Recent Breaches
-
November 10, 2026 • BROTHERS EXPRESS LLC was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-11-10. Sector: Transportation. Country: United States of America. Website: www.broexp.com. United States
-
November 10, 2026 NY Snacks was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-11-10. Sector: Retail & E-Commerce. Country: United States of America. Website: www.nysnacks.com. United States
-
November 10, 2026 • Bear Valley Community Hospital was listed as a victim on the leak site of the Dark Project ransomware group; the attack is estimated to have taken place on 2026-11-10. Sector: Healthcare. Country: United States of America. Website: www.bvchd.com. About Bear Valley Community Hospital Bear Valley Community Healthcare District offers a wide range of emergency medical and healthcare services in Big Bear Valley, including urgent care, family health, and specialized medical treatments. Their services encompass various fields such as cardiology, behavioral health, rehabilitation, and dental care, catering to patients of all ages. The organization aims to provide high-quality healthcare regardless of insurance status, ensuring accessibility for the community. A Bear Valley Community Hospital suffered a cyberattack leading to the theft of over 400 GB of sensitive data. As a result of the data breach, employee data, the companys confidential financial information, bank documents, patients personal documents, Social Security numbers, medical records, medical histories, and surgical records were stolen.
-
November 10, 2026 • MTM&O Gold Refinery DMCC was listed as a victim on the leak site of the Dark Project ransomware group; the attack is estimated to have taken place on 2026-11-10. Sector: Manufacturing. Country: United Arab Emirates. Website: mtm-o.com. About MTM&O Gold Refinery DMCC MTM&O Gold Refinery DMCC is one of the largest refineries in the region and is a leader in terms of customer service, reliability, efficiency and quality. As a result of a hacker attack on one of the regions largest gold refineries, documents were stolen. These included employee passports and other documents, as well as the companys know-how and technologies, and confidential information totaling more than 43 GB.
-
November 10, 2026 • AWO Bundesverband was listed as a victim on the leak site of the bravox ransomware group; the attack is estimated to have taken place on 2026-11-10. Sector: Other. Country: Germany. Website: awo.org. Workforce Development, Vocational Training and Employment Solutions.
-
November 10, 2026 • Capetown was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-11-10. DSV provides logistics, transportation, and supply chain services, including sea, air, and road freight as well as warehousing and customs services.
-
January 1, 2023 • cyber infection/unauthorized access
-
January 1, 2006 • Lost/Stolen Device
-
January 1, 2024 • data leak (12 Nov breachforums)
-
November 6, 2026 • 1da9100e55aqf21eb651eNea was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-11-06. Country: Albania. 1da9100e55aqf21eb651eNea
-
November 7, 2026 • Benesch Law was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-11-07. Sector: Professional Services. Country: United States of America. [AI generated] Benesch Law, formally Benesch, Friedlander, Coplan & Aronoff LLP, is a United States-based law firm headquartered in Cleveland, Ohio. It operates in the legal services industry, providing counsel across practice areas including corporate law, litigation, intellectual property, labor and employment, real estate, transportation and logistics, and healthcare. The firm serves businesses, financial institutions, and individual clients nationwide.
-
November 7, 2026 • Kahler Automation was listed as a victim on the leak site of the anubis ransomware group; the attack is estimated to have taken place on 2026-11-07. Sector: Manufacturing. Country: Germany. Fertilizer, grain and exposed data.
-
November 6, 2026 Acondistec was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-11-06. Sector: Manufacturing. Country: Germany. Website: acondistec.de.
-
November 7, 2026 • maersk was listed as a victim on the leak site of the Whitearmor ransomware group; the attack is estimated to have taken place on 2026-11-07. Sector: Transportation. Country: Denmark. Maersk is one of the world's two largest container lines: founded in 1904, headquartered in Copenhagen, roughly 100,000 employees in about 130 countries, and USD 55.5 billion in revenue in 2024, with around USD 12 billion of EBITDA. Your contract-logistics arm, the former LF Logistics, runs fulfilment for many of the world's largest consumer brands. Five million dollars is roughly four hours of that EBITDA. We hold approximately 100 GB of data from your OCF / LF Logistics platform: - 29,297 driver records, 16,093 of them with plaintext passwords - 16,123 staff accounts, including 33 SUPER_ADMIN accounts - 18,913 delivery recipients with names and street addresses - 64,665 signed delivery receipts (214,107 documents in total) - 14.44 million inventory rows, 189,248 purchase orders, 334,432 ASNs - 27,842 mobile device logs containing phone numbers, emails and IMEIs You have 30 days to contact us and pay USD 5,000,000 in bitcoin Emails with instructions will be sent to you shortly, if you have failed to receive them, Contact: Session: 0547b7f96d469ecb332e89d0108e71c92df5bacff6c4ed5b9801ab5fffe872ee67 Email: whitearmorrxd@proton.me
-
October 25, 2026 • Gestimed was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-10-25. Sector: Healthcare. Country: Spain.
-
October 17, 2026 • Meller Group was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-10-17. Sector: Other. Country: United Kingdom of Great Britain and Northern Ireland. - Financial Records- Employee Accounting Records
-
October 14, 2026 • IMD Group was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Professional Services. Country: Italy. - Financial Records- Employee Data
-
November 7, 2026 • Treuhand & Immobilien Abt AG was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-11-07. Sector: Financial Services. Country: Switzerland. Treuhand & Immobilien Abt AG Treuhand & Immobilien Abt AG is your partner and advisor for private individuals as well as small and medium-sized enterprises (SMEs). More
-
November 7, 2026 • Higginbotham was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-11-07. Sector: Professional Services. Country: United States of America. insurance brokerage United States | The complete correspondence attachment store of a large independent insurance brokerage: over 217,000 client policy and working documents from 2013 through 2026, including workers compensation and property policies of named clients; Client policy and underwriting records: carrier underwriting questionnaires, producer reports with client codes, names and policy numbers, and producer email with commission, prospect and benefits data; Client reference rosters naming the institutions the brokerage insures, producer books of business with policy numbers and premiums, and the full customer relationship databases | [NOT PAID EXPOSED]
-
November 7, 2026 • Infutor Data Solutions was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-11-07. Sector: Technology. Country: United States of America. consumer identity data and analytics United States | Consumer identity records: names, street addresses, telephone numbers, birth years and consumer email addresses, millions of rows; A profiled production table of 590,404,149 rows of consumer survey response data; Consumer leads with full identity graph enrichment, including 13,660 unique consumer email addresses in a single file and 102,062 full identity records with 100,957 unique emails in another; The internal inventory showing which of the production tables hold consumer personal data, including tables that hold Social Security numbers; A warehouse table of over 1.7 billion consumer rows with names and dates of birth, counted file by file, plus a consumer address table of over 1.1 billion rows; Merchant brand spending affinity data; Client delivery credentials stored in plaintext; State level delivery work files with 203,505,791 counted rows carrying consumer names, birth years, cleartext emails and internet protocol addresses, and a property scoring table of 151,864,181 rows with names, phones, addresses and property values | [NOT PAID EXPOSED]