-
Pacific Tank Lines
September 26, 2026
•
[ ransomware, financial ]
Pacific Tank Lines was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-09-26. Sector: Transportation. Country: United States of America. Website: pacifictanklines.com. Pacific Tank Lines, Inc. is a premier full-service petroleum carrier focused on safety and cust
omer service. They offer reliable petroleum cargo services with a professional team of drivers
and efficient dispatchers. The company operates a modern fleet aimed at reducing their carbon f
ootprint and has received multiple awards for their service excellence.
We will upload 13gb of corporate data soon. Detailed personal information of 118 employees (pas
sports, DLs, addresses, phones, payment details and so on), financials, clients and so on.
-
Mat Bao Corporation
October 2, 2026
•
[ ransomware, technology, government ]
Mat Bao Corporation was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-10-02. Sector: Technology. Country: Vietnam. Mat Bao Corporation Mat Bao Corporation offers a range of services including domain registration, cloud hosting, professional email solutions, and cloud server storage. Files: 746,108Data volume: 106.8 GBGovernment inspection materials - NEAC inspection decision No. 61/QD (29.04.2025) against the certification authority, working minutes naming state inspectors and company staff (through December 2025).Corporate core - GPKD business-registration documents bearing the owner's signature, shareholder records, tax commitments (January 2026).Personal data - national ID cards (CCCD) and employee passports with signatures, staff lists.Regulator correspondence - VNNIC, NEAC, the Government Cipher Committee (including RSA-1024 token vulnerabilities).Litigation and operations - the VINASEED dispute, internal investigations, operations-department mail. More
-
The Official Collegeof Architects of León (COAL)
October 3, 2026
•
[ ransomware, leak, financial ]
The Official Collegeof Architects of Len (COAL) was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-10-03. Sector: Professional Services. Country: Mexico. The Official College of Architects of Len (COAL) was established on July 12, 1931, encompassi
ng the regions of Len, Asturias, and Galicia. The College of Galicia was legally separated in
1973 and the College of Asturias in 1981.
Here is the access to 77gb of corporate data. Detailed personal information (passports), finan
cials, students and clients information and so on.
Click the download button.
You will find several password-free archives. Click on any of them to start the download.
-
Westrop Primary & Nursery School
October 2, 2026
•
[ ransomware, education ]
Westrop Primary & Nursery School was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-02. Sector: Education. Country: United Kingdom of Great Britain and Northern Ireland. Website: westropprimaryschool.co.uk. westropprimaryschool.co.uk Westrop Primary & Nursery School is a state-funded community school in Highworth, Swindon (Wiltshire, UK), founded in 1969, serving children aged 211. It currently has ~380 enrolled students (capacity 495), with 18.6% on free school meals and 16.3% on SEN support. The school employs ~47 staff (15 teachers + 32 teaching assistants, 20:1 student-teacher ratio) under Headteacher Cindy Acres (since 2018). Annual income is approximately 2 million (~5,461 per pupil), with a healthy 75K surplus and ~100K reserves. Rated "Good" by Ofsted (October 2022, maintained since 2012), though 2024/25 exam results showed weaker math progress and 0% at higher standards compared to strong 2018/19 performance. It runs 11 primary classes plus a three-room nursery and is known for its Forest School program and strong pupil premium support.
-
Step By Step
October 2, 2026
Step By Step was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-10-02. Sector: Education. Country: United States of America. Website: stepbystepusa.com. Step By Step, Inc. is a private nonprofit human services organization established in 1977 and headquartered in Wilkes-Barre, Pennsylvania. The organization provides community-based support services to individuals with intellectual and physical disabilities, autism, mental health disorders, and substance use disorders. Its services include residential programs, vocational and employment support, behavioral health and counseling, autism services, in-home and community support, and other individualized programs designed to promote independence and community participation. Step By Step serves more than 2,000 individuals across multiple regions and more than a dozen Pennsylvania counties. The organization works with individuals, families, and community partners to provide personalized support throughout different stages of life.
The company headquarters is located in 744 Kidder Street, Wilkes-Barre, PA 18702, United States.
1K-5K Employees
-
WOOSHIN SAFETY SYSTEMS CO LTD
September 30, 2026
WOOSHIN SAFETY SYSTEMS CO LTD was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Manufacturing. Country: South Korea. Website: wooshinsys.co.kr. wooshinsys.co.kr wooshinsys.com finance.yahoo.com/quote/017370.KS/financials/ WOOSHIN SAFETY SYSTEMS CO LTD (KOSPI: 017370, founded 1984, Siheung/Seoul, South Korea) is a global car-body automation specialist building robotic welding assembly lines for 40+ automakers (GM, Ford, Stellantis, Volvo, Hyundai/Kia, Rivian, Tata) and the only company in the world that also builds EV battery module/pack assembly lines, giving it a unique edge as carmakers merge body and battery production. It also manufactures auto parts (body doors, seat belts via Wooshin Safety Systems, interiors), with seat-belt order backlogs around KRW 2 trillion (Ford F-150, GM Silverado EV, Stellantis Jeep Compass). Financials are cyclical: record 2024 revenue of KRW 563.6B (OP 36.1B) fell 31% to 388.6B in 2025 on fewer automation orders, and Q1Q2 2026 posted operating losses as orders slipped though analysts (Kiwoom BUY target 9,500, SK Securities 13,000) forecast a 202627 recovery to ~451543B revenue.
-
Allied Machine & Engineering
October 2, 2026
Allied Machine & Engineering was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-10-02. Sector: Manufacturing. Country: United States of America. Website: alliedmachine.com. Allied Machine & Engineering is a family-owned American manufacturer specializing in precision holemaking and finishing cutting tools for metalworking industries. Founded in 1941 and headquartered in Dover, Ohio, the company develops advanced tooling solutions for drilling, boring, reaming, threading, burnishing, porting, and other machining applications. Its product portfolio includes replaceable-insert and solid-carbide drills, boring systems, thread mills, PCD tools, reamers, and specialized tooling. Allied serves customers across aerospace, automotive, agriculture, heavy equipment, medical, oil and gas, renewable energy, structural steel, and defense industries. The company operates globally, with facilities and distribution capabilities in the United States, Europe, Germany, India, and other markets.
The company headquarters is located in 485 W 3rd Street, Dover, OH 44622, United States. 201-500 Employees
-
Aware
September 30, 2026
Aware was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Technology. Country: United States of America. Website: aware.com. aware.com zoominfo.com/c/aware-inc/6522832 400 GB Aware, Inc. (NASDAQ: AWRE, founded 1986, Burlington, MA) is the pioneering US biometrics software company it helped the FBI set the WSQ fingerprint standard in 1993 and went public in 1996 now selling identity verification and multi-modal biometric (face, fingerprint, iris, voice, palm) software to ~80 government agencies and hundreds of commercial customers worldwide. Its flagship Awareness Platform (launched 2025) is a SaaS "control plane" orchestrating biometric workflows, liveness detection (anti-deepfake/injection) and matching across multiple vendors, validated by top-tier tests: zero successful attacks in DHS RIVR Track 3, ISO/IEC 30107-3 Level 13 certification, NIST FATE and FIDO2. Since February 2025 the company has been led by CEO Ajay Amlani (co-founder of CLEAR, ex-DHS/IDEMIA), driving a pivot from a fragmented product portfolio to the platform including a workforce reduction and a plan to cut opex by $4M/year.
-
St. Francis Healthcare Systems of Hawaii
October 3, 2026
•
[ ransomware, healthcare ]
St. Francis Healthcare Systems of Hawaii was listed as a victim on the leak site of the Wallstreet ransomware group; the attack is estimated to have taken place on 2026-10-03. Sector: Healthcare. Country: United States of America. Website: stfrancishawaii.org. St. Francis Healthcare System of Hawaii is a Catholic, nonprofit healthcare organization that has served Hawaii families since 1927
-
Softruck
October 4, 2026
Softruck was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2026-10-04. Sector: Technology. Country: Brazil. Website: softruck.com. Software
-
Cotesma
October 4, 2026
•
[ ransomware, manufacturing ]
Cotesma was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-04. Sector: Manufacturing. Country: Chile. Website: www.cotesma.coop.
-
METROCOLOR S.A.
October 5, 2026
•
[ ransomware, manufacturing, technology ]
METROCOLOR S.A. was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-10-05. Sector: Manufacturing. A Peruvian company from the printing industry.
Commercial printing, packaging, labels, boxes, books,
magazines, booklets and promotional products.
The archives contain several thousand documents with personnel and customer data. [Sector: Manufacturing, Technology]
-
Asia Era One
October 5, 2026
Asia Era One was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-05. Country: Thailand.
-
Turn5
October 5, 2026
Turn5 was listed as a victim on the leak site of the Global Secret Group ransomware group; the attack is estimated to have taken place on 2026-10-05. Sector: Other. Country: United States of America. Website: turn5.com. Country: Pennsylvania 19301, US |
Website: turn5.com |
Revenue: $84.4 Million |
Industry: Automotive Aftermarket, Auto Parts |
Employees: 300-500 |
Properties: 328 GB (26,503 Files, 446 Folders)
-
stuecheli.ch
October 5, 2026
•
[ ransomware, retail, technology ]
stuecheli.ch was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-10-05. Sector: Retail & E-Commerce. Country: Switzerland. Website: stuecheli.ch. The firm was founded by architect Werner Stcheli in 1946 and has developed into a third-generation architectural practice. It is
-
Standpointe / Trinite Solutions
October 4, 2026
Standpointe / Trinite Solutions was listed as a victim on the leak site of the BYOD ransomware group; the attack is estimated to have taken place on 2026-10-04. Sector: Professional Services. Finished Financial Statements, Tenant documents & files, Customer Bank Accounts, Deposit Slips, Payment/Cheque Registers, Tax & Accounting Records, Customer Information (Names, Phones, Emails, Addresses, Provinces), Employee Identities, Commercial Secrets. Anyways, you know where to find us (contact tab). We will take you down when communication has been established between our team and yours.
-
Circulating Air
September 5, 2026
•
[ ransomware, manufacturing ]
Circulating Air was listed as a victim on the leak site of the VYPR ransomware group; the attack is estimated to have taken place on 2026-09-05. Sector: Manufacturing. Country: United States of America. Website: www.circulatingair.com. Circulating Air, Inc. specializes in HVAC services in Los Angeles and surrounding areas, offering quality repair, installation, and maintenance for heating and cooling systems. They provide a comprehensive range of services including air conditioning, heating, indoor air quality, and commercial HVAC solutions. The company caters to both residential and commercial clients, ensuring efficient and reliable service for various HVAC systems. With a commitment to customer satisfaction, Circulating Air, Inc. is dedicated to improving indoor comfort and air quality.
-
Sims Vibration Laboratory
September 5, 2026
Sims Vibration Laboratory was listed as a victim on the leak site of the VYPR ransomware group; the attack is estimated to have taken place on 2026-09-05. Sector: Manufacturing. Country: United States of America. Website: www.simsvibrationlab.com. At Sims Vibration Laboratory, we pride ourselves on being industry leaders in providing the ultimate shock and vibration dampening products for your bow. We design and engineer our products to be the absolute best in the world. The industry-changing revolutionary designs of our products outperform our competition, producing products that deliver you the quietest shot possible when it really counts! We create "Products That Work!".
-
Philander Smith University
October 6, 2026
•
[ ransomware, education, financial ]
Philander Smith University was listed as a victim on the leak site of the EndZone ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Education. Country: United States of America. Website: philander.edu. Revenue: $25.3 million annual
Philander Smith University is a private, historically Black liberal arts institution in Little Rock, Arkansas, founded in 1877 and affiliated with the United Methodist Church. They provide undergraduate and graduate education with a focus on academic excellence, social justice, and leadership development for a diverse student body. We successfully exfiltrated 500GB+ worth of data which includes VERY confidential information about students and staff, as well as financial information. Alongside, we have encrypted files across the entire network.
-
Delta Marine
October 6, 2026
•
[ ransomware ]
Delta Marine was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Transportation. Country: Finland. Website: www.deltamarine.com.