Fluorsid Spa
January 17, 2026
•[ ransomware, manufacturing ]
Fluorsid Spa was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-17. Sector: Manufacturing. Country: Italy. Website: www.fluorsid.com.
em***int*-ho***.com
January 17, 2026
•[ ransomware, leak ]
em***int*-ho***.com was listed as a victim on the leak site of the benzona ransomware group; the attack is estimated to have taken place on 2026-01-17. Website: em***int*-ho***.com. Ransom demand: $*.000. Data size claimed by the group: 80 GB.
ccbrt.org
January 17, 2026
•[ ransomware, healthcare ]
ccbrt.org was listed as a victim on the leak site of the benzona ransomware group; the attack is estimated to have taken place on 2026-01-17. Sector: Healthcare. Country: Tanzania, United Republic of. Website: ccbrt.org. Ransom demand: $500.000. Data size claimed by the group: 1.8TB. [AI generated] Comprehensive Community Based Rehabilitation in Tanzania (CCBRT) is a healthcare organization that operates primarily in Tanzania. The organization aims to provide affordable, high-quality healthcare services to the local community, particularly those with disabilities. It focuses on areas like disability hospital services, rehabilitation, eye health, maternal and newborn healthcare. CCBRT is also known for its training and capacity building activities.
anfibius.net
January 17, 2026
•[ ransomware, technology ]
anfibius.net was listed as a victim on the leak site of the tengu ransomware group; the attack is estimated to have taken place on 2026-01-17. Sector: Technology. Country: Spain. Website: anfibius.net. Anfibius is an Ecuadorian company specializing in providing software solutions and technology services for integrated business and project management.
Cary Pediatric Center
January 17, 2026
•[ ransomware, healthcare ]
Cary Pediatric Center was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-17. Sector: Healthcare. Country: United States of America. Website: carypediatriccenter.com.
Nafae Sanitaire S.a.r.l
January 17, 2026
•[ ransomware, retail ]
Nafae Sanitaire S.a.r.l was listed as a victim on the leak site of the tengu ransomware group; the attack is estimated to have taken place on 2026-01-17. Sector: Professional Services. Country: Morocco. Website: nafaesanitaire.com. Nafae Sanitaire S.a.r.l A local company in Tangier Castilla district, specializing in plumbing and sanitary ware (sanitaire, plomberie, chauffage)
Avraham Hayyim ( Mehrdad Rahimi ) – Mossad Agent
January 18, 2026
•[ ransomware, espionage, government ]
Avraham Hayyim ( Mehrdad Rahimi ) Mossad Agent was listed as a victim on the leak site of the handala ransomware group; the attack is estimated to have taken place on 2026-01-18. Avraham Hayyim ( Mehrdad Rahimi ) | (Guiding Officer of Iranian Agents in Mossads Iran Desk) Mehrdad Rahimi, serving as the guiding officer for Iranian agents within Mossads Iran Desk, attempted to play a major role in organizing and directing networks behind the unrest inside Iran. By managing and directing Iranian operatives, he sought to
MKC Customs Brokers International Inc.
January 18, 2026
•[ ransomware, leak ]
MKC Customs Brokers International Inc. was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Transportation. Country: United States of America. Website: mkcchb.com. International trading has never been as complicated and demanding as it is today. Every shipment, large or small, requires a customs broker who is an absolutely dependable working partner. That's MKC Customs Brokers!
Southern Alberta Community Living Association
January 18, 2026
•[ ransomware, government, healthcare ]
Southern Alberta Community Living Association was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Government & Defense. Country: Canada. Website: sacla.ca. SACLA provides individualized services and supports aimed at assisting individuals with disabilities to achieve their personal goals. Established in 1980, the association focuses on building vibrant communities where every person is connected, contributing, and valued. Their services are tailored to the unique needs of each individual, beginning with a comprehensive consultation to determine the best approach for fostering quality of life and aspirations. SACLA also engages in projects like MyCompass and CATALYST to promote empowerment and address issues such as unemployment for marginalized groups.
Balneario
January 18, 2026
•[ ransomware, retail ]
Balneario was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Hospitality. Country: Spain. Website: www.balneario.com.
Vietnam Airlines
January 18, 2026
•[ ransomware, leak ]
Vietnam Airlines was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Transportation. Country: Vietnam. Website: www.vietnamairlines.com.
University Volkswagen Mazda
January 18, 2026
•[ ransomware, retail, automotive ]
University Volkswagen Mazda was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Retail & E-Commerce. Country: United States of America. Website: www.universityvwmazda.com.
Jampen Holzbau AG
January 18, 2026
•[ ransomware, manufacturing ]
Jampen Holzbau AG was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Manufacturing. Country: Switzerland. Website: www.jampen-holzbau.ch.
GSM PORTAL TEKNOLOJİ HİZMETLERİ TİC. LTD. ŞTİ
January 18, 2026
•[ ransomware, technology ]
GSM PORTAL TEKNOLOJ HZMETLER TC. LTD. T was listed as a victim on the leak site of the tengu ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Technology. Country: Turkey. Website: gsmportal.com.tr. This is a small to medium-sized Turkish company officially registered in Istanbul, operating in the GSM telecommunications technology and technical services sector. It has complete official documentation but is not very active digitally
Title Guaranty
January 18, 2026
•[ ransomware, finance ]
Title Guaranty was listed as a victim on the leak site of the sinobi ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Financial Services. Country: United States of America. Website: www.titleguaranty.com. Title Guaranty Company of Lewis County is a locally owned title escrow provider located in Chehalis, Washington, servicing clients across the entire state. They offer comprehensive title and real estate settlement services tailored for realtors, consumers, lenders, builders, and commercial clients. The company emphasizes integrity and local knowledge, ensuring personal attention and outstanding service for each transaction. Their mission is to simplify the closing process, making significant transactions easier for their clients.
Office for Students
January 18, 2026
•[ ransomware, education ]
Office for Students was listed as a victim on the leak site of the sinobi ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Education. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.officeforstudents.org.uk. he Office for Students (OfS) aims to ensure that all students have a rewarding experience in higher education that enhances their personal and professional lives. It provides resources and guidance on quality assessment, financial sustainability, and student welfare while promoting equal opportunities and student choice. The OfS collaborates with educational institutions to improve standards and support systems in the sector. Their focus includes the well-being of students, financial support, and the overall academic landscape in England.
Advanced Business Equipment
January 18, 2026
•[ ransomware, technology ]
Advanced Business Equipment was listed as a victim on the leak site of the sinobi ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Technology. Country: United States of America. Website: www.advancedbusinessequipment.com. Advanced UK is one of four trusted Xerox Platinum Partners and established for over a quarter of a century (since 1991). We pride ourselves with focusing on reliable customer service, entwined with the ability to identify and deliver the best managed-print service, production printing and digital transformation solutions for our clients every need. We also work in collaboration with leading technology and software providers to further enhance our value proposition and operate with a vendor-neutral approach. Advanced UK serves a large customer base which varies from small organisations through to large international corporates. We are accredited to sell the entire range of Xerox products and services, and we are an experienced provider of managed-print and document services. In line with industry trends, Advanced UK are experts at bespoke software solutions for all print and document management processes.
QFloors
January 18, 2026
•[ ransomware, technology ]
QFloors was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Technology. Country: United States of America. Website: qfloors.com. A flooring software provider.
Mid-park Ink
January 18, 2026
•[ ransomware, retail ]
Mid-park Ink was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Retail & E-Commerce. Country: United States of America. Website: mid-park.com. A construction holding from Kentucky.
Thunder Mountain Harley-Davidson
January 18, 2026
•[ ransomware, retail ]
Thunder Mountain Harley-Davidson was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Retail & E-Commerce. Country: United States of America. Website: thundermountainharley.com. A Harley-Davidson dealership