medinahealthcare.net
November 3, 2026
•[ ransomware, healthcare ]
medinahealthcare.net was listed as a victim on the leak site of the Scarlettgroup ransomware group; the attack is estimated to have taken place on 2026-11-03. Sector: Healthcare. Website: medinahealthcare.net. Medina Healthcare System is a Texas-based healthcare provider offering hospital services, primary care, emergency treatment, and specialty medical services.
bliss1041.com
November 3, 2026
•[ ransomware, technology ]
bliss1041.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-11-03. Country: United States of America. Website: bliss1041.com. nda
innovativedriven.com
November 3, 2026
•[ ransomware, technology, hack ]
innovativedriven.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-11-03. Sector: Technology. Country: United States of America. Website: innovativedriven.com. .
butler.legal
November 3, 2026
•[ ransomware, leak ]
butler.legal was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-11-03. Sector: Professional Services. Country: United States of America. Website: butler.legal. client data personal case
roundglass.com
November 3, 2026
•[ ransomware, healthcare ]
roundglass.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-11-03. Sector: Healthcare. Country: United States of America. Website: roundglass.com. proof
fidepartners.com
November 3, 2026
•[ ransomware, finance ]
fidepartners.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-11-03. Sector: Financial Services. Country: Spain. Website: fidepartners.com. .
Goldsmith & Hull
November 4, 2026
•[ ransomware, finance, healthcare ]
Goldsmith & Hull was listed as a victim on the leak site of the Aoqin ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Professional Services. Country: United States of America. The Law Offices of Goldsmith & Hull A.P.C. specializes in providing legal representation in various areas of law, including personal injury, medical malpractice, and insurance matters. They offer services such as collection, subrogation, and financial guarantee insurance, catering to both retail and commercial clients. The firm is experienced in handling cases in all Federal and State courts of California. Their intended clients include individuals seeking personal injury claims and Fortune 500 companies requiring collection services. Status: Not paid. Data publication: 2026-11-11 08:00 UTC. Revenue: $5M. Employees: 50. Data type: legal, personal, clientsData, confidential.
Nextron Technology
November 4, 2026
•[ ransomware, technology ]
Nextron Technology was listed as a victim on the leak site of the Aoqin ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Technology. Country: China. NX Electronics Limited, also known as Nextron, specializes in electronic parts, offering a wide range of products including CPUs, SSDs, graphics cards, DRAM, and motherboards. The company prides itself on providing high-quality products, prompt delivery, and reliable service to its clients. With years of experience in the industry, Nextron collaborates with trustworthy partners to ensure customer satisfaction. Their target clients include businesses and individuals seeking dependable electronic components. Status: Not paid. Data publication: 2026-11-10 17:00 UTC. Revenue: $13.7M. Employees: 200000. Data type: clientsData, confidential.
Petroshahd(Enap Sipetrol International - Egypt Branch)
November 4, 2026
•[ ransomware, energy, finance ]
Petroshahd(Enap Sipetrol International - Egypt Branch) was listed as a victim on the leak site of the Aoqin ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Energy & Utilities. Country: Chile. Established in 1950 and headquartered in Las Condes, Chile, ENAP is engaged in the exploration, production, and refining of hydrocarbons and their derivatives. ENAP performs logistical and site maintenance to operational sites. Status: Not paid. Data publication: 2026-11-11 11:00 UTC. Revenue: $504.9M. Employees: 5000. Data type: confidential, clientsData, banking.
SILIKO d.o.o.
November 4, 2026
•[ ransomware, manufacturing, financial ]
SILIKO d.o.o. was listed as a victim on the leak site of the Aoqin ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Manufacturing. Country: Slovenia. Siliko d.o.o. is a development supplier and manufacturer of technical products made of elastomers and thermoplastics with over 30 years of tradition. During this period, production program expanded substantially and nowadays includes activities which offer customers a comprehensive range of services from draft design and construction to tool making and mass production. 70 percent of our production is being exported to the European Union markets, predominantly to buyers from the German automotive industry. At the same time, we are an important supplier for the household appliances industry on the European market, also cooperating with partners in the electrical, sanitation and construction industries. With state-of-the-art technology, knowledge and experience, we strive to offer the best products and to go beyond our customers expectations. Status: Not paid. Data publication: 2026-11-09 14:00 UTC. Revenue: $61.6M. Employees: 130. Data type: banking, clientsData, confidential.
IHG Hotels & Resorts (Estate)
November 3, 2026
•[ ransomware, misconfiguration, leak ]
IHG Hotels & Resorts (Estate) was listed as a victim on the leak site of the BYOD ransomware group; the attack is estimated to have taken place on 2026-11-03. Sector: Hospitality. Country: United Kingdom of Great Britain and Northern Ireland. Nice LDAP Binding Password being '123'. Rotating things won't really save you casue it's not hard to hop back on your network. Anyways, we now have; Customer Data, AWS Keys, Full Access to CyberArk, Complete Employee PII, Booking information included but not limited to, guest name, billing address, company, rate code, room charges, taxes, spend, property & stay dates. We also have the loyalty data store. Additionally we have reservation and payment ledgers for the folio reservation (guest name, address, phone, email, arrival and departure, rate, property) with Access to the AD + All Financial Records. This affects the big names such as Six Senses, Holiday Inn, Holiday Inn Express, Staybridge Suites, Garner, Candlewood, Crowne Plaza, Mayfair Hotel, etc etc you can pick up what we are putting down at this point. Anyways, you know where to find us (contact tab). We will take you down when communication has been established between our team and yours.
ASLAN TEKSTİL ve KONFEKSİYON San.ve Tic. A.Ş.
November 4, 2026
•[ ransomware, manufacturing, leak ]
ASLAN TEKSTL ve KONFEKSYON San.ve Tic. A.. was listed as a victim on the leak site of the Doommageddon ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Manufacturing. Country: Turkey. Status: leaked | Data size: 3.27 GB | Files: 6457 files | Deadline: 2026-11-04T00:00:00Z
sigsauer.com
November 4, 2026
•[ ransomware, manufacturing ]
sigsauer.com was listed as a victim on the leak site of the Scarlettgroup ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Manufacturing. Country: United States of America. Website: sigsauer.com. SIG SAUER is a leading firearms manufacturer specializing in pistols, rifles, ammunition, optics, and accessories for civilian, law enforcement, and military use.
Palm Vascular Centers
November 2, 2026
•[ ransomware, healthcare ]
Palm Vascular Centers was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-11-02. Sector: Healthcare. Country: United States of America. Website: palmvascular.com. A company specializing in collaboration with interventional radiologists and vascular surgeons
gWorks
November 2, 2026
•[ ransomware, technology ]
gWorks was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-11-02. Sector: Other. Country: United States of America. Website: gworks.com. A technology company specializing in software solutions designed to help small towns and rural areas make effective use of software and technology
Juge, Napolitano, Ruli, Putfark & Pittman
November 4, 2026
•[ ransomware, leak, healthcare ]
Juge, Napolitano, Ruli, Putfark & Pittman was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Professional Services. Juge, Napolitano, Ruli, Putfark & Pittman Juge, Napolitano, Ruli, Putfark & Pittman / 'WC Defense' - insurer & corporate defense law firm.The Juge Firm (Metairie / Covington, LA, founded 1983) is one of the oldest workers' compensation defense law firms, protecting employers, insurers and TPAs against injured workers' claims.Clients (148 client-guideline files): Sedgwick, Gallagher Bassett, Broadspire/Crawford,ESIS/ACE, AIG, Allstate, Chubb, Zurich, Amazon, Walmart, Home Depot, CVS Health, FedEx, Lyft, Costco, Hilton, Northrop Grumman, State Farm,Travelers, Coca-Cola, Fluor, GEO Group, Archdiocese of New Orleans, the cities of New Orleans / Baton Rouge / Shreveport, and others.2,383,324 files, ~3.2 TB.- 4,477 full workers' comp defense case files: 175,993 PDFs, 73,239 DOCX, 61,622 DOC, 55,798 MSG emails, 28,244 TIF scans;- claimant medical imaging: 6,461 DICOM files (MRI/CT/X-ray);- 28,410 medical EOBs and disputed LDOL-WC-1008 claims (full PII + diagnoses of injured workers);- 1,884 new-file intake sheets with complete claimant PII (SSN, address, DOB, injury);- 3,265 counterparty W-9 forms (EINs, signatures, current 20242025);- 850 claimant surveillance videos ('Surveillance', 214 GB) - covert footage of injured workers;- inbound attorney-correspondence faxes, live ECF/PACER court logins, and 148 confidential insurer client guidelines. More
Company #128
November 4, 2026
•[ ransomware, leak, technology ]
Company #128 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-11-04. Country: United States of America. consumer identity data and analytics United States | [PENDING EXPOSURE]
Company #129
November 4, 2026
•[ ransomware, retail ]
Company #129 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-11-04. Country: United States of America. office supply retail United States | [PENDING EXPOSURE]
Company #130
November 4, 2026
•[ ransomware, healthcare, technology ]
Company #130 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-11-04. Country: United States of America. specialty pharma data analytics United States | [PENDING EXPOSURE]
Company #131
November 4, 2026
•[ ransomware, retail ]
Company #131 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-11-04. Country: Germany. online lighting retail Germany | [PENDING EXPOSURE]