Pyramid Analytics B.V.
July 30, 2026
•[ ransomware, technology, retail ]
Pyramid Analytics B.V. was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-07-30. Sector: Technology. Country: Netherlands. [analytics] Pyramid Analytics B.V. a decision-intelligence platform company headquartered in Amsterdam, acquired by ServiceNow (NYSE: NOW) for hundreds of millions of dollars just four months earlier.
We obtained the complete source code of the Pyramid Decision Intelligence Platform along with:
10+ copies of the platform source code with full Git history, revealing every feature, algorithm, security module, and AI integration ever built.
22 GB of SQL Server production database backups likely containing user accounts, credentials, and business data.
Customer data from publicly traded companies Shufersal (TASE: SAE) retail sales data and ABB (NYSE: ABB) OLAP cube backups.
Evosys Laser GmbH
July 30, 2026
•[ ransomware, manufacturing, technology ]
Evosys Laser GmbH was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-07-30. Sector: Manufacturing. Country: Germany. [manufacturer] Evosys Laser GmbH an Erlangen-based industrial laser welding systems manufacturer with ~130 employees, subsidiaries in the US, China, and a string of Tier 1 automotive customers.
The dataset is the complete corporate repository, spanning every business function:
130 employees' complete HR files employment contracts, salary histories, bank IBANs, tax IDs, social insurance numbers, pension records, medical examinations, disciplinary warnings, and two confirmed minors' health records.
Complete server infrastructure map via mRemoteNG XML 7 servers named, domain admin credentials, internal IPs. The Citrix admin password is Password1.
326 GB of customer project data laser welding process parameters, CAD files, robot control software, and the award-winning AQW process know-how.
Complete financial history Jahresabschlsse (20152025), P&L forecasts through 2028, cash positions, investor documents, executive compensation.
Attorney-client privileged communications (230 MB) and whistleblower reports under HinSchG.
Industrial control data robot SRS source code, PLC programs, nginx private keys for laser system web interfaces, VPN configurations for customer site remote access.
Van Eijck International Car Rescue
July 30, 2026
•[ ransomware, transportation ]
Van Eijck International Car Rescue was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-07-30. Sector: Transportation. Country: Netherlands. [recovery, rescue] Van Eijck International Car Rescue B.V. a family-owned Dutch towing and recovery company with 225+ vehicles, 180+ employees, and 20 branch offices across the Netherlands and Spain.
The exposed material includes:
227 employee home directories (156 GB) containing personal documents, tax forms (loonheffingen), salary records, photos, and financial data.
12 GB of RentRunner customer rental contracts with copies of identity documents, driving licenses, and vehicle registrations.
10 years of customer claims data (20102019) 500+ individual claims with damage assessments, insurance details, and customer PII.
Complete Google Workspace backup (CubeBackup) Gmail, Drive, and Calendar for 18 user accounts and 206 groups.
Indian Motos Inmot
July 30, 2026
•[ ransomware, manufacturing ]
Indian Motos Inmot was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-07-30. Sector: Manufacturing. Country: Ecuador. Website: www.inmot.com.ec.
Orimar
July 30, 2026
•[ ransomware ]
Orimar was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-07-30. Sector: Other. Country: Belgium. Website: www.orimar.be.
servitelco
July 30, 2026
•[ ransomware, technology ]
servitelco was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-07-30. Sector: Technology. Country: Chile. Website: www.servitelco.com.
Adpo
July 30, 2026
•[ ransomware, manufacturing ]
Adpo was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-07-30. Sector: Transportation. Country: Belgium. Website: www.adpo.com.
Siam Stabilizers and Chemicals Co., Ltd. / SSC
July 30, 2026
•[ ransomware, manufacturing ]
Siam Stabilizers and Chemicals Co., Ltd. / SSC was listed as a victim on the leak site of the gunra ransomware group; the attack is estimated to have taken place on 2026-07-30. Sector: Manufacturing. Country: Thailand. Website: sakai-ssc.com. Sector: chemical additives and heat stabilizer | Revenue: US$ 20,000,000
Warwick Fabrics
July 14, 2026
•[ ransomware, manufacturing ]
Warwick Fabrics was listed as a victim on the leak site of the kairos ransomware group; the attack is estimated to have taken place on 2026-07-14. Sector: Manufacturing. Country: New Zealand. Website: warwick.com.nz. As one of the worlds leading textile and soft furnishing wholesalers, Warwick is a family-owned company that has been committed to providing quality materials to New Zealanders since 1985.
Warwick are driven to continuously meet the evolving needs of todays global textile markets by constantly creating and updating collections with the latest trends and classic designs, pushing boundaries, and creating quality products that inspire creativity in the interior design world. We are passionate on being innovative and are committed to our promise of exceptional quality and service, now and into the future.
Affinity Capital
July 30, 2026
•[ ransomware, finance ]
Affinity Capital was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-07-30. Sector: Financial Services. Country: United States of America. Website: www.affinitycorp.net.
Excel Consultores
July 30, 2026
•[ ransomware, technology ]
Excel Consultores was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-07-30. Sector: Professional Services. Country: Mexico. Website: www.excel.com.mx.
Prenisac
July 30, 2026
•[ ransomware, manufacturing ]
Prenisac was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-07-30. Country: United States of America. Website: www.prenisac.com.
Byonyks
July 30, 2026
•[ ransomware, technology ]
Byonyks was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-07-30. Sector: Technology. Country: United States of America. Website: www.byonyks.com.
Rondout Electric
July 30, 2026
•[ ransomware, energy, healthcare ]
Rondout Electric was listed as a victim on the leak site of the cmdorganization ransomware group; the attack is estimated to have taken place on 2026-07-30. Sector: Energy & Utilities. Country: United States of America. Website: www.rondoutelectric.net. Rondout Electric Inc. is a leading electrical contracting company with over 50 years of experience, specializing in a wide range of projects including health care facilities, schools, industrial complexes, and public sector projects. With a dedicated team of approximately 100 employees, they are known for their disciplined approach to ensuring projects are completed safely, on time, and within budget. The company has built long-standing relationships with clients who appreciate their commitment to integrity and customer satisfaction. Based in Highland, NY, Rondout Electric serves clients across the eastern part of New York State.
TenSparrows
July 30, 2026
•[ ransomware, technology ]
TenSparrows was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-07-30. Country: United States of America. Website: www.tensparrows.com.
sslf.local
July 30, 2026
•[ ransomware, healthcare, finance ]
sslf.local was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-07-30. Country: United States of America. Website: sslf.local. Samuels & Thornton is a law firm based in New Orleans, specializing in medical malpractice and personal injury cases. They provide personalized legal guidance to individuals, families, and businesses facing legal challenges, ensuring that each client receives dedicated attention from experienced attorneys. Their practice areas include medical malpractice, product liability, auto accident litigation, and more. The firm is committed to delivering proven results and effective representation throughout Louisiana.
Sonitor Technologies
July 7, 2026
•[ ransomware, healthcare, technology ]
Sonitor Technologies was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-07-07. Sector: Healthcare. Country: United States of America. Website: sonitor.com. Sonitors platform and technologies deliver the accurate and reliable data required to optimize care delivery
MAG USA Inc
July 30, 2026
•[ ransomware, manufacturing, leak ]
MAG USA Inc was listed as a victim on the leak site of the securotrop ransomware group; the attack is estimated to have taken place on 2026-07-30. Sector: Manufacturing. Country: United States of America. Website: www.magusainc.com. Status: AWAITING
Size: 1871 GB
AguAseo
July 30, 2026
•[ ransomware, energy ]
AguAseo was listed as a victim on the leak site of the Gammax ransomware group; the attack is estimated to have taken place on 2026-07-30. Sector: Energy & Utilities. Country: Colombia. Website: www.aguaseo.com. AguAseo is a Panamanian organization dedicated to maintaining cleanliness in the province of Coln. It provides solid waste collection and cleaning of...
RE/MAX 1st Choice
July 3, 2026
•[ ransomware, retail ]
RE/MAX 1st Choice was listed as a victim on the leak site of the Gammax ransomware group; the attack is estimated to have taken place on 2026-07-03. Sector: Retail & E-Commerce. Country: Canada. Website: www.remax-1stchoice.com. RE/MAX 1st Choice Florida was established in 2005 and is managed by Katy and John Martinelli, who serve as the owners and operators and hold the compa...
