Dosab
June 20, 2026
•[ ransomware, manufacturing, automotive ]
Dosab was listed as a victim on the leak site of the nova ransomware group; the attack is estimated to have taken place on 2026-06-20. Sector: Manufacturing. Country: Saudi Arabia. Demirta Organize Sanayi Blgesi (DOSAB) provides a range of services including waste water treatment, energy supply, and social facilities to support its industrial clients. The region hosts over 573 active companies and employs around 44,000 people, focusing on sectors such as automotive and textile. DOSAB is committed to sustainability and offers various online services and resources for its members. The organization also emphasizes social responsibility through community engagement and educational initiatives - Nova Provide tree and samples from stolen data to the company when its get in touch with support department.
Go2Joy (go2joy.vn)
June 20, 2026
•[ ransomware, retail ]
Go2Joy (go2joy.vn) was listed as a victim on the leak site of the ransomexx ransomware group; the attack is estimated to have taken place on 2026-06-20. Sector: Hospitality. Country: Vietnam. Website: go2joy.vn. We have released the complete database of Go2Joy, Vietnams leading platform for hourly and short-stay hotel bookings.
Preferred Properties
June 20, 2026
•[ ransomware, retail ]
Preferred Properties was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-06-20. Sector: Retail & E-Commerce. Preferred Properties, Inc. is a dynamic and progressive housing development and property management company based in Toledo, Ohio. We specialize in the development of affordable and accessible housing opportunities, and to create integrated housing options for persons living with disabilities. Our development program reflects where we are today with programs under management, and new projects in development.
ENB Versicherungen | myenb.ch
June 20, 2026
•[ ransomware, finance ]
ENB Versicherungen | myenb.ch was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-06-20. Sector: Financial Services. Country: Switzerland. enb AG is an independent insurance broker that collaborates with leading insurance companies to provide tailored insurance solutions. They assist both private and corporate clients in navigating the complexities of insurance products, offering services such as health insurance, vehicle insurance, and liability insurance. The company emphasizes the importance of employee satisfaction and offers professional pension plans and collective accident insurance for businesses.
Super Finishing
June 20, 2026
•[ ransomware, manufacturing ]
Super Finishing was listed as a victim on the leak site of the worldleaks ransomware group; the attack is estimated to have taken place on 2026-06-20. Sector: Manufacturing. Country: Brazil. Website: www.superfinishing.com.br.
L'Archevque & Rivest Ltée
June 20, 2026
•[ ransomware, manufacturing ]
L'Archevque & Rivest Lte was listed as a victim on the leak site of the worldleaks ransomware group; the attack is estimated to have taken place on 2026-06-20. Sector: Manufacturing. Country: Canada. Website: www.lrivest.com.
Pacific Lamp & Supply
June 20, 2026
•[ ransomware, manufacturing ]
Pacific Lamp & Supply was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-06-20. Sector: Manufacturing. Country: United States of America. Website: www.pacificlamp.com.
Newspaper Media Group
June 20, 2026
•[ ransomware, retail ]
Newspaper Media Group was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-06-20. Sector: Retail & E-Commerce. Country: United States of America. Newspaper Media Group is a local news organization that provides comprehensive coverage of news, sports, entertainment, and community events across various regions, including Central Jersey and South Jersey. They publish multiple newspapers and magazines, ensuring that they reach more households than their competitors in nearly every zip code they cover. Their services are aimed at local communities, delivering news that is often not found elsewhere. With a commitment to connecting readers to the communities they care about, NMG stands out for its focus on local reporting.
Nhà Thành Phố
June 21, 2026
•[ ransomware, leak, technology ]
Nh Thnh Ph was listed as a victim on the leak site of the nova ransomware group; the attack is estimated to have taken place on 2026-06-21. Sector: Other. Country: Vietnam. nhathanhpho.com.vn is an Vietnamese real estate listing platform operated by an individual, on Vinh, which allowed users to buy, sell, and rent properties - Nova Provide tree and samples from stolen data to the company with decrypt 1 file as sample when its get in touch with support department.
Artistic Smiles
June 19, 2026
•[ ransomware, retail ]
Artistic Smiles was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-06-19. Sector: Retail & E-Commerce. Country: United States of America. Website: artisticsmiles.org.
Lockers IT
June 21, 2026
•[ ransomware, technology, leak ]
Lockers IT was listed as a victim on the leak site of the nova ransomware group; the attack is estimated to have taken place on 2026-06-21. Sector: Technology. LockersIT is a self-owned Bangladeshi IT company founded in 2013, headquartered in Chandpur, that specializes in custom software development with a team of 11-50 employees - allcashdealer.com dealmart24.com dev1.lockersit.com erp.lockersit.com sales.lockersit.com brm.lockersit.com debnathashu.com dev2.lockersit.com eshop.lockersit.com cloud.debnathashu.com dev.allcashdealer.com dev3.lockersit.com lockersit.com cloud.lockersit.com dev.lockersit.com emailer.debnathashu.com project.debnathashu.com effected with the encryption, Data From the server has been taken, Nova Provide tree and samples from stolen data to the company with decrypt 1 file as sample when its get in touch with support department.
jktornel
June 21, 2026
•[ ransomware, manufacturing ]
jktornel was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-06-21. Country: Mexico. Unauthorized access has been gained to the company's confidential files, including client data, proprietary R&D, and financial documentation.
jaggroup.com UPDATE-FULL DATA DUMP
June 20, 2026
•[ ransomware, technology, finance ]
jaggroup.com UPDATE-FULL DATA DUMP was listed as a victim on the leak site of the stormous ransomware group; the attack is estimated to have taken place on 2026-06-20. Full database containing corporate emails (@jaggroup.com), Active Directory domain logins, and clear plain-text passwords.Complete Microsoft Dynamics GP databases, software license keys, financial reports, and system configuration Multiple compressed archives (zBackups.zip, wetransfer packages), SQL server connection data, and IM.mdb database files.Internal project management sheets (Jag Project.xlsx), user listings, purchasing, and sales import logs.
Florida Engineering Services
June 21, 2026
•[ ransomware, technology ]
Florida Engineering Services was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-06-21. Sector: Professional Services. Country: United States of America. Website: www.florida-engineering-services.com.
Tri-tec
June 21, 2026
•[ ransomware, technology ]
Tri-tec was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-06-21. Country: United States of America. Website: www.tri-tec.com.
Wall ISD
June 21, 2026
•[ ransomware, education ]
Wall ISD was listed as a victim on the leak site of the cmdorganization ransomware group; the attack is estimated to have taken place on 2026-06-21. Sector: Education. Country: United States of America. Website: www.wallisd.net. Wall ISD is an educational institution that serves students in the Wall, Texas area, providing a range of programs and activities for elementary, middle, and high school students. The district emphasizes inclusivity and equal access to education, ensuring that all students, regardless of their background, have the opportunity to participate in school activities. Wall ISD is committed to fostering a supportive learning environment and offers resources for both new and returning students. The intended clients are students and their families within the Wall community.
Sivatel Bangkok
June 21, 2026
•[ ransomware, technology ]
Sivatel Bangkok was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-06-21. Sector: Technology. Country: Thailand. Website: www.sivatelbangkok.com.
Taiwan Sintong Machinery Co., Ltd
June 21, 2026
•[ ransomware, manufacturing ]
Taiwan Sintong Machinery Co., Ltd was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-06-21. Sector: Manufacturing. Country: Taiwan. Website: www.twsinto.com.tw.
NationsBuilders Insurance Services
June 22, 2026
•[ ransomware, finance, leak ]
NationsBuilders Insurance Services was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-06-22. Sector: Financial Services. [insurance] *** (NBIS) is the premier US underwriter of crane & rigging, concrete-pumping, heavy-haul, and residential-builder insurance a specialty managing general underwriter founded in Atlanta in 2001, acquired by Align Financial / DUAL North America (Howden Group) in August 2021. 2,748,845 filetree entries across 24 shares (AIM, IMAGERIGHT, the claims and policy-admin stores, HR, finance, IT, and a decade of M&A diligence rooms).
NTP B.V. Civil Engineering Construction
June 22, 2026
•[ ransomware, manufacturing, leak ]
NTP B.V. Civil Engineering Construction was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-06-22. Sector: Manufacturing. Country: Netherlands. [engineering] NTP B.V. (trading as NTP Infra / NTP Groep) is a Dutch civil engineering contractor headquartered in Hattem, Gelderland. They build roads, lay cables, install sewers, and perform ground works across the Netherlands. With 150200 employees, offices in Hattem, Enschede, and Zevenaar, and a 2024/2025 acquisition of Aannemingsbedrijf Dubbink B.V., they are a typical mid-market Dutch aannemingsbedrijf government contracts, municipal works, private developments.
Their file server contained everything: 10+ years of operations, every employee's personal files, the complete HR/payroll system exports, every network device configuration, every project bid, and every financial record.
