Union Tractor
June 22, 2026
•[ ransomware, manufacturing, retail ]
Union Tractor was listed as a victim on the leak site of the cmdorganization ransomware group; the attack is estimated to have taken place on 2026-06-22. Sector: Agriculture and Food Production. Country: United States of America. Website: www.uniontractor.com. Union Tractor Ltd. is an independent business selling aftermarket parts and accessories for construction and transportation equipment. It engages in the distribution of undercarriage components, ground engaging tools, engine and drive train parts, hydraulic system parts, exchange compoUnion Tractor Ltd. is an independent business selling aftermarket parts and accessories for construction and transportation equipment. It engages in the distribution of undercarriage components, ground engaging tools, engine and drive train parts, hydraulic system parts, exchange components, and used parts. The company was founded in 1927 and is headquartered in Nisku, Canada.nents, and used parts. The company was founded in 1927 and is headquartered in Nisku, Canada.
mihana-v.com
June 20, 2026
•[ ransomware, manufacturing, technology ]
mihana-v.com was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-06-20. Country: Russian Federation. Website: mihana-v.com. Here is the comprehensive corporate overview of MIHANA Seisakusho Co., Ltd. based on their official company profiles, technical catalogs, and industrial registries
bits-pilani.ac.in
June 20, 2026
•[ ransomware, education, leak ]
bits-pilani.ac.in was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-06-20. Sector: Education. Country: India. Website: bits-pilani.ac.in. BITS Pilani is a premier Indian private research university and "Institution of Eminence" known for elite engineering and science programs across five campuses. Founded in 1964, it is highly selective with a 1.47% acceptance rate and offers a 0% attendance policy with mandatory industry immersion.
Central Bank of Libya
June 22, 2026
•[ ransomware, finance, government ]
Central Bank of Libya was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-06-22. Sector: Financial Services. Country: Libya. Website: www.cbl.gov.ly.
Aerospace & Advanced Composites GmbH
June 22, 2026
•[ ransomware, manufacturing, technology ]
Aerospace & Advanced Composites GmbH was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-06-22. Sector: Manufacturing. Country: Germany. *** (AAC) an Austrian space-materials R&D company headquartered in Wiener Neustadt, with deep ties to the European Space Agency.
Obtained two complete NAS snapshots spanning 30+ years of operations:
aacdata (31 December 2022) 123 GB: the complete Testhouse, R&D, and engineering share, including the ESA thermal vacuum test archive, polymer composites formulations, and 22 Outlook PST email backups.
aacdata1 (14 January 2025) 86 GB: the administrative share, including managing director's full PC backup (browser credentials, passport scans), 15 years of financial statements, shareholder agreements, and the IT credentials master spreadsheet.
BMD_DATA 34 MB: the complete BMD business software accounting database with employee payroll, SEPA payments, and VAT declarations.
done/ Bitlocker recovery keys for 12 endpoints and WMI system dumps.
The exposed material includes:
4 passport scans, 1 social security number, 25 employees' complete HR files, 50100+ job applicant CVs the full identity-theft toolkit for the workforce plus third-party data subjects.
The IT credentials master spreadsheet (AAC CODES.xlsx) containing every system password, plus browser-stored logins for ESA SSO, the company's IT provider, and industrial suppliers.
12 Bitlocker recovery keys enabling full-disk decryption of 6 company laptops.
123 GB of ESA thermal vacuum test data 30+ years of space-grade materials testing that represents the company's core competitive advantage and cannot be recreated.
137 executed NDAs with partners including Airbus, RUAG, Safran, Thales, ESA, BMW, Tesla, Google, Samsung SDI, CERN, DLR, and 126 others.
15 years of annual financial statements, bank records, insurance policies, and shareholder agreements the company's entire financial anatomy laid bare.
Ntd Apparel
June 22, 2026
•[ ransomware, retail, leak ]
Ntd Apparel was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-06-22. Sector: Retail & E-Commerce. NTD Apparel specializes in creating high-quality apparel that connects with pop culture, offeri
ng a range of licensed products and in-house labels. They provide comprehensive services includ
ing market analysis, price point management, and visual merchandising to retailers.
We will upload 62gb of corporate data soon. Employee personal docs (passports, SSNs, DLs, medic
al information, phones, addresses and so on), projects, client information, confidential agreem
ents and so on.
sterlinggloballtd.com
June 22, 2026
•[ ransomware, technology ]
sterlinggloballtd.com was listed as a victim on the leak site of the BrainCipher ransomware group; the attack is estimated to have taken place on 2026-06-22. Sector: Professional Services. Country: United Kingdom of Great Britain and Northern Ireland. Website: sterlinggloballtd.com.
graymont.com
June 22, 2026
•[ ransomware, manufacturing, financial ]
graymont.com was listed as a victim on the leak site of the chaos ransomware group; the attack is estimated to have taken place on 2026-06-22. Sector: Manufacturing. Country: Canada. Website: graymont.com. NOTICE: Graymont Final Warning
We have successfully gained full access to the corporate infrastructure of Graymont. Our team currently holds a massive volume of highly sensitive data. The scope of our access covers the entire core of your operations, from executive financial strategy to individ
EON Meditech Pvt
June 22, 2026
•[ ransomware, healthcare, technology ]
EON Meditech Pvt was listed as a victim on the leak site of the cmdorganization ransomware group; the attack is estimated to have taken place on 2026-06-22. Sector: Healthcare. Country: India. Website: www.eonmeditech.com. EON Meditech specializes in innovative medical technology solutions aimed at enhancing patient care and improving healthcare outcomes. Their product offerings include advanced medical devices and software solutions tailored for healthcare providers. The company primarily serves hospitals, clinics, and healthcare professionals looking for cutting-edge technology to streamline operations and enhance patient experiences. EON Meditech is committed to driving advancements in the medical field through research and development.
Cbassociations
June 22, 2026
•[ ransomware, technology ]
Cbassociations was listed as a victim on the leak site of the Icarus ransomware group; the attack is estimated to have taken place on 2026-06-22. Sector: Professional Services. Salesforce data for this corp.
Data stolen: SF data. Compressed size.
Gms-net
June 22, 2026
•[ ransomware, technology ]
Gms-net was listed as a victim on the leak site of the Icarus ransomware group; the attack is estimated to have taken place on 2026-06-22. Sector: Technology. Salesforce data for this corp.
Data stolen: SF data - compressed
HDS (Hdscorp)
June 22, 2026
•[ ransomware, leak, technology ]
HDS (Hdscorp) was listed as a victim on the leak site of the Icarus ransomware group; the attack is estimated to have taken place on 2026-06-22. Salesforce data for this corp.
Data stolen: SF data - compressed
Huntress
June 22, 2026
•[ ransomware, technology ]
Huntress was listed as a victim on the leak site of the Icarus ransomware group; the attack is estimated to have taken place on 2026-06-22. Sector: Technology. Country: United States of America. Salesforce data of Huntress.
Data stolen: SF data - Compressed
Schumacher Homes
June 22, 2026
•[ ransomware, retail ]
Schumacher Homes was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-06-22. Sector: Retail & E-Commerce. Country: United States of America. Website: www.schumacherhomes.com.
ehg.bayern
June 22, 2026
•[ ransomware, manufacturing ]
ehg.bayern was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-06-22. Sector: Other. Country: Germany. Website: ehg.bayern. Founded in 1991, the company has evolved from a regional waste management enterprise into a specialized provider of infrastructure operations,
belpointeasset.com \ belpointe.com
June 22, 2026
•[ ransomware, finance ]
belpointeasset.com \ belpointe.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-06-22. Sector: Financial Services. Country: United States of America. 400gb
FTL-Fast Transit Line
June 23, 2026
•[ ransomware, leak, manufacturing ]
FTL-Fast Transit Line was listed as a victim on the leak site of the nova ransomware group; the attack is estimated to have taken place on 2026-06-23. Sector: Transportation. Country: Belgium. Website: ftl.be. FTL International N.V. specializes in shipping, consolidation, forwarding, and groupage services, with a strong presence in major Northern European ports and an office in Colombo, Sri Lanka. With over 25 years of experience, they offer cost-effective port-to-port and door-to-door logistics solutions, including air freight and cargo insurance. Their services cater to a wide range of clients looking for reliable shipping options across the globe. FTL is committed to exceptional personalized attention and efficient shipment handling, embodying their motto 'Experience the Difference - Data included sales data, invoices and costumers full names and phones etc; Nova Provide tree and samples from stolen data to the company when its get in touch with support department.
viennaairport.com
June 23, 2026
•[ ransomware, leak ]
viennaairport.com was listed as a victim on the leak site of the apt73 ransomware group; the attack is estimated to have taken place on 2026-06-23. Sector: Transportation. Country: Austria. Website: viennaairport.com. Vienna Airport (Flughafen Wien AG) is an Austrian company, the operator of Vienna International A...
IH Engineers
May 29, 2026
•[ ransomware, manufacturing ]
IH Engineers was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-05-29. Sector: Manufacturing. Country: United States of America. Website: ihengineers.com. IH Engineers, P.C. is a consulting firm with over 25 years of experience, dedicated to providin
g innovative and technically excellent services in design, construction, and structural evaluat
ion. The firm operates primarily in New Jersey, New York, and Pennsylvania, serving a diverse r
ange of clients.
We will upload 65gb of corporate data soon. Employee personal docs (passports, SSNs, DLs and ot
her HR information), confidential internal files, NDAs, projects, contracts and agreements, dra
wings and so on.
Leo International
May 13, 2025
•[ ransomware, manufacturing ]
Leo International was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-05-13. Country: United States of America. Website: leointernational.com. Leo International, established in 1986, serves as a comprehensive source for the PVF, HVAC, and
Plumbing Industry. The company specializes in manufacturing products through Forging, Casting,
and Injection Molding processes.
We will upload 10gb of corporate data soon. Employee personal docs (passports, SSNs, DLs, medic
al information, phones, photos, doc scans, addresses and so on), confidential internal files an
d so on.