Recent Breaches
-
October 21, 2026 • EMW was listed as a victim on the leak site of the Climax Inc ransomware group; the attack is estimated to have taken place on 2026-10-21. Country: South Korea. Website: emw.co.kr. Status: Published
-
September 23, 2026 • El Camino Health was listed as a victim on the leak site of the Vortex ransomware group; the attack is estimated to have taken place on 2026-09-23. Sector: Healthcare. Country: United States of America. Type: FULL Severe healthcare exposure: tens of thousands of patient clinical records and PHI, physician credentialing files with licensure and identity documents, employee...
-
October 21, 2026 • Mayur Group was listed as a victim on the leak site of the Climax Inc ransomware group; the attack is estimated to have taken place on 2026-10-21. Sector: Manufacturing. Country: India. Website: mayurgroup.com. Sector: Food provider Status: Published
-
September 23, 2026 • SimonMed was listed as a victim on the leak site of the Vortex ransomware group; the attack is estimated to have taken place on 2026-09-23. Sector: Healthcare. Country: United States of America. Type: FULL Imaging-center operations: tens of thousands of mailbox exports, patient scheduling and imaging-adjacent documents, HR, insurance and vendor files.
-
September 18, 2026 • Andersen Construction was listed as a victim on the leak site of the Vortex ransomware group; the attack is estimated to have taken place on 2026-09-18. Sector: Manufacturing. Country: United States of America. Type: FULL ANDERSEN CONSTRUCTION CONSOLIDATED FINANCIALS Sources: SLT Meeting Financial Update (07-08-...
-
September 18, 2026 • Karlstorz was listed as a victim on the leak site of the Vortex ransomware group; the attack is estimated to have taken place on 2026-09-18. Sector: Healthcare. Country: Germany. Type: FULL Surgical-device R&D and product design files, regulatory and quality documentation, thousands of hospital and vendor contracts, tens of thousands of mail export...
-
September 17, 2026 • Air Communities was listed as a victim on the leak site of the Vortex ransomware group; the attack is estimated to have taken place on 2026-09-17. Sector: Transportation. Country: United States of America. Type: DATA accounts payable/receivable, audited financials FY2006FY2013, TRS restructuring, total ownership summaries, disposition closing CDs, debt documents, per-proper...
-
September 17, 2026 • Storage Mart was listed as a victim on the leak site of the Vortex ransomware group; the attack is estimated to have taken place on 2026-09-17. Sector: Retail & E-Commerce. Country: United States of America. Type: FULL Massive tenant PII exposure at scale: tens of thousands of rental agreements containing names, addresses, ID and driver's-license copies and payment data, plus...
-
November 9, 2026 • DomusVi was listed as a victim on the leak site of the Black X ransomware group; the attack is estimated to have taken place on 2026-11-09. Sector: Healthcare. Country: Spain. Website: domusvi.es. We possess all the data for our clients and their primary contacts, including medical record numbers, first and last names, phone numbers, email addresses, physical addresses, and bank account numbers. chat id:JxN9ot9zzjkEU8
-
September 17, 2026 • Scripps was listed as a victim on the leak site of the Vortex ransomware group; the attack is estimated to have taken place on 2026-09-17. Sector: Healthcare. Country: United States of America. Type: FULL Patient clinical records and PHI, physician credentialing files, workforce timekeeping and leave records, emergency notification and contact data, legal-hold an...
-
November 9, 2026 • Forus Deporte y Ocio S.L was listed as a victim on the leak site of the Black X ransomware group; the attack is estimated to have taken place on 2026-11-09. Sector: Hospitality. Country: Spain. Website: forus.es. We have the complete dataset for 867,800 customers of one of Spains largest fitness chains. ID: NAME ID Number Birthday Email PhoneNumber Bank Account chat id:8AMfga6Y5FmQlK
-
November 4, 2026 • Court Square Group was listed as a victim on the leak site of the Black X ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Financial Services. Country: United States of America. Website: courtsquaregroup.com. We hacked into Court Square Group internal network and stole 3T of customer data from the RegDocs365 and ARCC cloud network. It includes sensitive info such as clinical trial data, research materials, and various reports belonging to Court Square Group customers. To demonstrate our credibility, we will provide a list of some of the data files currently in our possession within the next few days. You may then select files from this list, and we will send the ones you have chosen.
-
November 10, 2026 • Richmond Public Schools was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-11-10. Sector: Education. Country: United States of America. Website: rvaschools.net. Richmond Public Schools (RPS) is a public school district in Virginia's capital city. The district has an enrollment of 22,000 to 24,000 students and includes 25 elementary schools, 7 middle schools, 5 comprehensive high schools, and 3 specialized schools. Due to a lax approach to security and an unwillingness to negotiate, we are releasing their confidential data, including disciplinary records, medical records, speech therapy and mental health records, special needs education records, and personally identifiable information (names, birth dates, addresses, Social Security numbers, etc.). This breach violates the Federal Education Rights and Privacy Act (FERPA), Virginia privacy laws, and HIPAA, undermines the public trust, and exposes RPS to reputational damage and lawsuits from students, parents, and staff.
-
November 10, 2026 • Conecuh Sausage Company Inc was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-11-10. Sector: Agriculture and Food Production. Country: United States of America. Website: conecuhsausage.com. Conecuh Sausage, a family-owned sausage company in Alabama, is known for its hickory-smoked pork sausages made with a proprietary, closely guarded seasoning blend. However, due to a lax approach to security, customer data, payment information, secret recipes/intellectual property, projects, personnel records, and supplier contracts were compromised and are now exposed. This information breach will result in legal notice/fines, financial losses, reputational damage, and loss of competitive advantage.
-
November 10, 2026 • Elmcrest Children's Center, Inc was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-11-10. Sector: Healthcare. Country: United States of America. Website: elmcrest.org. Elmcrest Children's Center, a nonprofit organization in Syracuse, New York, providing residential, mental health, and special education services to children and families, has compromised and is exposing sensitive data, including names, birthdates, Social Security numbers, health insurance information, and medical records. This could result in consequences, including class action lawsuits and regulatory penalties under HIPAA and the New York State SHIELD Act (and potentially FERPA for school records), as well as reputational damage and the risk of identity theft.
-
November 10, 2026 • Assiniboine Dental Group was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-11-10. Sector: Healthcare. Country: Canada. Website: assiniboinedentalgroup.com. Assiniboine Dental Group is a private dental practice in Winnipeg, Manitoba, operating as a "trustee." It is required to securely store patients' personal health information in accordance with the province's Personal Health Information Protection Act (PHIA). However, due to negligence in security, dental records and payment information (patient names, contact information, treatment history, and insurance/financial transaction information) were compromised and are being offered to your attention.
-
November 10, 2026 • Jerome School District was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-11-10. Sector: Education. Country: United States of America. Website: jeromeschools.org. Jerome School District 261 is a public school district located in Jerome, Idaho with an average enrollment of approximately 4,000 students. They have compromised student records (names, dates of birth, contact information, grades, attendance, disciplinary actions, special educational needs records), and employee/parent account information in PowerSchool and related systems due to a security breach. As a result, the district will violate the Educational Privacy Act (FERPA), the Idaho Student Accessibility, Transparency, and Accountability Act, and the breach notification provisions of the Idaho Identity Theft Act.
-
November 10, 2026 • Indiana Area School District was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-11-10. Sector: Education. Country: United States of America. Website: iasd.cc. A school district in Indiana, Pennsylvania (approximately 2,800 students) is required to protect student education records, including medical records and personal information, in accordance with the Pennsylvania Educational Rights and Privacy Act (FERPA). However, due to negligent security and uncooperative behavior, these records were compromised. Consequently, we are providing you with personal information, academic and behavioral records, and financial information, which violates privacy laws, requires notification of affected individuals, and exposes you to potential liability for negligence.
-
November 10, 2026 Southwest Orthopedic & Reconstructive Specialists was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-11-10. Sector: Healthcare. Country: United States of America. Website: southwestortho.com. Southwest Orthopedic & Reconstructive Specialists, a clinic located in Oklahoma, is required by law to maintain protected health information (PHI) as a healthcare facility. However, due to its negligent attitude toward security and unwillingness to resolve the incident, we are disclosing this confidential information, which includes databases containing more than 150,000 SSNs with patient names and addresses, as well as medical records and billing data. This violates the federal HIPAA privacy and security regulations for this clinic, as well as the Oklahoma Security Breach Notification Act.
-
November 10, 2026 • Ridgway High School was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-11-10. Sector: Education. Country: United States of America. Website: ridgway.k12.co.us. Ridgeway R-2 School District states its commitment to providing a safe and inclusive learning environment for students, however, their failure to secure your data and their failure to address this issue resulted in a breach of student and employee personal data (Social Security numbers, medical and disciplinary records) in violation of FERPA, the Colorado Student Data Transparency and Security Act (CRS 22-16-101 et seq.), the Colorado Data Breach Notification Act (CRS 6-1-716), CORA privacy exceptions, and possibly HIPAA.