Greenpharma
April 15, 2026
•[ ransomware, healthcare, leak ]
Greenpharma was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Healthcare. Country: Brazil. Website: greenpharma.com.br. greenpharma.com.br zoominfo.com/c/greenpharma-quimica-e-farmaceutica-eireli/558034818 Greenpharma Qumica & Farmaceutica is a Brazilian pharmaceutical manufacturer founded in 1989 in Anapolis, Gois, acquired in 1995 by industrial pharmacist Eduardo Gonalves. The company produces generic and OTC medicines, distributes across all Brazilian states through pharmacy and hospital channels, and operates its own certified pharmaceutical equivalence laboratory (EQFAR-21) accredited by ANVISA
Casa Andina
March 26, 2026
•[ ransomware, retail, manufacturing ]
Casa Andina was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-03-26. Sector: Hospitality. Country: Colombia. Website: casaandina.com.co. casaandina.com.co zoominfo.com/c/casa-andina/426558931 Casa Andina SAS is the leading hardware and construction materials distributor in south-western Colombia, headquartered in Pasto, Nario. The company serves both wholesale and retail channels, offering a specialized portfolio including plumbing, drainage, lightweight construction systems (drywall), architectural carpentry, paints, ceramics, and chemical construction products. With 51200 employees and nationwide online delivery across Colombia, Casa Andina positions itself as a one-stop specialist solutions provider for builders and renovators
Cosmo Group
March 26, 2026
•[ ransomware, manufacturing, retail ]
Cosmo Group was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-03-26. Sector: Manufacturing. Country: Thailand. Website: cosmo.co.th. cosmo.co.th zoominfo.com/c/cosmo-group-public-co/459326707 Cosmo Group PCL, founded in 1964 and headquartered in Bangkok (Sukhumvit), is a Thai luxury packaging manufacturer with over 60 years of experience. The company specializes in premium gift boxes, displays, watch dials, cases, and accessories for global luxury brands in jewelry, watches, cosmetics, and perfume. With 1,0005,000 employees and a Swiss sales office (Cosmo Pusterla 1880), Cosmo serves top-tier international clients and holds multiple quality and sustainability certifications
SYSTHERM INFO
March 26, 2026
•[ ransomware, technology ]
SYSTHERM INFO was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-03-26. Sector: Technology. Country: Poland. Website: systherm-info.pl. systherm-info.pl Systherm Info Sp. z o.o. is a Polish IT company headquartered in Poznan, founded in 1996. It specializes in GIS (Geographic Information Systems), IT solutions, and software security most notably developing GEO-INFO, a leading land information system widely used in Polish geodesy and surveying. The company also distributes world-class software protection solutions (Sentinel/Gemalto) and holds ISO quality certifications
Sgt
March 26, 2026
•[ ransomware, manufacturing ]
Sgt was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-03-26. Sector: Professional Services. Country: France. Website: sgt-pet.com. sgt-pet.com zoominfo.com/c/sgt/370244282 SGT founded in 1981 and based in France, is a specialist in PET and RPET packaging . The company designs and manufactures PET/RPET preforms (mono- and multi-layer), HDPE caps, and bottles for the beverage and industrial sectors . With over 200 employees, 26 injection presses, and two recycled PET (SGR) factories, SGT is strongly committed to eco-responsibility and circular packaging .
Friktimporten Stockholm
March 26, 2026
•[ ransomware, retail ]
Friktimporten Stockholm was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-03-26. Sector: Retail & E-Commerce. Country: Sweden. Website: fruktimporten.se. fruktimporten.se rocketreach.co/fruktimporten-stockholm-ab-profile_b7bc38e2c53a0296 Fruktimporten Stockholm AB, founded in 2013 and based in Norsborg (Stockholm), is the leading fruit and vegetable wholesaler in the Mlardalen region. They stock over 950 products across a ~5,000 m warehouse, offering fresh produce from around the world loose, packed, cut, and processed. The company is part of Dole Nordic AB, a subsidiary of the global giant Dole plc
Alert 360 Opco Inc. (alert360.com)
April 18, 2026
•[ ransomware, leak, technology ]
Alert 360 Opco Inc. (alert360.com) was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-04-18. Sector: Professional Services. Country: United States of America. Website: alert360.com. Over 2.5M records containing PII and other internal corporate data have been compromised. Please read the chatlog of the negociation by cliking the Download button below to see why this data was leaked. | Size: 10GB+ (compressed) | Updated: 18 Apr 2026 | SHA256: 9c5c8225f27a23f1a03526bfd15dad02b5976797664a92bdd53b23f5f9ef3fe3
Zara (zara.com)
April 18, 2026
•[ ransomware, retail, technology ]
Zara (zara.com) was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-04-18. Sector: Retail & E-Commerce. Country: Spain. Website: zara.com. Your Bigquery instances data was compromised thanks to Anodot.com. Pay or Leak. This is a final warning to reach out by 21 Apr 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 18 Apr 2026 | Warning: FINAL WARNING PAY OR LEAK
Carnival Corporation & plc (carnivalcorp.com)
April 18, 2026
•[ ransomware, retail, leak ]
Carnival Corporation & plc (carnivalcorp.com) was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-04-18. Sector: Hospitality. Country: United States of America. Website: carnivalcorp.com. Over 8.7M records containing PII and other terabytes of internal corporate data have been compromised. Pay or Leak. This is a final warning to reach out by 21 Apr 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 18 Apr 2026 | Warning: FINAL WARNING PAY OR LEAK
7-Eleven, Inc. (7-eleven.com)
April 18, 2026
•[ ransomware, retail, technology ]
7-Eleven, Inc. (7-eleven.com) was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-04-18. Sector: Retail & E-Commerce. Country: United States of America. Website: 7-eleven.com. Over 600k Salesforce records containing PII and other internal corporate data have been compromised. Pay or Leak. This is a final warning to reach out by 21 Apr 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 18 Apr 2026 | Warning: FINAL WARNING PAY OR LEAK
Pitney Bowes Inc. (pb.com)
April 18, 2026
•[ ransomware, technology, leak ]
Pitney Bowes Inc. (pb.com) was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-04-18. Sector: Professional Services. Country: United States of America. Website: pb.com. Over 25M Salesforce records containing PII have been compromised. Pay or Leak. This is a final warning to reach out by 21 Apr 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 18 Apr 2026 | Warning: FINAL WARNING PAY OR LEAK
The Canada Life Assurance Company (canadalife.com)
April 18, 2026
•[ ransomware, leak, finance ]
The Canada Life Assurance Company (canadalife.com) was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-04-18. Sector: Financial Services. Country: Canada. Website: canadalife.com. Over 5.6M Salesforce records containing PII have been compromised. Pay or Leak. This is a final warning to reach out by 21 Apr 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 18 Apr 2026 | Warning: FINAL WARNING PAY OR LEAK
Aman Resorts (aman.com)
April 18, 2026
•[ ransomware, leak, retail ]
Aman Resorts (aman.com) was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-04-18. Sector: Hospitality. Country: Singapore. Website: aman.com. Over 500k Salesforce records containing PII have been compromised. Pay or Leak. This is a final warning to reach out by 21 Apr 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 18 Apr 2026 | Warning: FINAL WARNING PAY OR LEAK
Tokoparts
April 20, 2026
•[ ransomware, retail, technology ]
Tokoparts was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-04-20. Sector: Retail & E-Commerce. Country: Indonesia. Website: tokoparts.com.
Complete Aircraft Group
April 20, 2026
•[ ransomware, manufacturing ]
Complete Aircraft Group was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-04-20. Sector: Manufacturing. Country: United States of America. Website: complete-aircraft.com.
Umiles Group
April 20, 2026
•[ ransomware, technology, leak ]
Umiles Group was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-04-20. Sector: Professional Services. Country: Spain. Website: umilesgroup.com. [AI generated] Umiles Group is a Spanish technology and services company specializing in drone operations, urban air mobility, and advanced aerial solutions. Based in Spain, it provides unmanned aerial vehicle services for sectors including logistics, inspection, surveillance, and emergency response. The company also focuses on developing regulatory frameworks and training programs to support the integration of drones into civil airspace across Europe.
Nutrabio
April 20, 2026
•[ ransomware, manufacturing, retail ]
Nutrabio was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-04-20. Sector: Agriculture and Food Production. Country: United States of America. Website: nutrabio.com. [AI generated] NutraBio is a US-based dietary supplement manufacturer founded in 1996 and headquartered in Middlesex, New Jersey. The company operates in the health and wellness industry, producing sports nutrition products including protein powders, pre-workouts, vitamins, and recovery supplements. NutraBio is known for its commitment to transparency, using fully disclosed labels and manufacturing products in an FDA-registered, cGMP-certified facility.
Al Sulaiti Law Firm
April 20, 2026
•[ ransomware, leak, finance ]
Al Sulaiti Law Firm was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-04-20. Sector: Professional Services. Country: Qatar. Website: alsulaitilawfirm.com. Data size claimed by the group: 104 GB. Al Sulaiti Law Firm is one of the largest law firms in Qatar, established in 2002, offering a wide range of legal services including arbitration, banking, corporate, employment, energy, and intellectual property. The firm emphasizes teamwork and collaboration, aiming to build strong relationships with clients to exceed their expectations. With a diverse and innovative team, they provide high-quality professional services tailored to meet the unique needs of their clients. Their commitment to integrity and client satisfaction has earned them recognition and respect in the legal community.
Integra Architecture
November 13, 2025
•[ ransomware, leak, technology ]
Integra Architecture was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-11-13. Sector: Professional Services. Country: Canada. Website: integra-arch.com. Integra Architecture Inc. is an award-winning architecture firm b
ased in downtown Vancouver, specializing in innovative design sol
utions. The firm focuses on a variety of projects, including mixe
d-use developments and affordable housing initiatives.
We will upload over 180gb of corporate data soon. Employee inform
ation, client data, lots of project files, drawings and specifica
tions, client data, contracts and agreements, NDAs, etc.
Jesin Group
April 20, 2026
•[ ransomware, retail ]
Jesin Group was listed as a victim on the leak site of the lamashtu ransomware group; the attack is estimated to have taken place on 2026-04-20. Sector: Other. Country: Malaysia. Website: jesin.com.my. Jesin Group is a prominent property developer in Northern Malaysia with over 50 years of experience, specializing in residential and commercial real estate development, construction, and asset management.