MUST Informatique
February 24, 2026
•[ ransomware, technology, healthcare ]
MUST Informatique was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-02-24. Sector: Technology. Country: Switzerland. Website: mustinformatique.com. mustinformatique.com MUST INFORMATIQUE is a French software publisher founded in 1990 and based in Couzeix, France . The company specializes in creating digital solutions for Home Healthcare Providers (PSAD), focusing on areas like home care, respiratory assistance, orthopedics, and infusion therapy . For nearly 31 years, it has been a key player in its sector, offering software that helps manage patient data, ensure regulatory compliance, and digitize organizational processes for healthcare professionals . In 2024, the company, which generates around 10 million in annual revenue, was acquired by Orisha, a European software publisher, to create a comprehensive digital ecosystem for the home healthcare industry .
Boltech
February 24, 2026
•[ ransomware, manufacturing, technology ]
Boltech was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-02-24. Sector: Manufacturing. Country: Poland. Website: boltech.pl. [AI generated] Boltech is a company that provides services for industrial automation and electrical installations. In addition, Boltech offers a range of electrical and energy solutions to various sectors including aviation, automotive, and logistics. The company prides itself on providing innovative solutions by using the latest technology to ensure efficient and sustainable results for their clients.
Westwing Home & Living
February 24, 2026
•[ ransomware, retail, technology ]
Westwing Home & Living was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-02-24. Sector: Retail & E-Commerce. Country: Germany. Website: westwing.de. [AI generated] Westwing Home & Living is a European e-commerce company, headquartered in Munich, Germany. It offers an extensive collection of furnishings and home dcor. Westwing operates on a membership model, offering interior design inspiration, lifestyle articles, and select sales on home essentials. The company operates in 11 European countries, providing a curated, hand-picked selection of brands and products across various price points.
A large bank in Asia
February 24, 2026
•[ ransomware, finance ]
A large bank in Asia was listed as a victim on the leak site of the atomsilo ransomware group; the attack is estimated to have taken place on 2026-02-24. Sector: Financial Services. Website: bank.com. [AI generated] A large bank in Asia refers to a financial institution that provides diversified services like deposits, loans, wealth management to individual and corporate clients. Being large-scale, they generally operate across several countries in the Asia region, often having a significant market share. This also involves operating digital banking services, given the widespread internet usage. Their influence in the finance sector can affect regional economic stability.
Pappytech
February 24, 2026
•[ ransomware, retail, financial ]
Pappytech was listed as a victim on the leak site of the vect ransomware group; the attack is estimated to have taken place on 2026-02-24. Sector: Retail & E-Commerce. Country: India. Website: Pappytech.com. Status: STATUS: NEGOTIATING | Sector: retail | Main accounting software data directories (multiple financial years)
Company-wise accounting datasets (separate numeric company instances)
Archived accounting backups (ZIP and RAR files, mu... DATA SIZE: 22.82 GB | Deadline: 18d 7h
pay***
February 24, 2026
•[ ransomware, finance ]
pay*** was listed as a victim on the leak site of the vect ransomware group; the attack is estimated to have taken place on 2026-02-24. Sector: Financial Services. Country: Egypt. Website: pay***.com. Status: STATUS: NEGOTIATING | Sector: Finance | Deadline: 18d 19h
for******a****ng
February 24, 2026
•[ ransomware, finance ]
for******a****ng was listed as a victim on the leak site of the vect ransomware group; the attack is estimated to have taken place on 2026-02-24. Sector: Financial Services. Country: United States of America. Website: for******a****ng.com. Status: STATUS: NEGOTIATING | Sector: Finance | Deadline: 18d 7h
***wire
February 24, 2026
•[ ransomware, finance, technology ]
***wire was listed as a victim on the leak site of the vect ransomware group; the attack is estimated to have taken place on 2026-02-24. Sector: Professional Services. Country: United States of America. Website: ***wire.com. Status: STATUS: NEGOTIATING | Sector: LAW | Deadline: 18d 7h
****360.com
February 24, 2026
•[ ransomware, healthcare ]
****360.com was listed as a victim on the leak site of the vect ransomware group; the attack is estimated to have taken place on 2026-02-24. Sector: Healthcare. Country: United States of America. Website: *****360.com. Status: STATUS: NEGOTIATING | Sector: healthcare logistics | Deadline: 18d 7h
a*f***a
February 24, 2026
•[ ransomware, healthcare ]
a*f***a was listed as a victim on the leak site of the vect ransomware group; the attack is estimated to have taken place on 2026-02-24. Sector: Healthcare. Website: a*f***a.care. Status: STATUS: NEGOTIATING | Sector: Healthcare | client records, documents and so on | Deadline: 18d 19h
s***om****x
February 24, 2026
•[ ransomware, healthcare ]
s***om****x was listed as a victim on the leak site of the vect ransomware group; the attack is estimated to have taken place on 2026-02-24. Sector: Healthcare. Country: United States of America. Website: s***om****x.com. Status: STATUS: NEGOTIATING | Sector: Healthcare | PII data, clients medical records, and HIV tests | Deadline: 18d 7h
MB Contabilidade
February 24, 2026
•[ ransomware, finance ]
MB Contabilidade was listed as a victim on the leak site of the vect ransomware group; the attack is estimated to have taken place on 2026-02-24. Sector: Professional Services. Country: Brazil. Website: mbcontabilidade.com.br. Status: STATUS: NEGOTIATING | Sector: accounting | Public/shared company directories (general, accounting I & II, HR, legal, indexes, systems, tokens)
Accounting system data and balance databases (multiple company instances)
Client/company... DATA SIZE: 121.03 GB | Deadline: 8d 4h
ApexHospitals
February 19, 2026
•[ ransomware, healthcare, leak ]
ApexHospitals was listed as a victim on the leak site of the vect ransomware group; the attack is estimated to have taken place on 2026-02-19. Sector: Healthcare. Country: India. Website: apexhospitals.com. Status: STATUS: LEAKED | Sector: healthcare | Employee personally identifiable information (PII)
Payroll records and compensation data
Social Security numbers / national ID numbers
Complete patient medical records
Medical histories and clinic...
Mutualista Imbabura
February 13, 2026
•[ ransomware, finance ]
Mutualista Imbabura was listed as a victim on the leak site of the vect ransomware group; the attack is estimated to have taken place on 2026-02-13. Sector: Financial Services. Country: Ecuador. Website: mutualistaimbabura.com. Status: STATUS: LEAKED | Sector: Finance | Customer financial records (loans, savings, balances)
Credit and loan portfolio data
Payroll and salary information
Employee personal data (PII)
National ID documents
Customer... DATA SIZE: 300GB
Grupo VerdeAzul
February 13, 2026
•[ ransomware, leak, finance ]
Grupo VerdeAzul was listed as a victim on the leak site of the vect ransomware group; the attack is estimated to have taken place on 2026-02-13. Sector: Financial Services. Country: Namibia. Website: Grupoverdeazul.com. Status: STATUS: LEAKED | Sector: asset management | Accounting and bookkeeping system data (Sage / Peachtree)
Company financial records and ledgers
Accounts payable and receivable data
Tax configuration and tax table files
Payro... DATA SIZE: 13.36 GB
Insight Hospital & Medical Center Chicago
September 2, 2025
•[ ransomware, healthcare ]
Insight Hospital & Medical Center Chicago was listed as a victim on the leak site of the termite ransomware group; the attack is estimated to have taken place on 2025-09-02. Sector: Healthcare. Country: United States of America. Website: insightchicago.com. Founded in 1852 Mercy Hospital & Medical Center is a member of Trinity Health. They are a teaching hospital headquartered out of Chicago, Illinois
Triumph Group
February 24, 2026
•[ ransomware, manufacturing, technology ]
Triumph Group was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-02-24. Sector: Manufacturing. Country: United States of America. Website: triumphgroup.com. [AI generated] Triumph Group is an international company specializing in manufacturing and repairing aerospace structures, systems, and components. Their work encompasses commercial, regional, business and military aircraft, as well as their components. Triumph Group has a robust supply chain providing services globally, significantly enhancing the performance of the aerospace industry.
Symeta
February 24, 2026
•[ ransomware, technology ]
Symeta was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-02-24. Sector: Technology. Country: Belgium. Website: symeta.com. [AI generated] Symeta is a Belgian company specializing in marketing communication solutions. They provide personalized and relevant communication services to various industries. Their offerings include data-driven marketing, hybrid publishing and printing. The companys innovative solutions help businesses to improve customer engagement through personalization.
primaria ungheni
February 25, 2026
•[ ransomware, education, government ]
primaria ungheni was listed as a victim on the leak site of the killsec ransomware group; the attack is estimated to have taken place on 2026-02-25. Sector: Education. Country: Romania. Website: primaria-ungheni.ro. Price ??? Disclosures 0/1
Birmingham Museum of Art
February 24, 2026
•[ ransomware, education ]
Birmingham Museum of Art was listed as a victim on the leak site of the termite ransomware group; the attack is estimated to have taken place on 2026-02-24. Sector: Education. Country: United States of America. Website: www.artsbma.org. The Birmingham Museum of Art in Alabama features a vast collection of over 27,000 artworks and offers free admission to visitors. The museum is open from Tuesday to Sunday and hosts various exhibitions and events throughout the year. It serves a diverse audience, including families, students, and art enthusiasts, providing educational resources and opportunities for engagement.
