Magnolia (Israel)
May 5, 2026
•[ ransomware, retail, leak ]
Magnolia (Israel) was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Retail & E-Commerce. Country: Israel. Website: magnolia-jewellery.com. Israeli jewelry company. Silver & accessories, participates in Vicenza jewelry fair (2025/2026). Sells via buyme.co.il gift cards. ~38k files, invoices in Hebrew (SI/IN/OV prefix).
Bandeirante Supermercados
May 5, 2026
•[ ransomware, retail ]
Bandeirante Supermercados was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Retail & E-Commerce. Country: Brazil. Website: bandeirantesupermercados.com.br. Brazilian supermarket chain.
Elken Sdn Bhd
May 5, 2026
•[ ransomware, retail ]
Elken Sdn Bhd was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Retail & E-Commerce. Country: Malaysia. Website: elken.com. MLM / health & beauty products company. ~16k emails extracted.
Sysco
May 5, 2026
•[ ransomware, manufacturing ]
Sysco was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Agriculture and Food Production. Country: United States of America. Website: www.sysco.com.
Scales and Associates Inc
May 5, 2026
•[ ransomware, technology ]
Scales and Associates Inc was listed as a victim on the leak site of the sinobi ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Professional Services. Country: United States of America. Website: scalesassoc.com. Scales & Associates, Inc. is a firm that specializes in engineering and architecture, focusing on creating intelligent and economical solutions for their clients. They adopt a strategic, big-picture perspective, ensuring that all components of a project work together efficiently for overall success. Their services are designed to meet both current needs and future demands. The company is DBE certified and operates from Detroit, MI.
Ropers Majeski
April 23, 2026
•[ ransomware, leak, finance ]
Ropers Majeski was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-04-23. Sector: Professional Services. Country: United States of America. Website: ropers.com. [AI generated] Ropers Majeski is a law firm based in the United States, operating primarily in California. The firm provides legal services across a range of practice areas including litigation, insurance defense, business law, employment law, and professional liability. It serves corporate clients, insurers, and individuals, with offices in multiple California cities. The firm is known for its work in complex civil litigation and risk management counsel.
ttt.vn TTT Corporation
May 5, 2026
•[ ransomware, manufacturing, government ]
ttt.vn TTT Corporation was listed as a victim on the leak site of the stormous ransomware group; the attack is estimated to have taken place on 2026-05-05. Country: Vietnam. Website: ttt.vn. $900k to Solve the Problem 5TB While TTT Company was preoccupied with designing luxurious interiors and architectural masterpieces, they completely overlooked the design of a secure network. We have spent enough time within their internal infrastructure to conclude that their security is incredibly fragile. We have successfully exfiltrated all of the company's data and now possess 5 TB of the most sensitive information, including complete blueprints and CAD designs for prestigious clients (Toyota showrooms, gyms, luxury resorts, and government projects). We have accessed every employee's personal drive, including IDs, passports, and private medical records. Furthermore, we hold confidential contracts, tax reports (BCTC), internal financial audits, and detailed security schematics for client buildings.
Farmers Association of Iceland
May 3, 2026
•[ ransomware, manufacturing ]
Farmers Association of Iceland was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-03. Sector: Agriculture and Food Production. Country: Iceland. Website: bondi.is. bondi.is Farmers Association of Iceland, is Iceland's primary agricultural interest organization representing approximately 3,000 people employed in farming and agriculture-related jobs across the country. The association acts as the official advocate for Icelandic farmers in public forums, protecting their interests in matters of policy, economics, and sustainability, while also developing climate action roadmaps for sustainable farm management. Headquartered in Borgartn 25 in Reykjavk, B publishes agricultural statistics, supports farm productivity improvement, and bridges the gap between society and food producers
La Kaffa International
May 3, 2026
•[ ransomware, retail ]
La Kaffa International was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-03. Sector: Agriculture and Food Production. Country: Italy. Website: lakaffagroup.com. lakaffagroup.com zoominfo.com/c/la-kaffa-international-co-ltd/426003975 La Kaffa International is a publicly listed Taiwanese multinational food and beverage group (Taiwan Stock Exchange, code: 2732), founded in 2004 and headquartered in Zhubei City, Hsinchu County, Taiwan, with over 663 employees and annual revenues around $46 million. The company is best known as the parent brand of Chatime the world-famous bubble tea chain expanded to 50+ countries across 6 continents, making it the top takeout tea brand in Australia, Southeast Asia, and beyond. Beyond Chatime, La Kaffa manages a multi-brand portfolio of 9+ F&B concepts including ZenQ Dessert, Bake Code Bakery, ChunSun Cake, La Kaffa Cafe, Wagokoro Tonkatsu, and Osaka Ohsho Taiwan, with over 1,100 outlets in China alone
Diviso Grupo Financiero
April 29, 2026
•[ ransomware, finance ]
Diviso Grupo Financiero was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-04-29. Sector: Financial Services. Country: Peru. Website: diviso.pe. diviso.pe zoominfo.com/c/diviso-grupo-financiero-sa/372139811 Diviso Grupo Financiero S.A. is a Lima-based financial holding company founded in 2003 (formerly NCF Inversiones SA, rebranded in November 2013). With around 1,0005,000 employees and led by CEO Jos Romero Tapia, it offers a comprehensive portfolio of capital market services through its two main subsidiaries DIVISO Fondos (mutual and investment funds) and DIVISO Bolsa (stock brokerage). The group holds strategic stakes in major regional exchanges, including the Lima Stock Exchange (BVL), CAVALI, and the Chilean Products Exchange. It is publicly traded on the Lima Stock Exchange under ticker DIVIC1 with a market cap of ~313 million PEN
Marutake
May 3, 2026
•[ ransomware, healthcare, technology ]
Marutake was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-03. Sector: Agriculture and Food Production. Country: Japan. Website: kk-marutake.co.jp. kk-marutake.co.jp zoominfo.com/c/marutake/561552308 Marutake Co., Ltd. is a comprehensive pharmaceutical and medical wholesale company founded on June 15, 1925, and headquartered in Niigata City, Japan, with a 100-year history of connecting manufacturers to healthcare providers across the region. The company distributes prescription pharmaceuticals, medical devices, clinical diagnostic reagents, hygiene materials, nursing care products, and healthcare IT systems to hospitals, clinics, and pharmacies, primarily across Niigata, Yamagata, Miyagi, Akita, Tokyo, and Gunma prefectures. With a workforce of 477 employees and capital of 100 million, Marutake positions itself as a "supporter of the medical frontline," ensuring stable supply of essential medical commodities to local communities
Kasapreko
May 3, 2026
•[ ransomware, manufacturing ]
Kasapreko was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-03. Sector: Agriculture and Food Production. Country: Ghana. Website: kasapreko.com. kasapreko.com zoominfo.com/c/kasapreko-company-ltd/113558803 Kasapreko PLC is Ghana's leading herbal beverage manufacturer, founded in 1989 by Dr. Kwabena Adjei in a garage in Nungua, Accra, and today grown into a multinational company with over 500 employees, 100+ product SKUs, and exports to 16 countries worldwide. The company pioneered the first scientifically formulated herbal-based alcoholic beverage in Ghana Alomo Bitters which became its flagship product and was named by CNN Money as one of the top 5 emerging brands in the world in 2013. ISO 22000:2005 certified and a member of the prestigious Ghana Club 100, Kasapreko produces bitters, whisky, gin, liqueur, brandy, wine, soft drinks, and water, with active expansion into East Africa including Kenya
Levante Living
May 3, 2026
•[ ransomware, healthcare, retail ]
Levante Living was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-03. Sector: Retail & E-Commerce. Country: Italy. Website: levanteliving.com. levanteliving.com zoominfo.com/c/levante-living-lp/388951109 Levante Living is a Canadian-owned senior living enterprise founded in 2016 by Michael Petersen and Jim MacDonald, and headquartered in Toronto, Ontario, focused on acquiring, managing, and redeveloping senior housing across North America. The company currently operates 24 retirement residences across Ontario, employs over 600 team members, and manages approximately 1,600 investors with over $175 million in senior living assets. Its service offerings span the full care spectrum independent living, assisted living, memory care, respite care, and long-term care guided by the values of dignity, compassion, integrity, and excellence
Ontario Physiotherapy Association
May 3, 2026
•[ ransomware, healthcare ]
Ontario Physiotherapy Association was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-03. Sector: Healthcare. Country: Canada. Website: opa.on.ca. opa.on.ca zoominfo.com/c/ontario-physiotherapy-association/130548231 The Ontario Physiotherapy Association (OPA) is a non-profit, physiotherapist-led professional association representing over 5,500 physiotherapists, physiotherapist assistants (PTAs), and students across Ontario, Canada. Its core mission is to provide leadership, advocacy, professional development, and career support to ensure accessible, high-quality physiotherapy services throughout the province. Founded over 60 years ago, OPA has a well-documented history of advocacy wins from expanding PT scopes of practice to supporting virtual care access and removing referral requirements from physicians
East
May 3, 2026
•[ ransomware, technology, retail ]
East was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-03. Country: Japan. Website: east-inc.jp. east-inc.jp zoominfo.com/c/east/5000054099 East Inc. is a Japanese company headquartered in Tokyo that provides comprehensive outsourcing services for commercial facilities shopping malls, outlet parks, and office complexes covering everything from day-to-day operations to system development, website management, and information services. The company has an impressive track record of over 800 commercial facilities nationwide across Japan, with clients including Roppongi Hills, Nihonbashi Takashimaya S.C., Mitsui Outlet Parks, and Ebisu Garden Place. Since 2007, East Inc. has also been supporting Japanese companies expanding into China, offering systems and operational know-how for overseas operations
The Modern Flour Mill
May 3, 2026
•[ ransomware, manufacturing, leak ]
The Modern Flour Mill was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-03. Sector: Agriculture and Food Production. Website: modernflourmills.com. modernflourmills.com zoominfo.com/c/the-modern-flour-mills-and-macaroni-factories-co/425333381 Modern Flour Mills & Macaroni Factories Co. (MFM) is a diversified cereal processor founded in 1949 and headquartered in Amman, Jordan, with a workforce of 201500 employees. The company operates four main production plants wheat flour milling, pasta, snack foods, and bakery ingredients and notably opened the first pasta factory in the entire Middle East in 1967. Its products are sold under well-known regional brands: Al-Ghazal (flour & pasta), Suprema/Barakeh (pasta), MFM (specialty flour & baking mixes), and Samar (snacks), with co-packing and private labeling available for export markets
Keretapi Tanah
May 3, 2026
•[ ransomware, leak ]
Keretapi Tanah was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-03. Sector: Transportation. Country: Malaysia. Website: ktmb.com.my. ktmb.com.my zoominfo.com/c/keretapi-tanah-melayu-berhad/21365008 KTMB (Keretapi Tanah Melayu Berhad) is Malaysia's largest and oldest railway company, with a rail network spanning 1,699 km across Peninsular Malaysia, extending into Singapore and Thailand. It operates multiple services including KTM Komuter (urban commuter trains since 1995), ETS electric intercity trains, and diesel-powered KTM Intercity trains. The company was privatized in 1992 and today offers online ticketing via its website and mobile app, with a QR-code boarding system
Media Consulting
May 3, 2026
•[ ransomware, technology ]
Media Consulting was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-03. Sector: Professional Services. Country: Italy. Website: mconweb.it. mconweb.it zoominfo.com/c/media-consulting-srl/372633129 Media Consulting is an Italian web agency based in Cesena that designs and develops custom responsive websites. They offer a full range of digital services including Social Media Marketing, Web Marketing (Google Ads, Email Marketing, Analytics), and graphic design. The agency also provides web marketing training for teams and assists businesses in accessing public funding grants
Arcelik
May 1, 2026
•[ ransomware, manufacturing, technology ]
Arcelik was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-01. Sector: Manufacturing. Country: Turkey. https://www.zoominfo.com/c/arelik-global/462472631 Stock Symbol
ARCLK Revenue $11.8 Billion Arcelik Global is a Turkish multinational household appliances manufacturer headquartered in Istanbul, Turkey. Founded in 1955 as a subsidiary of Koc Holding, the company has grown into a worldwide producer and marketer of consumer durables and consumer electronics. The company operates 46 production facilities across 14 countries. With approximately 55,000 employees globally, Arcelik maintains subsidiaries in 58 countries and provides goods and services in over 145 countries. 22 brands including Arcelik, Beko, Grundig, Blomberg, Arctic, Defy, Dawlance, Hotpoint, Indesit, Leisure, Singer, Voltas Beko, and ElektraBregenz.Confluence: 7,736 spaces, 16,371+ pages, 10,313+ attachments, with full technical documentation, internal rules, marketing, engineering specs, R&D results, quality manuals, and project docs across business units. Jira: 10,419 projects - ETC. Access broker - ADAPTAVIST LTD. Thanks
Kınık Gross
April 29, 2026
•[ ransomware, retail ]
Knk Gross was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-04-29. Sector: Professional Services. Country: Turkey. Website: kinikgross.com. kinikgross.com Knk Gross Toptan Market is the first and only local wholesale market in the Thrace (Trakya) region of Turkey, located in orlu. It offers a wide range of products including fresh produce, meat, deli, legumes, cleaning supplies, and personal care items all at competitive wholesale prices
