Recent Breaches
-
November 4, 2026 • Homestead Creamery was listed as a victim on the leak site of the Dark Project ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Agriculture and Food Production. Country: United States of America. Website: www.homesteadcreameryinc.com. About Homestead Creamery Homestead Creamery specializes in premium dairy products made from milk sourced from local A2A2 cows. They offer minimally pasteurized milk, rich ice cream, and all-natural lemonade, all crafted to preserve flavor and quality. Their products are available in returnable glass bottles and can be found in various stores. The company aims to provide delicious, wholesome dairy options for consumers who appreciate quality and taste. As a result of the attack on Company Homestead Creamery, more than 70 GB of confidential data was stolen. More than 120,000 files were not secured by Company and contain data such as banking and other financial information, as well as employees' personal data.
-
November 4, 2026 • W... G... was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-11-04. Redacted entry - full company name pending disclosure (FULL DATA TIMER active).
-
November 4, 2026 • Unilever was listed as a victim on the leak site of the Whitearmor ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Manufacturing. Country: United Kingdom of Great Britain and Northern Ireland. Unilever is a British multinational consumer goods company headquartered in London. It owns over 400 brands, including Dove, Knorr, Hellmann's, and Rexona, spanning beauty, personal care, home care, and foods, serving consumers in around 190 countries worldwide. We hold 665K contacts, 5.5K OTM accounts with roles and logins, 14M locations, 3.8M shipments, 229M status records, 13.8K invoices, plus 838K distributor loyalty profiles and ledgers. 79 gigabytes, 1.8 million files, three regions. Unilever7.z is about 79GB decompressed. Our ransom demand is only $15,000,000 in BTC Emails with instructions will be sent to you shortly, if you have failed to receive them, Contact: Session: 0547b7f96d469ecb332e89d0108e71c92df5bacff6c4ed5b9801ab5fffe872ee67 Email: whitearmorrxd@proton.me
-
November 4, 2026 • AVIR was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Technology. Website: www.avir.com. United States
-
November 4, 2026 • Misura was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Technology. Country: Canada. Website: www.misura.ca. Canada
-
November 4, 2026 • Standard Sand & Silica was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Manufacturing. Country: United States of America. Website: www.standardsand.com. United States
-
November 4, 2026 • StrucSure Home Warranty was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Financial Services. Country: United States of America. Website: www.strucsure.com. United States
-
November 4, 2026 • Aripack was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Manufacturing. Country: Argentina. Website: www.aripack.com. United States
-
November 4, 2026 • hamiltonhealthcenter.com was listed as a victim on the leak site of the BrainCipher ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Healthcare. Country: Canada. Website: hamiltonhealthcenter.com. [AI generated] N/A I don't have verified, reliable information about a specific organization operating at "hamiltonhealthcenter.com." There are multiple healthcare facilities with similar names ("Hamilton Health Center," "Hamilton Health Centers," etc.) in different locations, and without confirmed details I cannot accurately report on its services, industry specifics, or country of operation without risking providing inaccurate information.
-
November 4, 2026 • fbc.ca was listed as a victim on the leak site of the BrainCipher ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Financial Services. Country: Canada. Website: fbc.ca.
-
November 4, 2026 • K... R... was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-11-04. Redacted entry - full company name pending disclosure (FULL DATA TIMER active).
-
November 4, 2026 bamawat was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Other. [AI generated] N/A I don't have reliable, verifiable information about a company called "bamawat." I'm not able to confirm its existence, industry, operations, or country of registration from credible sources. To avoid providing fabricated or inaccurate threat intelligence, I'm reporting this as unknown rather than guessing details that could be incorrect.
-
November 4, 2026 • bataaab was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Other.
-
November 4, 2026 • The Courier Guy was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Transportation. Country: South Africa. The Courier Guy (thecourierguy.co.za) is a South African courier company. The dump covers its operations: purchase orders to suppliers, staff recruitment and training records, leave schedules, shopping-centre lease renewals (Wonderpark, South Coast Mall, Growthpoint The Avenues), security SLAs, and vehicle finance documents.
-
November 4, 2026 • Interativa Plasticos (Interplast) was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Manufacturing. Country: Brazil. Interativa Plasticos (Interplast brand, interativaplasticos.com.br) is a Brazilian plastics processor (HDPE/PEAD and PP compounds): commercial proposals, price lists (incl. scrap trade), NFe XML/PDF invoices, production and laboratory report templates (laudos), pigment-change records, and export tax spreadsheets.
-
November 4, 2026 • BCH was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-11-04. Operations of a residential care facility: daily operational reports (DOR) and daily service reports (DSR) for day and night shifts (2016-2026), incident and occurrence reports, staffing notes, and client-count records (up to 80 clients in house).
-
November 4, 2026 • Hirschinjurylaw was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Professional Services. Country: United States of America. Town Center Pharmacy is a retail pharmacy selling prescription and over-the-counter medicines. The company also handles medical billing and insurance payouts, including litigation/insurance documents.
-
November 4, 2026 On was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Retail & E-Commerce. Country: Switzerland. MODA HAIR SALON retails professional hair care products (notably Farouk Color products) and provides hair salon services. The company also works with distributors and suppliers, handling product returns under established credit terms.
-
November 4, 2026 • Ulaval was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Education. Country: Canada. The company is engaged in radiology and medical services, as confirmed by its name and mentions of a radiologists' association in the archive documents.
-
November 4, 2026 • baeaqab was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-11-04.