WholeHealth Chicago
May 15, 2026
•[ ransomware, healthcare ]
WholeHealth Chicago was listed as a victim on the leak site of the cmdorganization ransomware group; the attack is estimated to have taken place on 2026-05-15. Sector: Healthcare. Country: United States of America. Website: www.wholehealthchicago.com. WholeHealth Chicago is a leading healthcare practice specializing in integrative, functional, and alternative medicine. They offer a wide range of services including internal medicine, chiropractic care, nutritional counseling, and various therapies aimed at promoting overall health and well-being. Their intended clients include individuals seeking personalized and holistic approaches to health, particularly those interested in combining conventional and alternative treatments. The practice is known for its patient-centered care, where providers work collaboratively with patients to develop tailored treatment plans.
lafj.org
May 15, 2026
•[ ransomware, leak ]
lafj.org was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-05-15. Sector: Professional Services. Country: United States of America. Website: lafj.org. Louisiana Association for Justice is a voluntary bar association whose statewide membership is composed mostly of lawyers who have a trial practice. Both defense and plaintiff attorneys belong to the association; however, most LAJ members represent consumer plaintiffs in civil actions. LAJ attorney-members are small business owners, maintaining a practice and supporting an office staff of fewer than 20 people.Customer data, contracts, payment documents, internal company documentation.
defenseisready.com
May 15, 2026
•[ ransomware, technology, legal ]
defenseisready.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-05-15. Sector: Technology. Country: United States of America. Website: defenseisready.com. Deandra Grant Law is a Texas criminal defense and DWI firm with a practice exclusively concentrated on DWI, federal and criminal defense. The firm has defended clients across North and Central Texas for more than 30 years, with more than 500 cases tried to verdict.
McCarthy Inc
May 15, 2026
•[ ransomware, manufacturing, healthcare ]
McCarthy Inc was listed as a victim on the leak site of the kairos ransomware group; the attack is estimated to have taken place on 2026-05-15. Sector: Manufacturing. Country: United States of America. Website: mccarthyinc.com. McCarthy, Inc., based in Savannah, Georgia, has been providing quality doors, frames, hardware, and related products since 1955. The company specializes in metal and wood doors, including architectural-grade flush doors and custom stile and rail units, along with a variety of specialty items. McCarthy, Inc. offers comprehensive services from project inception to completion, aiming to build lasting relationships with clients across various industries such as healthcare, education, and hospitality. Their commitment to customer satisfaction is reflected in their extensive product offerings and dedicated service.
wwag.org
May 15, 2026
•[ ransomware, leak ]
wwag.org was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-05-15. Sector: Other. Country: Austria. Website: wwag.org. An organization known as Wa Wai Assembly of God Church, an entity located in Hong Kong and operating under a na...
Advanced Medical Consultants
May 14, 2026
•[ ransomware, healthcare ]
Advanced Medical Consultants was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-05-14. Sector: Healthcare. Country: United States of America. Website: ouradvancedhealth.com. The leak contains 2,300,000 Lines of FULL patient data, partner agreements, management, payroll and HR files.
Screenshot attached :)
We Will Leak 1,000 Lines of patient data a day, until we've been paid or the timer hits 0. Check this description for Fresh leaks everyday.
Day 1 : https://temp.sh/aLnBB/ADI-Day1.zip
Foot Solutions
May 15, 2026
•[ ransomware, retail ]
Foot Solutions was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-15. Sector: Retail & E-Commerce. Country: United States of America. Website: www.footsolutions.com.
Common Part Groupings
May 15, 2026
•[ ransomware, manufacturing ]
Common Part Groupings was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-15. Sector: Manufacturing. Country: United States of America. Website: www.commonpartgroupings.com.
Tower View Primary School
May 15, 2026
•[ ransomware, education ]
Tower View Primary School was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-05-15. Sector: Education. Country: United Kingdom of Great Britain and Northern Ireland. Website: towerview.staffs.sch.uk. Tower View Primary School Tower View Primary School is an educational institution that serves approximately 380 pupils across 14 classes.
B.Care Medical Center
May 15, 2026
•[ ransomware, healthcare ]
B.Care Medical Center was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-15. Sector: Healthcare. Country: Philippines. Website: www.bcaremedicalcenter.com.
Raise the Bottom
May 15, 2026
•[ ransomware, healthcare ]
Raise the Bottom was listed as a victim on the leak site of the cmdorganization ransomware group; the attack is estimated to have taken place on 2026-05-15. Sector: Professional Services. Country: United States of America. Website: www.raisethebottomidaho.com. Raise The Bottom is an opioid treatment center in Idaho, offering outpatient medication-assisted treatment (MAT) programs and therapy. The center provides services including Suboxone, Methadone, and Vivitrol, with locations in Boise, Nampa, and Pocatello. Their mission is to support Idaho residents in reclaiming their lives from opioid addiction through comprehensive care that involves family and community. With a focus on personalized treatment and a whole-person approach, Raise The Bottom aims to foster lasting recovery and stability for individuals and their families.
Menzies Group
May 15, 2026
•[ ransomware, leak ]
Menzies Group was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-15. Sector: Transportation. Country: Australia. Website: www.menziesgroup.com.au.
Generation Life
May 15, 2026
•[ ransomware, healthcare, finance ]
Generation Life was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-15. Sector: Healthcare. Country: Australia. Website: www.genlife.com.au.
NR Engineering Co., Ltd.
May 15, 2026
•[ ransomware, manufacturing ]
NR Engineering Co., Ltd. was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-15. Sector: Manufacturing. Country: Thailand. Website: www.nre.co.th.
Grafana
May 15, 2026
•[ ransomware, technology ]
Grafana was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-05-15. Sector: Technology. Country: United States of America. Website: grafana.com. We can cause you more damage then you would ever imagine,contact us.
Zywave
May 15, 2026
•[ ransomware, technology, finance ]
Zywave was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-05-15. Sector: Professional Services. Country: United States of America. Website: zywave.com. [AI generated] Zywave is a US-based software company headquartered in Milwaukee, Wisconsin. It operates in the insurance technology sector, providing cloud-based software solutions to insurance brokers, carriers, and agencies. Its platform offers tools for sales enablement, client delivery, analytics, and agency management. Zywave serves thousands of insurance professionals across North America, helping them streamline operations and improve client engagement.
Turner Supply
May 15, 2026
•[ ransomware, manufacturing ]
Turner Supply was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-15. Sector: Manufacturing. Country: United States of America. Website: www.turnersupply.com.
AdvancedHEALTH
May 14, 2026
•[ ransomware, healthcare, leak ]
AdvancedHEALTH was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-05-14. Sector: Healthcare. Country: United States of America. Website: ouradvancedhealth.com. The leak contains 2,300,000 Lines of FULL patient data, partner agreements, management, payroll and HR files.
Screenshot attached :)
We Will Leak 1,000 Lines of patient data a day, until we've been paid or the timer hits 0. Check this description for Fresh leaks everyday.
Day 1 : https://temp.sh/aLnBB/ADI-Day1.zip
Day 2 : Expect it around 5PM UTC
Transitions Pro Centre Val de Loire
May 3, 2026
•[ ransomware, leak, technology ]
Transitions Pro Centre Val de Loire was listed as a victim on the leak site of the PrinzEugen ransomware group; the attack is estimated to have taken place on 2026-05-03. Sector: Professional Services. Country: France. Website: transitionspro-cvl.fr. The swift attack has resulted in both the exfiltration and encryption of hundreds of gigabytes.
In the event of complete non-compliance; Files will be fully released for public download.
CLINICA AVELLANEDA MEDICAL CENTER
May 16, 2026
•[ ransomware, healthcare ]
CLINICA AVELLANEDA MEDICAL CENTER was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-16. Sector: Healthcare. Country: Argentina. Website: CLINICA AVELLANEDA MEDICAL CENTER.
