Simon Property Group
October 28, 2025
•[ ransomware, finance, retail ]
Simon Property Group was listed as a victim on the leak site of the medusa ransomware group; the attack is estimated to have taken place on 2025-10-28. Sector: Financial Services. Country: United States of America. Website: simon.com. Ransom demand: 1200000. Simon Property Group is a leading real estate investment trust (REIT) based in Indianapolis, Indiana. Founded in 1993, it owns, develops, and manages premier shopping malls, outlets, and lifestyle centers across the United States and internationally. The companys well-known properties include Premium Outlets and The Mills centers. Led by CEO David E. Simon, it focuses on creating high-quality retail and entertainment destinations that attract millions of visitors each year. Despite challenges from online retail, Simon Property Group continues to innovate by combining shopping, dining, and mixed-use spaces, maintaining its position as a global leader in retail real estate.
company is headquartered in 225 West Washington Street, Indianapolis, Indiana 46204, USA.
3,000 employees
Marine Turbine Technologies
November 7, 2025
•[ ransomware, manufacturing ]
Marine Turbine Technologies was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-07. Sector: Manufacturing. Country: United States of America. Website: www.marineturbine.com.
DCS TECHNOLOGIES INC.
November 7, 2025
•[ ransomware, technology ]
DCS TECHNOLOGIES INC. was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2025-11-07. Sector: Technology. Country: United States of America. Website: dcstech.ca. DCS Technology Inc. is providing complete IT Solutions since 2004. They are specialized in Point of Sale systems, Website Designing, Technical Support, and Computer Networking Solutions. With 17 years of experience, DCS serving over 5000 businesses in North America.
GB Mail
November 7, 2025
•[ ransomware, leak ]
GB Mail was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2025-11-07. Sector: Professional Services. Country: United Kingdom of Great Britain and Northern Ireland. Website: gb-mail.co.uk. GB Mail is a privately owned and leading mailing house located centrally in the home counties. With a strong ethos of delivering mail with no fuss, on time and in full, the company boasts a dedicated and knowledgeable team passionate about all aspects of print and mail. Their services include storage & fulfilment, postal solutions, print personalisation, database cleansing, international mail, direct mail, and subscription mail.
Mold In Graphic Systems
August 30, 2025
•[ ransomware, manufacturing, leak ]
Mold In Graphic Systems was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-08-30. Sector: Manufacturing. Country: United States of America. Website: moldingraphics.com. Mold In Graphic Systems specializes in providing permanent labeli
ng solutions for plastic durable goods using their unique Polymer
Fusion Labels.
We will upload 15gb of corporate documents soon. Employee informa
tion (Driver licenses, credit cards scans, medical information an
d so on), projects information, internal confidential files, agre
ements and contracts, NDAs, etc.
Scouts Canada
November 8, 2025
•[ ransomware, government ]
Scouts Canada was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-08. Sector: Government & Defense. Country: Canada. Website: www.scouts.ca.
SHRM New Mexico
November 8, 2025
•[ ransomware, leak, education ]
SHRM New Mexico was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-08. Sector: Education. Country: United States of America. Website: www.shrmnm.org.
Pocatello Ready Mix
November 7, 2025
•[ ransomware, manufacturing ]
Pocatello Ready Mix was listed as a victim on the leak site of the securotrop ransomware group; the attack is estimated to have taken place on 2025-11-07. Sector: Manufacturing. Country: United States of America. Website: horrocksreadymix.com. Data size claimed by the group: 274 GB. Status: AWAITING
Size: 274 GB
Ponzini S.p.A.
November 8, 2025
•[ ransomware, manufacturing, leak ]
Ponzini S.p.A. was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2025-11-08. Sector: Manufacturing. Country: Italy. Website: ponzini.com.cn. Founded in 1862, Ponzini S.p.A. is a global leader in personal care product manufacturing. With over 160 years of history, the company has evolved to offer innovative and sustainable solutions in cosmetics and oral hygiene. Ponzini emphasizes quality, technology, creativity, sustainability, flexibility and health and safety.
JC Auto Accident Law Firm
November 8, 2025
•[ ransomware, leak ]
JC Auto Accident Law Firm was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-08. Sector: Professional Services. Country: United States of America. Website: jclaw.lawyer.
Gadge USA
November 8, 2025
•[ ransomware, retail ]
Gadge USA was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-08. Sector: Retail & E-Commerce. Country: United States of America. Website: www.gadgeusa.com.
Dublin Medical Center
November 9, 2025
•[ ransomware, healthcare ]
Dublin Medical Center was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-09. Sector: Healthcare. Country: Ireland. Website: www.dublinmedicalcenter.com.
Hitzinger
November 9, 2025
•[ ransomware, manufacturing ]
Hitzinger was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-09. Sector: Manufacturing. Country: Austria. Website: www.hitzinger.at.
Gullco International
November 9, 2025
•[ ransomware, manufacturing ]
Gullco International was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-09. Sector: Manufacturing. Country: Canada. Website: www.gullco.com.
Noroaco
November 6, 2025
•[ ransomware, manufacturing ]
Noroaco was listed as a victim on the leak site of the beast ransomware group; the attack is estimated to have taken place on 2025-11-06. Sector: Manufacturing. Country: Brazil. Website: www.noroaco.com. Data size claimed by the group: 750GB. Noroaco - Ferro e Aco specializes in a diverse range of high-quality steel products including tubes, beams, tiles, sheets, and plasma cutting services. With over sixteen years of experience, the company serves clients from various sectors such as agribusiness, construction, metallurgy, and locksmithing. They ensure excellence in every step of production by investing in team training and modern equipment, sourcing steel from the country's leading steel mills. Noroaco caters to both wholesale and retail markets, providing tailored solutions for clients' steel project needs.
Punjab Forensic Science Agency
November 7, 2025
•[ ransomware, government, technology ]
Punjab Forensic Science Agency was listed as a victim on the leak site of the beast ransomware group; the attack is estimated to have taken place on 2025-11-07. Sector: Government & Defense. Country: Pakistan. Website: www.pfsa.gop.pk. Data size claimed by the group: 900GB. The Punjab Forensic Science Agency (PFSA) provides a range of forensic services including audio visual analysis, computer forensics, DNA and serology, pathology, latent fingerprint analysis, and trace chemistry. It aims to support law enforcement agencies through training and education, offering courses and workshops on evidence collection and preservation. The agency also facilitates study tours for various institutions to familiarize them with its operations. PFSA is dedicated to enhancing forensic science capabilities in Pakistan to combat corruption and promote justice.
Ringmor
November 1, 2025
•[ ransomware, technology ]
Ringmor was listed as a victim on the leak site of the beast ransomware group; the attack is estimated to have taken place on 2025-11-01. Sector: Technology. Country: United States of America. Website: www.ringmor.com. Data size claimed by the group: 60GB. CallMor offers virtual phone system services aimed at businesses looking for unlimited communication options with no hidden fees. Their plans are designed to simplify connectivity for teams and clients alike and include 24/7 customer support. With offices in Orange County, San Diego, and Los Angeles, they prioritize customer satisfaction and provide competitive pricing in the telecommunications market. CallMor is known for its professional service and effectiveness in improving communication and sales results for its clients
Atrium Living Centers
November 8, 2025
•[ ransomware, healthcare ]
Atrium Living Centers was listed as a victim on the leak site of the medusa ransomware group; the attack is estimated to have taken place on 2025-11-08. Sector: Healthcare. Country: United States of America. Website: atriumlivingcenters.com. Ransom demand: 500000. Atrium Living Centers is a 100% employee-owned company providing skilled nursing, rehabilitation, and long-term care services. The organization is dedicated to delivering compassionate, high-quality healthcare to residents while promoting dignity, respect, and community involvement. With a strong focus on personalized treatment, Atrium Living Centers offers both short-term post-acute rehabilitation and long-term nursing care. Their mission is to be a light in the lives of our residents and families, ensuring comfort and well-being in a supportive environment. The company operates multiple care centers across several U.S. states, including Ohio, Michigan, Kentucky, and Wisconsin.
company is headquartered in Atrium Living Centers headquarters is located at 2550 Corporate Exchange Drive, Suite 200, Columbus, Ohio 43231, United States.
2,000 Employees
Instituto Nacional de Oftalmologia, Peru
November 9, 2025
•[ ransomware, healthcare, government ]
Instituto Nacional de Oftalmologia, Peru was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2025-11-09. Sector: Healthcare. Country: Peru. Website: ino.gob.pe. Data size claimed by the group: 30 GB. Instituto Nacional de Oftalmologia, Peru
Eastern Cape Department of Human Settlements, South Africa
November 9, 2025
•[ ransomware, government ]
Eastern Cape Department of Human Settlements, South Africa was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2025-11-09. Sector: Government & Defense. Country: South Africa. Website: ecdhs.gov.za. Data size claimed by the group: 20 GB. Eastern Cape Department of Human Settlements, South Africa
