Warren County Sheriff’s Office
December 19, 2025
•[ ransomware, government ]
Warren County Sheriffs Office was listed as a victim on the leak site of the ransomhouse ransomware group; the attack is estimated to have taken place on 2025-12-19. Sector: Government & Defense. Country: United States of America. Website: warrencountykysheriff.com. The Warren County Sheriff's Office (Kentucky, USA), led by Sheriff Brett Hightower, is a professional law enforcement agency dedicated to protecting residents and visitors, upholding Kentucky state laws and the U.S. Constitution, and delivering comprehensive public safety services across the county. The office provides a wide range of functions, including proactive crime prevention, rapid incident response, equitable enforcement of ordinances and statutes, civil process execution, tax collection and administration, concealed carry permit issuance, and various community-oriented programs and educational initiatives. Headquartered in Bowling Green, the agency maintains a 24/7 operational commitment to emergency preparedness, integrity-driven community policing, and continuous improvement through citizen engagement and feedback to enhance overall safety and quality of life.
Supriya Aesthetic Dermatology
January 23, 2026
•[ ransomware, healthcare ]
Supriya Aesthetic Dermatology was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-01-23. Sector: Healthcare. Country: United States of America. Website: supriyamd.com. Data size claimed by the group: 300 GB. Supriya Aesthetic Dermatology
rlc.es
January 14, 2026
•[ ransomware, technology ]
rlc.es was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-01-14. Sector: Technology. Country: Spain. Website: rlc.es. RLC Transportes (operating under Rau Load Cargo, S.L.) is a Spanish logistics and freight-transport company based in El Puig de
X-CD Technologies
January 23, 2026
•[ ransomware, technology ]
X-CD Technologies was listed as a victim on the leak site of the killsec ransomware group; the attack is estimated to have taken place on 2026-01-23. Sector: Technology. Country: United States of America. Website: x-cd.com. Price ??? Disclosures 0/1
CarMax, Inc.
September 29, 2025
•[ ransomware, retail ]
CarMax, Inc. was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2025-09-29. Sector: Retail & E-Commerce. Country: United States of America. Website: carmax.com. Size: 1.7 GB (compressed) | Records: 500k Records | Updated: 24 Jan 2026
****cr*nem*ds.c*m
January 24, 2026
•[ ransomware, healthcare, leak ]
****cr*nem*ds.c*m was listed as a victim on the leak site of the devman ransomware group; the attack is estimated to have taken place on 2026-01-24. Sector: Healthcare. Country: Svalbard & Jan Mayen. Website: ****cr*nem*ds.c*m. Patient data, medical cards clinic records
Hilong Petroleum Pipe Company LLC
January 24, 2026
•[ ransomware, energy ]
Hilong Petroleum Pipe Company LLC was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-01-24. Sector: Energy & Utilities. Country: China. Website: hilonguae.com. Data size claimed by the group: 10 GB. Hilong Petroleum Pipe Company LLC
Edmunds.com, Inc.
September 30, 2025
•[ ransomware, technology ]
Edmunds.com, Inc. was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2025-09-30. Sector: Technology. Country: United States of America. Size: 12 GB (compressed) | Updated: 24 Jan 2026
Milott Laboratories
January 24, 2026
•[ ransomware, manufacturing ]
Milott Laboratories was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-24. Sector: Manufacturing. Country: Thailand. Website: www.milott.co.th.
www.advancedcoolingtech.us
January 24, 2026
•[ ransomware, manufacturing, healthcare ]
www.advancedcoolingtech.us was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-01-24. Sector: Manufacturing. Country: United States of America. Website: www.advancedcoolingtech.us. Advanced Cooling Technologies, Inc is a leading provider of medical cooling solutions, specializing in the distribution of Airsys Medical Chillers in the USA. They offer a comprehensive range of services including replacement chiller sales, maintenance contracts, OEM parts, and technical support. With over 20 years of experience, ACT is recognized for delivering quality service and high availability chillers to hospitals, contractors, and industry peers.
www.hansemerkurintl.com
January 24, 2026
•[ ransomware, finance ]
www.hansemerkurintl.com was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-01-24. Sector: Financial Services. Country: Germany. Website: www.hansemerkurintl.com. HanseMerkur, founded in 1875 and headquartered in Germany, is an insurance company specializing in health insurance and other insurance products. The company offers customized insurance solutions with a focus on quality service and competitive pricing.
MRC Prion Unit and Institute of Prion Diseases
January 24, 2026
•[ ransomware, healthcare, education ]
MRC Prion Unit and Institute of Prion Diseases was listed as a victim on the leak site of the crypto24 ransomware group; the attack is estimated to have taken place on 2026-01-24. Sector: Healthcare. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.ucl.ac.uk/brain-sciences/prion. According to our guidelines, full data will be released once the timer expires.
Gianni Botsford Architects
January 24, 2026
•[ ransomware, hack ]
Gianni Botsford Architects was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-01-24. Sector: Professional Services. Country: United Kingdom of Great Britain and Northern Ireland. Website: giannibotsford.com. Data size claimed by the group: 10 GB. Gianni Botsford Architects
D & D Building
January 24, 2026
•[ ransomware, manufacturing ]
D & D Building was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-24. Sector: Manufacturing. Country: United States of America. Website: www.dndbuilding.com.
Borg Argentina
January 24, 2026
•[ ransomware, manufacturing ]
Borg Argentina was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-24. Sector: Manufacturing. Country: Argentina. Website: www.borgargentina.com.ar.
HARTE-BAVENDAMM Rechtsanwlte PartG mbB
January 24, 2026
•[ ransomware, leak, technology ]
HARTE-BAVENDAMM Rechtsanwlte PartG mbB was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-24. Sector: Professional Services. Country: Germany. Website: www.harte-bavendamm.de.
Shiffler Equipment Sales
January 24, 2026
•[ ransomware, retail ]
Shiffler Equipment Sales was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-24. Sector: Professional Services. Country: United States of America. Website: www.shifflerequip.com.
interr.com
January 24, 2026
•[ ransomware, technology ]
interr.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-01-24. Sector: Technology. Country: United Kingdom of Great Britain and Northern Ireland. Website: interr.com. Interr is a privately held security and risk-management services company headquartered at The Loom, 14 Gowers Walk, London, UK. Established
superiordrywall.com
January 11, 2026
•[ ransomware, manufacturing ]
superiordrywall.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-01-11. Sector: Manufacturing. Country: United States of America. Website: superiordrywall.com. Superior Drywall is an established American commercial drywall contracting company based in Oxnard, California, specialising in a range of interior
adifse.com.ar
January 9, 2026
•[ ransomware, government ]
adifse.com.ar was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-01-09. Sector: Government & Defense. Country: Argentina. Website: adifse.com.ar. ADIFSE formally the Administracin de Infraestructuras Ferroviarias Sociedad del Estado is a state-owned railway infrastructure company in Argentina
