renovagy.com
February 11, 2026
•[ ransomware, technology ]
renovagy.com was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-02-11. Sector: Technology. Country: Germany. Website: renovagy.com. Renovagy provides business services. Contact them directly for more information about their offering...
cmcconstruct.com
February 11, 2026
•[ ransomware, manufacturing ]
cmcconstruct.com was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-02-11. Sector: Manufacturing. Country: Romania. Website: cmcconstruct.com. Chamberlain & McCreery is a general contractor specializing in the construction of custom, energy-ef...
sands.mu
January 13, 2026
•[ ransomware, retail ]
sands.mu was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-01-13. Sector: Hospitality. Country: Mauritius. Website: sands.mu. Sands Suites Resort & Spa is a tranquil beachfront boutique hotel in Mauritius that offers luxury ac...
hanover-ma.gov
January 21, 2026
•[ ransomware, government ]
hanover-ma.gov was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-01-21. Sector: Government & Defense. Country: United States of America. Website: hanover-ma.gov. The mission of the Hanover Police Department is to prevent crime, but instead of doing their job, th...
Northeast Pharmacy Service
February 14, 2026
•[ ransomware, healthcare, financial ]
Northeast Pharmacy Service was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-02-14. Sector: Healthcare. Country: United States of America. Website: northeastpharmacy.com. Northeast Pharmacy Service Corporation (NPSC) is dedicated to sup
porting independent community pharmacies by providing business de
velopment services, individualized support, and strategic advocac
y. They offer a range of concierge-level services, including acce
ss to dedicated pharmacy consultants, educational resources, and
industry insights to help pharmacies thrive.
We are going to upload company data soon. You will find financial
data (audit, invoices,financial reports), personal files and cus
tomers data.
MESA Products
February 13, 2026
•[ ransomware, manufacturing ]
MESA Products was listed as a victim on the leak site of the medusa ransomware group; the attack is estimated to have taken place on 2026-02-13. Sector: Manufacturing. Country: United States of America. Website: mesaproducts.com. Ransom demand: 800000. MESA Products is a U.S.-based industrial company that supplies cathodic protection materials and corrosion control solutions. The company focuses on preventing rust and structural damage in critical infrastructure such as pipelines and underground metal systems. Its product range includes test stations, connection kits, and monitoring equipment used to measure and maintain corrosion-protection systems. MESA emphasizes safety, reliable manufacturing, and high on-time delivery performance while supporting engineers, utilities, and construction sectors. The companys mission is to protect people, property, and the environment by extending the life and reliability of essential infrastructure through quality protective technologies and technical support services.
The company headquarters is located in 4445 S 74th East Ave, Tulsa, Oklahoma 74145, United States.
201-500 Employees
Grandview Family Medicine
February 8, 2026
•[ ransomware, healthcare ]
Grandview Family Medicine was listed as a victim on the leak site of the medusa ransomware group; the attack is estimated to have taken place on 2026-02-08. Sector: Healthcare. Country: United States of America. Website: grandviewfamilymedicine.com. Ransom demand: 100000. Grandview Family Medicine is a healthcare provider offering a range of services including family medicine, obstetrics, women's health, men's health, and pediatrics. They operate clinics in Provo and Cedar Hills and provide both in-person and telehealth appointments for their patients. The clinic emphasizes comprehensive care, addressing chronic disease management, mental health, urgent visits, and minor procedures. Their intended clients include families and individuals seeking quality healthcare across various age groups.
The company headquarters is located in 1900 North State Street Provo, Utah 84604 United States.
11-50 Employees
Comune di Battipaglia
February 2, 2026
•[ ransomware, government ]
Comune di Battipaglia was listed as a victim on the leak site of the medusa ransomware group; the attack is estimated to have taken place on 2026-02-02. Sector: Government & Defense. Country: Italy. Website: battipaglia.sa.it. Ransom demand: 100000. The Comune di Battipaglia is the official municipal government of Battipaglia, a town in the Province of Salerno in the Campania region of southern Italy. As the local public administration, it oversees civic services, urban planning, public records, community programs, and administrative functions for the towns residents, known as Battipagliesi. The municipality is led by a mayor and council, and its offices are based in Piazza Aldo Moro. Battipaglia is historically an agricultural and industrial centre, famous for its buffalo mozzarella and rich cultural traditions. The Comunes website provides access to local services, news, governance information, and contact details for citizens and visitors.
The company headquarters is located in Piazza Aldo Moro, 84091 Battipaglia (SA), Italia.
30 Employees
South Hays Fire Department
January 29, 2026
•[ ransomware, government ]
South Hays Fire Department was listed as a victim on the leak site of the medusa ransomware group; the attack is estimated to have taken place on 2026-01-29. Sector: Government & Defense. Country: United States of America. Website: southhaysfire.com. Ransom demand: 100000. Hays County Emergency Services District 3 provides essential fire prevention and emergency services to the South Hays County area. The district focuses on recruiting full-time firefighters and is dedicated to community safety and preparedness. In addition to emergency response, the district promotes public knowledge on fire safety and outdoor burning regulations. Their commitment to accessibility ensures that all community members can engage with their services effectively.
The company headquarters is located in 3528 Hunter Road, San Marcos, Texas 78666.
11-50 Employees
Balloons Everywhere
January 29, 2026
•[ ransomware, retail ]
Balloons Everywhere was listed as a victim on the leak site of the medusa ransomware group; the attack is estimated to have taken place on 2026-01-29. Sector: Retail & E-Commerce. Country: United States of America. Website: balloons.com. Ransom demand: 150000. Balloons.com is a wholesale distributor specializing in a wide range of balloon products including foil film, latex balloons, and balloon decoration kits. They cater to various themes, occasions, and licensed characters, offering items for both everyday events and special celebrations. Their services target individuals and businesses looking for party supplies, with a focus on DIY balloon decor and promotional products. Additionally, they provide customers with resources and learning tools related to balloon usage and care.
The company headquarters is located in 16474 Greeno Road, Fairhope, AL 36532-5528, United States.
11-50 Employees
UniTurn Kft.
February 3, 2026
•[ ransomware, manufacturing ]
UniTurn Kft. was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-02-03. Sector: Manufacturing. Country: Hungary. Website: www.uniturn.hu. Data size claimed by the group: 200GB. - Drawing data- HR info-Employee data
RIECO Industries Limited
January 28, 2026
•[ ransomware, manufacturing ]
RIECO Industries Limited was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-01-28. Sector: Manufacturing. Country: India. Website: www.rieco.com. Data size claimed by the group: 10GB. drawing data
Master Handlers
January 29, 2026
•[ ransomware, manufacturing, leak ]
Master Handlers was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-01-29. Sector: Transportation. Country: India. Website: www.masterhandlers.com. Data size claimed by the group: 300GB. - drawing data- employee personal info
Abrahamsom Center
February 1, 2026
•[ ransomware, education ]
Abrahamsom Center was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-02-01. Sector: Education. Country: Israel. Website: www.abrahamson.co.il/en. Data size claimed by the group: 200GB. - customer info-HR data
*e**l I*s***u*e f*r Clinical Research LLC
February 1, 2026
•[ ransomware, healthcare ]
*e**l I*s***u*e f*r Clinical Research LLC was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-02-01. Sector: Healthcare. Country: United States of America. Website: pi-cr.net.
S.Y.L Pastilhas e Sapatas de Freios
January 21, 2026
•[ ransomware, manufacturing ]
S.Y.L Pastilhas e Sapatas de Freios was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-01-21. Sector: Manufacturing. Country: Brazil. Website: www.syl.com.br. [AI generated] "S.Y.L Pastilhas e Sapatas de Freios" is a Brazilian company that specializes in the manufacture and marketing of brake pads and shoes. They provide products for a wide range of vehicles, maintaining focus on quality and performance for its customers. Besides, the company develops and executes technical and commercial training for professionals, promoting expertise in the automotive repair market.
PERLITE, S.L.U
January 16, 2026
•[ ransomware, manufacturing ]
PERLITE, S.L.U was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-01-16. Sector: Manufacturing. Country: Spain. Website: solucionesperlite.com. Data size claimed by the group: 100GB. - Drawings- Customized data according to clients
Adirondack Networks
February 5, 2026
•[ ransomware, technology, leak ]
Adirondack Networks was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-02-05. Sector: Technology. Country: United States of America. Website: adirondacknetworks.com. Data size claimed by the group: 0GB. Internal Documents.
Bigso
February 15, 2026
•[ ransomware, retail, manufacturing ]
Bigso was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-02-15. Sector: Retail & E-Commerce. Country: Sweden. Website: bigso.com. Bigso Box, established in 1963, specializes in premium storage and packaging solutions that are both sustainable and stylish. Their product range includes customizable storage boxes and luxury packaging options designed for homes, offices, and retailers. The company prides itself on its commitment to quality, innovation, and customer service, ensuring efficient and elegant organization solutions. With a focus on eco-friendly materials and manufacturing processes, Bigso Box serves clients looking for functional yet decorative storage solutions.
Oceania Gas Chemicals & Related Products
February 15, 2026
•[ ransomware, energy, healthcare ]
Oceania Gas Chemicals & Related Products was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-02-15. Sector: Energy & Utilities. Country: Samoa. Website: oceaniagas.com. oceaniagas.com zoominfo.com/c/oceania-gas-ltd/414947891 Oceania Gas specializes in providing a wide range of gases including medical gases, industrial gases, and various gas mixtures. They offer an extensive selection of welding equipment, safety PPE, refrigerants, and tools for diverse applications. The company serves clients in need of gas solutions, medical supplies, and welding services across locations in Suva, Lautoka, Labasa, Nadi, and Apia, Samoa. With a commitment to quality and trusted
