BASE SPA
May 25, 2026
•[ ransomware, leak, financial ]
BASE SPA was listed as a victim on the leak site of the spacebears ransomware group; the attack is estimated to have taken place on 2026-05-25. Sector: Professional Services. Country: Italy. Website: www.basespa.com/en/the-company. BASE S.p.A.is a company internationally operating in the field ofgoods inspection, in themanagement of commodities loading/unloading and logistic services, in the pertinentcertificationsandcustoms brokerage, generally offers full assistance in the international trading being present in about35 countries worldwide. BASE S.p.A. is established in 1983 as International Freight Forwarder, Custom House Broker and Inspection Company and achieved important goals, becoming one of the more affirmed and known operator of the field of the port services. The Company got an immediate commercial success, all now is in continuous growth, increasing her own business volume day by day, developing in the years an international top quality network. The Company specialized itself incontainers and project cargo handling, waste recycling promotion, bulk dry & liquid cargo traffic, control and survey. The operative administrative centre is placed in Livorno, from where local staff, Italian branches, and companys world partners are monitored and followed up. The constant growth of business volume has allowed to saving and the private financing her own business by continuous investments in the staffs know-how, supporting the staff by training finalized to professional grew, in innovation and expansion of the national and international structures, making certain thebest solution to tradersto any tied up problem related to the commodities manipulation, allowing them to bringing trade in absolute serenity and safely. In fact ourefficacy consists of ensuring an individual solution to each client, sorting out for their demands. -Confidential information-Personal information of employees and clients-Financial documents-Other files https://www.basespa.com/en/the-company/
Hunter
May 19, 2026
•[ ransomware, technology ]
Hunter was listed as a victim on the leak site of the spacebears ransomware group; the attack is estimated to have taken place on 2026-05-19. Sector: Professional Services. Country: Ireland. Website: hunter.io. Hunter was created by Antoine Finkelstein and Franois Grante in 2015. Freshly graduated, they saw the untapped potential of cold emails and wanted to address the challenges of prospecting and finding contact information. To achieve great success rate while complying with privacy regulations, they decided to use emails found on the public web. Email Hunter was born. Soon rebranded as Hunter, the tool quickly became a game-changer in business intelligence. Within weeks, it attracted thousands of users thanks to its user-friendly interface, handy browser extension, affordable pricing, and data accuracy. Unlike its peers, Hunter aimed not at large enterprises but at making cold emailing accessible to all. Over time, Hunter grew into a comprehensive email outreach platform, offering everything from finding contact information to sending cold emails. Antoine and Franois, with a focused team, continued to empower professionals with simple, powerful tools.-Personal information of employees and clients-Databse-Financial documents-Other files https://hunter.io/
Filabé
May 13, 2026
•[ ransomware, retail, manufacturing ]
Filab was listed as a victim on the leak site of the spacebears ransomware group; the attack is estimated to have taken place on 2026-05-13. Sector: Agriculture and Food Production. Country: Switzerland. Website: www.filabe.ch. Filab of Switzerland is a skincare company that uses a unique, additive-free technology to treat skin problems. Developed alongside dermatologists and pharmacists in Switzerland, the brand focuses on a science-based approach to skincare. In 2025, they won a PETA Award for "Best Vegan Innovation" due to their animal-friendly cosmetic concepts -Personal information of employees and clients -Financial documents -Other files https://www.filabe.ch/
H-W-G & Acros Sport
May 26, 2026
•[ ransomware, manufacturing, technology ]
H-W-G & Acros Sport was listed as a victim on the leak site of the lamashtu ransomware group; the attack is estimated to have taken place on 2026-05-26. Sector: Retail & E-Commerce. Country: Germany. Website: h-w-g.com. HWG (h-w-g.com): German manufacturer of bearings and mechanical components for industrial machinery and automation.
Acros Components (acros-components.com): Distributor and supplier of electronic components and related logistics/technical support.
Eriell
May 26, 2026
•[ ransomware, energy, leak ]
Eriell was listed as a victim on the leak site of the nova ransomware group; the attack is estimated to have taken place on 2026-05-26. ERIELL Group RU specializes in providing oil and gas engineering services. The company focuses on advanced drilling solutions and offers a range of services tailored to the energy sector. Its clients include various oil and gas companies seeking innovative drilling technologies and operational enhancements. Established in 2014, ERIELL Group has expanded its workforce and capabilities to serve clients effectively - Nova Provide tree and samples from stolen data to the company when its get in touch with support department.
Hamister Group
May 26, 2026
•[ ransomware, technology ]
Hamister Group was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-26. Sector: Professional Services. Country: Russian Federation. Website: www.hamistergroup.com.
ctps.tp.edu.tw
May 23, 2026
•[ ransomware, education ]
ctps.tp.edu.tw was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-05-23. Sector: Education. Country: Taiwan. Website: ctps.tp.edu.tw. ctps.tp.edu.tw Taiwanese Public Elementary School
ctps.tp.edu.tw is the official website of ...
Textile Testing Services of America
May 26, 2026
•[ ransomware, manufacturing ]
Textile Testing Services of America was listed as a victim on the leak site of the nova ransomware group; the attack is estimated to have taken place on 2026-05-26. Sector: Manufacturing. Country: United States of America. Textile Testing Services of America is a company that operates in the Training industry. It employs 250to499 people and has 10Mto25M of revenue. The company is headquartered in Mexico City, Mexico City, Mexico - Correction, After First post about sandox.info was posted by affiliate, after he provide us the Full informations, our Team made the OSINT, and discover that the domain sandox.info was initial access (IP 64.76.20.226), the Full Data is related to ttsamexico.com, Confirmed by Nova OSINT team, published the IP will not effect on company because its already public by ping administracion.ttsamexico.com, about public media don't worry, we will correct any false informations maybe posted by misunderstanding - Nova Provide tree and samples from stolen data to the company when its get in touch with support department, Nova will oversee the target verification processes for accurate Posts deployment.
WG Neukölln
May 27, 2026
•[ ransomware, energy, leak ]
WG Neuklln was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-05-27. Sector: Energy & Utilities. Country: Germany. Website: gwneukoelln.de. WG Neuklln eG is a cooperative based in Berlin that offers various housing options and services, including apartments and residential projects. The organization is committed to social engagement and provides a venue for events, as well as support for its members through social management. They focus on sustainable energy projects and aim to enhance the living experience for their tenants. Their intended clients include individuals and families seeking affordable housing solutions in the Neuklln area.
Delbrook Capital Advisors
May 27, 2026
•[ ransomware, finance ]
Delbrook Capital Advisors was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-05-27. Sector: Financial Services. Country: United States of America. Website: delbrookcapital.com. Delbrook Capital Advisors is an alternative investment manager that specializes in the global materials sector. The company focuses on providing investment solutions tailored to the unique needs of clients interested in this industry. With a commitment to delivering value, Delbrook Capital Advisors aims to navigate the complexities of the materials market. Their expertise positions them as a key player for investors seeking opportunities in this sector.
Greenway Technologies
May 27, 2026
•[ ransomware, technology ]
Greenway Technologies was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-05-27. Sector: Technology. Country: Germany. Website: greenway-technologies.com. Greenway Technologies is a leading fire protection company based in Phoenix, AZ, specializing in a comprehensive range of services including fire suppression systems, alarms, sprinklers, and smoke control. Established in 2010, the company provides tailored fire protection design, installation, maintenance, and inspection services aimed at ensuring the safety of properties across the federal and commercial sectors. With a strong commitment to innovative, code-compliant solutions, Greenway Technologies aims to protect lives and property through their top-tier services. Their expert team is dedicated to delivering reliable, high-quality fire protection systems that meet the unique needs of their clients
dentonfirm.com
May 27, 2026
•[ ransomware, leak ]
dentonfirm.com was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-05-27. Sector: Professional Services. Country: United States of America. Website: dentonfirm.com. Denton Law Firm is committed to rapid response and providing real solutions.
qlslogistics.com.au
May 27, 2026
•[ ransomware, manufacturing, retail ]
qlslogistics.com.au was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-05-27. Sector: Transportation. Country: Australia. Website: qlslogistics.com.au. QLS Group is Australia's leading supplier of large domestic appliances,
serving the retail and consumer markets. Last year, the company shipped over 4 million appliances,
including 1.4 million televisions, accounting for 65% of the Australian TV market. The company also operates
Ecycle Solutions Pty Ltd, which provides recycling services for discarded televisions,
computers, and polystyrene, demonstrating a strong commitment to sustainability.
With a nationwide network and a focus on logistics, warehousing, and distribution,
QLS Group offers reliable and comprehensive solutions throughout Australia.
duboisag.com
May 27, 2026
•[ ransomware, technology, retail ]
duboisag.com was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-05-27. Sector: Agriculture and Food Production. Country: Switzerland. Website: duboisag.com. To find a solution tailored to your situation, the company prioritizes your needs.
The company's team's consulting, expertise, and high-quality service enhance the value of its products.
The company is constantly evolving and seeking new technologies to improve the quality of your work and your profitability.
Dubois Agrinovation was founded to usher in a new era in agriculture.
Distrigaz Vest S.A.
May 27, 2026
•[ ransomware, energy, financial ]
Distrigaz Vest S.A. was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-05-27. Sector: Energy & Utilities. Country: Romania. Distrigaz Vest S.A. is an independent gas distribution company established in 2001, renowned for being the exclusive natural gas distributor in Oradea, Romania.
The company offers a wide range of services including public gas distribution, network operation, and maintenance of gas infrastructure.
Distrigaz Vest utilizes modern, automated equipment aligned with European standards to ensure safety and operational efficiency.
In terms of financial performance, for the fiscal year 2024, Distrigaz Vest S.A. reported a turnover of RON 86.53 million and a net profit of RON 9.89 million, reflecting a 60% increase compared to the previous year .
The company maintains a stable operational structure with 50 employees as of 2024 .
Regarding ownership, Distrigaz Vest S.A. is primarily controlled by S.C. Luxten Lighting Company S.A., which acquired its stake in 2012 by converting debts into shares .
The current shareholding structure, established following the dissolution of shareholder RMG Romania S.R.L. in 2016, is as follows :
S.C. Luxten Lighting Company S.A. 75.0101%
Xxxxxxxxx Xxxxxxx Xxxxxxx (individual) 24.3631%
Laek: 100GB
WE HAS COLLECTED SUCH DATA AS:
- Confidential documents
- Clients Data
- NDA
- Financial data
- Operations
- Corporate data
- Business Agreements
- Development
- Financial databases, all transactions, all clients
And a lot of other VERY IMPORTANT information!
Gone Fishin' Marine
May 27, 2026
•[ ransomware, retail, leak ]
Gone Fishin' Marine was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-05-27. Sector: Hospitality. Gone Fishin' Marine specializes in offering a wide range of new and used boats from top brands
such as Ranger, KingFisher, Sea Ray, and more.
We will upload corporate data soon. Employee information, contracts and agreements, financials,
clients information, projects and so on.
Northwest Woodworks
May 27, 2026
•[ ransomware, manufacturing ]
Northwest Woodworks was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-05-27. Sector: Manufacturing. Northwest Woodworks is a trusted partner of contractors for over 30 years, specializing in cust
om cabinets and architectural woodwork for various commercial spaces. They combine cutting-edge
technology with skilled craftsmanship to create cost-effective solutions that bring clients' v
isions to life.
We will upload 31gb of corporate data soon. Employee personal information (passports, DLs, SSNs
and other information), contracts and agreements, financials, clients information, confidentia
l drawings, NDAs, etc.
Ramos Rheumatology
May 27, 2026
•[ ransomware, healthcare ]
Ramos Rheumatology was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-05-27. Sector: Healthcare. Country: United States of America. Website: ramosrheumatology.com. Ramos Rheumatology is a leading care center in Avoca, PA, specializing in the diagnosis and treatment of autoimmune diseases such as lupus, rheumatoid arthritis, and fibromyalgia. The practice emphasizes personalized care, ensuring that each patient receives tailored treatment plans in a compassionate environment. Their team, including local specialists, collaborates closely with primary care providers to deliver comprehensive rheumatology services. With a commitment to patient autonomy and immediate appointment availability for emergencies, Ramos Rheumatology prioritizes the well-being of its clients
FWMK Law Offices
May 27, 2026
•[ ransomware, leak ]
FWMK Law Offices was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-05-27. Sector: Professional Services. Country: Israel. Website: fwmk-law.co.il. FWMK Law Offices is a full-service law firm known for its deep expertise in various legal areas, including high tech, mergers and acquisitions, and real estate. The firm provides top-quality legal advice and representation to a diverse clientele, including international clients, private investors, and public companies. With a team of highly skilled and responsive attorneys, FWMK emphasizes a professional yet friendly approach to client relations. Their commitment to excellence and understanding of business needs positions them as a trusted partner for organizations navigating the complexities of the legal landscape.
profundo.nl
May 27, 2026
•[ ransomware, hack, technology ]
profundo.nl was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-05-27. Sector: Professional Services. Country: Netherlands. Website: profundo.nl. Profundo is an independent research organization dedicated to advancing sustainable development and social justice through insightful, evidence-based research and advice.
