marquiscompanies.com
November 11, 2026
•[ ransomware, healthcare ]
marquiscompanies.com was listed as a victim on the leak site of the Curious Worm ransomware group; the attack is estimated to have taken place on 2026-11-11. Sector: Professional Services. Country: United States of America. Website: marquiscompanies.com. Status: Leaked | Revenue: $590M | Marquis Companies is a family-owned provider of senior living and care solutions, offering a range of services including assisted living, memory care, post hospital care, and home health care. Established in 1989, the company focuses on delivering personalized care plans tailored to the unique needs of each resident. Their award-winning facilities are staffed by dedicated professionals who ensure high-quality, person-centered care in a comfortable environment
safcodental.com
November 11, 2026
•[ ransomware, healthcare ]
safcodental.com was listed as a victim on the leak site of the Curious Worm ransomware group; the attack is estimated to have taken place on 2026-11-11. Sector: Healthcare. Country: Saudi Arabia. Website: safcodental.com. Status: Leaked | Revenue: $47M | Safco Dental Supply LLC specializes in providing a wide range of dental supplies, products, and equipment, including restorative and cosmetic dentistry supplies, endodontics, orthodontics, and infection control products. They cater to dental professionals by offering over 20,000 products, expert support, and efficient shopping solutions. The company also provides comprehensive dental equipment services and customized financing solutions to support dental practices. With a focus on reliability and safety, Safco aims to enhance patient care and streamline operations for dental professionals.
lifelinescreening.com
November 11, 2026
•[ ransomware, leak, healthcare ]
lifelinescreening.com was listed as a victim on the leak site of the Curious Worm ransomware group; the attack is estimated to have taken place on 2026-11-11. Sector: Healthcare. Country: United States of America. Website: lifelinescreening.com. Status: Leaked | Revenue: $30M | Since 1993, Life Line Screening has brought clinical-grade preventive testing to communities across America. More than 11 million people have trusted us with their health.
raleighortho.com
November 11, 2026
•[ ransomware, healthcare ]
raleighortho.com was listed as a victim on the leak site of the Curious Worm ransomware group; the attack is estimated to have taken place on 2026-11-11. Sector: Healthcare. Country: United States of America. Website: raleighortho.com. Status: Leaked | Revenue: $30M | Raleigh Orthopaedic is a leading provider of comprehensive orthopedic care in Wake County, NC, offering both conservative and surgical treatment options. With over 100 years of experience, the practice specializes in various areas including sports medicine, joint replacement, and physical therapy. They serve a diverse clientele, including patients of all ages, and operate multiple locations for convenient access to care. The team of 27 physicians performs over 9,000 procedures annually, ensuring personalized treatment plans for each patien
baronandbudd.com
November 11, 2026
•[ ransomware, leak, finance ]
baronandbudd.com was listed as a victim on the leak site of the Curious Worm ransomware group; the attack is estimated to have taken place on 2026-11-11. Sector: Professional Services. Country: United Kingdom of Great Britain and Northern Ireland. Website: baronandbudd.com. Status: Leaked | Revenue: $31M | Baron & Budd is a prominent plaintiffs law firm specializing in mesothelioma cases, class actions, and drug injury claims. With over four decades of experience, they advocate for victims harmed by asbestos and other toxic substances, providing free consultations and working on a contingency fee basis. Their services extend to various legal areas, including environmental litigation and serious accidents, aiming to protect communities and secure compensation for clients
shannonhealth.com
November 11, 2026
•[ ransomware, healthcare, leak ]
shannonhealth.com was listed as a victim on the leak site of the Curious Worm ransomware group; the attack is estimated to have taken place on 2026-11-11. Sector: Healthcare. Country: Ireland. Website: shannonhealth.com. Status: Leaked | Revenue: $157M | Shannon Medical Center is a community-owned health system in West Texas, dedicated to providing exceptional healthcare services to residents.
sbhny.org
November 11, 2026
•[ ransomware, healthcare ]
sbhny.org was listed as a victim on the leak site of the Curious Worm ransomware group; the attack is estimated to have taken place on 2026-11-11. Country: United States of America. Website: sbhny.org. Status: Leaked | Revenue: $356M | SBH Health System provides nonsectarian, and acute care, and community hospital care services. SBH Health System is based in the Bronx
sacheminc.com
November 11, 2026
•[ ransomware, manufacturing, technology ]
sacheminc.com was listed as a victim on the leak site of the Curious Worm ransomware group; the attack is estimated to have taken place on 2026-11-11. Sector: Manufacturing. Country: Canada. Website: sacheminc.com. Status: Leaked | Revenue: $225M | SACHEM, Inc. is a global leader in high-purity chemical solutions, specializing in the production of precise and pure products for various applications. The company offers a wide range of products including electronic materials, specialty chemicals, and energy materials, catering to clients in Europe, Asia, and America. SACHEM also provides customized manufacturing, R&D support, and consulting services to meet the specific needs of its customers. With advanced laboratories and a strong regional support system, SACHEM is committed to delivering high-quality solutions and fostering innovation
Company #212
November 11, 2026
•[ ransomware, education ]
Company #212 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-11-11. Country: Ethiopia. Education Ethiopia | [PENDING EXPOSURE]
Company #213
November 11, 2026
•[ ransomware, energy ]
Company #213 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-11-11. Country: Qatar. electrical contracting Qatar | [PENDING EXPOSURE]
Professional baseball club Wisconsin Timber Rattlers
November 4, 2026
•[ ransomware, retail ]
Professional baseball club Wisconsin Timber Rattlers was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Hospitality. Country: United States of America. Website: timberrattlers.com.
energreen.it
October 12, 2026
•[ ransomware, energy, manufacturing ]
energreen.it was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Energy & Utilities. Country: Italy. Website: energreen.it. ENERGREEN S.p.A. is an Italian manufacturer of professional brush-cutters and remote-controlled machines under the RoboGreen brand. Registered at Via Sabbioni 16, 36026 Pojana Maggiore (Vicenza), Italy. Founded in 1999 by Daniele Fraron, who remains CEO to this day. In June 2022 the company was acquired by Venetian private equity fund 21 Invest through a standard LBO and reorganised as an S.p.A. By 2025 the group reported revenue of 116 million, employs 241 people, and operates across five continents.
Minor League Baseball
November 11, 2026
•[ ransomware, leak ]
Minor League Baseball was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-11-11. Sector: Hospitality. Country: United States of America. Website: www.milb.com. United States
Dep
November 11, 2026
•[ ransomware, healthcare, finance ]
Dep was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-11-11. THERMO GROUP, C.A. wholesales pharmaceutical products and medical supplies, as evidenced by its financial transactions with FarmaTodo, C.A., including sales commission reports and income tax withholdings (ISLR).
York University
November 12, 2026
•[ ransomware, education ]
York University was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-11-12. Sector: Education. Country: Canada. Website: www.yorku.ca.
The University of Texas at Arlington
November 12, 2026
•[ ransomware, education ]
The University of Texas at Arlington was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-11-12. Sector: Education. Country: United States of America. Website: www.library.uta.edu.
ProLiant
November 12, 2026
•[ ransomware, technology, financial ]
ProLiant was listed as a victim on the leak site of the Barracuda ransomware group; the attack is estimated to have taken place on 2026-11-12. Sector: Technology. Country: United States of America. We have stolen 1.23 TB from ProLiant main file server, which contains contracts, financial data of the company and partners, employee information, and more. Available for purchase. | Status: selling | $50,000
Y****s
October 29, 2026
•[ ransomware, technology ]
Y****s was listed as a victim on the leak site of the payoutsking ransomware group; the attack is estimated to have taken place on 2026-10-29. Country: United States of America. Website: y****.com.
iLending & J.C. Flowers & Co.
October 21, 2026
•[ ransomware, leak, finance ]
iLending & J.C. Flowers & Co. was listed as a victim on the leak site of the payoutsking ransomware group; the attack is estimated to have taken place on 2026-10-21. Sector: Financial Services. Country: United States of America. Website: save.ilendingcarloanrefinancing.com. [AI generated] N/A
I don't have reliable information connecting "iLending" and "J.C. Flowers & Co." as a single combined entity. These appear to be two separate organizations: iLending is known as a US-based auto loan refinancing company, while J.C. Flowers & Co. is a private equity firm focused on financial services investments. Without verified information on a specific combined entity or relationship between them, I cannot provide an accurate factual description.
Magasin du Nord (Magasin)
November 5, 2026
•[ ransomware, retail, leak ]
Magasin du Nord (Magasin) was listed as a victim on the leak site of the Majinahanashi ransomware group; the attack is estimated to have taken place on 2026-11-05. Sector: Retail & E-Commerce. Country: Denmark. The company was given every opportunity to settle: a working decryptor, verified test files, a confirmed archive of over 280,000 files (70 GB), a fixed price, and two deadline extensions. Both were...
