Deep Well Services
June 15, 2026
•[ ransomware, leak, energy ]
Deep Well Services was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-06-15. Sector: Energy & Utilities. Over 7k records containing customer PII and other internal corporate data was compromised. This is a final warning to reach out by 18 June 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 16 June 2026 | Warning: FINAL WARNING PAY OR LEAK
Röben Tonbaustoffe GmbH
June 15, 2026
•[ ransomware, manufacturing ]
Rben Tonbaustoffe GmbH was listed as a victim on the leak site of the AiLock ransomware group; the attack is estimated to have taken place on 2026-06-15. Sector: Manufacturing. Country: Germany. Website: roeben.com. Rben Tonbaustoffe GmbH is the largest private brick manufacturer in Germany, a family-owned business now in its 6th generation.
Grupo Indi
June 15, 2026
•[ ransomware, manufacturing ]
Grupo Indi was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-06-15. Sector: Professional Services. Country: Mexico. Website: www.grupoindi.mx.
anglomoil.com
June 15, 2026
•[ ransomware, manufacturing, energy ]
anglomoil.com was listed as a victim on the leak site of the BrainCipher ransomware group; the attack is estimated to have taken place on 2026-06-15. Sector: Energy & Utilities. Country: United Kingdom of Great Britain and Northern Ireland. Website: anglomoil.com. [AI generated] Anglomoil is an Australian company specialising in the manufacture and supply of lubricants and associated products. Operating in the industrial and automotive lubricant sector, it serves mining, transport, agriculture, and general industry markets. Headquartered in Australia, the company produces engine oils, greases, hydraulic fluids, and specialty lubricants, distributing products nationally and to select international markets.
KoMiCo
June 15, 2026
•[ ransomware, technology, manufacturing ]
KoMiCo was listed as a victim on the leak site of the anubis ransomware group; the attack is estimated to have taken place on 2026-06-15. Inside the internal data of a publicly traded company.
Zhangjiagang Fortune Chemical Co. Ltd. Singapore
June 12, 2026
•[ ransomware, manufacturing ]
Zhangjiagang Fortune Chemical Co. Ltd. Singapore was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-06-12. Sector: Manufacturing. Country: Singapore. Website: www.fortune-chemical.com. Zhangjiagang Fortune Chemical Co., Ltd. is a Chinese manufacturer established in 2013 that specializes in phosphorus esters, flame retardants, and functional fine chemicals. The company operates globally with over 25,000 tons of annual output and maintains full REACH compliance for international exports.
Summa4
June 12, 2026
•[ ransomware, hack, finance ]
Summa4 was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-06-12. Sector: Professional Services. Country: Spain. Website: summa4.es. SUMMA 4 Asesores Legales y Tributarios is a Madrid-based firm specializing in legal and tax advisory for businesses and high-net-worth individuals. Established in 2008, the firm provides tailored strategies in tax, commercial, and labor law, with a particular focus on family businesses and family offices.
Hornavan Hotell
June 11, 2026
•[ ransomware, retail ]
Hornavan Hotell was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-06-11. Sector: Hospitality. Country: Sweden. Website: www.hornavanhotell.se. Hornavan Hotell is an independent 3-star property in Arjeplog, Swedish Lapland
TeleFinity
June 11, 2026
•[ ransomware, technology ]
TeleFinity was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-06-11. Sector: Technology. Website: tele-finity.com. TeleFinity is a global provider of computer telephony integration (CTI) and unified contact center software, offering solutions like LogFinity call recording, WebRTC-SIP gateways, and omnichannel contact center platforms. Founded in 2005, the company delivers enterprise-grade,, AI-driven, and CRM-integrated communication products with on-premises or cloud deployment options.
CH Paper
June 10, 2026
•[ ransomware, manufacturing ]
CH Paper was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-06-10. Sector: Manufacturing. Country: China. Website: www.chenghengpaper.com. Cheng Heng Paper Products Co (Pte) Ltd is a prominent regional manufacturer supplying corrugated cardboard boxes and custom packaging solutions. The company, with operations across Malaysia, Indonesia, and China, offers certified, durable products for logistics, e-commerce, and commercial retail.
Nobani Co
June 10, 2026
•[ ransomware, finance ]
Nobani Co was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-06-10. Sector: Other. Country: Iran. Website: nobani.com. Nobani & Co a professional financial services firm established in 1994. The company is headquartered in Amman, Jordan, and functions as an independent member of the Praxity international alliance of accounting and advisory firms.
CAD93
May 22, 2026
•[ ransomware, manufacturing ]
CAD93 was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-05-22. Sector: Manufacturing. Country: Italy. Website: www.cad93.it. C.A.D. 93 S.r.l. is a Prato-based firm of authorized customs brokers specializing in international trade, compliance, and import/export documentation. The agency provides comprehensive consulting services from its headquarters in Italy.
Sheraton Miramar Resort El Gouna
June 2, 2026
•[ ransomware, retail ]
Sheraton Miramar Resort El Gouna was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-06-02. Sector: Hospitality. Country: Egypt. Website: www.elgouna.com/hotels/sheraton-miramar-resort-el-gouna.
hoodriversheriff.com
June 15, 2026
•[ ransomware, government ]
hoodriversheriff.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-06-15. Sector: Government & Defense. Country: United States of America. Website: hoodriversheriff.com. Headquartered in Hood River, the organization provides a broad range of services, including patrol operations, criminal investigations, emergency communications, search
musenet.co.jp
June 15, 2026
•[ ransomware, technology ]
musenet.co.jp was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-06-15. Sector: Technology. Country: Japan. Website: musenet.co.jp. Founded in the twentieth century, the company serves as an intermediary between publishers and music retailers throughout Japan. Its online
kawaius.com
June 15, 2026
•[ ransomware, manufacturing, retail ]
kawaius.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-06-15. Country: United States of America. Website: kawaius.com. Founded in Japan in 1927 by Koichi Kawai, the company has established a reputation for combining traditional Japanese craftsmanship with
hughstirling.co.uk
May 5, 2026
•[ ransomware, technology ]
hughstirling.co.uk was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Professional Services. Country: Germany. Website: hughstirling.co.uk. Headquartered in Goslar, Lower Saxony, the firm has been operating since 1975 and has expanded its presence through additional offices
glendale.edu
June 15, 2026
•[ ransomware, education, leak ]
glendale.edu was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-06-15. Sector: Education. Country: United States of America. Website: glendale.edu. Over 62 gigabytes of Glendale Community College data (304,000+ files) was compromised across PeopleSoft Campus Solutions (GCC, integrations, financial aid, and admission processing), including 150,000+ student records with names, dates of birth, and @student.glendale.edu emails, login and enrollment mapping files, new student enrollment CSVs, immunization compliance logs, admission checklist reports, financial aid batch exports, and transcript PDFs spanning September 2020 through June 2026. This is a final warning to reach out by 18 June 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 16 June 2026 | Warning: FINAL WARNING PAY OR LEAK
moody.edu
June 15, 2026
•[ ransomware, education, technology ]
moody.edu was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-06-15. Sector: Education. Country: United States of America. Website: moody.edu. Over 23 gigabytes of Moody Bible Institute data (1,300+ files, tens of millions of records) was compromised across enrollment, donor relations, payroll, and communications systems (MBI, EDC/Salesforce leads, PeopleSoft PS_COMMUNICATION, Horizon SIS, WHPD donor database, and Cadence admissions), including 46 million communication records, 2.2 million enrollment lead records, 108,000 biodemographic master files with addresses and birthdates, 3.3 gigabytes of donor gift data, employee payroll XML with home addresses and earnings, 1,100+ admissions outreach files, and student housing assignment records. This is a final warning to reach out by 18 June 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 16 June 2026 | Warning: FINAL WARNING PAY OR LEAK
smithassociatescpa.com
June 15, 2026
•[ ransomware, finance, hack ]
smithassociatescpa.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-06-15. Sector: Professional Services. Country: United States of America. Website: smithassociatescpa.com. smithassociatescpa.com
Smith and Associates is a Certified Public Accounting Firm based in Maine, offering a comprehensive range of services including accounting, auditing, tax planning, and management advisory services. The firm caters to a diverse clientele, including individuals, corporations, partnerships, and non-profits in Maine and New Hampshire. They provide specialized support for business start-ups and QuickBooks, along with professional consulting in various areas of tax and accounting practices. Established in 1987, Smith and Associates is committed to being personable, knowledgeable, and responsive to their clients' needs.
