A standout program is MercyMed Farm (since 2018), producing 18,000 lbs of organic vegetables/year for patients through SNAP-matched
-
Habbas Associates
October 6, 2026
Habbas Associates was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Country: United States of America. Website: habbaslaw.com. habbaslaw.com zoominfo.com/c/habbas--associates/348628386 Habbas & Associates (Habbas Law) is a private, family-owned personal injury law firm founded in 1988 by Omar Habbas in San Jose, California, now operating 6 offices statewide (San Jose, Oakland, SF, LA, Modesto, Rocklin). It generates estimated annual revenue of ~$2021M with 2044 employees, working on a contingency fee basis ("No Recovery, No Fee"). Over 38 years the firm has resolved 20,000+ cases and secured $750M+ in total client recoveries, with founder Omar Habbas alone accounting for $450M+ he holds an AV Preeminent rating, Super Lawyers status, and was admitted to the U.S. Supreme Court in 2019. The firm is now transitioning to its second generation: son Tarik Habbas (Partner, 3 Super Lawyers Rising Star) and son Nicholas Habbas (admitted to the CA Bar in 2026). Core practice areas: car/truck accidents, wrongful death, brain/spinal injuries, medical malpractice, and employment law. Client ratings are strong
-
Mabris
October 6, 2026
•
[ ransomware, manufacturing, energy ]
Mabris was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Country: France. Website: mabris.fr. mabris.fr) zoominfo.com/c/mabris/513443412MABRIS is a French family-owned industrial contractor based in Saint-Pierre-la-Cour (Mayenne), founded in the 1980s and registered as an SAS in 1999, with a second workshop in Airvault under the OPTEOR banner since 2006. It provides end-to-end services boilerwork (chaudronnerie), industrial piping, metalwork, and industrial mechanics/maintenance split ~60% maintenance / 40% design, with an in-house design office using AutoCAD, SolidWorks, and 3D point-cloud scanning. Working B2B-only across 18 departments in western France (zero export), it serves chemical, food, and energy industry clients, and partners with neighboring firm AROM for tungsten-carbide hardfacing (whose facility it acquired in 2022 for 45,000). Led by president Jacques Belaud since 2011, it employs ~26 people and holds MASE safety certification (renewed November 2025). Financially it staged a strong turnaround: revenue grew from 6.37M (2021) to a record 7.97M (2024)
-
Ability Enterprise
October 6, 2026
•
[ ransomware, technology, manufacturing ]
Ability Enterprise was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Country: Taiwan. Website: abilitytw.com. abilitytw.com zoominfo.com/c/ability-enterprise-co-ltd/1340859360 Ability Enterprise is a Taiwan-based ODM/OEM manufacturer founded in 1965, headquartered in New Taipei City, and one of the world's leading producers of digital imaging and optical camera products. The company designs and manufactures camera modules, action cameras, Edge AI webcams, automotive cameras, and security/surveillance systems for global brands, with factories in Taiwan, China (Dongguan), and Vietnam. Roughly half of its workforce is in R&D, and the company holds 42 patents from the last three years, focusing on AI vision, 3D ToF, and robotics. Financially, it's on a strong growth run: FY2025 revenue hit NT$9.91 billion (+60% YoY), and 2026 revenue is tracking above NT$10 billion with an ambitious NT$30 billion target by 2028. Its strategic pivot "Transformation 3.0" positions it as the "eyes for AI robots," supplying vision modules for humanoid robots (Agility Robotics, Mantis Robotics) and drones
-
Maverick Desk
October 6, 2026
•
[ ransomware, manufacturing ]
Maverick Desk was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Other. Country: United States of America. Website: myworkstream.com. myworkstream.com maverickdesk.com Maverick Desk is a private, U.S.-based office furniture manufacturer founded in 1992 in Gardena, California, with a second production plant in Fairfield, Ohio, and estimated annual revenue of $19.1M with ~2350 employees. It produces 9+ collections of casegoods desks, credenzas, conference tables, height-adjustable workstations, and school furniture using thermally fused melamine with 20 colors and free mix-and-match customization. Its standout competitive edge is QuickShip in 4872 hours on 400+ SKUs (fastest in the industry) and full custom builds under the motto "If you can draw it, we can make it." All products are Made in the USA (CARB-compliant) and backed by a 10-year warranty, and the company is GSA Approved for U.S. government procurement. Led by President Tony Pacheco and VP Operations Ramiro Serna, it distributes across North America through a dealer network.
-
All Souls St Gabriels School
October 6, 2026
All Souls St Gabriels School was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Education. Country: Australia. Website: allsouls.qld.edu.au. allsouls.qld.edu.au zoominfo.com/c/all-souls-st-gabriels-school/350907535 All Souls St Gabriels School (ASSG) is an independent Anglican co-educational boarding and day school founded in 1920 in Charters Towers, North Queensland, serving ~431459 students (Pre-Prep to Year 12) on a 45-hectare campus, with 186200 boarders (one of the region's largest boarding programs). It employs ~6679 staff (44 teachers, 1:81:10 student ratio) under Headmaster Shannon Lee (since 2022). Annual fees range from $4,675 (primary) to $14,620 (Year 12) plus $28,800 boarding, generating estimated revenue of ~$1014M AUD with healthy $2.5M cash reserves and $3.2M in debt-free capital expenditure (new Aquatic Centre, 2024). Founded as two single-sex schools merged in 1990, it famously closed in 2000 and was rescued by the community reopened under a new incorporated board. Academically, 14% of graduates achieve OP 15, and the school has produced 3 Rhodes Scholars across its history.
-
Ansonia Public Schools
October 6, 2026
•
[ ransomware, education ]
Ansonia Public Schools was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Education. Country: United States of America. Website: ansonia.org. ansonia.org zoominfo.com/c/ansonia-public-schools/6671532 Ansonia Public Schools is a public PK12 school district in Ansonia, Connecticut (Naugatuck Valley), serving ~2,3322,404 students across 4 schools with 166 teachers (14.5:1 ratio, avg salary $99K) under Superintendent Dr. Joseph DiBacco. Annual BOE budget is $39.5M (2026-27), spending $19,869 per pupil ($2,185 below CT state average), funded 54% by state aid, 34% local property taxes, and 13% federal. The district faces severe academic challenges: math proficiency at just 1215% (state: 41%) and reading at 2425% (state: 51%), ranking it in the bottom 50% of Connecticut districts (1/10 rating). Demographics are high-need 80% minority enrollment, 63.6% on free/reduced meals, and 23.1% chronic absenteeism. Graduation rate is 85.7% (state: 88.9%), with strong positives in college-prep course-taking (95.7%) and on-track graduation (92.5%). Financially fragile: the city has been a "distressed municipality" since 2010, fund balance
-
Santee School District Foundation
October 6, 2026
•
[ ransomware, education ]
Santee School District Foundation was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Education. Country: United States of America. Website: santeesd.net. santeesd.net zoominfo.com/c/santee-school-district-foundation/153059622 Santee School District is a public K8 school district founded in 1891 in Santee, California (San Diego County), operating 9 schools serving approximately 5,9225,990 students (ages 214, including Pre-K/TK). It employs ~640846 FTE staff (355 certificated teachers + 488 classified staff) under Superintendent Dr. Kristin Baranski, with a student-teacher ratio of ~23:1. Annual budget: ~$99.3M expenditures vs $90.7M revenue (2025-26), funded 77% by the state (LCFF), with ~$15,80018,900 spent per student. Demographics: 49% White, 31% Hispanic, 20.5% special education, 37% socio-economically disadvantaged, 3640 languages spoken. The district is known for its innovative PreschoolGrade 8 model and 1:1 iPad program, with strong SPED and Prop 28 arts funding. However, it faces serious financial headwinds: enrollment declining ~5% (projected 5,778 by 2026-27), expenditures exceeding revenue, reserve dropping from 16.5%
-
PIR Sales
October 6, 2026
•
[ ransomware, leak, manufacturing ]
PIR Sales was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Other. Country: United States of America. Website: pirsales.com. pirsales.com zoominfo.com/c/pir-sales-inc/84001098 PIR Sales, Inc. is a private, independent manufacturers' representative firm founded in 1992 in Chandler, Arizona, serving plumbing, irrigation, waterworks, fire/life safety, and HVAC markets across Arizona, Southern Nevada, New Mexico, and El Paso TX. It generates estimated annual revenue of $2023M with only ~1719 employees (9 outside + 8 inside sales) an exceptional ~$1.21.35M revenue per employee. The firm represents 40+ premium brands including A.O. Smith, Watts Water Technologies, Bradley Corp., Panasonic HVAC, Stiebel Eltron, and Highland Tank, backed by 25+ year manufacturer relationships and a 27,000 sq ft warehouse offering 24/7 commercial water heater pickup. It serves 20 distribution channels (architects, engineers, contractors, municipalities, utilities) and employs dedicated Specification Consultants for architects in both Arizona and Las Vegas. Led by President Bob Saylor (29 years at PIR) and VP Craig Addington
-
Saskatoon Tribal Council
October 5, 2026
•
[ ransomware, government, healthcare ]
Saskatoon Tribal Council was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-05. Sector: Government & Defense. Country: Canada. Website: sktc.sk.ca. sktc.sk.ca zoominfo.com/c/saskatoon-tribal-council-inc/215335121 Saskatoon Tribal Council (STC) is a non-profit tribal council founded in 1982 in Saskatoon, Saskatchewan (Treaty 6), uniting 7 First Nations with 14,000+ members. Led by Tribal Chief Mark Arcand (since 2017), STC employs 500600+ people across 5 corporations (health, housing, urban services, investments, community development). Head-body revenue is $1417M/year (federal ISC funding being the largest source), while the whole group is estimated at ~$45M. Its biggest asset is a stake in Dakota Dunes Casino & Resort ($70M facility, 620+ slots), with its development arm DDCDC generating a record $10.1M gaming revenue in 2023/24 (+33% YoY) and $75M reinvested into communities over 10 years (5,300+ projects). Key operations: 453+ housing units (1,068 waitlisted applications), an Emergency Wellness Centre (2,501 admissions), 17,460 health clients, and employment services placing 276 people in jobs. STC holds Accreditation Canada.
