Recent Breaches
-
October 2, 2026 • The Official College of Architects of Len (COAL) was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-10-02. Sector: Professional Services. Country: Mexico. The Official College of Architects of Len (COAL) was established on July 12, 1931, encompassin g the regions of Len, Asturias, and Galicia. The College of Galicia was legally separated in 1 973 and the College of Asturias in 1981. We will upload 77gb of corporate data soon. Detailed personal information (passports), financia ls, students and clients information and so on.
-
October 2, 2026 • Paessolucoes was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-10-02. Sector: Other. Country: Brazil. paessolucoes.com.br is the website of Paes Solues, a Brazilian IT company offering business software, hosting, cloud backup, VPS, and technical support, based in Campo Mouro, Paran.
-
October 3, 2026 • seven seas group was listed as a victim on the leak site of the Spirals ransomware group; the attack is estimated to have taken place on 2026-10-03. Sector: Transportation. Country: United Arab Emirates. Website: sevenseasgroup.com. Seven Seas is a global maritime services group that specializes in providing general ship supplies, stores, spare parts & leading technical maritime brands through its extensive global network.
-
September 21, 2026 • Forma Therapeutics Holdings, Inc. was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Healthcare. Country: United States of America. Website: www.novonordisk.com. - Clinical Trial & Statistical Data- Electronic Lab Notebooks & Research IP- Drug Discovery & Pipeline Data- Biological Research & Genomic Data
-
October 3, 2026 • World Cup 2034 was listed as a victim on the leak site of the Wallstreet ransomware group; the attack is estimated to have taken place on 2026-10-03. Sector: Other. Country: Saudi Arabia. We compromised the network of the China Railway Construction Corporation Saudi Branch / Sama Construction consortium, the MAIN CONTRACTOR building the Jeddah Central Stadium for the FIFA World Cup 2034. 17 TB / 1.5M files exfiltrated, including: - Main contract documents, interim payment certificates, and claims against the owner (Jeddah Central Development Company, PIF) - Active dispute and suspension claim records - Personal data of 150,000+ employees, incl. Saudi employees - IFC design documentation for the stadium - Supplier and subcontractor commercial data (bid tabulations)
-
October 4, 2026 • daralteb.com was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-10-04. Sector: Healthcare. Country: Iran. Website: daralteb.com. Dar Al-Tib is one of Egypt's and the Middle East's first and leading centers specializing in infertility treatment and a...
-
October 4, 2026 • euroditel.com was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-10-04. Sector: Technology. Country: France. Website: euroditel.com. Groupe Euroditel is a French telecommunications and IT systems integrator founded in 1966, headquartered in Bagneux, l...
-
October 4, 2026 • Nipigon District Memorial Hospital was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-10-04. Sector: Healthcare. Country: Canada. Nipigon District Memorial Hospital offers a range of healthcare services including diagnostic imaging, lab services, physiotherapy, and an assisted living program. The hospital aims to serve patients and residents in the Nipigon district, focusing on community health and well-being. They also provide specialized services such as Ontario Telemedicine Services and Meals on Wheels. The hospital is committed to strategic planning for future healthcare needs, as outlined in their CARE 2030 initiative. The company headquarters is located in 125 Hogan Road, Nipigon, ON P0T 2J0, Canada. 51-200 Employees
-
October 4, 2026 • Silicon Valley Glass was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-10-04. Sector: Manufacturing. Country: United States of America. Website: www.siliconvalleyglass.com. United States
-
October 5, 2026 • Grupo Industrial Tauro was listed as a victim on the leak site of the lamashtu ransomware group; the attack is estimated to have taken place on 2026-10-05. Sector: Manufacturing. Country: Mexico. Website: grupotauro.com. is a Mexican steel-products manufacturer based in Monterrey (Nuevo Len): perimeter protection and mesh (brands Euroreja, Reja Tauro, Tauro, Serpentina), high-security/anti-glare mesh, razor coil, industrial railings and bollards;
-
October 5, 2026 • Thomas Y. Pickett & Co., Inc. was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-10-05. Sector: Professional Services. Country: United States of America. Website: typco.com. [consulting] Thomas Y. Pickett & Co., Inc. founded in 1926, headquartered in Addison/Dallas, Texas is one of the oldest property tax appraisal consulting firms in the United States. They appraise mineral, industrial, and utility properties for county appraisal districts across Texas, Wyoming, North Dakota, Mississippi, Oklahoma, and beyond. Roughly 40 employees, ~$5.3M annual revenue, nearly a century of reputation. Inventory: 13 SQL Server database backups (127 GB) including the 102 GB TYPortal web portal database containing all property owner records and user credentials Complete HR records for all 40+ employees Social Security cards, W-4s, direct deposit forms, salary schedules, medical records, termination documents, TWC hearing notices 11 GB Azure DevOps repository the entire source code history, including a 6,105-line proprietary COBOL program (NOTICE14) that generates tax appraisal notices 200+ client contracts with pricing for every county appraisal district they serve the competitive intelligence gold mine Complete financial records bank statements (PNC and Frost), 10-year budget, accounts receivable, payroll, and evidence of a prior fraud incident in May 2025 A developer's password exposed in a directory name visible to anyone who looks at the file listing A PKCS#12 digital signing certificate (private key) for an HR manager enabling document forgery
-
October 5, 2026 Company #2 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-05. Sector: Financial Services. Country: Canada. Financial services Canada | [PENDING EXPOSURE: data publishes 2026-10-06 15:00 UTC]
-
October 5, 2026 • PANCARIBBEAN LOGISTICS GROUP was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-10-05. Sector: Transportation. Country: Trinidad & Tobago. Panamanian logistics company operating in the field of international cargo transportation. Financial documents, personal and customer data. [Sector: Transportation]
-
October 5, 2026 • Rueegseggerag was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-10-05. Country: Switzerland. Website: rueegseggerag.ch. Organization with 1 emails extracted. Domain: rueegseggerag.ch
-
October 5, 2026 Onsemi was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-05. Sector: Technology. Country: United States of America. Website: www.onsemi.com.
-
October 5, 2026 • bwi-bau.de was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-10-05. Sector: Professional Services. Country: Germany. Website: bwi-bau.de. The organization was established in October 1964 as a subsidiary of the Construction Industry Association of North Rhine-Westphalia. It originally
-
September 5, 2026 • JPS Health Network was listed as a victim on the leak site of the VYPR ransomware group; the attack is estimated to have taken place on 2026-09-05. Sector: Healthcare. Country: United States of America. Website: www.jpshealthnet.org. John Peter Smith Hospital, JPS Surgical Center - Arlington, a network of community-based health centers, school-based health centers and psychiatric services at Trinity Springs Pavilion - a stand-alone facility.
-
September 5, 2026 • Gen3 was listed as a victim on the leak site of the VYPR ransomware group; the attack is estimated to have taken place on 2026-09-05. Sector: Other. Country: United States of America. Website: www.gen3construction.com. Gen3 CO is a leading subcontractor specializing in the installation of various exterior wall systems, including composite wall panels, foam insulated panels, and metal roofing. With a strong portfolio in the Rocky Mountain and Southwest regions, Gen3 serves owners, architects, and contractors by delivering high-quality installation services. Their product offerings include aluminum composite materials, Centria metal panels, and single skin metal wall panels. Gen3 is recognized for its commitment to quality and professionalism in every construction project.
-
October 5, 2026 • Global Security Concepts was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-05. Sector: Professional Services. Country: United States of America. Website: www.gscsecurity.com.
-
October 5, 2026 • M** A******* G********** O******* a** P***** S****** A********* was listed as a victim on the leak site of the netrunner ransomware group; the attack is estimated to have taken place on 2026-10-05. Country: United States of America. Website: w**.m******.c**.