Recent Breaches
-
November 4, 2026 • bataaab was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Other.
-
November 4, 2026 • The Courier Guy was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Transportation. Country: South Africa. The Courier Guy (thecourierguy.co.za) is a South African courier company. The dump covers its operations: purchase orders to suppliers, staff recruitment and training records, leave schedules, shopping-centre lease renewals (Wonderpark, South Coast Mall, Growthpoint The Avenues), security SLAs, and vehicle finance documents.
-
November 4, 2026 • Interativa Plasticos (Interplast) was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Manufacturing. Country: Brazil. Interativa Plasticos (Interplast brand, interativaplasticos.com.br) is a Brazilian plastics processor (HDPE/PEAD and PP compounds): commercial proposals, price lists (incl. scrap trade), NFe XML/PDF invoices, production and laboratory report templates (laudos), pigment-change records, and export tax spreadsheets.
-
November 4, 2026 • BCH was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-11-04. Operations of a residential care facility: daily operational reports (DOR) and daily service reports (DSR) for day and night shifts (2016-2026), incident and occurrence reports, staffing notes, and client-count records (up to 80 clients in house).
-
November 4, 2026 • Hirschinjurylaw was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Professional Services. Country: United States of America. Town Center Pharmacy is a retail pharmacy selling prescription and over-the-counter medicines. The company also handles medical billing and insurance payouts, including litigation/insurance documents.
-
November 4, 2026 On was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Retail & E-Commerce. Country: Switzerland. MODA HAIR SALON retails professional hair care products (notably Farouk Color products) and provides hair salon services. The company also works with distributors and suppliers, handling product returns under established credit terms.
-
November 4, 2026 • Ulaval was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Education. Country: Canada. The company is engaged in radiology and medical services, as confirmed by its name and mentions of a radiologists' association in the archive documents.
-
November 4, 2026 • baeaqab was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-11-04.
-
November 4, 2026 • Jobmongers was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Professional Services. Country: United Kingdom of Great Britain and Northern Ireland. Website: jobmongers.com. Organization with 2 emails extracted. Domain: jobmongers.com
-
November 4, 2026 • Kde was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Technology. Moroccan industrial/automotive company (icn.ma) with a full in-house accounting office: general-ledger and cash-desk files, client balances, bank transfer orders (BMCE), purchase orders, staff lists, and trade documents including an overseas distribution agreement and proforma invoices for FAS Automotive (encap_maroc).
-
November 4, 2026 • Ruixiang Jidian was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Manufacturing. Elevator manufacturer, brand Yinhai. Produces machine-room-less (MRL) passenger elevators and OEMs elevator components (car top/bottom, car wall panels, COP, doors) for OTIS, KONE, Hitachi, Toshiba, TKS. Export business (project DUBROVSKIY-2, customer Saibo). Infrastructure: Synology NAS (admin), IT dept with Epson L1118. | China, Jiangsu Province (Limin North Road)
-
November 4, 2026 • Geetees was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-11-04. G.Twist (Wholesale) Ltd. wholesales goods, including licensed merchandise such as Harry Potter and Christmas items. The company also tracks orders, inventory, and online sales through payment systems.
-
November 4, 2026 • Jatl was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-11-04. Jay Ace Technologies Ltd. manufactures lead-acid/storage batteries and related technology modules, including battery forming equipment, lead feeding, and hydraulic casting.
-
November 4, 2026 • Vinitgloves was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Manufacturing. Country: India. Website: vinitgloves.com. Organization with 1029 emails extracted. Domain: vinitgloves.com
-
November 4, 2026 • baiapai was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Technology. Bziers, Occitanie, France
-
November 4, 2026 • Dian was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-11-04. Country: Colombia. Website: dian.gov.co. Organization with 339 emails extracted. Domain: dian.gov.co
-
November 4, 2026 • Msn was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Technology. Country: United States of America. Website: msn.com. Organization with 61167 emails extracted. Domain: msn.com
-
October 10, 2026 • TFG London was listed as a victim on the leak site of the ransomhouse ransomware group; the attack is estimated to have taken place on 2026-10-10. Sector: Retail & E-Commerce. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.tfglondon.com. BTFG London is a fashion retail group that includes several premium brands such as Hobbs, Phase Eight, Whistles, White Stuff, and Inside Story. Established in the UK market in 2015, the company has expanded its portfolio and opened its first TFG London store in December 2019. The group focuses on fashion, lifestyle, and homeware, catering to clients seeking high-quality designer products.
-
November 4, 2026 • centratamagroup.com was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Other. Country: Brazil. Website: centratamagroup.com. PT Centratama Telekomunikasi Indonesia, Tbk (CTI) is a leading telecommunications infrastructure pro...
-
November 18, 2025 • In November 2025, Harvard University suffered a data breach later linked to a ShinyHunters "pay or leak" extortion attempt. The data contained 851k unique email addresses relating to the university's alumni and fundraising systems, along with extensive profile information for donors, alumni, parents and some faculty, staff and students. In Harvard's disclosure notice, the university stated that the breach impacted "personal information such as email addresses, telephone numbers, home and business addresses, event attendance, details of donations to the University, and other biographical information pertaining to University fundraising and alumni engagement activities".