Recent Breaches
-
November 2, 2026 • RedBlink Technologies was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-11-02. Sector: Technology. Country: Canada. Website: redblink.com. redblink.com RedBlink Technologies is an AI and software development company founded in 2008 in Danville, California, with over 150 employees across a hybrid onshore/offshore model spanning the US, India, Canada, Italy and Dubai. It specializes in generative AI, machine learning, NLP, AI chatbots, web and mobile development, cloud, DevOps and AI-powered SEO services. Led by Director of Delivery Sahil Aggarwal and Director Bahadur Singh, it serves healthcare, retail and technology clients from startups to enterprises. Revenue is estimated at 10 to 25 million dollars with competitive rates around 15 dollars per hour thanks to its India-based development center in SAS Nagar. Its tech stack includes Python, TensorFlow, PyTorch, React, Node.js, AWS and fine-tuned LLM models like BERT and GPT. The company is self-funded with no external investors and offers rapid staff augmentation including ChatGPT developers within 48 hours.
-
November 2, 2026 • Lighting Direct was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-11-02. Sector: Retail & E-Commerce. Country: New Zealand. Website: lightingdirect.co.nz. lightingdirect.co.nz Lighting Direct is New Zealand's largest lighting specialist, founded in 1974 in Auckland by Bill and Penny Fulford as Keldene Industries and rebranded in 1992, now operating 23 stores nationwide plus an online store. Led by CEO Dean Fulford, the second generation of the family, it buys directly from overseas manufacturers, landing one container of lighting daily to its Auckland distribution center. Its range covers pendant lights, ceiling lights, wall lights, downlights, outdoor lighting, lamps and ceiling fans across modern, Scandinavian and classic styles. The company was the first retailer to reopen after the 2011 Christchurch earthquake and celebrated 50 years in business in 2024. In 2025 it opened a new Queenstown store and launched a redesigned online platform. Free design consultations, a trade programme for builders and electricians, free shipping over 200 dollars and 7-day returns make it the go-to lighting destination for Kiwi renovators.
-
November 2, 2026 • Hausarztpraxis Ries was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-11-02. Sector: Healthcare. Country: Germany. Website: hausarzt-praxis-ries.de. hausarzt-praxis-ries.de Hausarztpraxis Ries is a family general practice in Frickenhausen, Baden-Wrttemberg, Germany, run by three doctors from the Ries family offering comprehensive primary care for patients aged 14 and above. Its services span acute and chronic disease treatment, minor surgery, pain therapy, palliative care, geriatric medicine and acupuncture. The practice is equipped with ECG, Holter monitoring, ultrasound, spirometry and an in-house lab plus disease management programs for diabetes, coronary disease and asthma. Led by Alexander Ries as the responsible physician, it accepts statutory and private insurance and communicates in German, English and Russian. It also offers weight loss injections, travel medicine, diving and driver medical certificates and home visits for immobile patients. Extended hours, video consultations and separate phone lines for prescriptions and appointments make it highly accessible for the Frickenhausen community.
-
November 2, 2026 • McEwan Fraser Legal was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-11-02. Sector: Professional Services. Country: United Kingdom of Great Britain and Northern Ireland. Website: mcewanfraserlegal.co.uk. mcewanfraserlegal.co.uk McEwan Fraser Legal is Scotland's largest property law firm and award-winning estate agency, founded in 2009 in Edinburgh by Ken McEwan and former footballer Scott Fraser, with 100 to 160 staff across 20 plus locations in Scotland. It was the first Scottish firm to win the Sunday Times Best Estate Agency in the UK award in 2013 and has since collected over 20 national awards including multiple Negotiator Awards and Scottish Legal Awards. Its unique model combines solicitors, estate agency and marketing under one roof with a proprietary Property Matching database and PRO tracking system. The firm operates 7 days a week until midnight, employs translators in 12 languages for overseas investors and runs 5,000 plus targeted landing pages. Revenue is estimated at 16 to 19 million dollars annually. CEO Ken McEwan has been nominated for Entrepreneur of the Year at the 2026 British Business Awards.
-
November 2, 2026 • Grupo Lorrio was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-11-02. Sector: Manufacturing. Country: Spain. Website: grupolorrio.es. grupolorrio.es Grupo Lorrio is a Spanish industrial engineering and construction group founded in 1989 in San Fernando de Henares, Madrid, formerly known as J Lorrio SL and rebranded in 2020. Led by sole owner and administrator Ral Lorrio Gonzlez, the group comprises J. Lorrio, Lorclima and Grupo 6, offering full lifecycle services from engineering design to installation and maintenance of industrial systems. Its 14 technical specialties include fire protection, HVAC, refrigeration, compressed air, steam, plumbing, electrical, insulation and intelligent building management. The company holds triple ISO certification covering quality, environmental management and occupational health and safety. With 4 to 10 employees and revenue up to 1.5 million euro, it serves industrial clients across the Madrid region with a no-exclusivity policy that ensures best-fit solutions. Its integrated model covers project, construction, maintenance and energy management phases in one continuous service.
-
November 2, 2026 • Solutis Tecnologias was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-11-02. Sector: Technology. Country: Brazil. Website: solutis.com.br. solutis.com.br Revenue $53 Million Solutis Tecnologias is a Brazilian IT integration company founded in 2010, now headquartered in So Paulo with over 1,200 employees across 5 countries. It specializes in AI, digital transformation, Salesforce, FICO and cloud solutions for financial services, utilities and public sector clients like Sabesp, Furnas, Serasa and Banco Rendimento. In September 2026 it launched SOL.AI, a proprietary AI platform with 6 solution domains covering agentic software engineering, data pipelines, enterprise AI governance and regulatory readiness. Led by CEO Paulo Marcelo since 2019, revenue grew from R$100 million to R$140 million in 2022 with a target of R$300 million by 2027. Strategic partnerships include Salesforce, AWS, Microsoft, Databricks and Elastic. Its own AI Center and Studio.AI development platform power client delivery.
-
November 2, 2026 KABS Pharmaceutical Services was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-11-02. Sector: Healthcare. Country: United Kingdom of Great Britain and Northern Ireland. Website: kabs.com. kabs.com Revenue $27.2 Million KABS Laboratories is a Canadian pharmaceutical CDMO founded in 1997 in Saint-Hubert, Quebec by Dr. Jean-Simon Blais and Dr. Grard Akinocho, with 150+ specialists serving clients in 28 countries. It is a WHO prequalified Quality Control Laboratory audited by Health Canada, USFDA and EU QPs, offering aseptic manufacturing from 100 to 100,000 vials per batch. In 2021 it received CAD 54.2 million from Canada's Strategic Innovation Fund to expand fill-and-finish to 30 million vials per year and build a bioprocessing plant for monoclonal antibodies. Through joint venture MendeliKABS it developed MDK-Nitisinone, an orphan drug for tyrosinemia type 1, priced 10 times lower than the Swedish competitor and approved in Europe, UK, Brazil, China and Algeria. The company also runs an African quality control office in Benin.
-
November 3, 2026 • MAPFRE Brasil 2026 was listed as a victim on the leak site of the Destello ransomware group; the attack is estimated to have taken place on 2026-11-03. Sector: Financial Services. Country: Brazil. MAPFRE Brasil estate. 127,874,330 records indexed and archived: CPF full, RG + issuing agency, date of birth, gender, address with postal CEP, policy numbers, insurance claims history, real emails and mobile phones, corporate directory, AD structure (20 DCs, 40 SCCM endpoints, 2 ADCS CAs), backup ca Sector: Insurance Status: PUBLISHED Deadline: 2026-11-03T16:40:00Z Proof: http://destell6tk2la7w4d7d4apfzsywbt2lsdpui7i2rsfyrike7pxolrbyd.onion/proof/mapfre-brasil-2026.txt
-
November 5, 2026 • Custom Bakehouse was listed as a victim on the leak site of the Dark Project ransomware group; the attack is estimated to have taken place on 2026-11-05. Sector: Retail & E-Commerce. Country: United States of America. Website: www.custombakehouse.com. About Custom Bakehouse Custom Bakehouse specializes in providing quick and convenient baking mixes that allow customers to enjoy homemade baked goods with ease. Their product range includes various scone mixes and other baking essentials designed for both home cooks and retail stores. Custom Bakehouse was the target of a cyberattack. As a result of the attack, more than 100 GB of documents were stolen. Including confidential information
-
November 5, 2026 • Disclosed was listed as a victim on the leak site of the PixelLeaks ransomware group; the attack is estimated to have taken place on 2026-11-05. Sector: Other. This disclosure concerns a verified set of records from a hosted email and IT services provider in Italy. The material scheduled for publication comprises the hosted mail database, covering more than 24,000 mailboxes of the provider's client organizations, together with business correspondence and internal documents. Deadline: 2026-11-09 07:22 UTC
-
November 5, 2026 • Calvary Christian College was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-11-05. Sector: Education. Country: Australia. Website: www.calvary.qld.edu.au.
-
November 5, 2026 First and Final Warning - IHG Hotels & Resorts (Estate) was listed as a victim on the leak site of the BYOD ransomware group; the attack is estimated to have taken place on 2026-11-05. Sector: Hospitality. Here are some sample files for you and the public to see. Let's actually resolve this situation before we have to escalate it in ways we don't want to have to do. Make the right choice, we're not going to warn you again. | ORIGINAL MESSAGE: Nice LDAP Binding Password being '123'. Rotating things won't really save you casue it's not hard to hop back on your network. Anyways, we now have; Customer Data, AWS Keys, Full Access to CyberArk, Complete Employee PII, Booking information included but not limited to, guest name, billing address, company, rate code, room charges, taxes, spend, property & stay dates. We also have the loyalty data store. Additionally we have reservation and payment ledgers for the folio reservation (guest name, address, phone, email, arrival and departure, rate, property) with Access to the AD + All Financial Records. This affects the big names such as Six Senses, Holiday Inn, Holiday Inn Express, Staybridge Suites, Garner, Candlewood, Crowne Plaza, Mayfair Hotel, etc etc you can pick up what we are putting down at this point. Anyways, you know where to find us (contact tab). We will take you down when communication has been established between our team and yours.
-
October 1, 2026 • SevenPlus was listed as a victim on the leak site of the beast ransomware group; the attack is estimated to have taken place on 2026-10-01. Country: Japan. Website: 7plus.co.jp. A Japanese IT company (SevenPlus) that specializes in software development, systems integration, infrastructure solutions, and projects based on generative AI
-
November 3, 2026 • Bridgestone HosePower, LLC was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-11-03. Sector: Manufacturing. Country: United States of America. Website: hosepower.com. A distributor for Flextral Hydraulic Hose and Industrial Hose Products
-
November 5, 2026 • Sistel was listed as a victim on the leak site of the Aoqin ransomware group; the attack is estimated to have taken place on 2026-11-05. Sector: Technology. Country: Brazil. Fundao Sistel de Seguridade Social offers a range of services including previdncia (pension plans) and assistncia mdica (medical assistance) aimed at providing social security solutions. Their intended clients include individuals seeking financial security and healthcare support. The company also provides additional services such as loan simulations and preventive health packages. With a focus on user experience, they ensure access to a network of accredited healthcare professionals and facilities. Status: Not paid. Data publication: 2026-11-12 11:00 UTC. Revenue: $16M. Employees: 1. Data type: clientsData, confidential, personal.
-
November 5, 2026 • Source Energy Services was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-11-05. Sector: Energy & Utilities. Country: Canada. Source Energy Services is a leading provider of oilfield logistics, specializing in efficient s upply chain solutions for the energy sector. The company offers a comprehensive range of servic es including proppant supply, last-mile logistics, and well site sand storage, tailored to meet the evolving needs of its clients. We will upload 93gb of corporate data soon. Detailed employee personal information (passport, D Ls, SSNs and so on), contracts and agreements, lots of financial papers, projects, NDAs and so on.
-
November 5, 2026 • David L Wade & Associates was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-11-05. Sector: Professional Services. David L. Wade and Associates, P.C. is an accounting firm based in Fort Wayne, IN, specializing in a wide range of services for both individuals and businesses. Their offerings include person al financial planning, tax preparation, bookkeeping, payroll, and QuickBooks services, aimed at helping clients navigate complex tax laws and improve financial management. We will upload 7gb of corporate data soon. Employee and client personal information (detailed f inancials, payment details and so on), contracts and agreements, projects, NDAs and so on.
-
November 4, 2026 • System Plus was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Technology. System Plus has been helping companies build, develop, and maintain their IT infrastructure. Th eir IT equipment and solutions are being used by dozens of large companies operating in a wide variety of fields, ranging from banking and financial services to FMCG and software development . The company is one of the leading suppliers of HP, HPE, and Dell equipment to the Romanian su bsidiaries of multinational companies that have global contracts for these brands. We will upload 30gb of corporate data soon. Employee and personal information, contracts and ag reements, client information, projects, NDAs and so on.
-
November 5, 2026 • Westboro Partners was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-11-05. Westboro Partners is a leading provider of business and financial solutions to individuals, ent repreneurs, indigenous and multinational organizations across a wide variety of industries. We will upload 58gb of corporate data soon. Detailed employee personal information (passport, D Ls, SSNs, birth and death certs, medical information and so on), contracts and agreements, fina ncial papers, payment details, NDAs and so on.
-
November 5, 2026 • Omni Hotels & Resorts was listed as a victim on the leak site of the Redact ransomware group; the attack is estimated to have taken place on 2026-11-05. Sector: Hospitality. Country: United States of America. Revenue: Hospitality