Recent Breaches
-
November 4, 2026 • Company #132 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-11-04. Country: United States of America. insurance brokerage United States | [PENDING EXPOSURE]
-
November 4, 2026 Erowa was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Manufacturing. Country: Switzerland. EROWA Systems specializes in manufacturing automation and clamping technology, offering modular clamping systems, zero-point clamping, and integrated automation solutions. Their products cat er to various industries including medical technology, aerospace, automotive, semiconductor, mo ld and tool making, mechanical engineering, and energy technology. We will upload 538gb of corporate data soon. Employee and personal information (passports, addr esses, phones and other docs), contracts and agreements, client information, projects, NDAs and so on.
-
November 4, 2026 • Krishnan was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-11-04. Krishnan Company is a certified public accounting firm with over 25 years of experience, dedica ted to helping businesses and individuals achieve their financial and business goals. The firm offers a wide range of personalized services, including tax preparation, planning, and strategy , ensuring a comprehensive approach to client needs. We will upload 27gb of corporate data soon. Detailed employee and client personal information ( passports, drivers licenses, SSNs, medical reports, VISAs, registration docs and so on), intern al confidential files, contracts and agreements, client information, projects, NDAs and so on.
-
November 4, 2026 El Cajon, CA was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-11-04. Country: United States of America. El Cajon, CA LOT DESCRIPTION (brief) - U.S. municipal dump: police + 911 + production SQLWhat is for sale. Municipal government of a U.S. city (California): police department, 911 dispatch center (joint authority), fire/EMS, all city services, ~1,100+ employees. ~7.8M files / ~7.8 TB. Content current through late September 2026 - SQL backups, payroll runs and 911 logs up to the final days. Live dump, not an archive. Full snapshot: entire file server, restricted police shares, the 911 center, production databases, workstation backups and terminal-server profiles.Contents. Employee home profiles 195 (~800 GB) department shares - HR/city attorney/finance/council (~1.3 TB) public works + utility billing for ~250K accounts (~1.3 TB) citywide share with W-2s for all employees (~2.4 TB) restricted police archive (~1.7 TB) 911 center: ~6.3M call recordings over ~3 years + caller phone/address/GPS metadata (~380 GB) SQL backups (~440 GB: dispatch CAD 17+ GB, evidence vault, crime lab, RMS, access control, MFA server).Credentials and access (sells first). Bank ACH private key + passphrase, state treasury pool PINs, corporate cards with PAN+CVV+PIN root/enable on the network core (incl. traffic lights) government accounts (FBI, DEA, state DOJ, CJIS, LiveScan) + 111 officer passcodes to the narcotics system DMV certificate + password MFA server dump (TOTP secrets, hardware-token seeds, VPN) password templates/defaults, vendor ERP backdoor cameras on public IPs 13 .pfx signing certs, OAuth secrets, door/access control, map of 401 cameras, gate codes.Personal data. W-2s for all ~1,100 employees (SSN+salary+address) applicant SSN sets thousands of EMS patient records with SSN 337 DMV records credit dossiers with IRS transcripts home addresses of the mayor and council 911 caller GPS metadata (above) production CAD: ~89K incidents, ~3.9K arrests, 941 warrants, 8.3K SSNs.Police kompromat. Internal Affairs master tracker (1,016 rows / ~10 years, named: use of force 239, pursuits 172, claims 223) + 25-year legacy archive (force 998, complaints 2,612) DA 'untruthful officers' list registry of 691 destroyed discipline files + litigation hold list officer DUI/DV (arrests; victim of an untaken DV call later killed) fresh 202526 cases (negligent discharge + lies 58-min discipline audio included; fabricated pursuit; theft during arrest) undercover unit rosters, named + informants (names/DLs/phones) cold cases (suspects/witnesses) SWAT callout sheets with personal cell phones 81 real warrant templates with witnesses CI/surveillance playbooks 911 data fed to federal immigration agencies + active court fight with the state AG over surveillance data sharing county election-office correspondence, PRA packages, protest recordings with caller numbers.Finance/mail. ~77 GB of email archives (HR investigations ~37 GB) 13 years of payroll grants 4 layoff waves asset forfeiture case files GIS/document-system credentials.Buyers. Extortion crews (headline-ready topics already in the news cycle) fraud (W-2/SSN/medical) IABs (live access to a city 911/CAD is a rare lot) plaintiffs' attorneys (new suits, case reviews) media (ready stories) intelligence services (undercover rosters, informants, LE-systems access) criminals (sources and witnesses).Deal formats. Full lot exclusive credentials package (<1 GB, samples before deal) PII packs by class police package for media/negotiation first-publication rights. Freshness: A=2026 (live data), B=202425 (active cases), C=25+ year legacy (pattern proof).Limitations. Some containers are encrypted (passwords not recovered), video archives unreviewed; the data contains live police sources - handle with care. More
-
November 4, 2026 • Kontron North America was listed as a victim on the leak site of the Global Secret Group ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Manufacturing. Country: United States of America. Website: kontron.com. Country: United States, US | Website: kontron.com | Revenue: $1.3 Billion | Industry: Computer Hardware Manufacturing, Software Development & Design | Employees: 250-500 | Properties: 2.37 TB (911,939 Files, 156,022 Folders)
-
November 4, 2026 • fuss-sprunggelenk.de was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Healthcare. Country: Germany. Website: fuss-sprunggelenk.de. The organization focuses on the diagnosis, treatment and surgical management of disorders affecting the foot, ankle joints and lower extremities.
-
November 4, 2026 • sportschule-steinbach.de was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Education. Country: Germany. Website: sportschule-steinbach.de. Established in 1957, the institution is operated by Badischer Sportbund Freiburg e.V., the regional sports federation responsible for supporting organized
-
November 4, 2026 • titres-services.net was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Professional Services. Country: Belgium. Website: titres-services.net. The company provides household assistance and cleaning services under Belgium's government-regulated service voucher (titres-services) system. Its activities primarily focus on
-
November 4, 2026 • valemany.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-11-04. Country: Spain. Website: valemany.com. The company operates as both a wholesale and retail travel agency, providing travel planning, reservation and tour organization services to
-
November 4, 2026 • ruscopackaging.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Manufacturing. Country: United States of America. Website: ruscopackaging.com. Founded in 1972, the company specializes in supplying packaging materials, industrial equipment, replacement parts and technical services to manufacturing, warehousing,
-
November 4, 2026 • ehrenwall.de was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Other. Country: Germany. Website: ehrenwall.de. Founded in 1880, the institution has a long history of providing specialized psychiatric and psychological healthcare services. It focuses primarily
-
November 4, 2026 • jhz-bernardshof.de was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Hospitality. Country: Germany. Website: jhz-bernardshof.de. Established in 1928, the organization provides residential, semi-residential and outpatient support services for children, adolescents and young adults who require
-
November 4, 2026 • prospecthillcamberwell.com.au was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Other. Country: Australia. Website: prospecthillcamberwell.com.au. The organization provides residential accommodation and lifestyle services for older Australians seeking independent living in a secure and socially connected
-
November 4, 2026 • megastarfinancial.com was listed as a victim on the leak site of the BrainCipher ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Financial Services. Website: megastarfinancial.com. [AI generated] N/A I don't have verified, reliable information about a company operating at "megastarfinancial.com." Rather than speculate about a financial services entity's operations, country of registration, or legitimacy, I'd be providing fabricated details, which is especially risky in a threat intelligence context where accuracy about financial sector entities matters for fraud assessment. If you need to verify this domain, I'd suggest checking WHOIS registration data, corporate/financial regulator registries in suspected jurisdictions, and domain reputation or scam-report databases.
-
November 4, 2026 • myronl.com was listed as a victim on the leak site of the BrainCipher ransomware group; the attack is estimated to have taken place on 2026-11-04. Website: myronl.com. [AI generated] N/A I don't have reliable, verified information about a company associated with the domain "myronl.com." Rather than provide speculative or potentially inaccurate details about its operations, industry, or country of origin, I'm flagging this as unknown. If you have additional context (company name, industry sector, or documentation), I can help analyze that information instead.
-
November 4, 2026 spearcenter.com was listed as a victim on the leak site of the BrainCipher ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Professional Services. Country: United States of America. Website: spearcenter.com. [AI generated] N/A I don't have reliable information about a company at "spearcenter.com." I don't want to guess or fabricate details about its business activities, industry, or country of operation, as this domain isn't something I can verify. If you have additional context or source material about this company, I'd be glad to help analyze it.
-
November 4, 2026 • cadorath.com was listed as a victim on the leak site of the BrainCipher ransomware group; the attack is estimated to have taken place on 2026-11-04. Country: Germany. Website: cadorath.com. [AI generated] N/A I don't have reliable, verified information about a company at "cadorath.com" to provide an accurate factual description. Rather than risk providing inaccurate details about this organization's operations, industry, or location, I'm responding with N/A as instructed. If you can share additional context or verified details about this company, I'd be glad to help analyze or summarize that information instead.
-
November 4, 2026 • tritonclaims.com was listed as a victim on the leak site of the BrainCipher ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Financial Services. Country: United States of America. Website: tritonclaims.com.
-
November 4, 2026 • parkell.com was listed as a victim on the leak site of the BrainCipher ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Healthcare. Country: United States of America. Website: parkell.com. [AI generated] Parkell is a United States-based company specializing in the manufacture and distribution of dental equipment, materials, and supplies. Operating within the dental and healthcare products industry, it provides items such as dental curing lights, amalgamators, impression materials, and infection control products to dental professionals, laboratories, and practices. The company is headquartered in New York and primarily serves the North American dental market.
-
November 4, 2026 • ciscocems.com was listed as a victim on the leak site of the BrainCipher ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Technology. Country: United States of America. Website: ciscocems.com. [AI generated] N/A I don't have reliable, verified information about "ciscocems.com" as a distinct company. This domain name superficially resembles "Cisco," but I cannot confirm any legitimate affiliation, business purpose, industry, or country of operation without verified data. Fabricating details about an unfamiliar or potentially suspicious domain would be inappropriate, especially given the risk it may be associated with phishing or impersonation activity.