Spratley's
June 4, 2026
•[ ransomware, retail ]
Spratley's was listed as a victim on the leak site of the PrinzEugen ransomware group; the attack is estimated to have taken place on 2026-06-04. Sector: Retail & E-Commerce. Hundreds of GBs of data encrypted across company file shares.
If you would like the decryption key you just need to ask.
nottingham.ac.uk
June 9, 2026
•[ ransomware, leak, education ]
nottingham.ac.uk was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-06-09. Sector: Education. Country: United Kingdom of Great Britain and Northern Ireland. Website: nottingham.ac.uk. Over 40 GB of billing and payment records, credit card and payment details, student finance data, and campus portal exports from the University of Nottingham and its Malaysia and China campuses was compromised, including payer contact information, transaction amounts, IP addresses, full names, home addresses, postcodes, email addresses, phone numbers, dates of birth, and other internal campus data. | Size: 19GB+ (compressed) | Updated: 10 June 2026 | SHA256: d3aaaf06dd857deec3866072cc2876780623d880992e8d735094db4779535873
Spratley's of Mortimer
June 4, 2026
•[ ransomware, retail ]
Spratley's of Mortimer was listed as a victim on the leak site of the PrinzEugen ransomware group; the attack is estimated to have taken place on 2026-06-04. Sector: Retail & E-Commerce. spratleys.co.uk
Hundreds of GBs of data encrypted across company file shares, If you would like the decryption key you just need to ask.
Mid-Cumberland Human Resource Agency
May 18, 2026
•[ ransomware, healthcare, government ]
Mid-Cumberland Human Resource Agency was listed as a victim on the leak site of the insomnia ransomware group; the attack is estimated to have taken place on 2026-05-18. Sector: Professional Services. Country: United States of America. Website: www.mchra.com. MCHRA is a nonprofit promoting self-sufficiency via Meals-on-Wheels, public transit, in-home services, and community corrections. It serves adults needing care, transit users, and long-term care residents, emphasizing inclusivity and translation services.
Cal Fresh
June 8, 2026
•[ ransomware, leak ]
Cal Fresh was listed as a victim on the leak site of the termite ransomware group; the attack is estimated to have taken place on 2026-06-08. Sector: Agriculture and Food Production. Country: Canada. Website: calfresh.ca.gov. The California Association of Food Banks (CAFB) is committed to ending hunger in California and aims to provide clear, up-to-date information about CalFresh for people who are interested in applying. Since 2003, CAFB has partnered with food banks and other community-based organizations throughout the state to educate consumers about CalFresh and provide application assistance.
Lösing Filtertechnik
May 13, 2026
•[ ransomware, leak, manufacturing ]
Lsing Filtertechnik was listed as a victim on the leak site of the spacebears ransomware group; the attack is estimated to have taken place on 2026-05-13. Sector: Manufacturing. Country: Germany. Website: loesing-filter.de. Lsing Filtertechnik (Willibrord Lsing Filtertechnik e.K.) is a leading German specialist in filtration technology with more than 70 years of experience since its founding in 1955.The company offers a wide range of high-quality filters, including oil, air, fuel, hydraulic, and water filtration solutions, along with custom-tailored products for various industries such as automotive, commercial vehicles, construction machinery, rail transport, and more.Known for its expertise with brands like SEPAR and a strong focus on innovation, Lsing develops individual solutions precisely matched to customer requirements while maintaining top quality and reliable service.Headquartered in Hattingen, Germany, the company serves both B2B clients and private customers through its online shop, emphasizing perfect filtration for every challenge. https://***.de/
Global Schools Foundation
June 10, 2026
•[ ransomware, education ]
Global Schools Foundation was listed as a victim on the leak site of the fulcrumsec ransomware group; the attack is estimated to have taken place on 2026-06-10. Sector: Education. Country: Singapore. [AI generated] Global Schools Foundation is a Singapore-based non-profit organization operating in the international education sector. It manages a network of private schools across Asia and the Middle East under brands such as Global Indian International School. The foundation focuses on providing quality education with an Indian curriculum framework to students from diverse nationalities, emphasizing holistic development and academic excellence across multiple campuses worldwide.
Sayre Associates
June 10, 2026
•[ ransomware, leak, technology ]
Sayre Associates was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-06-10. Sector: Professional Services. Country: United States of America. Website: sayreassociates.com. (Including clients, projects, emails and financial documents) Sayre Associates, Inc. is a civil engineering and land surveying firm based in Sioux Falls, South Dakota, established in 1969. The company offers a range of services including land development planning, parks and recreation facilities design, drainage and erosion control, and construction administration. They focus on delivering high-quality solutions through collaboration and innovation, serving clients in South Dakota, Iowa, and Minnesota. Their talented team of engineers and surveyors is dedicated to improving community efficiency and quality of life.
Alpha IT
June 4, 2026
•[ ransomware, technology ]
Alpha IT was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-06-04. Sector: Technology. Country: Norway. Website: alphait.no.
National Health Fund
June 2, 2026
•[ ransomware, healthcare ]
National Health Fund was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-06-02. Sector: Healthcare. Country: Jamaica. Website: nhf.org.jm. [AI generated] N/A
The name "National Health Fund" is generic and used by multiple organizations across different countries. Without more specific context such as country of origin or additional identifiers, I cannot reliably attribute this name to a single, verifiable entity and provide accurate threat intelligence information.
Bayou Electrical Services
June 4, 2026
•[ ransomware, energy ]
Bayou Electrical Services was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-06-04. Sector: Energy & Utilities. Country: United States of America. Website: bayouelectrical.com.
K & E Distributing
June 4, 2026
•[ ransomware, leak ]
K & E Distributing was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-06-04. Sector: Transportation. Country: United States of America. Website: kedistributing.com.
HDFC FUND
June 10, 2026
•[ ransomware, finance ]
HDFC FUND was listed as a victim on the leak site of the morpheus ransomware group; the attack is estimated to have taken place on 2026-06-10. Sector: Financial Services. Country: India. **Website**: hdfcfund.com
**Revenue**: $427.8 Million
HDFC Asset Management Company Limited (HDFC AMC) is a leading publicly traded investment manager in India, operating as the asset management arm
Centra Sota Cooperative
June 10, 2026
•[ ransomware, leak ]
Centra Sota Cooperative was listed as a victim on the leak site of the worldleaks ransomware group; the attack is estimated to have taken place on 2026-06-10. Sector: Agriculture and Food Production. Country: United States of America. Website: www.centrasota.com. [AI generated] Centra Sota Cooperative is an agricultural cooperative based in the United States, primarily serving farmers in Minnesota. It provides grain marketing, agronomy services, energy products, and feed solutions to its members. The cooperative supports local producers with crop inputs, precision agriculture services, and fuel supply, operating within the broader agricultural and farm services industry typical of Midwest cooperative structures.
First Federal Savings & Loan
April 29, 2026
•[ ransomware, finance ]
First Federal Savings & Loan was listed as a victim on the leak site of the worldleaks ransomware group; the attack is estimated to have taken place on 2026-04-29. Sector: Financial Services. Country: United States of America. Website: www.firstwithus.com. [AI generated] First Federal Savings & Loan is a community-based financial institution operating in the United States. It provides traditional banking services including savings and checking accounts, mortgage loans, personal loans, and related financial products. Operating within the retail banking and thrift industry, it primarily serves individual consumers and local communities, functioning under federal or state regulatory oversight typical of American savings institutions.
Tata Electronics
May 24, 2026
•[ ransomware, manufacturing, technology ]
Tata Electronics was listed as a victim on the leak site of the worldleaks ransomware group; the attack is estimated to have taken place on 2026-05-24. Sector: Manufacturing. Country: India. Website: www.tataelectronics.com. [AI generated] Tata Electronics is an Indian manufacturing company and a subsidiary of the Tata Group. It operates in the electronics manufacturing and precision engineering industry, producing components for consumer electronics, including iPhone parts for Apple. The company has facilities across India and plays a significant role in advancing the country's domestic electronics manufacturing capabilities and supply chain.
Associated Investor Services
June 10, 2026
•[ ransomware, finance ]
Associated Investor Services was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-06-10. Sector: Financial Services. Associated Financial Consultants & Investor Services is an independent boutique firm dedicated
to creating, growing, and protecting wealth since 1972. They offer a range of services includin
g wealth management, life planning, retirement planning, and insurance for families and individ
uals, as well as customized retirement and employee benefit plans for businesses.
We will upload 77gb of corporate data soon. Employee personal information (passports, DLs, SSNs
and so on), financials, confidential legal documents, client and partners information, NDAs, e
tc.
The Midland Theatre
June 10, 2026
•[ ransomware, leak, financial ]
The Midland Theatre was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-06-10. Sector: Hospitality. Country: United Kingdom of Great Britain and Northern Ireland. The Midland Theatre originally opened in December of 1928 in Newark, Ohio. The theatre draws te
ns of thousands of visitors each year to a wide array of programming from family-friendly event
s and holiday specials to top artists in every genre.
We will upload corporate data soon. Employee personal information (w-9 forms and other docs), f
inancials, credit cards, client, partners and guests information, NDAs, etc.
FIZA
June 10, 2026
•[ ransomware, leak, financial ]
FIZA was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-06-10. Sector: Manufacturing. Country: Czechia. FIZA, a.s. is an established, medium-sized auditing and consulting company with a good capital base enabling its further development.
Its roots go back to the very beginning of the 1990s, when it provided its services in the form of its legal predecessor, the association of individuals Ing. Ji Ficbauer, civilingenjr. FIZA.
The current joint-stock company was established in 2001.
We specialize in auditing, economic-organizational and tax consulting.
We approach every job and every client carefully and responsibly. We want to become your long-term and trustworthy partner.
We will be happy to accommodate you even in the case of one-off cooperation.
Laek: 100GB
WE HAS COLLECTED SUCH DATA AS:
- Confidential documents
- Clients Data
- NDA
- Financial data
- Operations
- Corporate data
- Business Agreements
- Development
- Financial databases, all transactions, all clients
And a lot of other VERY IMPORTANT information!
Cattani
May 18, 2026
•[ ransomware, leak, manufacturing ]
Cattani was listed as a victim on the leak site of the spacebears ransomware group; the attack is estimated to have taken place on 2026-05-18. Sector: Manufacturing. Country: Italy. Website: www.cattani.it/en. Established in 1967, Cattani S.p.A. is now a leader in the dental field, exporting its range of products to all continents. After becoming a publicly limited company in 1981,Cattani S.p.A. founded the division Esam in 1984, extending the groups business activities into the industrial field. In 2003 Cattani S.p.A. launched Magnolia,a chemical company specialising in the production of detergent disinfectant products for surgery instruments and, in particular, dental aspiration systems.The Cattani group designed and manufactured one of the scientific components in the famous NASA space shuttle. Due to our reputation for reliability,Ferrari Engineering (supplier of the European Space Agency) chose us as one of its prestigious suppliers for the production of a 180 gram compressor,which reached a pressure of 38 bar. The group has also taken part in the Eurostar project, the pride of the Italian railway system, producing the trains pressurization system.-Personal information of employees and clients -Financial documents- 200 000 + other files https://www.***.it/en/
