Research & Planning Consultants
September 21, 2025
•[ ransomware, financial, technology ]
Research & Planning Consultants was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-09-21. Sector: Professional Services. Country: United States of America. Website: rpcconsulting.com. Research & Planning Consultants, L.P. specializes in providing ex
pert analysis and consulting services in personal injury and comm
ercial litigation.
We will upload 33gb of corporate data soon. Projects, financials,
client and employee information, etc.
Mabetex Group
March 20, 2026
•[ ransomware, manufacturing, financial ]
Mabetex Group was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-03-20. Sector: Manufacturing. Country: Switzerland. Website: mabetex.com. Mabetex Group has established itself as a leader in design, const
ruction and project engineering of administrative and governmenta
l buildings as well as buildings in the health, sport and tourism
sector, like hospitals, stadiums, hotels.
We will upload 42gb of corporate data soon. Employee files (passp
orts and other docs), lots of documents about international proje
cts, detailed financials, client information, etc.
Sehlmann Fensterbau
November 22, 2025
•[ ransomware, manufacturing, leak ]
Sehlmann Fensterbau was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-11-22. Sector: Manufacturing. Country: Germany. Website: sehlmann.de. Sehlmann Fensterbau GmbH specializes in wooden and wood-metal win
dows in the Hamburg metropolitan area. They offer optimal window
solutions for innovative new constructions and stylish renovation
s, providing services from consultation and planning to productio
n and installation.
We will upload 44gb of corporate data soon. Employee personal fil
es (passports, DLs, EU IDs and other files), financials, lots of
project files, etc.
Shingle & Gibb Automation
November 12, 2025
•[ ransomware, manufacturing, technology ]
Shingle & Gibb Automation was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-11-12. Sector: Manufacturing. Country: United States of America. Website: shingle.com. Shingle & Gibb Automation follows a time-honored commitment of pr
oviding the finest Industrial Automation & Networking, Motion Con
trol, Machine Safety and Power Transmission products from world l
eading manufacturers, including Siemens, Banner Engineering, Turc
k and Rittal.
We will upload 25gb of corporate data soon. Employee files (passp
orts, DLs and other files), HR files, detailed financials, client
information, NDAs, internal confidential files, etc.
Asaniverko
April 13, 2026
•[ ransomware, financial ]
Asaniverko was listed as a victim on the leak site of the spacebears ransomware group; the attack is estimated to have taken place on 2026-04-13. Sector: Professional Services. Country: Belgium. Website: www.asaniverko.be. Asaniverko is a Belgian heating and cooling specialist based in Boom that provides professional installation, maintenance, and repair services for central heating systems and gas boilers. The company also specializes in sustainable energy solutions, including the installation of heat pumps and air conditioning units for residential and commercial properties.Personal information of employees and ClientsFinancial documentsOther files https://www.asaniverko.be/
R L Larson Excavating
April 14, 2026
•[ ransomware, financial, manufacturing ]
R L Larson Excavating was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-04-14. Sector: Transportation. Country: United States of America. Website: rllarsoninc.com. R. L. Larson Excavating Inc., is an excavating contractor based i
n St. Cloud, MN.
We will upload 30gb of corporate data soon. Personal data of empl
oyees (DLs, w9 forms and others), financials, drawings and specif
ications, contracts and agreements, projects, and so on.
La Tuilerie
April 14, 2026
•[ ransomware, retail, financial ]
La Tuilerie was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-04-14. Sector: Agriculture and Food Production. Country: Canada. Website: latuilerie.com. La Tuilerie is your local home renovation shop that helps homeown
ers and contractors find the perfect ceramic tiles, mosaics, and
flooring. They focus on giving customers high-quality materials w
ith great personal service.
We will upload 11gb of corporate data soon. Personal data of empl
oyees, financials, contracts and agreements, lots of client files
, projects, etc.
Arctic Home Living
February 20, 2026
•[ ransomware, retail, financial ]
Arctic Home Living was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-02-20. Sector: Retail & E-Commerce. Country: United States of America. Website: arctichomeliving.com. Arctic Home is Alaska's locally owned hot tub dealer with over 25
years of experience, specializing in premium hot tubs, spas, sau
nas, and cold plunges designed for the unique Alaskan environment
.
We will upload corporate data soon. Employee information (scanned
passports, DLs, I9s, SSNs, credit cards information and so on),
customer data, agreements, etc.
MAC Construction & Excavating
April 3, 2026
•[ ransomware, manufacturing, leak ]
MAC Construction & Excavating was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-04-03. Sector: Manufacturing. Country: United States of America. Website: macconstruction.com. MAC is a diversified construction company with integrated divisio
ns working closely together to provide a wide variety of quality
construction and excavation services, quality workmanship - produ
ced by quality people.
We will upload 30gb of corporate data soon. DB data (Salary / Inc
ome 2490386 rows, Physical Address 223606 rows,Online Account 123
070 rows, Phone / Fax 111784 rows, Bank / Financial 73100 rows, I
P / Device 5923 rows, Password / Secret 1783 rows, Tax ID 1686 ro
ws, Name (Person) 1074 rows, Email 967 rows, Photo / Biometric 13
7 rows, FR - Contact 100 rows, Property 28 rows, Employment 18 ro
ws, SSN / National ID 8 rows) and a lot of other internal files.
Salimetrics
April 21, 2026
•[ ransomware, healthcare, financial ]
Salimetrics was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-04-21. Sector: Healthcare. Country: United States of America. Website: salimetrics.com. Salimetrics specializes in salivary bioscience, offering industry
-standard saliva collection methods, salivary assay kits, and tes
ting services for reliable results. Their products cater to resea
rchers and clinicians involved in biobehavioral research and diag
nostics, providing tools for sample collection and analysis.
We will upload corporate data soon. Employee information, patient
s information (blood tests and other health information), financi
als, internal confidential files and so on.
bg.ac.rs
April 27, 2026
•[ ransomware, education, financial ]
bg.ac.rs was listed as a victim on the leak site of the apt73 ransomware group; the attack is estimated to have taken place on 2026-04-27. Sector: Education. Country: Serbia. Website: bg.ac.rs. University of Belgrade. Internal documents, letters, attachments, financial reports. Total size: ...
Costa Solutions, LLC
April 29, 2026
•[ ransomware, financial, technology ]
Costa Solutions, LLC was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-04-29. Sector: Professional Services. Country: United States of America. Website: costasolutions.com. [warehouse] Costa Solutions, LLC a privately held managed-labor and warehousing company headquartered in San Antonio, Texas, with ~$140M annual revenue and 2001,000 employees.
The file server contained the complete operational, financial, legal, and human resources infrastructure of the company:
3,0008,000+ individuals' personal data current employees, former employees (12 years of records), independent contractors, employee dependents, and job applicants. SSNs on W-2s, W-4s, 1099s, I-9s, background checks. Bank account and routing numbers on 200+ direct deposit forms.
Medical and injury records 150+ employee injury/medical files from 20132026, FMLA medical certifications, drug test results (random, reasonable suspicion, post-incident, promotional), and workers' compensation claims for 23+ named individuals.
CEO's entire file system Josh Wean's Documents folder (5.3 GB) including P&L statements, a 17-subfolder "Confidential" directory, legal correspondence, strategic plans, a C-12 peer advisory group archive, and a $RECYCLE.BIN with 60+ deleted items.
Client contracts and competitive intelligence pricing, SLAs, and contract terms for HEB, CVS, Sysco, Amazon, McLane, Labatt, Valvoline. Competitor pricing intelligence. RFP bid documents with cost models.
Active legal case files litigation records (20212022), HR internal investigation notes (20182021), arbitration files, active investigations marked "DO NOT DELETE" all subject to attorney-client privilege.
Infrastructure secrets an HEB production server TLS certificate, a Cisco AnyConnect VPN installer, and the CEO's Remote Desktop connection file.
Corporate financials multi-year budgets, valuation & sale documents (indicating possible M&A activity), PPP loan forgiveness records, Form 5500 ERISA filings, and annual reporting.
Metro-ILA Funds
April 29, 2026
•[ ransomware, financial ]
Metro-ILA Funds was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-04-29. Sector: Financial Services. Country: Germany. Website: www.metro-ila.com.
IOTA HOTEL TBILISI
March 1, 2026
•[ ransomware, financial ]
IOTA HOTEL TBILISI was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-03-01. Sector: Hospitality. Country: Georgia. Website: iotahotels.com. Data size claimed by the group: 120GB. - VIP Lists- Invoices, Passport...- Financial Documents
AKOL LAW
February 18, 2026
•[ ransomware, financial ]
AKOL LAW was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-02-18. Sector: Professional Services. Country: Turkey. Website: www.akol.av.tr. Data size claimed by the group: 0GB. - Internal Documents- Financial Documents
ICAFe Companies
January 5, 2026
•[ ransomware, manufacturing, financial ]
ICAFe Companies was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-01-05. Sector: Manufacturing. Country: United States of America. Website: icafecompanies.com. Southwest Air Equipment is a single-source equipment supplier ded
icated to the spray foam industry, offering comprehensive service
s including replacement parts, repairs, and complete spray rig se
tups.
We will upload corporate data soon. Lots of clients files, NDAs,
contracts and agreements, financials, confidential files, a bit o
f personal information and so on.
The City of Hesperia, CA
March 4, 2026
•[ ransomware, government, financial ]
The City of Hesperia, CA was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-03-04. Sector: Government & Defense. Country: United States of America. Website: hesperiaca.gov. Access was gained to files containing state secrets, non-disclosure agreements, contracts with private and public companies, as well as personal data of employees and government officials. Transactions, payment, and tax documents were also obtained.
MarketGraphics Research Group
February 20, 2026
•[ ransomware, technology, financial ]
MarketGraphics Research Group was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-02-20. Sector: Professional Services. Country: United States of America. Website: mgresearch.net. MG Research Markets specializes in providing comprehensive housin
g market research and analysis services. The company serves a div
erse range of clients by delivering accurate and forward-thinking
data through various interactive tools and GIS services.
We will upload 60gb of corporate data soon. Personal files of emp
loyees (passport and DL numbers, SSNs and so on), detailed financ
ials, projects, contracts, NDAs, partners and clients contacts an
d so on.
C.A. LINDMAN Inc.
March 6, 2026
•[ ransomware, manufacturing, financial ]
C.A. LINDMAN Inc. was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-03-06. Sector: Manufacturing. Country: United States of America. Website: www.calindman.com. Numerous data items, including financial and project details, were leaked from servers located at the company's headquarters in Florida, Maryland, and North Carolina.
C.A. Lindman, Inc., founded in 1990, has grown from a small restoration company with less than 10 employees, into one of the top 20 national firms specializing in exterior concrete and masonry repairs over the last 30 years. The founders, Rob Pusheck and Jeff Procter, have kept Lindman focused on meeting all of their clients needs and expectations. The Lindman Difference is the companys motto and delivering this superior service is the company-wide goal every day.
Hauri AG Staffelbach
February 26, 2026
•[ ransomware, manufacturing, financial ]
Hauri AG Staffelbach was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-02-26. Sector: Manufacturing. Country: Switzerland. Website: hauriag.ch. Hauri AG is a carpentry company based in Staffelbach, specializin
g in high-quality kitchens, windows, doors, bathrooms, and interi
or fittings. They serve clients in the Aargau and Bern regions, o
ffering a range of services including renovations and custom wood
working.
We will upload almost 100gb of corporate data soon. Detailed empl
oyee files, customer information, financials, partner information
and so on.
