sanver.com.mx
May 4, 2026
•[ ransomware, retail, manufacturing ]
sanver.com.mx was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-05-04. Sector: Professional Services. Country: Mexico. Website: sanver.com.mx. Sanver Forte is a leading hardware wholesaler with over 30 years of experience in the northeastern, central, and Bajo regions of Mexico. The company offers a wide range of products and services related to hardware and construction, focusing on meeting the needs and expectations of its clients through timely deliveries and excellent customer service. Their mission is to simplify the distribution of leading brands, ensuring satisfaction and profitability for customers, collaborators, and shareholders. Sanver Forte aims to be the most comprehensive and secure provider of hardware and home preservation products, contributing to the growth of its employees and the community.
Employees: 1000
Revenue: $30 Million
Industry: Home Improvement & Hardware Retail
Phone Number: +52 7898933030
Erla Technologies SAS
April 9, 2026
•[ ransomware, technology, government ]
Erla Technologies SAS was listed as a victim on the leak site of the spacebears ransomware group; the attack is estimated to have taken place on 2026-04-09. Sector: Technology. Country: France. Website: www.erla.fr. Our company, Erla Technologies SAS, has specialised for more than 30 years in designing, manufacturing, installing and maintaining a huge range of innovative equipment with Guaranteed French Producedcertification and intended for storage, distribution and management of petroleum products, biofuel, Adblue and industrial and chemical fluids.Aware of environmental issues, new energies are at the heart of the innovations and solutions brought by Erla Technologies.-One of the clients is the French army, documentation.-Personal information of employees and clients-Financial documents-Other files https://www.erla.fr
Adelante Soluciones Financieras (Addi.com)
May 5, 2026
•[ ransomware, finance, leak ]
Adelante Soluciones Financieras (Addi.com) was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Financial Services. Country: Colombia. Website: Addi.com. Over 16M unique persons records containing significant PII, financial/transactions (credit cards), KYC and data from TransUnion and Experian (background checks) . The company failed to reach an agreement with us despite our incredible patience, all the chances and offers we made. They don't care. | Size: 518GB+ (compressed) | Updated: 5 May 2026 | SHA256: 520d50dc384fc474e419fdd19cb3517ed6ce778a187ae7d6f44b93ccef5687db
EXPEDITOR
May 5, 2026
•[ ransomware, healthcare, technology ]
EXPEDITOR was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Transportation. Country: United States of America. Expeditor Systems specializes in improving patient flow through innovative light signaling systems designed for medical practices and institutions.
Their solutions, including the LEAN Patient Flow System and Life Safety Nurse Call Systems, aim to enhance patient experience, increase operational efficiency, and boost revenues.
With over 40 years of experience and a client base exceeding 8,000
Laek: 50GB
WE HAS COLLECTED SUCH DATA AS:
- Confidential documents
- Clients Data
- NDA
- Financial data
- Operations
- Corporate data
- Business Agreements
- Development
- Financial databases, all transactions, all clients
And a lot of other VERY IMPORTANT information!
Ahorramas
May 5, 2026
•[ ransomware, retail ]
Ahorramas was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Retail & E-Commerce. Country: Spain. Website: www.ahorramas.com.
GRANDHOME
May 5, 2026
•[ ransomware, retail ]
GRANDHOME was listed as a victim on the leak site of the lamashtu ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Retail & E-Commerce. Country: Bangladesh. Website: grandhomemart.com. GRANDHOME is a leading Thai retailer specializing in construction materials, home decor, and furnishing products. Established in 1973, it has grown into a major hub for high-quality tiles, sanitary ware, and kitchen innovations
Punch & Associates Investment Management
May 5, 2026
•[ ransomware, finance, leak ]
Punch & Associates Investment Management was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Financial Services. Country: United States of America. Punch & Associates is a boutique investment advisory firm based in Edina, MN. They offer specia
lized investment advisory services tailored for private clients and institutions. The firm focu
ses on providing personalized financial strategies to meet the unique needs of their clients. W
ith a commitment to excellence, Punch & Associates aims to help clients achieve their financial
goals.
We will upload 10gb of corporate data soon. Detailed client personal information (passports, SS
Ns, DLs and so on for almost 80 ppl), employee personal files, lots of confidential files (fina
ncials and personal docs), contracts and agreements, projects, NDAs, etc.
Maximum Mold
May 5, 2026
•[ ransomware, manufacturing, leak ]
Maximum Mold was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Manufacturing. Maximum Mold is a specialized provider of tooling and machining solutions, focusing on the des
ign, engineering, and manufacturing of die cast dies, trim dies, and plastic injection molds.
Here is the access to upload company data. Employee personal information (passports, and other
docs), customer files, contracts and agreements, projects, NDAs, etc.
You will find several password-free archives. Click on any of them to start the download.
Download link
https://3i7uisihrgv3v7kjafmhahhcmtjfepckhw5vournekuamhbt37liplid.onion/LEAKS_1/maximummold.com
/
Unre3d
May 5, 2026
•[ ransomware, technology ]
Unre3d was listed as a victim on the leak site of the sinobi ransomware group; the attack is estimated to have taken place on 2026-05-05. Unre3d is a company that operates in the Information & Document Management industry. UNRE Technology was established in 2017.As a full-stack solution provider, we offer advanced 3D laser scanner, measurement and semantic modeling solutions.We specialize in making connections between the digital and physical worlds.Our mission is to give service throughout the whole life cycle of building projects, including civil construction,decoration and maintenance.We have successfully co-worked with more than 500 projects (more than 5 million square meters).
Bay State Land Services
May 5, 2026
•[ ransomware, technology ]
Bay State Land Services was listed as a victim on the leak site of the sinobi ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Professional Services. Country: United States of America. Bay State Land Services Inc is a company that operates in the Architecture, Engineering & Design industry.
Positiwise Infotech Pvt
May 5, 2026
•[ ransomware, technology, healthcare ]
Positiwise Infotech Pvt was listed as a victim on the leak site of the sinobi ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Technology. Country: India. Positiwise Software Pvt Ltd is a software development company based in India and the USA, specializing in a wide range of services including web development, eCommerce solutions, mobile app development, and custom software development. They cater to various industries such as healthcare, retail, real estate, finance, and hospitality, providing tailored solutions to meet specific business needs. With over two decades of experience, their team of top-tier developers is dedicated to delivering high-quality, scalable, and innovative software solutions. Positiwise aims to help businesses digitize their operations effectively while ensuring data security and timely project delivery.
Cazh.id
May 5, 2026
•[ ransomware, finance, technology ]
Cazh.id was listed as a victim on the leak site of the Icarus ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Financial Services. Country: Indonesia. Website: bkdp.cazh.id. - User DB: 300,000 Users (Email, Hash, Phone, Address, DOB) for https://bkdp.cazh.id/.
- KYC Vault: 7,800 Government IDs + 4,200 Selfies (including "Hold-to-Face" ID selfies).
- 34 SQL Databases for associated schools (Students/Parents/Staff).
- Corporate/Financial: Full Investor Database + partner documents
- Collateral documents (Vehicle Registration Documents & Property Deeds)
- Billing Proofs
- Full src code of their services
Data stolen: PII, SOURCE CODE, KYC
ovextech.com
May 4, 2026
•[ ransomware, technology ]
ovextech.com was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-05-04. Sector: Technology. Country: United States of America. Website: ovextech.com. Ovex Tech specializes in providing comprehensive BPO services and call center solutions, including inbound and outbound ...
Raycolighting
May 5, 2026
•[ ransomware, manufacturing ]
Raycolighting was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Manufacturing. Country: United Kingdom of Great Britain and Northern Ireland. Website: raycolighting.com. Organization with 2 emails extracted. Domain: raycolighting.com
Colegio María Inmaculada (CMI)
May 5, 2026
•[ ransomware, education ]
Colegio Mara Inmaculada (CMI) was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Education. Country: Costa Rica. Website: mariainmaculada.ed.cr. Catholic school in Moravia, Costa Rica. Domain cmi.local / mariainmaculada.ed.cr. Servers: CMI-DC01, CMI-APP, CMI-HTTP2, main-server1/2.
Académie de Montpellier / CSJM
May 5, 2026
•[ ransomware, education, government ]
Acadmie de Montpellier / CSJM was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Education. Country: France. Website: ac-montpellier.fr. French public school network. Domain CSJM.BEZIERS, part of Acadmie de Montpellier (ac-montpellier.fr). Occitanie region (laregion.fr). Teacher and admin staff credentials.
Palmers Relocations
May 5, 2026
•[ ransomware, leak ]
Palmers Relocations was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Transportation. Country: United Kingdom of Great Britain and Northern Ireland. Australian international removals & relocation company. FIDI accredited, ISO 9001:2015 certified. Services: household moves, storage, customs, immigration (IMMI/VEVO). Operates Melbourne area (Pascoe Vale, Dandenong, Caulfield).
ActionAid / TACOSA
May 5, 2026
•[ ransomware, government ]
ActionAid / TACOSA was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Government & Defense. Country: United Kingdom of Great Britain and Northern Ireland. Website: actionaid.org. NGO sector. Domains: actionaid.org, tacosa.org.za, immigration.go.tz.
Hathcock (Personal)
May 5, 2026
•[ ransomware ]
Hathcock (Personal) was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Personal comprehensive reports. Individuals: Noel Ray Hathcock, Trinity John Hathcock.
CourtSmart
May 5, 2026
•[ ransomware, technology, government ]
CourtSmart was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Professional Services. Country: United States of America. Website: courtsmart.com. Court technology company. Domain courtsmart.com / COURTSMART2. Dev server: dev-rich20.courtsmart.com. Connections to JIS.org, nashville.org.