Mayer
May 13, 2026
•[ ransomware, leak ]
Mayer was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-13. Sector: Professional Services. Country: United States of America. Website: www.mayerllp.com.
Spirit Medical Transport
May 13, 2026
•[ ransomware, healthcare ]
Spirit Medical Transport was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-13. Sector: Healthcare. Country: United States of America. Website: www.spiritmedicaltransport.com.
Silergy Corp
May 13, 2026
•[ ransomware, technology, financial ]
Silergy Corp was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-05-13. Sector: Technology. Country: United States of America. Website: silergy.com. About Silergy
Silergy Corp. specializes in the manufacture and sale of power integrated circuits. Silergy Corp. is headquartered in Hangzhou, Zhejiang, China.
----
More than 450 GB of personal data was leaked, along with a vast amount of financial and private information, including contracts containing non-disclosure clauses, passports, and customer and partner data.
vspsolutions.com.au SAMPLE-FREE 20GB
May 13, 2026
•[ ransomware, leak, financial ]
vspsolutions.com.au SAMPLE-FREE 20GB was listed as a victim on the leak site of the stormous ransomware group; the attack is estimated to have taken place on 2026-05-13. Sector: Professional Services. Country: Australia. Website: vspsolutions.com.au. +40G Full Financial Backups (Quickbooks & Reckon)-Email Archives & Staff Personal Folders-Customer/Client Databases (Installers & Integrators nationwide)-Shipment & Order Tracking for major brands like Hikvision & Axis.
dsdlawfirm.com
May 14, 2026
•[ ransomware, leak ]
dsdlawfirm.com was listed as a victim on the leak site of the killsec ransomware group; the attack is estimated to have taken place on 2026-05-14. Sector: Professional Services. Country: United States of America. Website: dsdlawfirm.com. Price ??? Disclosures 0/1
Ira & Larry Goldberg Coins & Collectibles
May 14, 2026
•[ ransomware, retail ]
Ira & Larry Goldberg Coins & Collectibles was listed as a victim on the leak site of the cmdorganization ransomware group; the attack is estimated to have taken place on 2026-05-14. Sector: Retail & E-Commerce. Country: United States of America. Website: www.goldbergcoins.com. Goldberg Coins & Collectibles Inc. is a family-owned business specializing in numismatic auctions and collectibles, with a legacy dating back to 1930. The company offers expert auction services, personal consultations, and has a strong reputation for achieving record-breaking prices for consignors. Their intended clients include coin collectors and investors looking to sell or acquire high-quality numismatic items. With over 80 years of combined experience, Ira and Larry Goldberg provide a professional and personalized service, ensuring client satisfaction and exceptional results.
BAYTECH A/S
May 14, 2026
•[ ransomware, manufacturing, technology ]
BAYTECH A/S was listed as a victim on the leak site of the morpheus ransomware group; the attack is estimated to have taken place on 2026-05-14. Sector: Professional Services. Country: Denmark. Website: baytech.com. **Website**: baytech.dk
**Revenue**: $5 Million
Baytech A/S is a Danish industrial engineering company that provides crane systems, material handling equipment, and logistics solutions for industria
Goodstone Group
May 14, 2026
•[ ransomware, manufacturing, retail ]
Goodstone Group was listed as a victim on the leak site of the cmdorganization ransomware group; the attack is estimated to have taken place on 2026-05-14. Sector: Manufacturing. Country: Australia. Website: www.goodstone.com.au. Goldberg Coins & Collectibles Inc. is a family-owned business specializing in numismatic auctions and collectibles, with a legacy dating back to 1930. The company offers expert auction services, personal consultations, and has a strong reputation for achieving record-breaking prices for consignors. Their intended clients include coin collectors and investors looking to sell or acquire high-quality numismatic items. With over 80 years of combined experience, Ira and Larry Goldberg provide a professional and personalized service, ensuring client satisfaction and exceptional results.
technic.com
May 14, 2026
•[ ransomware, technology, manufacturing ]
technic.com was listed as a victim on the leak site of the abyss ransomware group; the attack is estimated to have taken place on 2026-05-14. Sector: Technology. Country: United States of America. Website: technic.com. Founded in 1944 and headquartered in Woonsocket, Rhode Island, Technic Inc. is an international supplier of electroplating chemicals and equipment.
Fab-Masters
May 14, 2026
•[ ransomware, manufacturing ]
Fab-Masters was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-14. Sector: Manufacturing. Country: United States of America. Website: www.fabmastersinc.com.
Institute of PrivateEnterprise Development
April 24, 2026
•[ ransomware, finance ]
Institute of PrivateEnterprise Development was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-04-24. Sector: Professional Services. Website: ipedgy.com. The Institute of Private Enterprise Development focuses on improving the livelihoods of micro
and small entrepreneurs by offering loans ranging from $40,000 to $7,500,000 GYD. Their servic
es are designed to support individuals looking to start or grow their businesses, with a signi
ficant emphasis on female and youth entrepreneurs, as well as those in rural areas.
Here is the access to 55gb of corporate data. Detailed clients and employee personal informati
on (passports, DLs, SSNs, ID cards, financial information, credit card details and so on), NDA
s , etc.
You will find several password-free archives. Click on any of them to start the download.
Click the download button.
Hotelogix
May 14, 2026
•[ ransomware, misconfiguration, technology ]
Hotelogix was listed as a victim on the leak site of the ShadowByt3$ ransomware group; the attack is estimated to have taken place on 2026-05-14. Sector: Hospitality. Country: Singapore. Website: hotelogix.com. We are ShadowByt3$. We have claimed responsibility for hacking Hotelogix. They have been breached through there amazon s3 buckets and azure blobs. They were misconfigured which allowed us to scrape everything inside. This has been are latest campaign. If you don't pay $500,000 in btc or monero all data gets leaked. We are not joking and not playing we will. As you can tell in the sample in the data leak site or url below. We are giving you until April 14th at 12:20 it expires. It gets released. DarkWebinformer if you see this contact us asap through are telegram. Any researchers you can contact them and verify data. Also let them know what we have and have 6gb of data. Tell them if they don't pay by that date they get released and is not being put up for sale. Make the right decision and just getting law enforcement involved is just going to make it worse and as you can see they are helpless and don't do shit about you and don't care about companies. Look at how many companies get reported to the feds, you really think there going to help you. If you do your wrong. You can try to stop us but it doesn't stop the leaks from already being leaked and passed around other researchers or criminals. The following below was stolen: 1. Internal Corporate Data This data pertains to Hotelogix's own business operations and software development: - Operational Manuals: Internal guides for staff on how to use and manage their cloud-based systems. - Product Upgrade PDFs: Documentation detailing recent or upcoming software updates, which can reveal specific system architectures. - Branding Assets: Official logos, templates, and marketing materials (often used by hackers to create more convincing phishing emails). 2. Client-Specific Data (Treebo Hotels) The most critical part of the breach involves data belonging to Hotelogixs clients. For Treebo Hotels, the stolen files include: - Customer Folios (Invoices): As seen in your image, these contain guest names, phone numbers, and home addresses. - Guest Stay Details: Specific dates of arrival and departure, room numbers, and room types (e.g., "Promotional Room Rent Oak"). - Payment Processing Details: While full credit card numbers are often encrypted, "processing details" can include: Last four digits of cards. Transaction IDs and dates. Billing amounts and tax breakdowns (GST/SGST).
University Of Georgia
May 14, 2026
•[ ransomware, education, government ]
University Of Georgia was listed as a victim on the leak site of the ShadowByt3$ ransomware group; the attack is estimated to have taken place on 2026-05-14. Sector: Education. Country: United States of America. Website: uga.edu. ShadowByt3$ has breached University of Georgia. The full data is on are leak site. We stole approximately 3.2 MB in raw text files. No customers were affected just exployees the following was stolen. - Physical Locations: Home addresses (like the Columbus, GA residential home) and specific office numbers (like Office 2207). - Private Contact Info: Personal cell phone numbers and home phone numbers (e.g., the 404-736-xxxx). - Employee Information: This often includes full names, contact details, and institutional identification photos. - Project Documentation: Information regarding internal university projects, including tracking logs and administrative data for various departments. - Workforce Data: Internal metadata such as position numbers, departmental assignments, and work schedules. - Technical Details: Notes regarding system maintenance and development that could potentially highlight internal processes - Critical Infrastructure: Active project maps for GEMA (Emergency Management), Georgia Broadband, and GDOT (Transportation) through 2026. - Government Records: Access to Asset Forfeiture logs and County-level GIS (Athens-Clarke, Bibb) that underpins 911 dispatch and land taxes. - Leadership Secrets: The UGA Office of the President Mail Tracker and Gov360 anonymous executive coaching logs. - The "SME" Map: we have identified the "Subject Matter Experts" like Noah Abouhamdan, Chad Rupert, and Pat Russell. we know exactly how many hundreds of hours these people have spent on specific pieces of code. - Security Clearances: we know who is a "Benefited" full-time employee (high-value target) versus a "Student Assistant" (low-value entry point).
Amplify Technology
May 14, 2026
•[ ransomware, technology, government ]
Amplify Technology was listed as a victim on the leak site of the ShadowByt3$ ransomware group; the attack is estimated to have taken place on 2026-05-14. Sector: Technology. Country: United Kingdom of Great Britain and Northern Ireland. Website: amplifytechnology.co.uk. Amplify technology has been a victim of an attack. There project they were working on with the pakistan and other countries got stolen. We stole 1.69Gb of data. for all the proof and files it's on the mega.nz link below. For screenshots go to are telegram channel below. They didn't take us seriosly so now they pay for it. The data contains the following below: financial records, pii, pictures of houses personal stuff like address, fathers name, address, etc The company Website: https://www.amplifytechnology.co.uk In the UK, Amplify Technology Limited is a strategic technology consultancy based in Bromsgrove, England. They specialize in helping organizations align their technology with business goals through advisory and implementation services. WHAT THEY DO... - CIO Advisory: Strategic support for technology leaders, including one-to-one mentoring, coaching, and support for cloud migrations or mergers. -SAP Services: Expertise in SAP leadership and technology integration, particularly for the housing, local government, and healthcare sectors. - Change & Adoption: Guiding organizations through cultural shifts and new operating models to ensure people and technology are aligned during digital transformations. - Technical Reviews: Conducting diagnostic reviews of IT operations, cybersecurity, data, and technology change
Stride Learning
May 14, 2026
•[ ransomware, education ]
Stride Learning was listed as a victim on the leak site of the ShadowByt3$ ransomware group; the attack is estimated to have taken place on 2026-05-14. Sector: Education. Country: United States of America. Website: stridelearning.com. Stride Learning Should've Paid the ransom. We were only asking $500,000 in bitcoin or monero it's not that hard. This is a warning to all companies that if you don't pay it will get leaked. If you pay you have are word that it's deleted also with a picture before and after. If you want we will also take a video.
PowerCampus
May 14, 2026
•[ ransomware, education, technology ]
PowerCampus was listed as a victim on the leak site of the ShadowByt3$ ransomware group; the attack is estimated to have taken place on 2026-05-14. Sector: Education. Country: India. Website: powercampus.in. Cloud-based school management and collaboration platform targeting educational institutes in India, covering online fee payments, exam management, online admissions, teacher-parent communication, and e-learning continuity.
Houston Eye Associates
May 14, 2026
•[ ransomware, healthcare ]
Houston Eye Associates was listed as a victim on the leak site of the cmdorganization ransomware group; the attack is estimated to have taken place on 2026-05-14. Sector: Healthcare. Country: United States of America. Website: www.houstoneye.com. Houston Eye Associates is a team of board-certified ophthalmologists and board-licensed optometrists with advanced fellowship and specialty training in the fields of ophthalmology and optometry. With 20 locations across Greater Houston, there is a location near you.
United Quality Cooperative / www.uqcoop.com
May 15, 2026
•[ ransomware, retail ]
United Quality Cooperative / www.uqcoop.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-05-15. Sector: Agriculture and Food Production. Country: United States of America. Website: uqcoop.com. United Quality Cooperative provides a range of services including bulk fuel, propane, lubricants, and agricultural products.
We have at our disposal internal corporate correspondence, financial documents, personal data of company employees and much more.
All stolen information will be published in the public domain in a week, if the company's management does not pay.
Digiprint
May 14, 2026
•[ ransomware, manufacturing, technology ]
Digiprint was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-14. Sector: Manufacturing. Country: Poland. Website: digiprint.pl. digiprint.pl zoominfo.com/c/digiprint/372856266 leading Polish company established in 2000 that delivers innovative solutions for the printing industry. They specialize in digital and flexographic printing technologies, wide-format production, and packaging design, partnering with global brands like HP Indigo and Esko. Beyond equipment sales, Digiprint provides expert installation, training, and after-sales support to help print businesses thrive in a digital era
Grupo Alvorada
May 14, 2026
•[ ransomware, manufacturing ]
Grupo Alvorada was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-14. Sector: Manufacturing. Country: Brazil. Website: galvorada.com. galvorada.com zoominfo.com/c/grupo-alvorada/536571880 a prestigious Brazilian family-owned agribusiness founded in the 1970s and based in So Paulo. The company specializes in the production and export of high-quality fertile eggs and day-old chicks, serving both domestic and international markets with a strong focus on biosecurity and antibiotic-free practices. With over 50 years of heritage, Grupo Alvorada combines tradition, innovation, and sustainability to deliver excellence in poultry genetics and animal nutrition
