-
Terca
August 21, 2026
•
[ ransomware, leak ]
Terca was listed as a victim on the leak site of the ransomhouse ransomware group; the attack is estimated to have taken place on 2026-08-21. Sector: Other. Country: Brazil. Website: www.terca.com.br. TERCA Zilli is a leading logistics operator in Esprito Santo, Brazil, offering innovative solutions and synonymous with logistical efficiency. The company provides a wide range of services including general warehousing, customs areas, and specialized storage for hazardous chemicals and vehicles. With a rich history and extensive experience, TERCA Zilli caters to diverse client needs while optimizing operations to reduce costs.
-
ProMind IT
September 22, 2026
ProMind IT was listed as a victim on the leak site of the AuditTeam ransomware group; the attack is estimated to have taken place on 2026-09-22. Sector: Technology. Country: Italy. Website: promindit.com. ProMind IT (promindit.com) is a small Italian IT consulting company offering website development, business solutions, and Odoo ERP/accounting software integration services, though its website is currently offline and very little public information is available.
-
www.pierrefeu.fr
October 2, 2026
www.pierrefeu.fr was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-10-02. Sector: Other. Country: France. Website: www.pierrefeu.fr. Pierrefeu Immobilier is an independent French real estate agency founded in 1963, headquartered in Tarare, in the Nord-O...
-
Tronex A/S
October 2, 2026
Tronex A/S was listed as a victim on the leak site of the Wallstreet ransomware group; the attack is estimated to have taken place on 2026-10-02. Sector: Manufacturing. Country: Denmark. Tronex A/S is a Danish Electronics Manufacturing Services (EMS) company headquartered in Fredensborg, Denmark. Founded in 1988, Tronex provides electronics manufacturing, assembly, testing, procurement, prototyping, and technical production solutions for industrial customers
-
Raleigh Family Medicine
October 2, 2026
•
[ ransomware, healthcare ]
Raleigh Family Medicine was listed as a victim on the leak site of the Booba Project ransomware group; the attack is estimated to have taken place on 2026-10-02. Sector: Healthcare. Country: United States of America. Website: www.rfppa.com. Hospitals and Health Care Stolen data: 1 GB.
-
Inova Semiconductors GmbH
October 2, 2026
•
[ ransomware, manufacturing, technology ]
Inova Semiconductors GmbH was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-02. Sector: Manufacturing. Country: Germany. Website: inova-semiconductors.de.
-
Jampac Alimentos
August 18, 2026
•
[ ransomware, retail, financial ]
Jampac Alimentos was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-08-18. Sector: Agriculture and Food Production. Country: Brazil. Website: jampac.com.br. Jampac Alimentos is a leading producer and distributor of food products in Brazil, with over 20
years of experience and a commitment to quality and efficiency. The company serves more than 6
,500 clients, including restaurants, supermarkets, and industrial kitchens, delivering a wide r
ange of products such as poultry, beef, pork, dairy, and fish.
We will upload 35gb of corporate data soon. Personal information (passports, payment informatio
n and other information), financials, clients information and so on.
-
www.windor.com
September 25, 2026
•
[ ransomware, manufacturing ]
www.windor.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-09-25. Website: www.windor.com. Documents: Windor Supply & Manufacturing, Inc. PROLOGUE Sales representative Mark Brewster, on D...
-
Thai Lion Air
October 2, 2026
•
[ ransomware, leak ]
Thai Lion Air was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-02. Sector: Transportation. Country: Thailand. Website: www.lionairthai.com.
-
Gerrity Stone
October 2, 2026
•
[ ransomware, manufacturing, retail ]
Gerrity Stone was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-02. Sector: Manufacturing. Country: United States of America. Website: gerritystone.com. gerritystone.com zoominfo.com/c/gerrity-stone-inc/48615647 GerrityStone, Inc. is a family-owned stone fabrication and installation company founded in 1997 (part of the Gerrity family business dynasty dating back to 1906), based in Wilmington, Massachusetts, with a state-of-the-art 44,400 sq ft fabrication facility opened in 2022. It is a private, self-funded company with estimated annual revenue of ~$4.4M (range $110M) and 4353 employees. GerrityStone operates the largest natural stone inventory in New England 2,000+ slabs across 300+ colors, imported mainly from Italy and Brazil. The company offers full-cycle service (digital templating, CNC/water-jet fabrication, installation) and was the first new authorized Cambria quartz fabricator in 10 years. It has won "Best of Boston Home" multiple times (2009, 2010, 2024)
-
Mandurah State Emergency Service
October 2, 2026
•
[ ransomware, government, leak ]
Mandurah State Emergency Service was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-02. Sector: Government & Defense. Country: Australia. Website: mandurahses.org.au. mandurahses.org.au Mandurah State Emergency Service is a volunteer emergency rescue unit (part of DFES Western Australia), founded in 1976/78 and celebrating its 50th anniversary in 2026, based at 31 Education Drive, Greenfields, WA 6210. It is a non-profit organization there is no revenue; funding comes from DFES (WA Government) and community donations. The unit has ~80+ active volunteers and 6090 cadets (ages 1217), one of the largest SES cadet programs in WA (26 years running), led by Local Manager Chris Stickland ESM (volunteer since 1986, unit leader since 2010). It responds 24/7/365 to storms, floods, land searches, water/cliff rescues and fires support logging ~3,5004,300 operational hours and up to 8,000 community hours per year.
-
Rotamac
October 2, 2026
Rotamac was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-02. Sector: Manufacturing. Country: Canada. Website: rotamac.ca. rotamac.ca Rotamac Inc. is a privately held industrial equipment distributor founded in November 2019 and based in Rosemre/Montreal, Quebec, Canada (283 rue de Normandie, Rosemre, QC J7A 1T4). It is a micro company of 110 employees, essentially built around owner-founder Joey Desrosiers (HEC Montral, 20+ years in compressed air and rotating equipment). Revenue is not publicly disclosed (small private company), but its e-commerce arm canadacompressorparts.com carries ~43,675 SKUs of non-OEM compressor parts (Atlas Copco, Ingersoll Rand, CompAir compatible) shipping across Canada. Core business: sales representation and distribution of pumps, air/gas compressors, vacuum pumps and nitrogen/oxygen generators, focused on lowering Total Cost of Ownership
-
Hospital de la Santa Creu i Sant Pau
October 2, 2026
Hospital de la Santa Creu i Sant Pau was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-02. Sector: Healthcare. Country: Spain. Website: santpau.cat. santpau.cat zoominfo.com/c/hospital-de-la-santa-creu-i-sant-pau/372615247 Hospital de la Santa Creu i Sant Pau is a 625-year-old Barcelona medical institution (founded 1401) and a UNESCO World Heritage Site since 1997. It combines a major academic hospital (2009) with the Recinte Modernista, a masterpiece of Catalan Modernism designed by Llus Domnech i Montaner. The hospital employs ~4,965 people, runs on a ~490M annual budget, and has 600 beds and 25 operating rooms, serving 400,000+ patients a year. Its research institute (IR Sant Pau, founded 1992) employs 1,632 staff with 1,058+ publications and 705 active clinical trials.
-
Zelham
September 30, 2026
•
[ ransomware, retail, leak ]
Zelham was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-30. Website: zelham.com. zelham.com rocketreach.co/zelham-inc-profile_b580fe5ef66e1a3f Zelham, Inc. is a U.S. hospitality renovation general contractor headquartered in Boise, Idaho, founded in 2000 and owned since 2023 by President & CEO Stephen Horel. The company specializes in hotel remodeling, rebranding, and ADA conversions, with 500+ completed projects and licenses in 47 states. It employs approximately 5557 people across 15 states, generating an estimated annual revenue of $9.6M$41.6M (sources vary). Zelham works with 20+ major hotel brands (Marriott, Hilton, IHG, Sonesta, Four Seasons), offering pre-construction planning, free estimates, and turnkey project management.
-
States Industries
October 2, 2026
•
[ ransomware, manufacturing, leak ]
States Industries was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-10-02. Sector: Manufacturing. Country: United States of America. Website: statesind.com. States Industries is a privately held American manufacturer specializing in premium hardwood plywood, custom wood veneer panels, prefinished panels, and specialty components. Founded in Eugene, Oregon, in 1966, the company serves woodworkers, architects, designers, cabinetmakers, furniture manufacturers, and commercial fabricators across North America. Its products include custom hardwood panels, ApplePly, NOVA prefinished panels, wall paneling, and precision-manufactured components. States Industries emphasizes innovation, quality, and environmentally responsible manufacturing, offering customizable veneer species, cores, finishes, sizes, and performance specifications. The company operates its primary manufacturing facility in Eugene and also operates DrawerBox Specialties in Orange, California. States Industries currently employs more than 300 people.
The company headquarters is located in 29545 Enid Road East, Eugene, OR 97402, United States. 201-500 Employees
-
Skaff Group
October 3, 2026
•
[ ransomware, retail, finance ]
Skaff Group was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-10-03. Sector: Other. Website: skaffgroup.com. Skaff Group SKAFF is a leader in Lebanon in the field of decorative fabrics. Files: 139,377Data volume: ~268 GB**Full HR dossiers - ~40 scans of Lebanese national ID cards (both sides + photos), a director's passport, civil-status extracts.Banking data - employee account files at Byblos Bank (named per person), Cedrus Bank corporate card program with banker contacts, account statements.Payroll violations - unpaid-salary analysis file, payroll module source code, staff leave requests.Employees' private lives - family photo archives on the work server.Commerce price lists, Four Seasons and Les Galeries proposals, customs/export documents (Dubai, Erbil), customer claims. More
-
Precon Marine Inc
October 3, 2026
•
[ ransomware, manufacturing ]
Precon Marine Inc was listed as a victim on the leak site of the netrunner ransomware group; the attack is estimated to have taken place on 2026-10-03. Sector: Transportation. Website: preconmarine.com. Precon Marine, Inc. is a diversified marine contractor specializing in heavy marine construction and advanced subsea services.
-
Genesis Credit Management
October 3, 2026
Genesis Credit Management was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-03. Sector: Financial Services. Country: United States of America. Website: www.genesiscred.com.
-
M****C
October 1, 2026
•
[ ransomware ]
M****C was listed as a victim on the leak site of the payoutsking ransomware group; the attack is estimated to have taken place on 2026-10-01. Country: United States of America. Website: m****.com.
-
Mutsumi Group
October 4, 2026
•
[ ransomware, manufacturing ]
Mutsumi Group was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-04. Sector: Manufacturing. Country: Japan. Website: www.mutsumi-g.co.jp.