Notaría 89
March 19, 2026
•[ ransomware, legal, finance ]
Notara 89 was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-03-19. Sector: Professional Services. Country: Mexico. Website: notaria89.com.mx. Data size claimed by the group: 85 GB. Notara 89 Edomex, located in the State of Mexico, offers specialized legal services for various real estate transactions and contracts. Under the leadership of Licenciado Luis Octavio Hermoso y Coln, the notary public provides services such as the granting of powers, purchase contracts, real estate mortgages, and the constitution of societies. The notary public also handles testaments and other notarial services, ensuring all legal requirements are met for property transfers and other legal matters.
Mercedes-Benz of Arlington
March 19, 2026
•[ ransomware, retail, automotive ]
Mercedes-Benz of Arlington was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-03-19. Sector: Retail & E-Commerce. Country: United States of America. Website: justmercedes.com. Mercedes-Benz of Arlington is a premier dealership specializing in new and pre-owned Mercedes-Benz vehicles, offering a wide selection of luxury cars, SUVs, and convertibles. The dealership provides exceptional customer service and a seamless buying experience for clients in the Arlington and greater Washington, DC area. They also offer financing options, vehicle servicing, and genuine parts to ensure customer satisfaction. With decades of experience, the knowledgeable staff is dedicated to helping clients find their ideal vehicle.
BITS Business Information Technology Solutions
February 15, 2026
•[ ransomware, technology ]
BITS Business Information Technology Solutions was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-02-15. Sector: Technology. Country: Germany. Website: bits.com.tn. bits.com.tn zoominfo.com/c/bits-business-information-technology-solutions/462382490 Bits is a computer services company that helps businesses solve real technology challenges. Our team works closely with partners across the tech world to create smart solutions for everyday problems. We pride ourselves on our five-star support and quick response times, making sure every client gets the help they need quickly and effectively
Berkadia Commercial Mortgage LLC
March 19, 2026
•[ ransomware, finance, technology ]
Berkadia Commercial Mortgage LLC was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-03-19. Sector: Financial Services. Country: United States of America. Over 5M Salesforce records containing PII and other internal corporate data have been compromised. This is a final warning to reach out by 22 Mar 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 19 Mar 2026 | Warning: FINAL WARNING
GD France
March 13, 2026
•[ ransomware, energy ]
GD France was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-03-13. Sector: Energy & Utilities. Country: France. Website: www.gdfrance.com/en.
Legacy Health LLC
March 20, 2026
•[ ransomware, healthcare ]
Legacy Health LLC was listed as a victim on the leak site of the worldleaks ransomware group; the attack is estimated to have taken place on 2026-03-20. Sector: Healthcare. Country: United States of America. Website: legacyhealthllc.com. [AI generated] "Legacy Health LLC" is a healthcare company that aims to provide high-quality healthcare services and improve health conditions. It offers a variety of healthcare services such as hospital care, medical clinics, home health services, and more. It focuses on promoting a healthy lifestyle, preventing disease, and managing chronic conditions. The company also emphasizes customer satisfaction, quality care, transparency, and integrity in their services.
TSN Co., Ltd.
March 20, 2026
•[ ransomware, technology, leak ]
TSN Co., Ltd. was listed as a victim on the leak site of the worldleaks ransomware group; the attack is estimated to have taken place on 2026-03-20. Country: Japan. Website: www.tsn-net.co.jp.
Pearce Services
December 4, 2025
•[ ransomware, technology, energy ]
Pearce Services was listed as a victim on the leak site of the worldleaks ransomware group; the attack is estimated to have taken place on 2025-12-04. Sector: Professional Services. Country: United States of America. Website: pearce-services.com. [AI generated] Pearce Services is a provider of mission-critical services maintaining and repairing infrastructure for telecommunications, renewable energy, and electric vehicle (EV) charging networks. It offers specialized services including design, installation, maintenance, repair, and replacement solutions. The firm caters to blue-chip companies across the US, rendering services to help prolong the lifecycle of their infrastructure, promote network efficiency and reliability.
Town of Blacksburg
November 25, 2025
•[ ransomware, government ]
Town of Blacksburg was listed as a victim on the leak site of the worldleaks ransomware group; the attack is estimated to have taken place on 2025-11-25. Sector: Government & Defense. Country: United States of America. Website: blacksburg.gov. [AI generated] The Town of Blacksburg is not a company but a municipal government body. It oversees community affairs in Blacksburg, Virginia, a town known for hosting the Virginia Polytechnic Institute (Virginia Tech). Its responsibilities include managing local services, maintaining public infrastructures, and implementing community welfare actions and improvements.
Finance of America Companies Inc.
March 20, 2026
•[ ransomware, finance ]
Finance of America Companies Inc. was listed as a victim on the leak site of the worldleaks ransomware group; the attack is estimated to have taken place on 2026-03-20. Sector: Financial Services. Country: United States of America. Website: www.financeofamerica.com. [AI generated] Finance of America Companies Inc. is an end-to-end lending and services platform operating in the United States. The company offers a wide range of financial products across various brands, focusing on fixed income asset management, commercial real estate, reverse mortgages, and retail lending. It serves clients through online platforms and its extensive national network of offices.
City of Los Angeles (LA)
March 20, 2026
•[ ransomware, government, technology ]
City of Los Angeles (LA) was listed as a victim on the leak site of the worldleaks ransomware group; the attack is estimated to have taken place on 2026-03-20. Sector: Government & Defense. Country: United States of America. Website: lacity.gov. [AI generated] The City of Los Angeles, often referred to as "LA," is the largest city in the state of California, USA. It is governed as a municipal corporation known for its extensive services including housing, transportation, and public safety. LA has diverse economies ranging from entertainment (Hollywood) to technology and is a major cultural, financial, and commercial center.
Winmate Inc.
January 29, 2026
•[ ransomware, technology ]
Winmate Inc. was listed as a victim on the leak site of the worldleaks ransomware group; the attack is estimated to have taken place on 2026-01-29. Sector: Technology. Country: Taiwan. Website: www.winmate.com. [AI generated] Winmate Inc. is a Taiwan-based technology company established in 1996. It specializes in industrial display technology and solutions, with a product line that includes rugged tablets, panel PCs, displays, and embedded automation devices. Known for its innovative, high-performance hardware, Winmate's products are used in a wide variety of industries, including maritime, medical, military, and transportation.
Oriska Insurance
March 20, 2026
•[ ransomware, finance ]
Oriska Insurance was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-03-20. Sector: Financial Services. Country: United States of America. Website: www.oriskainsurance.com. Oriska Insurance specializes in providing surety bonding, workers compensation, health insurance, and disability insurance tailored for small and minority-owned businesses. The company positions itself as a single source solution for multi-policy requirements, ensuring competitive pricing and comprehensive protection. With a commitment to reliability, Oriska Insurance has a track record of never failing to pay a claim or abandoning an employer. Their services are designed to help clients meet job requirements while staying within budget and legal constraints
bdtronic
February 25, 2026
•[ ransomware, manufacturing, technology ]
bdtronic was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-02-25. Sector: Manufacturing. Country: Germany. Website: bdtronic.com. bdtronic provides innovative solutions for dispensing, impregnati
on, hot riveting, and plasma applications, serving various indust
ries including automotive, electronics, telecommunications, and r
enewable energy.
We will upload 40gb of corporate data soon. Employee personal inf
ormation (passports, DLs, and so on), lots of HR files, financial
s, SpaceX project files, other partners files, contracts and agre
ements, and so on.
Motorpal
March 11, 2026
•[ ransomware, manufacturing, financial ]
Motorpal was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-03-11. Sector: Manufacturing. Country: Czechia. Website: motorpal.cz. MOTORPAL, a. s. is a prominent manufacturer of injection systems
for diesel engines, established in 1946. The company specializes
in producing a range of products including injection pumps, injec
tors, and spare parts, as well as providing sales and service sup
port.
We will upload 31gb of corporate data soon. Employee personal inf
ormation (addresses, phones, scanned documents and so on), detail
ed HR data, financials, partners files, contracts, projects, and
so on.
Madesmart
February 28, 2026
•[ ransomware, retail, financial ]
Madesmart was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-02-28. Sector: Retail & E-Commerce. Country: United States of America. Website: madesmart.com. Madesmart specializes in beautiful and functional home organizati
on solutions designed for everyday life. Their products cater to
various areas including kitchen, bath, and tabletop organization.
The company aims to provide thoughtfully designed organizational
solutions that enhance the living experience.
We will upload 31gb of corporate data soon. Employee personal inf
ormation, HR files, financials, client files, contracts and agree
ments, NDAs and so on.
Savvy Hawk
January 11, 2026
•[ ransomware, technology, financial ]
Savvy Hawk was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-01-11. Sector: Technology. Country: United States of America. Website: savvyhawk.net. Savvy Hawk is a Miami-based IT service provider that specializes
in business-focused communication solutions for small to enterpri
se-level clients. They offer services such as custom cloud soluti
ons, data backup and recovery, and VoIP telephone services, all d
esigned to enhance productivity and business continuity.
We will upload 941gb of corporate data soon. Detailed employee pe
rsonal information (passports, DLs, SSNs, medical records and so
on), HR files, client's credit cards and other information, finan
cials, contracts and agreements, etc.
INP Schweiz
February 25, 2026
•[ ransomware, energy, leak ]
INP Schweiz was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-02-25. Sector: Energy & Utilities. Country: Switzerland. Website: inp-e.ch. INP Schweiz AG partners with leading companies in the energy gene
ration and transmission sector, providing comprehensive engineeri
ng services that include concept development, planning, commissio
ning, and testing.
We will upload 9gb of corporate data soon. Employee personal info
rmation (passports, DLs and os on), HR files, financials, client
files, contracts with Siemens and others, etc.
odayequipment.com
March 20, 2026
•[ ransomware, leak, energy ]
odayequipment.com was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-03-20. Sector: Transportation. Country: United States of America. Website: odayequipment.com. Founded in 1935, ODay Equipment specializes in supplying and maintaining equipment for the oil and gas industry, serving customers in the U.S. Midwest.The company offers fuel storage tanks, retail fueling systems, EV charging solutions,installation, and a variety of repair services.
wardencc.com
March 20, 2026
•[ ransomware, technology, government ]
wardencc.com was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-03-20. Sector: Technology. Country: United States of America. Website: wardencc.com. Warden Construction is a general contractor based in Jacksonville, Florida, specializing in design-build, construction management, renovation, and new construction.
The company primarily serves clients in the government and public sectors, leveraging its expertise in indefinite-delivery/indefinite-quantity (IDIQ) contracts.
