Saehan Marine (ship agency operations)
October 12, 2026
•[ ransomware, leak, financial ]
Saehan Marine (ship agency operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: South Korea. Ship agency South Korea | Port disbursement account records and banking correspondence templates | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
Dongkuk Steel (steel manufacturing)
October 12, 2026
•[ ransomware, manufacturing, financial ]
Dongkuk Steel (steel manufacturing) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Manufacturing. Country: South Korea. Steel manufacturing South Korea | Internal financial systems material (invoice and settlement records) | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
PennEastern Architects LCC
October 12, 2026
•[ ransomware, manufacturing, financial ]
PennEastern Architects LCC was listed as a victim on the leak site of the Dark Project ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Professional Services. Country: United States of America. Website: penneastern.com. About PennEastern Architects LCC The principals of PennEastern Engineers, LLC are Paul Pasonick, Andrew Pasonick, Michael Amato and Daryl Pawlush. All principals have extensive experience in commercial and residential land developments, municipal projects, sanitary sewer projects, storm water projects, pavement projects, flood control projects and soil erosion and sedimentation control plans. In addition, each has assisted in design, specification writing, cost estimating, project bidding and bid review, construction observation and project management of the various projects. The Principals of PennEastern Architects, LLC are Andrew Pasonick, Emil Jarolen and Norman Manovsky. Design Principal Emil Jarolen has been practicing Architecture since 1974 and has been a Registered Architect in the State of Pennsylvania since 1978. As a result of a cyberattack on Company PennEastern Architects, more than 100 GB of corporate data was stolen. The breach includes a large volume of confidential information, including drawings and project documentation, data on the companys customers and employees, as well as documents containing banking and financial information. Currently, approximately 60,000 files are unprotected by Company PennEastern Architects.
Korea Ferry (ferry operations)
October 12, 2026
•[ ransomware, financial ]
Korea Ferry (ferry operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: South Korea. Ferry / RoRo shipping South Korea | Internal staff account records with plaintext credentials and financial receipt records | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
Pedigo Products, Inc.
October 12, 2026
•[ ransomware, manufacturing, healthcare ]
Pedigo Products, Inc. was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Manufacturing. Country: United States of America. Website: https:pedigo-usa.com. Pedigo Products, Inc. is a privately held American manufacturer of stainless steel and chromium medical equipment for the healthcare industry. It disregards its own security, as well as that of its customers and employees, and makes no attempt to negotiate agreements to prevent data leaks. As a result, we provide you with 1.3 TB of sensitive corporate data, such as: carrier account numbers, customer-specific pricing, commission adjustments, customs/MDEL identifiers and customer/employee contact information, customer contracts, price and discount schedules, shipping and routing instructions, employee and customer personal data, FDA quality records (DMR, DHR, DHF, CAPA, complaints, MDR), CAD files and trade secrets, intellectual property and non-disclosure agreements, financial statements, tax returns, payroll records, bank details, and legal documents. Contractual obligations to customers and confidentiality, as well as HIPAA/GDPR/CCPA/PIPEDA regulations, were violated. We urge the authorities to pay attention to these issues. Due to Pedigo's negligence, it will also suffer losses in the form of loss of trade secrets and intellectual property protection, copying by competitors, loss of business with hospitals and dealers, and serious reputational and financial damage.
Estrategias BigMat S.L.U.
October 14, 2026
•[ ransomware, retail, financial ]
Estrategias BigMat S.L.U. was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Retail & E-Commerce. Country: Spain. Website: Estrategias BigMat S.L.U.. [distribution] Estrategias BigMat S.L.U. the Spanish master franchisee of BigMat International, a French cooperative and one of Europe's largest building materials distribution networks.
624 SEPA payroll XML files (20222025) every monthly salary payment for 300500 employees across 15+ entities, with full names, DNI/NIE numbers, IBANs, and exact euro amounts.
20 SILTRA Social Security databases the complete filing history for every subsidiary's workforce, containing nmeros de afiliacin, contribution bases, and employment records.
2,690 customer loyalty cards with DNI/NIF identifiers the entire customer-identity database.
888 Modelo 347 tax notifications annual declarations to the Agencia Tributaria naming customers and suppliers with their DNI and transaction amounts.
Complete financial records 5 years of accounting journals, bank reconciliations, insurance policies, loan agreements, and invoices.
Occupational health data (PRL) for 12+ subsidiaries workplace injury reports, medical certificates, and risk assessments.
MyM ODONTOCLINICA S.A
October 14, 2026
•[ ransomware, healthcare, leak ]
MyM ODONTOCLINICA S.A was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Healthcare. Country: Brazil. ompany from Paraguay operating in the field of dentistry.
Financial documents, personal and customer data.
The archive contains the most important documents [Sector: Medical, Other]
Shediac Lobster Shop
October 14, 2026
•[ ransomware, retail, financial ]
Shediac Lobster Shop was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Retail & E-Commerce. Country: Canada. Shediac Lobster Shop Ltd. specializes in supplying premium frozen Atlantic lobster to restauran
ts, food distributors, and global markets. With over 70 years of processing expertise, the comp
any offers a diverse and customizable line of cold-water lobster products, ensuring high qualit
y and reliability.
We will upload 10gb of corporate data soon. Employee information (passports, SSN numbers, compl
ete forms), client information, contracts and agreements, confidential files, financials, payme
nt details, NDA, etc.
Videk
October 15, 2026
•[ ransomware, technology, financial ]
Videk was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-10-15. Sector: Technology. Country: United Kingdom of Great Britain and Northern Ireland. Videk is a leading global provider of vision-based print verification systems, inserter input a
nd output scanning systems, and data management software.
We will upload 8gb of corporate data soon. Employee information, customer information, contract
s, financials, NDA, and so on.
Adirondack Networks, Inc.
October 24, 2026
•[ ransomware, leak, technology ]
Adirondack Networks, Inc. was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-24. Sector: Technology. Country: United States of America. network and IT services New York, United States | The live accounting database of the company, more than 627 megabytes, active through 20 October 2026; A second company accounting database of Elevate Networks, Inc., more than 331 megabytes, active through 20 October 2026; Transaction logs and scheduled accounting backups | [NOT PAID EXPOSED]
Pure Grow Diamonds Inc.
October 25, 2026
•[ ransomware, manufacturing, financial ]
Pure Grow Diamonds Inc. was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-25. Sector: Manufacturing. diamond and lab grown diamond trading New York, New York, United States | Diamond stock and inventory lists with stock codes and certificate numbers; Customer return records with customer names and tracking references; More than 2,200 bank deposit and invoice documents | [NOT PAID EXPOSED]
TRANSPORTES JIMENEZ and REYES JIM REY S.A.
October 26, 2026
•[ ransomware, financial ]
TRANSPORTES JIMENEZ and REYES JIM REY S.A. was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Transportation. Country: Mexico. Transport company from Ecuador engaged in road freight transport.
Including the transportation of heavy and bulk cargo, cars,
animals and cargo in tanks.
Year Founded: 2020
There are many customer documents and employee data.
Financial documents, accounting and banking data. [Sector: Transportation]
Seetelhotels.de
October 19, 2026
•[ ransomware, financial, healthcare ]
Seetelhotels.de was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-10-19. Sector: Hospitality. Country: Germany. Website: Seetelhotels.de. Seetel Hotels (SEETEL Hotel GmbH & Co. Betriebs KG) has been notified that a substantial volume of confidential and internal corporate data has been compromised.
The affected data includes, but is not limited to:
Full guest identity records, government-issued passport and ID numbers, payment card details (credit card numbers, CVVs, and expiration dates), direct booking notes, special requests, dietary restrictions, documented allergies, and medical/health-related accommodation preferences.
Invoices, payment transaction logs, accounts receivable and payable (Debitorenbuchhaltung / Kreditorenbuchhaltung) records, internal financial audits, and controlling documentation.
SunTechnics Fabrisolar AG
October 23, 2026
•[ ransomware, energy, financial ]
SunTechnics Fabrisolar AG was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-23. Sector: Energy & Utilities. Country: Switzerland. solar energy company Switzerland | Financial and bank records of a Swiss solar energy company, including annual accounts and audit files; Payroll and staff data with employee names and social insurance records; Customer and project files for solar installations at four sites; The accounting database with its backups | [NOT PAID EXPOSED]
Bankruptcy Software Specialists
October 23, 2026
•[ ransomware, technology, financial ]
Bankruptcy Software Specialists was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-10-23. Sector: Professional Services. Bankruptcy Software Specialists, LLC (BSS) is one of the nation's leading providers of debt man
agement software. The major business focus is geared toward providing business application soft
ware that handles the tracking of trust funds to Chapter 13 Bankruptcy Trustees. A Tennessee ba
sed company, BSS provides a vast array of services for Bankruptcy Trustees.
We will upload 19gb of corporate data soon. Employee and clients information (personal informat
ion, financials and so on), contracts and agreements, lots of payment details and so on.
LoveSac
October 26, 2026
•[ ransomware, retail, financial ]
LoveSac was listed as a victim on the leak site of the Whitearmor ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Retail & E-Commerce. Country: United States of America. LoveSac (LOVE) is a premium furniture retailer operating more than 250 showrooms across the United States, generating approximately $700 million in annual revenue.
We have obtained a database containing 1,113,285 order records spanning nearly seven years of transactions, from December 2019 through October 2026, with a combined recorded transaction value exceeding $1.62 billion.
Each record contains detailed customer and transaction information, including full customer names, complete billing and shipping addresses, telephone numbers, order numbers, order dates, order statuses, and order grand totals.
Our demand: $500,000 in BTC or XMR
To verify, samples can be found below.
The Excalibur Group
October 20, 2026
•[ ransomware, technology, government ]
The Excalibur Group was listed as a victim on the leak site of the Dark Project ransomware group; the attack is estimated to have taken place on 2026-10-20. Country: United States of America. Website: theexcaliburgroup.com. About The Excalibur Group The Excalibur Group is a Washington D.C. based company that focuses on enhancing local, state, and federal programs through staff augmentation, training, and program management in the Defense, IT, Workforce, Environmental, and Legal sectors. They provide specialized job training and placement services for individuals in various industries, including transitioning soldiers. The company also offers both permanent and contingent labor to support clients' internal IT and R&D projects. Their mission is to deliver efficient contract management and cost-effective solutions while promoting meaningful Veteran employment. Company The Excalibur Group was attacked, resulting in the theft of more than 600 GB of confidential data, such as banking and other financial information, personal data of employees and customers, and information marked secret. Currently, more than 400,000 files are not protected by The Excalibur Group
Coastal Alabama Community College
October 21, 2026
•[ ransomware, education, financial ]
Coastal Alabama Community College was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-10-21. Sector: Education. Country: United States of America. Website: coastalalabama.edu. Coastal Alabama Community College demonstrates an extreme disregard for its own security and the security of its students and makes no attempt to address these deficiencies. Therefore, we are publishing their sensitive information, such as student education records, protected health information, financial aid and loan information, employee personnel files, Social Security numbers, and payment card data. They are also known for their incidents, and we are making this information publicly available to you. As a result, they violate laws such as HIPAA, FERPA, GLBA, and PCI DSS.
Whirlpool
October 21, 2026
•[ ransomware, manufacturing, leak ]
Whirlpool was listed as a victim on the leak site of the Whitearmor ransomware group; the attack is estimated to have taken place on 2026-10-21. Sector: Manufacturing. Country: United States of America. Whirlpool is a global home appliance manufacturer (NYSE: WHR) making washers, fridges, and cooking appliances under brands like KitchenAid and Maytag. Its 2025 annual revenue was about $15.52 billion.
We hold 4,577 Whirlpool employee records across three plants, names, AD-style usernames, managers, cost centers, shifts, along with 374 corporate emails, ~22,000 SAP invoice records, and the full plant contact infrastructure. Pay, and this stays quiet. Don't, and the data goes public.
We want $140,000 in BTC or XMR. You will receive an email containing instructions on how to proceed.
Samples:
https://biteblob.com/Information/mNTP6w0lBW8P9l/#samples.zip
Contact:
whitearmorrxd@proton.me
Session: 0547b7f96d469ecb332e89d0108e71c92df5bacff6c4ed5b9801ab5fffe872ee67
Astrana Health
October 25, 2026
•[ ransomware, healthcare, financial ]
Astrana Health was listed as a victim on the leak site of the Falcon ransomware group; the attack is estimated to have taken place on 2026-10-25. Sector: Healthcare. Country: United States of America. Healthcare services NASDAQ: ASTH - Our 738 GB extraction includes internal documents, regulatory audit reports, payer financial dispute trackers, internal operational readiness reviews, acquisition pipelines, detailed reimbursement tables, internal system evaluations, regulatory notifications, funds transfer records showing liquidity status, company financial statements, user credential lists, client contact lists, employee PII decks and much more. Contacted us then timewasted, re-attacks incoming.