iqs
November 18, 2025
•[ ransomware, technology ]
iqs was listed as a victim on the leak site of the tridentlocker ransomware group; the attack is estimated to have taken place on 2025-11-18. Country: Iraq.
Advantage 360
November 20, 2025
•[ ransomware, technology ]
Advantage 360 was listed as a victim on the leak site of the tridentlocker ransomware group; the attack is estimated to have taken place on 2025-11-20. Sector: Technology. Country: United States of America. Website: advantage360.com. [AI generated] Advantage 360 is a software company that provides integrated customer relationship management, billing, and automation solutions. Their services are focused primarily towards telecommunications, digital service providers, and broadband providers worldwide. They offer scalable solutions which incorporate billing, customer care, fraud management, and revenue assurance.
GuestTek
November 20, 2025
•[ ransomware, technology ]
GuestTek was listed as a victim on the leak site of the tridentlocker ransomware group; the attack is estimated to have taken place on 2025-11-20. Sector: Technology. Country: Canada. Website: guesttek.com. [AI generated] GuestTek is a global company that specializes in delivering and managing communications and connectivity services for the hospitality industry. They provide solutions for internet access, entertainment, and fully integrated hospitality systems, enhancing guest experience in properties around the world. The company is a pioneer and leader in providing advanced technologies for the hotel industry such as IP-PBX, Voice, IPTV, and High-Speed Internet Access.
Badan Pengelola Keuangan Haji
November 29, 2025
•[ ransomware, finance, government ]
Badan Pengelola Keuangan Haji was listed as a victim on the leak site of the blackshrantac ransomware group; the attack is estimated to have taken place on 2025-11-29. Sector: Financial Services. Country: Indonesia. Website: bpkh.go.id. [AI generated] "Badan Pengelola Keuangan Haji" (BPKH) is an agency overseen by the Indonesian Government. Located in Jakarta, its primary responsibility is to handle and manage the finances related to the Hajj pilgrimage for Indonesian Muslims. Recognized by Law No.34 of 2014, BPKH is accountable for optimizing funds, managing risks and making sure every Hajj participants financial demands are met.
Rasen Insaat Ve Yatirim Ticaret A.S.
November 29, 2025
•[ ransomware, manufacturing ]
Rasen Insaat Ve Yatirim Ticaret A.S. was listed as a victim on the leak site of the blackshrantac ransomware group; the attack is estimated to have taken place on 2025-11-29. Sector: Manufacturing. Country: Turkey. Website: rasen.com.tr.
CJW
November 29, 2025
•[ ransomware, retail, hack ]
CJW was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-29. Sector: Hospitality. Country: United States of America. Website: www.cjwbeer.com.
Bomchil
November 29, 2025
•[ ransomware, technology ]
Bomchil was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-29. Sector: Professional Services. Country: Argentina. Website: www.bomchil.com.ar.
Asia Condominium Association
November 29, 2025
•[ ransomware, retail ]
Asia Condominium Association was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-29. Sector: Hospitality. Country: United States of America. Website: www.asiamiamicondo.com.
Division 10
November 30, 2025
•[ ransomware, manufacturing ]
Division 10 was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2025-11-30. Sector: Other. Country: United States of America. Website: division10inc.com. Division 10 Inc is a company based in Memphis, Tennessee, specializing in supplying specialty products to the construction industry since 1989. They offer services including product sales, estimating services, and installation quotes. Their clients range from contractors to automotive companies, evidenced by testimonials highlighting their successful project contributions. The company prides itself on its commitment to quality and customer satisfaction
Battaglioli
November 30, 2025
•[ ransomware, manufacturing ]
Battaglioli was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-30. Sector: Manufacturing. Country: Italy. Website: www.battaglioli.it.
ILCA Targhe s.r.l.
November 30, 2025
•[ ransomware, manufacturing ]
ILCA Targhe s.r.l. was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-30. Sector: Manufacturing. Country: Italy. Website: www.ilcatarghe.it.
Veton Ai
November 30, 2025
•[ ransomware, technology ]
Veton Ai was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-30. Sector: Technology. Country: United States of America. Website: www.veton.ai.
WR Comercial
November 24, 2025
•[ ransomware, technology ]
WR Comercial was listed as a victim on the leak site of the medusa ransomware group; the attack is estimated to have taken place on 2025-11-24. Sector: Professional Services. Country: Brazil. Website: wrcomercial.com.br. Ransom demand: 100000. WR Comercial helps businesses find great staff for important jobs like cleaning, security, and front desk work. They connect companies with skilled workers who can handle all kinds of tasks, making it easy for businesses to get the help they need quickly and reliably. Whether you run a small office or a big building, WR Comercial has people ready to support your team.
company is headquartered in Rua Giancarlo Palanti 22B, Vila R, So Paulo, CEP 03661-050, Brazil.
11-50 Employees
Universidade Municipal de São Caetano
November 24, 2025
•[ ransomware, education ]
Universidade Municipal de So Caetano was listed as a victim on the leak site of the medusa ransomware group; the attack is estimated to have taken place on 2025-11-24. Sector: Education. Country: Brazil. Website: uscs.edu.br. Ransom demand: 250000. USCS offers a diverse range of educational programs including in-person and distance learning undergraduate degrees, technical courses, and postgraduate studies such as MBAs and doctorates. The university also provides non-degree courses aimed at skill enhancement and is equipped with facilities for secondary education. Services include free legal assistance, fiscal education, and health services, catering to both students and the community. With a focus on quality and flexibility, USCS serves a wide array of clients including students at various academic levels and professionals seeking further education.
company is headquartered in Rua Santo Antnio, 50 Centro, So Caetano do Sul, SP, CEP 09521-160.
501-1,000 Employees,
HWL Ebsworth
January 1, 2023
•[ ransomware, hack ]
hacked by ALPHV
Australian Clinical Labs (Medlab Pathology)
January 1, 2022
•[ ransomware, healthcare ]
ransomware attack
Neogen
August 29, 2026
•[ ransomware, technology, leak ]
In August 2026, the food and animal safety organisation Neogen was the target of a ShinyHunters "pay or leak" extortion attempt. The group later published data it claimed had been obtained from Neogen. The data consisted largely of corporate contact records and included 436k unique email addresses from mailing lists, employee records and other contacts.
Medela
September 7, 2026
•[ ransomware, healthcare, leak ]
In September 2026, Swiss medical device company Medela was the target of a ShinyHunters "pay or leak" extortion campaign. The data allegedly obtained in the breach was later published publicly and included 424k unique email addresses belonging predominantly to healthcare professionals, Medela staff and leads. The exposed data consisted primarily of corporate contact information, including names, physical addresses and phone numbers, with some records also containing associated support tickets.
Carhartt
August 13, 2026
•[ leak, ransomware, retail ]
In August 2026, clothing retailer Carhartt was the target of a ShinyHunters "pay or leak" extortion campaign. The group subsequently published data allegedly obtained from the company including 12.9M unique email addresses, names, phone numbers and physical addresses. The published corpus also contained millions of synthetic records that did not relate to real individuals and were excluded from the breach.
