Wright ArchitecturalMillwork
November 20, 2025
•[ ransomware, manufacturing, financial ]
Wright ArchitecturalMillwork was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-11-20. Sector: Manufacturing. Country: United States of America. Website: wrightmw.com. Wright Architectural Millwork specializes in high-quality archite
ctural woodwork and has been in the industry for 50 years.
We will upload 87gb of corporate documents soon. Employee persona
l information (passport numbers, driver licenses, phones, emails)
, financials, a bit of client data, contracts and agreements, NDA
, etc.
Akehurst Landscape Service
November 5, 2025
•[ ransomware, financial, retail ]
Akehurst Landscape Service was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-11-05. Sector: Professional Services. Country: United States of America. Website: akehurst.com. Akehurst Landscape Service, Inc., based in Joppa, MD, offers a wi
de range of landscaping, snow removal, and grounds maintenance se
rvices tailored to meet the needs of commercial, industrial, and
residential clients.
We are going to upload company data soon. You will find financial
data (audit, payment details, financial reports, invoices), pers
onal financial details of employees, accounting files.
Schmidt's
November 25, 2025
•[ ransomware, retail, financial ]
Schmidt's was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2025-11-25. Sector: Retail & E-Commerce. Country: Austria. Website: schmidts.at. SCHMIDT'S is a specialized market that offers a wide array of products and services for house, garden, crafts, and industry, boasting over 130 years of tradition and quality. They cater to both private and business clients, providing expert advice and tailored solutions from their extensive product range. The company's services include workshop support, delivery, eBusiness solutions, and a strong focus on customer satisfaction and reliability. SCHMIDT'S is dedicated to maintaining long-lasting partnerships and fostering a family-oriented company culture.
Over 100GB of data was extracted: contracts, clients, payment data, PII, and bank transfers.
Globatech
November 7, 2025
•[ ransomware, leak, technology ]
Globatech was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-11-07. Sector: Professional Services. Country: Canada. Website: globatech.ca. Globatech comprises six companies, offering 24/7 service througho
ut Quebec with an expanded presence across Canada to ensure the h
ealth and safety of your buildings.
We will upload about 25gb of corporate documents soon. Employee a
nd clients information, financial and accounting data, projects,
contacts and agreements, confidential files, NDAs, etc.
FloorHeat
November 26, 2025
•[ ransomware, manufacturing, financial ]
FloorHeat was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-11-26. Sector: Manufacturing. Country: United States of America. Website: floorheat.com. FloorHeat Company specializes in manufacturing and distributing r
adiant heat components and complete underfloor heating systems, i
ncluding electric film, cable heating mats, and their patented Ea
syFloor hydronic heating system.
We will upload 25gb of corporate documents soon. Detailed employe
e personal information, financial and accounting data, contacts a
nd agreements, NDAs, etc.
Arabia Holding
November 26, 2025
•[ ransomware, financial ]
Arabia Holding was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-26. Sector: Other. Country: Egypt. Website: www.arabia-holding.com.
Williams & Sparages
November 26, 2025
•[ ransomware, financial, technology ]
Williams & Sparages was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-11-26. Sector: Professional Services. Country: United States of America. Website: wsengineers.com. Williams & Sparages is a full-service engineering firm specializi
ng in civil engineering, planning and development, surveying and
mapping, and construction services.
We will upload about 127gb of corporate documents soon. Clients i
nformation, employee personal information, financials, credit car
d details, projects, contacts and agreements, etc.
mazda-ploiesti.ro
November 26, 2025
•[ ransomware, manufacturing, leak ]
mazda-ploiesti.ro was listed as a victim on the leak site of the benzona ransomware group; the attack is estimated to have taken place on 2025-11-26. Sector: Manufacturing. Country: Romania. Website: mazda-ploiesti.ro. Ransom demand: $90,000. Data size claimed by the group: 200 GB.
Casting House
September 2, 2025
•[ ransomware, manufacturing, financial ]
Casting House was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-09-02. Sector: Manufacturing. Country: United States of America. Website: castinghouse.com. Casting House is a full-service custom jewelry manufacturing comp
any that provides jewelers and designers with access to manufactu
ring solutions that will help grow their inventory.
We are ready to upload 10GB files of corporate documents such as:
personal employee data, financials, agreements and contracts, co
nfidential files, credit card details, etc.
Panini Kabob Grill
November 28, 2025
•[ ransomware, retail, leak ]
Panini Kabob Grill was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-11-28. Sector: Hospitality. Country: United States of America. Website: paninikabobgrill.com. Panini Kabob Grill specializes in preparing fresh and healthier M
editerranean food using high-quality ingredients in a scratch kit
chen.
We are ready to upload 60GB files of corporate documents such as:
detailed personal employee information (SSN, DLs, passport, phot
o, phone, emails and so on), credit cards, detailed financials, a
greements and contracts, etc.
Parrish Tire
September 25, 2025
•[ ransomware, retail, financial ]
Parrish Tire was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-09-25. Sector: Transportation. Country: United States of America. Website: parrishtire.com. Parrish Tire Company is one of the largest tire dealers in the So
utheast, operating wholesale, retail, and commercial truck tire c
enters in NC, SC, VA, GA, and OH.
We are ready to upload 10GB files of corporate documents such as:
personal employee data, client data (~150 credit cards details,
and other information), financials, agreements and contracts, etc
.
NIUS
July 13, 2025
•[ leak, financial, technology ]
In July 2025, the German news service NIUS suffered a data breach which was subsequently leaked publicly. The data included 6k unique email addresses along with names, physical addresses and payment details for purchases including either IBANs or partial credit card data (masked card number, type and expiry).
Campaign: Incidents in Brazil's financial sector (roundup)
July 5, 2025
•[ Financial ]
Roundup article listing recent cybersecurity incidents impacting Brazils financial sector; logged as campaign-level entry.
Veradigm Inc.
September 17, 2025
•[ financial, healthcare ]
Veradigm reported on September 26 2025 that it detected unauthorized access to portions of its network on September 17 2025. Investigators determined that data on roughly 1.1 million individuals was accessed, but no encryption, ransom demand, or operational disruption occurred. The actor has not been identified and the intrusion appears financially motivated.
Fairmont Federal Credit Union
September 30, 2023
•[ leak, financial, finance ]
Between September 30 and October 18, 2023, Fairmont Federal Credit Union in West Virginia experienced unauthorized access to its internal file servers and databases. Attackers exfiltrated sensitive personal, financial, and limited medical information of about 187,000 members. No data encryption or ransomware activity was reported.
Cancer patient in charity livestream
September 25, 2025
•[ financial, malware, healthcare ]
A serious accusation in Argentina alleged that influencer Valentn scammed a cancer patient during a charity livestream using a video game called BlockBlasters, which contained hidden malware that stole cryptocurrency from the victims wallet.
Russia’s System for Fast Payments (SBP)
September 24, 2025
•[ financial, ddos, finance ]
Ukraines Defense Intelligence Directorate (GUR) conducted a large-scale distributed denial-of-service (DDoS) operation on September 24, 2025, targeting Russias System for Fast Payments (SBP). The attack caused a full nationwide disruption of online payment services for several hours, halting financial transfers and transaction processing across Russian banks. TransTeleComs supporting network infrastructure was also temporarily overloaded during the event.
Unnamed hotels in Brazil
June 13, 2025
•[ phishing, financial, malware ]
TA558 used LLM-generated JS/PowerShell loaders in phishing emails (Portuguese/Spanish) to deploy Venom RAT against hotels (Brazil/Spanish-speaking markets), aiming to siphon guest credit-card data from hotel systems/OTAs; observed in summer 2025, with no named victims or outages.
Wytec
August 25, 2025
•[ hack, financial, technology ]
On August 25, 2025, Wytec International's website was defaced twice; site remains offline. Operations impacted included cancellation of a September 2 seminar. Company notified authorities and engaged forensic experts, citing financial losses as a result.
Sinqia
August 29, 2025
•[ financial, hack, finance ]
On Aug 29, 2025, attackers used stolen vendor credentials to breach Sinqia's access to Brazils Pix system, attempting $130M in fraudulent transfers. Immediate action halted operations; some funds recovered. No data breach occurred.
