bnpdist.com
July 27, 2026
•[ ransomware, retail, hack ]
bnpdist.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-07-27. Sector: Retail & E-Commerce. Country: United States of America. Website: bnpdist.com. Headquartered in New York City, the company has been operating since 1979 and supplies restaurants, hotels, retailers, and wine merchants
weier.org
July 27, 2026
•[ ransomware, manufacturing ]
weier.org was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-07-27. Country: Germany. Website: weier.org. The company specializes in representing manufacturers of plumbing, heating, water treatment, pumping, drainage, and building services equipment throughout western Germany.
braywoodschool.co.uk
July 27, 2026
•[ ransomware, education ]
braywoodschool.co.uk was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-07-27. Sector: Education. Country: United Kingdom of Great Britain and Northern Ireland. Website: braywoodschool.co.uk. Founded in 1858, the school has more than 165 years of educational history and serves children from early years through
hst.eu
July 27, 2026
•[ ransomware, manufacturing, technology ]
hst.eu was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-07-27. Country: Germany. Website: hst.eu. Headquartered in Kressbronn am Bodensee, Germany, the company traces its mechanical engineering heritage back to 1950, while the original tea
landesmuseum.de
July 27, 2026
•[ ransomware, education ]
landesmuseum.de was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-07-27. Sector: Education. Country: Germany. Website: landesmuseum.de. Established in 1919, the museum preserves and presents more than 50,000 years of human cultural history, ranging from prehistoric artifacts
paritaet-nrw.org
July 27, 2026
•[ ransomware, leak, healthcare ]
paritaet-nrw.org was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-07-27. Sector: Professional Services. Country: Germany. Website: paritaet-nrw.org. Headquartered in Wuppertal, the organization represents approximately 3,100 legally independent member organizations operating more than 7,000 social institutions and services
moebelmayer.de
July 27, 2026
•[ ransomware, leak, retail ]
moebelmayer.de was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-07-27. Sector: Retail & E-Commerce. Country: Germany. Website: moebelmayer.de. Founded in 1952 and headquartered in Ahrensburg, Schleswig-Holstein, the family-owned company has more than seventy years of experience serving customers
zinorm.de
July 27, 2026
•[ ransomware, manufacturing, leak ]
zinorm.de was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-07-27. Country: Germany. Website: zinorm.de. Founded in 1952 and headquartered in Ahrensburg, Schleswig-Holstein, the family-owned company has more than seventy years of experience serving customers
JD Young
July 27, 2026
•[ ransomware, finance, technology ]
JD Young was listed as a victim on the leak site of the termite ransomware group; the attack is estimated to have taken place on 2026-07-27. Country: China. Website: www.jdyoung.com. JD Young helps financial institutions simplify workflow processes, automate the flow of information, adhere to compliance and determine suitable document hardware for multiple locations. The company's document solutions include electronic document management, lock box, hardware fleet management, SaaS (software as a service), multi-function hardware, printing services and more.
Prelys Courtage
July 28, 2026
•[ ransomware, finance ]
Prelys Courtage was listed as a victim on the leak site of the anubis ransomware group; the attack is estimated to have taken place on 2026-07-28. Sector: Financial Services. Country: France. Website: prelys-courtage.com. Client data breach at a major mortgage brokerage franchise.
foundationstofreedom.org
July 28, 2026
•[ ransomware, healthcare ]
foundationstofreedom.org was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-07-28. Sector: Other. Country: United States of America. Website: foundationstofreedom.org. Foundations to Freedom is a US-registered 501(c)(3) non-profit organization that provides recovery housing, social adaptation programs, and comprehensive therapeutic support for individuals overcoming alcohol and substance abuse, as well as survivors of domestic violence.The organization is dedicated to offering a safe, structured environment for individuals to rebuild their lives from the ground up and maintain long-term sobriety. It is headquartered in DeLand, Florida, USA
DUCON
July 28, 2026
•[ ransomware, manufacturing, financial ]
DUCON was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-07-28. Sector: Manufacturing. Country: Colombia. Website: ducon.com.co. Unauthorized access has been gained to the company's confidential files, including client data, proprietary R&D, and financial documentation.
minigrip.com.mx
July 28, 2026
•[ ransomware, manufacturing, financial ]
minigrip.com.mx was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-07-28. Sector: Manufacturing. Country: Mexico. Website: minigrip.com.mx. Unauthorized access has been gained to the company's confidential files, including client data, proprietary R&D, and financial documentation.
Affinia Healthcare
July 28, 2026
•[ ransomware, healthcare ]
Affinia Healthcare was listed as a victim on the leak site of the termite ransomware group; the attack is estimated to have taken place on 2026-07-28. Sector: Healthcare. Country: United States of America. Website: affiniahealthcare.org. Affinia Healthcare is dedicated to providing high-quality medical care and exceptional services across multiple locations in the St. Louis area. They offer a comprehensive range of health services including primary care, dental, behavioral health, and specialized programs for all family members, particularly focusing on underprivileged communities.
Gran valle negocios
July 28, 2026
•[ ransomware ]
Gran valle negocios was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-07-28. Sector: Other. Country: Argentina. Website: www.granvallenegocios.com.ar.
Della Casa Group AG
July 28, 2026
•[ ransomware, leak, financial ]
Della Casa Group AG was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-07-28. Sector: Other. Country: Switzerland. Website: dellacasa.group. 041 785 61 31 / 041 785 61 46 / info@dellacasa.group
041 785 61 36 / s.pajaziti@dellacasa.group
041 785 61 30 / gdc@dellacasa.group
041 785 61 33 / a.stirnimann@dellacasa.group
041 785 61 43 / a.marku@dellacasa.group
041 785 61 42 / d.meier@dellacasa.group
***************************************************
(240,391,913,425 bytes)
86,332 Files, / 15,359 Folders
Personal / Client Information
Accounting / Finance
Details of current and future projects
Other
Incredible Technologies
July 28, 2026
•[ ransomware, technology ]
Incredible Technologies was listed as a victim on the leak site of the Booba Project ransomware group; the attack is estimated to have taken place on 2026-07-28. Sector: Technology. Country: United States of America. Website: www.itsgames.com. Entertainment Providers Stolen data: 25 GB
https://eclmn.com/
July 28, 2026
•[ ransomware, healthcare ]
https://eclmn.com/ was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-07-28. Sector: Healthcare. Country: United States of America. Website: eclmn.com. A family-run health and residential care organization in Minnesota. They provide adapted housing, professional in-home support, and daily living solutions for adults with physical disabilities and limited mobility
Franz Krause artworksgroup
July 28, 2026
•[ ransomware, financial, technology ]
Franz Krause artworksgroup was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-07-28. Sector: Other. Country: United States of America. Franz Krause artworksgroup is a streamlined agency that leverages extensive experience in media
and event management to deliver high-quality services while maintaining budget efficiency. The
company emphasizes strong relationships and a commitment to client satisfaction.
We will upload 81gb of corporate data soon. Employee information, detailed client information,
financials, contracts and agreements, NDAs, confidential files, etc.
Oklahoma Manufacturing Alliance
July 28, 2026
•[ ransomware, manufacturing ]
Oklahoma Manufacturing Alliance was listed as a victim on the leak site of the Booba Project ransomware group; the attack is estimated to have taken place on 2026-07-28. Sector: Manufacturing. Country: United States of America. Website: www.okalliance.com. Business Consulting and Services Stolen data: 10 GB.