Hayward Holdings
August 31, 2026
•[ ransomware, manufacturing, financial ]
Hayward Holdings was listed as a victim on the leak site of the Falcon ransomware group; the attack is estimated to have taken place on 2026-08-31. Sector: Manufacturing. Country: United States of America. Website: hayward.com. Pool & spa equipment NYSE: HAYW - Our 848 GB extraction includes your Salesforce, 1+ million of each business and customer records with PII, distributor pricing lists, margin structures, detailed financial records, P&L statements, accounting ledgers, extensive personnel files, IT infrastructure blueprints, privileged account credentials, strategic board preparation materials and much more.
Truckworx
August 6, 2026
•[ ransomware, manufacturing, financial ]
Truckworx was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-08-06. Sector: Transportation. Country: United States of America. Website: truckworx.com. - Financial records- Accounting records- Tax records- Business operations documents- Legal/corporate records
Salters propane
June 26, 2026
•[ ransomware, energy, financial ]
Salters propane was listed as a victim on the leak site of the spacebears ransomware group; the attack is estimated to have taken place on 2026-06-26. Sector: Energy & Utilities. Country: United States of America. Website: salterspropane.com. Salters Propane is excited and proud to be joining the Salters Family of businesses with competitive pricing, excellent customer service, and 65 combined years of industry experience. We are ready and more than capable to service all of your propane needs.From residential to commercial and everything in between we are confident that your experience with us will be nothing short of spectacular.We have many options available to suit your needs including a variety of tank sizes, and we offer competitive lease or purchase options.-Personal information of employees and clients -Financial documents -Other files https://***.com/
Silvestri & Associates Insurance
July 4, 2026
•[ ransomware, financial ]
Silvestri & Associates Insurance was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-07-04. Sector: Financial Services. Country: United States of America. Website: www.silvestriandassociates.com. United States
Fitcrunch
June 25, 2026
•[ ransomware, retail, financial ]
Fitcrunch was listed as a victim on the leak site of the spacebears ransomware group; the attack is estimated to have taken place on 2026-06-25. Sector: Retail & E-Commerce. Country: United States of America. Website: fitcrunch.com. FITCRUNCH makes getting protein more enjoyable than ever before. Satisfy your cravings with a variety of delicious chef-inspired productsfrom co-founder and owner Robert Irvine.Find the perfect fit with our baked protein bars, wafer bars, protein powder, and more-Personal information of employees and clients -Financial documents -Other files https://***.com/
Excalibur Rentals
July 7, 2026
•[ ransomware, retail, leak ]
Excalibur Rentals was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-07-07. Sector: Retail & E-Commerce. Excalibur Rentals is dedicated to providing reliable rental equipment services, ensuring that c
lients can complete their jobs safely, on time, and within budget. They offer a range of equipm
ent including boom lifts, telehandlers, and light towers.
We will upload 45gb of corporate data soon. Employee personal information (name, addresses, SSN
s and so on), contracts and agreements, a bit of financials, customers info, etc.
Biessse
June 9, 2026
•[ ransomware, manufacturing, financial ]
Biessse was listed as a victim on the leak site of the spacebears ransomware group; the attack is estimated to have taken place on 2026-06-09. Sector: Manufacturing. Country: Italy. Website: www.biessseworld.com. The BiesSse group, which has been operating on the global market for over 40 years, specializes in the production and conversion ofhighly performing technical adhesive tapes. The BiesSse Tape production plant covers a surface area of over 11,000 sq.mt. and is equippedwith modern and advanced installations, in line with lean manufacturing practices. The BiesSse group operates worldwide through itssubsidiaries in Austria, Brazil, China and Mexico, availing itself of a professional and strongly committed local workforce.The direct presence on the ground makes it possible to quickly and efficiently respond to customers demands and to ensure on-goingassistance and support.-Personal information of employees and clients -Financial documents-SQL DB https://www.***.com/
Weinberg ''93 Építő Kft.
July 10, 2026
•[ ransomware, manufacturing, financial ]
Weinberg ''93 pt Kft. was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-07-10. Sector: Manufacturing. Country: Hungary. Website: weinberg.hu. Weinberg ''93 pt Kft., a prominent Hungarian construction and steel fabrication company. Overview: Founded in 1993 and headquartered in Srospatak, it is a 100% privately owned Hungarian company. Core Services: The firm specializes in general contracting and the manufacture of complex steel structures. Major Projects: They have handled significant industrial developments, including: - Volvo Trucks Hungary: Completed a 5,500 m advanced truck center in Ecser. - Continental Automotive: Construction of electronics manufacturing plants. - East Gate PRO Business Park: Developed BREEAM-certified sustainable warehouses. - Becton Dickinson: Expansion of a major syringe factory in Hungary. Recognitions: The company has received numerous awards, such as the Lechner dn Award (2024) and the Steel Structure Award (2022). Over 650 gigabytes of sensitive internal data were stolen from this company: all commercial information about contractors, information about specialized construction technologies and metal structure production, internal financial transactions, and operations demonstrating corruption in construction projects. We invite all journalists, lawyers, and law enforcement agencies to review this information.
Vandalia Rental
July 10, 2026
•[ ransomware, retail, financial ]
Vandalia Rental was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-07-10. Sector: Retail & E-Commerce. Country: United States of America. Website: vandaliarental.com. Vandalia Rental has served the Greater Dayton and Greater Cincinnati and Northern Kentucky mark
ets since 1961. Vandalia Rental proudly services construction rental accounts ranging from smal
l businesses to large publicly traded corporations, government agencies, and municipalities thr
oughout the Ohio, Indiana, and Kentucky regions, and sales accounts throughout the country.
We will upload 40gb of corporate data soon. Detailed employee and client personal information (
SSN numbers, name, DOB and so on), projects files, financials, client internal information, con
tracts and agreements and so on.
Ironmark
July 13, 2026
•[ ransomware, leak, technology ]
Ironmark was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-07-13. Sector: Professional Services. Country: United States of America. Website: ironmarkusa.com. Founded and headquartered in Annapolis Junction, Maryland, Ironmark is a provider of marketing,
creative, printing and communications services. They specialize in marketing strategy, creativ
e & web development, digital marketing, printing services, and more.
We will upload 190gb of corporate data soon. Employee personal information (passports, DLs and
other personal information), projects information, detailed financials, client internal informa
tion, contracts and agreements, NDAs and so on.
momenta.cn
July 14, 2026
•[ ransomware, technology, financial ]
momenta.cn was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-07-14. Sector: Technology. Country: China. Website: momenta.cn. Momenta is an AI and autonomous-driving company.
All source code, financial documents, configuration files, employee database, and more were stolen.
Servers and workstations were encrypted.
Momenta is trying to hide everything from Chinese regulators, the HKEX commission, and investors while reporting a $751M profit from its recent IPO.
With a $9B+ market capitalization, this amounts to one of the largest financial frauds in Chinese history.
aphenapharma.com
July 14, 2026
•[ ransomware, healthcare, financial ]
aphenapharma.com was listed as a victim on the leak site of the chaos ransomware group; the attack is estimated to have taken place on 2026-07-14. Sector: Healthcare. Country: United States of America. Website: aphenapharma.com. Aphena Pharma Solutions
We have gained full access to your corporate infrastructure. During this operation, we stole 142 GB of your most critical corporate data.
The stolen data includes:
Financial statements: capital expenditures (CAPEX), fixed assets, accounts receivable and accounts payabl
Fidelity Services Group
July 12, 2026
•[ ransomware, financial ]
Fidelity Services Group was listed as a victim on the leak site of the ransomhouse ransomware group; the attack is estimated to have taken place on 2026-07-12. Sector: Financial Services. Country: South Africa. Website: www.fidelity-services.com. Fidelity Services Group is Southern Africa's largest integrated security solutions provider, specializing in innovative protection services. With over 60 years of experience, they offer a range of services including security guarding, cash management, and fire protection solutions tailored for corporate clients. Their commitment to excellence and technological advancement positions them as a leader in the security market. The company serves various industries, ensuring peace of mind through specialized and professionally trained personnel
acilab.com
June 24, 2026
•[ ransomware, technology, financial ]
acilab.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-06-24. Sector: Technology. Country: Brazil. Website: acilab.com. How ACI Financed Its Owners' Companies and Paid Them Rent PROLOGUE Inside the archive of American ...
Converting Equipment International
July 16, 2026
•[ ransomware, manufacturing, financial ]
Converting Equipment International was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-07-16. Sector: Manufacturing. Country: United States of America. Website: slitandrewind.com. CEI's mission is to produce high-quality equipment for the manufacturing industry through innovation, collaboration, and integrity. However, the company has a history of neglecting its own security, putting its customers and employees at risk. This negligence has resulted in the leakage of confidential information and personal data. We provide confidential information regarding equipment development, contracts, and customer relationships. We also have information about their subsidiaries and their entire financial structure.
Nesco Bus Maintenance
July 9, 2026
•[ ransomware, financial, manufacturing ]
Nesco Bus Maintenance was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-07-09. Sector: Transportation. Country: United States of America. Website: nescobus.com. Nesco Bus specializes in manufacturing and maintaining a wide range of buses, including school,
childcare, activity, commercial, and specialty buses. With over three decades of experience, t
hey are committed to providing exceptional customer support and ensuring the safety and comfort
of their passengers.
We will upload 26gb of corporate data soon. Employee personal information (DL scans and so on),
contracts and agreements, customer info, payment details and other financial docs, etc.
Centre for Newcomers
July 17, 2026
•[ ransomware, government, leak ]
Centre for Newcomers was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-07-17. Sector: Government & Defense. Country: Canada. Website: centrefornewcomers.ca. The Newcomers Center provides immigration services aimed at supporting newcomers and creating a welcoming community. They maintain complete information about their clients in their databases, but they fail to ensure the security of this data. Due to their negligence toward their clients and employees, this data has been compromised. We offer you 380 GB of personal client data, company financial information, its current status and reporting, and human resources planning and policies.
wikoff.com
July 20, 2026
•[ ransomware, manufacturing, financial ]
wikoff.com was listed as a victim on the leak site of the chaos ransomware group; the attack is estimated to have taken place on 2026-07-20. Sector: Professional Services. Country: United States of America. Website: wikoff.com. [PUBLIC DISCLOSURE]
Target: Wikoff Color Corporation (wikoff.com)
Data Volume: 650 GB
Status: Full Compromise Confirmed
We are officially confirming that the entire internal infrastructure of Wikoff Color Corporationranging from Board of Directors financial reports and proprietary R&D formulas
Anpra SAS
July 21, 2026
•[ ransomware, financial, automotive ]
Anpra SAS was listed as a victim on the leak site of the spacebears ransomware group; the attack is estimated to have taken place on 2026-07-21. Sector: Professional Services. Country: Colombia. Website: anpra.co. With over a decade of experience in the auto parts sector, Anpra SAS has established a solid reputation for importing anddistributing quality products. We are dedicated to supporting the growth and efficiency of wholesale businesses in Colombia,focusing on mechanical components for European and Japanese commercial vehicles.-Personal information of employees and clients -Financial documents -Other files https://***.co/
DoAllTech
July 21, 2026
•[ ransomware, technology, financial ]
DoAllTech was listed as a victim on the leak site of the spacebears ransomware group; the attack is estimated to have taken place on 2026-07-21. Sector: Technology. Country: South Korea. Website: doalltech.com. The Company is leading the construction IT industry with the best technology and various experiences, and striving to grow with avarious customers in pursuit of technology platform change and innovation through persistent research and development in introduction ofWeb Services, H/W Services, BIM Services, and new technologies.-Personal information of employees and clients -Financial documents -Other files https://***.com/en/
