La Tuilerie
April 14, 2026
•[ ransomware, retail, financial ]
La Tuilerie was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-04-14. Sector: Agriculture and Food Production. Country: Canada. Website: latuilerie.com. La Tuilerie is your local home renovation shop that helps homeown
ers and contractors find the perfect ceramic tiles, mosaics, and
flooring. They focus on giving customers high-quality materials w
ith great personal service.
We will upload 11gb of corporate data soon. Personal data of empl
oyees, financials, contracts and agreements, lots of client files
, projects, etc.
CSA SpA
April 14, 2026
•[ ransomware, leak ]
CSA SpA was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-04-14. Sector: Transportation. Country: Italy. CSA S.p.A. is a company that provides a broad range of quality pr
oducts and services tailored to the shipping industry, emphasizin
g safety and customer satisfaction. Their offerings include ship
services, liner agency, and logistics, all designed to meet the h
ighest international standards.
We will upload 10gb of corporate data soon. Personal data of empl
oyees, financials, contracts and agreements, client files, and a
lot of other internal files.
itc-group.com
April 14, 2026
•[ ransomware, manufacturing ]
itc-group.com was listed as a victim on the leak site of the chaos ransomware group; the attack is estimated to have taken place on 2026-04-14. Sector: Professional Services. Country: Germany. Website: www.itc-group.com. Data size claimed by the group: 150 GB. Founded in 1983, ITC Construction Group is a Commercial and Residential Construction company that specializes in residential high rises, mixed-use developments, and select commercial projects.
coastappliances.com
April 14, 2026
•[ ransomware, retail, leak ]
coastappliances.com was listed as a victim on the leak site of the chaos ransomware group; the attack is estimated to have taken place on 2026-04-14. Sector: Retail & E-Commerce. Country: United States of America. Website: www.coastappliances.com. Data size claimed by the group: 250 GB. It offers refrigerators, freezers, wall ovens, washers, and electric ranges.
D-Troy Logistics
April 5, 2026
•[ ransomware, manufacturing ]
D-Troy Logistics was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-04-05. Sector: Transportation. Country: Mexico. Website: www.dtroylogistics.com. Data size claimed by the group: 360GB. - Internal Documents- Employee Data
Stonehenge
April 6, 2026
•[ ransomware, manufacturing ]
Stonehenge was listed as a victim on the leak site of the lynx ransomware group; the attack is estimated to have taken place on 2026-04-06. Sector: Other. Country: United Kingdom of Great Britain and Northern Ireland. Website: stonehenge.o.uk. Stonehenge Co Ltd is a company that operates in the Commercial & Residential Construction industry. It employs 250to499 people and has 10Mto25M of revenue. The company is headquartered in Phra Nakhon Si Ayutthaya, Phra Nakhon Si Ayutthaya, Thailand.
Gastroenterology & Hepatology of CNY
April 14, 2026
•[ ransomware, healthcare, leak ]
Gastroenterology & Hepatology of CNY was listed as a victim on the leak site of the exitium ransomware group; the attack is estimated to have taken place on 2026-04-14. Sector: Healthcare. Country: United States of America. Website: gandhofcny.com. Website: gandhofcny.com
Zoominfo: https://www.zoominfo.com/c/gastroenterology--hepatology-of-cny-pc/346091487
Data sample, whole internal data will be sold if they wouldn't pay ransom.
Also Digestive Disease Center of CNY, LLC (ddcofcny.com)
GI practice + AAAHC-accredited endoscopy center. Syracuse, New York, USA.
Full database for sale 167,303 patients, 124,761 SSN, 49,798 with sensitive diagnoses:
- 167,303 patients 124,761 with SSN, 166,402 (99%) with address, 164,296 (98%) with phone, 85,318 (51%) with email
- 1,093,863 diagnoses (ICD-10), 1,547,142 medications, 186,246 pathology specimens with narrative reports
- Sensitive (dx + meds): 49,798 patients 44,861 with SSN. Mental health: 43,902 | Substance/Alcohol: 5,111 | STIs: 2,779 | Cancer: 2,708 | Hepatitis C: 1,906
- Includes notable individuals (politicians, businesspeople, public figures)
Hacked 0APT
April 14, 2026
•[ ransomware, technology ]
Hacked 0APT was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-04-14. Sector: Technology. Website: Hacked 0APT. Next time, don't play with the big boys.
The response will be fast....
Flash Charm INC - (IDERA)
April 14, 2026
•[ ransomware, technology ]
Flash Charm INC - (IDERA) was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-14. Sector: Technology. Country: United States of America. Website: idera.com. [AI generated] Flash Charm Inc is a software company associated with Idera, Inc., a US-based technology firm headquartered in Houston, Texas. Idera develops and provides database management, developer tools, and test management software solutions. Its products support database administrators and developers across multiple platforms. Flash Charm Inc appears to operate as a subsidiary or affiliated entity within Idera's broader portfolio of software brands serving enterprise IT markets.
bela - pharm
April 15, 2026
•[ ransomware, healthcare ]
bela - pharm was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Healthcare. Country: Germany. Website: www.bela-pharm.com. bela-pharm GmbH specializes in the production of veterinary pharmaceuticals aimed at enhancing animal health. Their product range includes solutions for various livestock such as pigs, cattle, poultry, horses, sheep, goats, and small pets. The company serves veterinarians and international clients, offering expertise in drug production and approval. Committed to quality and innovation, bela-pharm focuses on ensuring safe and effective treatments for animals worldwide.
Curtis Design Group
April 15, 2026
•[ ransomware, leak ]
Curtis Design Group was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Professional Services. Country: United States of America. Website: curtisdesigngroup.com. Curtis Design Group specializes in home architecture and design, creating beautiful and livable spaces tailored to the needs of families and developers. They focus on understanding client dreams and site specifics to produce detailed blueprints that reflect those visions. The company emphasizes a collaborative approach, ensuring clients are delighted with the final designs before working with builders. Their services extend beyond Utah, aiming to create homes that endure and bring joy for generations.
VOLTERRIES
April 15, 2026
•[ ransomware, energy ]
VOLTERRIES was listed as a victim on the leak site of the lamashtu ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Energy & Utilities. Country: France. Website: volterres.fr. Volterres, a subsidiary of the Eiffage group, is reinventing the supply of green electricity for businesses and public sector players.
INDESMALLA
February 20, 2026
•[ ransomware, manufacturing ]
INDESMALLA was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-02-20. Sector: Manufacturing. Country: Argentina. Website: indesmalla.com. Indesmalla is a family business with two production plants, one w
ith raschel machines and the other with Ketten machines. It produ
ces knitted weft (circular) fabric and knitted and finished weft
fabrics in different weights, draws and elasticity.
We will upload corporate data soon. Personal data of employees, f
inancials, contracts and agreements, lots of client files, projec
ts, NDA, internal confidential files and so on.
CIR Realty
April 1, 2026
•[ ransomware, retail, leak ]
CIR Realty was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-04-01. Sector: Professional Services. Country: Canada. Website: cirrealty.ca. Established in 1983, CIR Realty is a real estate brokerage in Can
ada, serving the Central and Southern Alberta markets. They are h
eadquartered in Calgary, Alberta.
We will upload 25gb of corporate data soon. Detailed personal dat
a of employees (names, emails, addresses, phones, photos, persona
l documents) and clients (names, emails, addresses, driver licens
es, phones, payment detailed, account details and so on), detaile
d financials, contracts and agreements, lots of client files, pro
jects, NDA, internal confidential files and so on.
Astreya
April 15, 2026
•[ ransomware, technology ]
Astreya was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Technology. Country: United States of America. Website: astreya.com. [AI generated] Astreya is a US-based IT managed services company headquartered in Sunnyvale, California. It provides technology workforce solutions, IT support, infrastructure management, and digital workplace services to large enterprises. Operating primarily in the information technology services industry, Astreya partners with major technology firms globally, delivering staffing and managed IT services across multiple countries while maintaining its core operations in the United States.
Sampol
April 15, 2026
•[ ransomware, energy, technology ]
Sampol was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Energy & Utilities. Country: Spain. Website: sampol.com. [AI generated] Sampol is a Spanish engineering and services company headquartered in Mallorca, Spain. It operates in the energy, industrial, and infrastructure sectors, offering services such as electrical installations, renewable energy solutions, facility management, and maintenance. The company works across multiple countries, primarily in Spain and international markets, serving both public and private clients in areas including smart grids, sustainability, and industrial automation.
La Maison Bleue France
April 15, 2026
•[ ransomware, retail ]
La Maison Bleue France was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Hospitality. Country: France. Website: la-maison-bleue.fr.
Rogiken / institute of Science Tokyo
April 15, 2026
•[ ransomware, education, technology ]
Rogiken / institute of Science Tokyo was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Education. Country: Japan. Website: rogiken.org. [AI generated] Rogiken is a research organization affiliated with the Institute of Science Tokyo, a Japanese national university formed through the merger of Tokyo Institute of Technology and Tokyo Medical and Dental University. It operates in Japan within the academic and scientific research sector, focusing on advanced engineering, natural sciences, and interdisciplinary studies. The institute supports innovation, technology development, and collaboration between academia and industry.
Kemenpppa
April 15, 2026
•[ ransomware, government ]
Kemenpppa was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Government & Defense. Country: Indonesia. Website: keemenpppa.go.id. [AI generated] Kemenpppa, short for Kementerian Pemberdayaan Perempuan dan Perlindungan Anak, is an Indonesian government ministry responsible for empowering women and protecting children. Operating in Indonesia, it develops and oversees policies related to gender equality, women's rights, child protection, and social welfare. The ministry works to eliminate discrimination, violence, and exploitation affecting women and children across the country.
Millenium Packaging
April 15, 2026
•[ ransomware, manufacturing ]
Millenium Packaging was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Manufacturing. Country: United States of America. Website: mil-pkg.com.