Questivity
April 15, 2026
•[ ransomware, technology ]
Questivity was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Professional Services. Country: United States of America. Website: questivity.com.
Wayne Brothers Construction
April 15, 2026
•[ ransomware, manufacturing, leak ]
Wayne Brothers Construction was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Manufacturing. Country: United States of America. Website: waynebrothers.com.
GL Steel
April 15, 2026
•[ ransomware, manufacturing ]
GL Steel was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Manufacturing. Country: Poland. Website: glsteel.pl.
Superintendency of territorial planning
April 15, 2026
•[ ransomware, government ]
Superintendency of territorial planning was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Government & Defense. Country: Ecuador. Website: sot.gob.ec.
Epoch Times
April 15, 2026
•[ ransomware, technology, leak ]
Epoch Times was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Retail & E-Commerce. Country: United States of America. Website: epochtimes.com. [AI generated] Epoch Times is an American media company founded in 2000 by Chinese-American Falun Gong practitioners. It operates newspapers, websites, and video content across multiple countries, publishing in numerous languages. The company covers news, politics, health, and culture, but has drawn scrutiny from researchers and platforms for spreading misinformation and promoting far-right narratives. It is headquartered in New York, USA.
Vluznet
April 15, 2026
•[ ransomware, technology ]
Vluznet was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-15. Country: United States of America. Website: vluznet.com.
Truckload Carriers Association
March 26, 2026
•[ ransomware, leak, finance ]
Truckload Carriers Association was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-03-26. Sector: Transportation. Country: United States of America. Website: truckload.org. Truckload Carriers Association is a national trade association fo
cused on the truckload segment of the motor carrier industry.
We will upload 21gb of corporate data soon. Personal data of empl
oyees, detailed financials, contracts and agreements, customer an
d partner files, projects, etc.
Limkon
April 15, 2026
•[ ransomware, manufacturing ]
Limkon was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-04-15. Country: Turkey. Website: www.limkon.com.
guesty, LITELLM/TRIVY CAMPAIGN (TEAMPCP)
April 15, 2026
•[ ransomware, technology, retail ]
guesty, LITELLM/TRIVY CAMPAIGN (TEAMPCP) was listed as a victim on the leak site of the vect ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Technology. Country: Israel. Website: www.guesty.com. Status: STATUS: NEGOTIATING | Sector: property management | internal projects, 4 million sent/received mails with attachments, userbase, Airbnb and booking.com data stolen from guesty DATA SIZE: 700GB | Deadline: 9d 8h
S&PGLOBAL, LiteLLM/Trivy campaign (TeamPCP)
October 5, 2025
•[ ransomware, technology ]
S&PGLOBAL, LiteLLM/Trivy campaign (TeamPCP) was listed as a victim on the leak site of the vect ransomware group; the attack is estimated to have taken place on 2025-10-05. Sector: Technology. Country: United States of America. Website: www.spglobal.com/en. Status: STATUS: NEGOTIATING | Sector: Business Services | Internal projects, secrets, api keys etc DATA SIZE: 250GB | Deadline: 8d 8h
Uniwersytet Warszawski
April 15, 2026
•[ ransomware, education, leak ]
Uniwersytet Warszawski was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Education. Country: Poland. Website: uw.edu.pl. The Faculty of Management at the University of Warsaw is a leading institution in the field of business education, offering a wide range of undergraduate and graduate programs that combine theory with practical experience. However, it is not known for its high level of security and data storage reliability, resulting in the leak of data on students, instructors, and leading professors, as well as student projects and papers.
Clearwater Marine Aquarium
April 13, 2026
•[ ransomware, retail ]
Clearwater Marine Aquarium was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-04-13. Sector: Retail & E-Commerce. Country: United States of America. Website: www.cmaquarium.org.
FriendlyCare Pharmacy
April 15, 2026
•[ ransomware, healthcare ]
FriendlyCare Pharmacy was listed as a victim on the leak site of the kairos ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Healthcare. Country: Australia. Website: friendlycare.com.au. FriendlyCare Pharmacy offers a wide range of health and beauty products, including cosmetics, skincare, personal care, and medical devices. Their services cater to various health needs such as asthma care, diabetes management, and first aid supplies. The pharmacy targets a diverse clientele, including individuals seeking general health products, beauty enthusiasts, and families in need of baby care items. With multiple store locations and a commitment to customer satisfaction, they provide a price match guarantee and free shipping on orders over $99.
Biotehnos
April 16, 2026
•[ ransomware, healthcare ]
Biotehnos was listed as a victim on the leak site of the lamashtu ransomware group; the attack is estimated to have taken place on 2026-04-16. Sector: Healthcare. Country: Romania. Website: biotehnos.ro. Biotehnos is a Romanian pharmaceutical company founded in 1993 by Prof. Dr. Ioan Manzatu. It is currently headquartered in Otopeni, Ilfov County, near the countrys capital, Bucharest, and celebrated its 30th anniversary in 2023.
Empower Group
April 15, 2026
•[ ransomware, finance, hack ]
Empower Group was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Professional Services. Country: United States of America. Website: goempowergroup.com. Empower Group has positioned itself in this space as a hub for it's clients to access these different types of funding products. Empower Group has leveraged partnerships with the top lenders in the space to better service Empower Group's client's specific needs. Through Empower Group's relationships, with access to more than 40 private finance institutions, Empower Group prides ourselves at being able to meet Empower Group's clients right where they are to service their specific needs for working capital. Empower Group is committed to continually growing and evolving with the industry as a service to Empower Group's partners; both business owners and lenders alike.
TFE Group
April 16, 2026
•[ ransomware, retail ]
TFE Group was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-04-16. Sector: Retail & E-Commerce. Country: Australia. Data size claimed by the group: 30 GB. TFE Group is a company that operates in the Architecture, Engineering & Design industry.
Marino Food Products Pvt
April 16, 2026
•[ ransomware, manufacturing ]
Marino Food Products Pvt was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-04-16. Sector: Agriculture and Food Production. Country: Sri Lanka. Website: marino.co.in. Data size claimed by the group: 30 GB. Marino Food Products Pvt Ltd, based in Hyderabad, India, specializes in a wide range of healthy and delicious bakery items including biscuits, cookies, cakes, and breads. The company is dedicated to providing high-quality food products that combine wellness with taste, making them an ideal choice for health-conscious consumers. Their offerings are available for online ordering and in various retail stores, ensuring accessibility for their clients. Marino aims to be the go-to destination for snacking bliss, with a commitment to crafting irresistible snacks that satisfy cravings while promoting a healthy lifestyle.
R Roese Contracting
April 16, 2026
•[ ransomware, manufacturing ]
R Roese Contracting was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-04-16. Sector: Manufacturing. Country: United States of America. Website: rroese.com. R. Roese Contracting Company Inc. is a leading provider of underg
round and aerial construction services, specializing in telecommu
nications, water and sewer, electric, and gas transmission and di
stribution.
We will upload 61gb of corporate data soon. Personal data of empl
oyees (passports, phones, emails and so on), financials, client d
ata, lots of project files, NDAs, etc.
Law Offices of JamesC Shields
March 18, 2026
•[ ransomware, leak, finance ]
Law Offices of JamesC Shields was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-03-18. Sector: Professional Services. Country: United States of America. Website: shieldslaw.net. The Law Offices of James C. Shields specializes in bankruptcy, es
tate planning, and probate services, providing tailored legal sol
utions to clients in Southern California. With over 15 years of e
xperience, the firm has assisted thousands in navigating financia
l difficulties and planning for the future.
We will upload corporate data soon. Personal data of clients (pas
sports, DLs, SSNs, death/birth certificates, financials and other
docs), detailed financials, court files, investigations, police
reports, etc.
Qatar Biomedical Research Institute (QBRI)
April 17, 2026
•[ ransomware, healthcare, technology ]
Qatar Biomedical Research Institute (QBRI) was listed as a victim on the leak site of the crypto24 ransomware group; the attack is estimated to have taken place on 2026-04-17. Sector: Healthcare. Country: Qatar. Website: www.hbku.edu.qa/en/qbri. [AI generated] Qatar Biomedical Research Institute (QBRI) is a research institute based in Qatar, operating under Hamad Bin Khalifa University. It focuses on biomedical research in areas such as genomics, diabetes, cancer, and neurological disorders. QBRI aims to advance precision medicine and translational research to address health challenges prevalent in Qatar and the broader region, contributing to the country's science and innovation goals.