cenesco.de
June 6, 2026
•[ ransomware, technology ]
cenesco.de was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-06-06. Sector: Other. Country: Germany. Website: cenesco.de. Founded in 1998, the company provides comprehensive information technology solutions for small and medium-sized enterprises (SMEs), helping organizations modernize their
industriesjaro.com
July 20, 2026
•[ ransomware, manufacturing ]
industriesjaro.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-07-20. Sector: Manufacturing. Country: Canada. Website: industriesjaro.com. Over several decades, Jaro has evolved from manufacturing telephone booths into a supplier of advanced outdoor enclosures, interactive kiosks, bus
stroebel-gruppe.de
July 20, 2026
•[ ransomware, manufacturing ]
stroebel-gruppe.de was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-07-20. Sector: Manufacturing. Country: Germany. Website: stroebel-gruppe.de. Headquartered in Langenzenn, Bavaria, the company was founded in 1978 by Gerlinde and Gerhard Strbel and has grown from a
timetex.de
June 7, 2026
•[ ransomware, retail ]
timetex.de was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-06-07. Sector: Professional Services. Country: Germany. Website: timetex.de. The company traces its origins to 1991, when the TimeTEX brand was acquired and expanded into a comprehensive supplier of
lbb-treuhand.de
July 20, 2026
•[ ransomware, finance ]
lbb-treuhand.de was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-07-20. Sector: Professional Services. Country: Germany. Website: lbb-treuhand.de. The company specializes in tax consulting, auditing, accounting, payroll administration, financial reporting, and business advisory services for private individuals, self-employed
Anpra SAS
July 21, 2026
•[ ransomware, financial, automotive ]
Anpra SAS was listed as a victim on the leak site of the spacebears ransomware group; the attack is estimated to have taken place on 2026-07-21. Sector: Professional Services. Country: Colombia. Website: anpra.co. With over a decade of experience in the auto parts sector, Anpra SAS has established a solid reputation for importing anddistributing quality products. We are dedicated to supporting the growth and efficiency of wholesale businesses in Colombia,focusing on mechanical components for European and Japanese commercial vehicles.-Personal information of employees and clients -Financial documents -Other files https://***.co/
DoAllTech
July 21, 2026
•[ ransomware, technology, financial ]
DoAllTech was listed as a victim on the leak site of the spacebears ransomware group; the attack is estimated to have taken place on 2026-07-21. Sector: Technology. Country: South Korea. Website: doalltech.com. The Company is leading the construction IT industry with the best technology and various experiences, and striving to grow with avarious customers in pursuit of technology platform change and innovation through persistent research and development in introduction ofWeb Services, H/W Services, BIM Services, and new technologies.-Personal information of employees and clients -Financial documents -Other files https://***.com/en/
PinnPACK
July 21, 2026
•[ ransomware, manufacturing ]
PinnPACK was listed as a victim on the leak site of the worldleaks ransomware group; the attack is estimated to have taken place on 2026-07-21. Sector: Manufacturing. Country: United States of America. Website: pinnpack.com.
St. Francis Xavier Catholic School System
July 21, 2026
•[ ransomware, leak, education ]
St. Francis Xavier Catholic School System was listed as a victim on the leak site of the worldleaks ransomware group; the attack is estimated to have taken place on 2026-07-21. Sector: Education. Country: United States of America. Website: xaviercatholicschools.org. [AI generated] St. Francis Xavier Catholic School System is a private religious educational organization operating in the United States. It provides Catholic-based primary and secondary education, integrating faith formation with academic instruction. Operating under the Roman Catholic Church's educational mission, it serves students across multiple grade levels, emphasizing values-based learning, community involvement, and spiritual development alongside standard curriculum requirements.
Kyowa Singapore Pte Ltd
July 21, 2026
•[ ransomware, technology, manufacturing ]
Kyowa Singapore Pte Ltd was listed as a victim on the leak site of the morpheus ransomware group; the attack is estimated to have taken place on 2026-07-21. Sector: Professional Services. Country: Singapore. Website: kyowasingapore.com. **Website**: kyowasingapore.com
**Revenue**: $15 Million
Founded in 1979 and headquartered at Benoi Road, Singapore, they primarily supply global consumer electronics, grooming, and automotive indus
Finer & Finer
July 21, 2026
•[ ransomware, finance, leak ]
Finer & Finer was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-07-21. Sector: Retail & E-Commerce. Country: United States of America. Finer & Finer CPA is a leading accounting firm based in Randolph, MA, offering a wide range of
services including tax preparation, personal financial planning, and business accounting. They
cater to business owners, executives, and independent professionals, providing personalized and
professional attention to each client.
We will upload 50gb corporate data soon. Employee information (personal docs and health informa
tion, tests and so on), contracts, client information and other internal information.
Novasport s.r.o.
July 21, 2026
•[ ransomware, retail, manufacturing ]
Novasport s.r.o. was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-07-21. Sector: Retail & E-Commerce. Country: Czechia. Novasport spol. s r.o. We are a global manufacturer of LEKI brand ski, hiking, and Nordic walki
ng poles. Novasport was founded in 1992 by Klaus Lenhart, the owner of the LEKI brand. LEKI has
a long history of collaborating with the worlds top athletes.
We will upload 17gb corporate data soon. Detailed employee information (passports and other inf
ormation), projects, contracts, financials, clients information and so on.
Koperasi Karyawan PT Aplikanusa Lintasarta
July 21, 2026
•[ ransomware, technology ]
Koperasi Karyawan PT Aplikanusa Lintasarta was listed as a victim on the leak site of the nova ransomware group; the attack is estimated to have taken place on 2026-07-21. Sector: Technology. Country: Indonesia. Kopkarla.org is the website of KOPKARLA (Koperasi Karyawan PT Aplikanusa Lintasarta), an Indonesian employee cooperative that provides savings, loans, telecommunications engineering, network installation, and related business services for its members and customers - Nova Provide Tree and samples and proofs only when company get in touch with support department in channels provided in recovery file.
Tèrra Aventura
July 21, 2026
•[ ransomware, leak, technology ]
Trra Aventura was listed as a victim on the leak site of the nova ransomware group; the attack is estimated to have taken place on 2026-07-21. Sector: Hospitality. Country: Portugal. Trra Aventura is a free, app-based outdoor treasure hunt in France's Nouvelle-Aquitaine region where players solve riddles, follow walking routes, and find hidden geocaches while exploring local heritage and nature - Nova Provide Tree and samples and proofs only when company get in touch with support department in channels provided in recovery file.
RehaVital Gesundheitsservice GmbH
July 21, 2026
•[ ransomware, healthcare ]
RehaVital Gesundheitsservice GmbH was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-07-21. Sector: Healthcare. Country: Germany. Website: www.rehavital.de.
argonautms.com
July 21, 2026
•[ ransomware, technology, leak ]
argonautms.com was listed as a victim on the leak site of the chaos ransomware group; the attack is estimated to have taken place on 2026-07-21. Sector: Technology. Country: Russian Federation. Website: argonautms.com. Target Organization: argonautms.com (Argonaut Manufacturing Services)
Status: Unauthorized Access & Data Exfiltration Confirmed
Volume: 295 GB of Critical Corporate, Technical & Operational Data
Countdown: 48 Hours to establish contact before public release.
Executive Summary
The internal infras
La Financière d'Orion (finorion)
July 21, 2026
•[ ransomware, finance ]
La Financire d'Orion (finorion) was listed as a victim on the leak site of the nova ransomware group; the attack is estimated to have taken place on 2026-07-21. Sector: Financial Services. Country: France. Since 2009, we have been helping to create a privileged relationship between wealth professionals and their clients. The wealth of our experience allows us to deploy innovative, coherent financial engineering levers that are perfectly tailored to your aspirations and objectives - Nova have 20GB of clients documents data and company finance informations, for example convestion ERES.pdf, secrets is here, Contact us for more details, Nova Provide tree and samples from stolen data to the company when its get in touch with support department.
Kreysler & Associates
July 21, 2026
•[ ransomware, manufacturing ]
Kreysler & Associates was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-07-21. Sector: Professional Services. Country: United States of America. Website: www.kreysler.com. United States
Tax MT
March 6, 2024
•[ ransomware, finance ]
Tax MT was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2024-03-06. Sector: Professional Services. Country: Malta. Website: www.tax-mt.com. United States
Canal 9 Litoral
July 22, 2026
•[ ransomware, technology, leak ]
Canal 9 Litoral was listed as a victim on the leak site of the nova ransomware group; the attack is estimated to have taken place on 2026-07-22. Sector: Technology. Country: Argentina. AHORA Entre Ros is a news platform that provides the latest updates and urgent news from Entre Ros, Santa Fe, and the Litoral region. The service covers a wide range of topics including society, politics, sports, economy, and health. It aims to keep its audience informed with minute-by-minute news coverage. The intended clients are residents and individuals interested in current events in the specified regions - MXF secret files at risk, Nova Provide tree and samples from stolen data to the company when its get in touch with support department.
