Full List

Search

Search Results (Ransomware)

• Carrier AB July 25, 2026 • [ ransomware, manufacturing ] Carrier AB was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-07-25. Sector: Manufacturing. Country: Sweden. Website: carrier.se. Carrier Transport AB a Swedish transport and logistics company headquartered in Jordbro near Stockholm.
• KeNHA July 25, 2026 • [ ransomware, government ] KeNHA was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-07-25. Sector: Government & Defense. Country: Kenya. Website: kenha.co.ke. The Kenya National Highways Authority (KeNHA) agency responsible for the construction, management, and maintenance of national highways (classes S, A, and B) in Kenya.
• KEMEK July 25, 2026 • [ ransomware, manufacturing, technology ] KEMEK was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-07-25. Sector: Manufacturing. Website: www.kemek.eu. KEMEK Engineering a leading technology and automation company in the Baltics The company was founded in 1995 and develops customized solutions for industrial companies.
• HİDROMEK June 30, 2026 • [ ransomware, manufacturing, leak ] HDROMEK was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-06-30. Sector: Manufacturing. Country: Turkey. Website: www.hidromek.com. HDROMEK is a leading Turkish manufacturer of heavy construction machinery recognized globally for its high-performance award-winning heavy equipment. Founded in Ankara in 1978 by mechanical engineer Hasan Basri Bozkurt the company operates six state-of-the-art production facilities across Turkey and Thailand. Its heavy machinery operates in more than 130 countries spanning six continents. Over 880 gigabytes of sensitive internal data were stolen from this company
• Advanced Marketing July 24, 2026 • [ ransomware, retail ] Advanced Marketing was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-07-24. Sector: Professional Services. Country: Mexico. Website: advmkt.com.mx. advmkt.com.mx zoominfo.com/c/advanced-marketing/546978407 Advanced Marketing is one of Mexico's largest book distribution and publishing companies, founded in 1994. It partners with around 70 national and international publishing houses to supply major retail chains like Gandhi and Porra. Additionally, it operates "AMS Libros," an online store selling a wide variety of children's, art, culture, and health books.
• healthlawadvocates.org July 25, 2026 • [ ransomware, healthcare, leak ] healthlawadvocates.org was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-07-25. Sector: Professional Services. Country: United States of America. Website: healthlawadvocates.org. Health Law Advocates (HLA), an American non-profit, public interest law firm based in Boston, Massachusetts. Founded in 1996, HLA provides free (pro bono) legal representation to low-income residents and vulnerable populations who face barriers to accessing or paying for healthcare.
• Power Moendas July 25, 2026 • [ ransomware, manufacturing, energy ] Power Moendas was listed as a victim on the leak site of the arcusmedia ransomware group; the attack is estimated to have taken place on 2026-07-25. Sector: Other. Country: Brazil. Website: powermoendas.com.br. Based in the sugar-energy industrial hub, in the city of Sertozinho/SP, Power Empral has Deadline: 2026-08-01 21:06:00.000000
• Brazer Ingenierie July 25, 2026 • [ ransomware, manufacturing, technology ] Brazer Ingenierie was listed as a victim on the leak site of the arcusmedia ransomware group; the attack is estimated to have taken place on 2026-07-25. Sector: Manufacturing. Country: Morocco. Website: brazeringenierie.com. Brazer Ingnierie is a professional integrator specializing in IT and telecommunications s Deadline: 2026-08-01 21:06:00.000000
• UK Department for Education July 26, 2026 • [ ransomware, government, education ] UK Department for Education was listed as a victim on the leak site of the ExfilSquad ransomware group; the attack is estimated to have taken place on 2026-07-26. Sector: Government & Defense. Country: United Kingdom of Great Britain and Northern Ireland. Website: education.gov.uk. DATA SUMMARY: Help Portal (~600K records) Parent and staff contact records containing full names, email addresses, phone numbers, and job titles. Turing Portal (~7K records) Contact records containing full names, email addresses, phone numbers, and job titles.
• Police National Legal Database July 26, 2026 • [ ransomware, government ] Police National Legal Database was listed as a victim on the leak site of the ExfilSquad ransomware group; the attack is estimated to have taken place on 2026-07-26. Sector: Government & Defense. Country: United Kingdom of Great Britain and Northern Ireland. DATA SUMMARY: 135k law enforcement contact records with first/last name, email, police force area, etc.
• Microsoft July 26, 2026 • [ ransomware, technology, leak ] Microsoft was listed as a victim on the leak site of the ExfilSquad ransomware group; the attack is estimated to have taken place on 2026-07-26. Sector: Technology. Country: United States of America. Website: microsoft.com. Revenue: $318B DATA SUMMARY: 8M~ records containing: significant PII, employee and customer contact information, authentication data, password hashes, portal identities, corporate account information, business leads, facilities management records, internal service tickets, and access permissions.
• Allstate July 26, 2026 • [ ransomware, finance, leak ] Allstate was listed as a victim on the leak site of the ExfilSquad ransomware group; the attack is estimated to have taken place on 2026-07-26. Sector: Financial Services. Country: United States of America. Website: allstate.com. Revenue: $67B DATA SUMMARY: 657K~ records containing: significant PII, recruitment and licensing information, onboarding data, and internal employee account information.
• TaylorMade & Sun Day Red golf July 26, 2026 • [ ransomware, leak, retail ] TaylorMade & Sun Day Red golf was listed as a victim on the leak site of the ExfilSquad ransomware group; the attack is estimated to have taken place on 2026-07-26. Sector: Retail & E-Commerce. Country: United States of America. Website: taylormadegolf.com. Revenue: $1.5B DATA SUMMARY: 2M~ records containing: significant PII, customer support history, orders, shipping information, business account data, financial/account information, internal notes, attachments, and AI support chat transcripts.
• Frontier Airlines July 26, 2026 • [ ransomware, technology ] Frontier Airlines was listed as a victim on the leak site of the ExfilSquad ransomware group; the attack is estimated to have taken place on 2026-07-26. Sector: Transportation. Country: United States of America. Website: flyfrontier.com. Revenue: $1.5B DATA SUMMARY: 2.4M~ records containing: significant PII, customer support cases, flight and travel information, complaint records, baggage details, and customer support email communications.
• Zenith Bank Plc July 26, 2026 • [ ransomware, finance, leak ] Zenith Bank Plc was listed as a victim on the leak site of the ExfilSquad ransomware group; the attack is estimated to have taken place on 2026-07-26. Sector: Financial Services. Country: Nigeria. Website: zenithbank.com. Revenue: 2.3T DATA SUMMARY: 90M~ records containing: extensive PII, banking relationships, account information, financial data, government identifiers, customer contact information, and banking support cases.
• District of Columbia Public Schools July 26, 2026 • [ ransomware, education, government ] District of Columbia Public Schools was listed as a victim on the leak site of the ExfilSquad ransomware group; the attack is estimated to have taken place on 2026-07-26. Sector: Education. Country: United States of America. Website: dcps.dc.gov. [AI generated] District of Columbia Public Schools (DCPS) is a public school district serving Washington, D.C., USA. It operates as the primary government-run K-12 educational system for the nation's capital, overseeing dozens of schools, thousands of students, and a large workforce of educators and administrators. DCPS falls under the education sector and is governed by the D.C. government, focusing on curriculum development, student achievement, and community engagement.
• Newcastle University July 26, 2026 • [ ransomware, education ] Newcastle University was listed as a victim on the leak site of the ExfilSquad ransomware group; the attack is estimated to have taken place on 2026-07-26. Sector: Education. Country: United Kingdom of Great Britain and Northern Ireland. Website: ncl.ac.uk. DATA SUMMARY: 440K~ records containing: applicant and student contact information, significant PII, and admissions data.
• City of Houston July 26, 2026 • [ ransomware, government ] City of Houston was listed as a victim on the leak site of the ExfilSquad ransomware group; the attack is estimated to have taken place on 2026-07-26. Sector: Government & Defense. Country: United States of America. Website: houstontx.gov. DATA SUMMARY: 6M~ records containing: significant PII, resident contact details, service requests, complaint descriptions, addresses, location data, case/ticket metadata, department routing, service status, resolution information, and extensive CRM metadata.
• City of Atlanta July 26, 2026 • [ ransomware, government ] City of Atlanta was listed as a victim on the leak site of the ExfilSquad ransomware group; the attack is estimated to have taken place on 2026-07-26. Sector: Government & Defense. Country: United States of America. Website: atlantaga.gov. DATA SUMMARY: 3M~ records containing: significant PII, citizen service requests, addresses, municipal case history, and internal case management data.
• Bonava July 26, 2026 • [ ransomware, manufacturing ] Bonava was listed as a victim on the leak site of the ExfilSquad ransomware group; the attack is estimated to have taken place on 2026-07-26. Sector: Manufacturing. Country: Sweden. Website: bonava.se. Revenue: SEK 8B DATA SUMMARY: 842K~ records containing: significant PII, property ownership/interests, warranty and repair cases, contractor information, marketing preferences, and customer service history.