-
Thai Lion Air
October 2, 2026
•
[ ransomware, leak ]
Thai Lion Air was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-02. Sector: Transportation. Country: Thailand. Website: www.lionairthai.com.
-
Gerrity Stone
October 2, 2026
•
[ ransomware, manufacturing, retail ]
Gerrity Stone was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-02. Sector: Manufacturing. Country: United States of America. Website: gerritystone.com. gerritystone.com zoominfo.com/c/gerrity-stone-inc/48615647 GerrityStone, Inc. is a family-owned stone fabrication and installation company founded in 1997 (part of the Gerrity family business dynasty dating back to 1906), based in Wilmington, Massachusetts, with a state-of-the-art 44,400 sq ft fabrication facility opened in 2022. It is a private, self-funded company with estimated annual revenue of ~$4.4M (range $110M) and 4353 employees. GerrityStone operates the largest natural stone inventory in New England 2,000+ slabs across 300+ colors, imported mainly from Italy and Brazil. The company offers full-cycle service (digital templating, CNC/water-jet fabrication, installation) and was the first new authorized Cambria quartz fabricator in 10 years. It has won "Best of Boston Home" multiple times (2009, 2010, 2024)
-
Mandurah State Emergency Service
October 2, 2026
•
[ ransomware, government, leak ]
Mandurah State Emergency Service was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-02. Sector: Government & Defense. Country: Australia. Website: mandurahses.org.au. mandurahses.org.au Mandurah State Emergency Service is a volunteer emergency rescue unit (part of DFES Western Australia), founded in 1976/78 and celebrating its 50th anniversary in 2026, based at 31 Education Drive, Greenfields, WA 6210. It is a non-profit organization there is no revenue; funding comes from DFES (WA Government) and community donations. The unit has ~80+ active volunteers and 6090 cadets (ages 1217), one of the largest SES cadet programs in WA (26 years running), led by Local Manager Chris Stickland ESM (volunteer since 1986, unit leader since 2010). It responds 24/7/365 to storms, floods, land searches, water/cliff rescues and fires support logging ~3,5004,300 operational hours and up to 8,000 community hours per year.
-
Rotamac
October 2, 2026
Rotamac was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-02. Sector: Manufacturing. Country: Canada. Website: rotamac.ca. rotamac.ca Rotamac Inc. is a privately held industrial equipment distributor founded in November 2019 and based in Rosemre/Montreal, Quebec, Canada (283 rue de Normandie, Rosemre, QC J7A 1T4). It is a micro company of 110 employees, essentially built around owner-founder Joey Desrosiers (HEC Montral, 20+ years in compressed air and rotating equipment). Revenue is not publicly disclosed (small private company), but its e-commerce arm canadacompressorparts.com carries ~43,675 SKUs of non-OEM compressor parts (Atlas Copco, Ingersoll Rand, CompAir compatible) shipping across Canada. Core business: sales representation and distribution of pumps, air/gas compressors, vacuum pumps and nitrogen/oxygen generators, focused on lowering Total Cost of Ownership
-
Hospital de la Santa Creu i Sant Pau
October 2, 2026
Hospital de la Santa Creu i Sant Pau was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-02. Sector: Healthcare. Country: Spain. Website: santpau.cat. santpau.cat zoominfo.com/c/hospital-de-la-santa-creu-i-sant-pau/372615247 Hospital de la Santa Creu i Sant Pau is a 625-year-old Barcelona medical institution (founded 1401) and a UNESCO World Heritage Site since 1997. It combines a major academic hospital (2009) with the Recinte Modernista, a masterpiece of Catalan Modernism designed by Llus Domnech i Montaner. The hospital employs ~4,965 people, runs on a ~490M annual budget, and has 600 beds and 25 operating rooms, serving 400,000+ patients a year. Its research institute (IR Sant Pau, founded 1992) employs 1,632 staff with 1,058+ publications and 705 active clinical trials.
-
Zelham
September 30, 2026
•
[ ransomware, retail, leak ]
Zelham was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-30. Website: zelham.com. zelham.com rocketreach.co/zelham-inc-profile_b580fe5ef66e1a3f Zelham, Inc. is a U.S. hospitality renovation general contractor headquartered in Boise, Idaho, founded in 2000 and owned since 2023 by President & CEO Stephen Horel. The company specializes in hotel remodeling, rebranding, and ADA conversions, with 500+ completed projects and licenses in 47 states. It employs approximately 5557 people across 15 states, generating an estimated annual revenue of $9.6M$41.6M (sources vary). Zelham works with 20+ major hotel brands (Marriott, Hilton, IHG, Sonesta, Four Seasons), offering pre-construction planning, free estimates, and turnkey project management.
-
States Industries
October 2, 2026
•
[ ransomware, manufacturing, leak ]
States Industries was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-10-02. Sector: Manufacturing. Country: United States of America. Website: statesind.com. States Industries is a privately held American manufacturer specializing in premium hardwood plywood, custom wood veneer panels, prefinished panels, and specialty components. Founded in Eugene, Oregon, in 1966, the company serves woodworkers, architects, designers, cabinetmakers, furniture manufacturers, and commercial fabricators across North America. Its products include custom hardwood panels, ApplePly, NOVA prefinished panels, wall paneling, and precision-manufactured components. States Industries emphasizes innovation, quality, and environmentally responsible manufacturing, offering customizable veneer species, cores, finishes, sizes, and performance specifications. The company operates its primary manufacturing facility in Eugene and also operates DrawerBox Specialties in Orange, California. States Industries currently employs more than 300 people.
The company headquarters is located in 29545 Enid Road East, Eugene, OR 97402, United States. 201-500 Employees
-
Skaff Group
October 3, 2026
•
[ ransomware, retail, finance ]
Skaff Group was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-10-03. Sector: Other. Website: skaffgroup.com. Skaff Group SKAFF is a leader in Lebanon in the field of decorative fabrics. Files: 139,377Data volume: ~268 GB**Full HR dossiers - ~40 scans of Lebanese national ID cards (both sides + photos), a director's passport, civil-status extracts.Banking data - employee account files at Byblos Bank (named per person), Cedrus Bank corporate card program with banker contacts, account statements.Payroll violations - unpaid-salary analysis file, payroll module source code, staff leave requests.Employees' private lives - family photo archives on the work server.Commerce price lists, Four Seasons and Les Galeries proposals, customs/export documents (Dubai, Erbil), customer claims. More
-
Precon Marine Inc
October 3, 2026
•
[ ransomware, manufacturing ]
Precon Marine Inc was listed as a victim on the leak site of the netrunner ransomware group; the attack is estimated to have taken place on 2026-10-03. Sector: Transportation. Website: preconmarine.com. Precon Marine, Inc. is a diversified marine contractor specializing in heavy marine construction and advanced subsea services.
-
Genesis Credit Management
October 3, 2026
Genesis Credit Management was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-03. Sector: Financial Services. Country: United States of America. Website: www.genesiscred.com.
-
M****C
October 1, 2026
•
[ ransomware ]
M****C was listed as a victim on the leak site of the payoutsking ransomware group; the attack is estimated to have taken place on 2026-10-01. Country: United States of America. Website: m****.com.
-
Mutsumi Group
October 4, 2026
•
[ ransomware, manufacturing ]
Mutsumi Group was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-04. Sector: Manufacturing. Country: Japan. Website: www.mutsumi-g.co.jp.
-
Emser
October 4, 2026
•
[ ransomware, manufacturing ]
Emser was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-04. Sector: Manufacturing. Country: Spain. Website: www.emser.es.
-
Chadwick Switchboards
October 4, 2026
•
[ ransomware, manufacturing ]
Chadwick Switchboards was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-04. Sector: Manufacturing. Country: Australia. Website: www.chadwickswitchboards.com.au.
-
Unident Group
October 4, 2026
•
[ ransomware, leak ]
Unident Group was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-04. Sector: Other. Country: United States of America. Website: www.unidentgroup.net.
-
MorseLife Health System, Inc.
October 2, 2026
•
[ ransomware, healthcare ]
MorseLife Health System, Inc. was listed as a victim on the leak site of the Booba Project ransomware group; the attack is estimated to have taken place on 2026-10-02. Sector: Healthcare. Country: United States of America. Website: www.morselife.org. Hospitals and Health Care Stolen data: 344 GB.
-
OMUR HIRDAVAT LTD
October 4, 2026
•
[ ransomware, manufacturing, leak ]
OMUR HIRDAVAT LTD was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-10-04. Sector: Manufacturing. Country: Turkey. A Turkish company engaged in the wholesale and
retail trade of construction and household fittings
The archives contain several thousand documents with
personnel and customer data [Sector: Manufacturing]
-
TRANS LOGROÑO SOCIEDAD ANONIMA
October 5, 2026
•
[ ransomware, manufacturing ]
TRANS LOGROO SOCIEDAD ANONIMA was listed as a victim on the leak site of the lamashtu ransomware group; the attack is estimated to have taken place on 2026-10-05. Sector: Transportation. Country: Spain. Website: translo.es. TRANS-LOGROO, S.A. is a Spanish road freight
and logistics company based in Logroo (La Rioja). It provides road haulage
(CNAE 4941), freight forwarding, and warehouse services including storage,
order picking, and tank cleaning.
-
Royal Selangor
October 4, 2026
•
[ ransomware, manufacturing, leak ]
Royal Selangor was listed as a victim on the leak site of the BYOD ransomware group; the attack is estimated to have taken place on 2026-10-04. Sector: Manufacturing. Country: Malaysia. Website: royalselangor.com. Both, your Registered Users & Customer list have been affected. 300K Lines Total, Includes: Names, Emails, Phone Numbers, Addresses, Purchase Amount, Payment Method, Pretty Juicy stuff you don't want getting out there. Anyways, you know where to find us (contact tab). We will take you down when communication has been established between our team and yours.
-
Eteam
September 29, 2026
•
[ ransomware, technology ]
Eteam was listed as a victim on the leak site of the BYOD ransomware group; the attack is estimated to have taken place on 2026-09-29. Sector: Technology. Eteam was informed they had been breached, just ignored us, we are not giving any more chances, Enjoy their full BPO list EXTREME PII (some of the most sensitive shit any company has). Feel free to take a gander at it yourself, don't be shy, we (and them) certainly aren't stopping you.