Hyatt Place New York / Chelsea Hotel
December 14, 2025
•[ ransomware, leak ]
Hyatt Place New York / Chelsea Hotel was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2025-12-14. Sector: Hospitality. Country: United States of America. Website: hyatt.com/hyatt-place/en-US/lgazc-hyatt-place-new-york-chelsea. Data size claimed by the group: 48.5 GB. Hyatt Place New York / Chelsea Hotel
H2 Builders
January 14, 2026
•[ ransomware, manufacturing, financial ]
H2 Builders was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-01-14. Sector: Manufacturing. Country: United States of America. Website: h2builders.com. H2 Builders is a custom home builder located in Bluffton, SC, spe
cializing in luxury home construction in the Lowcountry. With ove
r 25 years of experience, the company has successfully completed
more than 500 custom homes, ensuring high-quality craftsmanship a
nd customer satisfaction.
We will upload more than 20gb of corporate data soon. Client info
rmation, financials, contracts and agreements, etc.
https://acswinc.com/
January 13, 2026
•[ ransomware, technology ]
https://acswinc.com/ was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-01-13. Sector: Technology. Country: United States of America. Website: acswinc.com. 1.5tb
Rebars & Mesh
January 14, 2026
•[ ransomware, manufacturing, leak ]
Rebars & Mesh was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-01-14. Sector: Manufacturing. Country: Australia. Website: rebarsandmesh.com. Rebars & mesh is an independent WBE-certified reinforcing steel f
abricator serving New England and Eastern New York. The company s
pecializes in rebar fabrication, pre-assembly services, and offer
s a wide range of complementary products such as welded wire mesh
and bar supports.
We will upload 15gb of corporate data soon. Employee personal inf
ormation (DLs, addresses, emails and so on), client information,
financials, agreements, drawings and specifications etc.
TruGolf
January 14, 2026
•[ ransomware, manufacturing, leak ]
TruGolf was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-01-14. Sector: Manufacturing. Country: United States of America. Website: trugolf.com. TruGolf develops and manufactures golf simulation hardware and so
ftware for both business and consumer markets. The company specia
lizes in creating immersive virtual golf experiences that accurat
ely replicate course designs and gameplay nuances.
We will upload 37gb of corporate data soon. Employee personal inf
ormation (SSNs, DLs, addresses, emails and so on), client informa
tion, financials, contracts and agreements, etc.
Adriatic Port Authority
January 14, 2026
•[ ransomware, leak ]
Adriatic Port Authority was listed as a victim on the leak site of the anubis ransomware group; the attack is estimated to have taken place on 2026-01-14. Sector: Transportation. Country: Italy. Website: ancona.it. www.porto.ancona.it - data breach.
Copec S.A.
January 14, 2026
•[ ransomware, energy ]
Copec S.A. was listed as a victim on the leak site of the anubis ransomware group; the attack is estimated to have taken place on 2026-01-14. Sector: Energy & Utilities. Country: Chile. Website: ww2.copec.cl. Data Breach at One of Chile's Leading Companies
https://seha.org.sa
January 14, 2026
•[ ransomware, healthcare ]
https://seha.org.sa was listed as a victim on the leak site of the tengu ransomware group; the attack is estimated to have taken place on 2026-01-14. Sector: Healthcare. Country: Saudi Arabia. Website: seha.org.sa. https://seha.org.sa/ This is the official website of the Health Services Association in the Qassim region of Saudi Arabia. It is a non-profit/charitable organization that provides health and social services to those in need.
ImageWorks Display
January 14, 2026
•[ ransomware, financial, manufacturing ]
ImageWorks Display was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-01-14. Sector: Professional Services. Country: United States of America. Website: imageworksdisplay.com. ImageWorks Display & Marketing is a full-service Point-of-Purchas
e display company. The company specializes in the development and
production of custom displays, signage, and in-store tobacco dis
plays.
We will upload 15gb of corporate data soon. Employee personal inf
ormation (w9 forms and so on), client information, numerous finan
cials files, agreements and contracts, NDAs and so on.
The National Auto Loan Network
January 14, 2026
•[ ransomware, finance, leak ]
The National Auto Loan Network was listed as a victim on the leak site of the nova ransomware group; the attack is estimated to have taken place on 2026-01-14. Sector: Financial Services. Country: United States of America. Website: naln.com. National Auto Loan Network specializes in auto loan refinancing, having successfully refinanced over 2 billion dollars in auto loans for more than 100,000 customers since its inception in 2010. The company is founded by finance professionals with over 40 years of experience and aims to simplify the refinancing process for clients. They pride themselves on excellent customer service and educating clients about their loans. NALN serves individuals looking to save money on their monthly car payments through effective loan refinancing solutions.
Pathology Associates Of Saint Thomas
January 14, 2026
•[ ransomware, healthcare ]
Pathology Associates Of Saint Thomas was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-14. Sector: Healthcare. Country: United States of America. Website: www.pastnashville.com.
Designers Mirror and Glass
January 14, 2026
•[ ransomware, manufacturing ]
Designers Mirror and Glass was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-14. Sector: Manufacturing. Country: United States of America. Website: www.designersmirror.com.
Ernest Maier
January 14, 2026
•[ ransomware, manufacturing ]
Ernest Maier was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-14. Sector: Manufacturing. Country: United States of America. Website: www.ernestmaier.com.
Radiant Remodeling
January 14, 2026
•[ ransomware, leak, technology ]
Radiant Remodeling was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-14. Sector: Professional Services. Country: United States of America. Website: www.radiantremodelingllc.com.
Pre-Con Builders
January 14, 2026
•[ ransomware, manufacturing ]
Pre-Con Builders was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-14. Sector: Manufacturing. Country: Canada. Website: www.preconbuilders.com.
Lunsford Capital
January 14, 2026
•[ ransomware, finance ]
Lunsford Capital was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-14. Sector: Financial Services. Country: United States of America. Website: www.lunsfordcapital.com.
Rogers Capital
February 19, 2025
•[ ransomware, finance, technology ]
Rogers Capital was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2025-02-19. Sector: Financial Services. Country: Mauritius. https://www.zoominfo.com/c/rogers-capital-ltd/444888383 https://rogerscapital.mu/ Mauritian company offering integrated financial and technology solutions, including corporate/trust services (fiduciary), IT/telecoms, and consumer finance (credit), helping businesses and individuals navigate global financial landscapes with services like fund administration, tech support, and payroll outsourcing. They operate in diverse sectors, leveraging technology and local expertise to serve both the Mauritius International Financial Centre (IFC) and broader global markets. Rogerscapital.mu blatantly disregarded the security of its company and its clients and did not even attempt to resolve the issue, despite the incompetence of its employees.
C****g
January 14, 2026
•[ ransomware ]
C****g was listed as a victim on the leak site of the payoutsking ransomware group; the attack is estimated to have taken place on 2026-01-14. Country: United Kingdom of Great Britain and Northern Ireland. Website: w****.uk. Data size claimed by the group: 2.3TB.
B****p
January 14, 2026
•[ ransomware, leak ]
B****p was listed as a victim on the leak site of the payoutsking ransomware group; the attack is estimated to have taken place on 2026-01-14. Country: United Kingdom of Great Britain and Northern Ireland. Website: w****.uk. Data size claimed by the group: 832GB.
V****S
January 14, 2026
•[ ransomware, leak, technology ]
V****S was listed as a victim on the leak site of the payoutsking ransomware group; the attack is estimated to have taken place on 2026-01-14. Country: Germany. Website: v****.com. Data size claimed by the group: 625GB.