Els for Autism
July 12, 2026
•[ ransomware, healthcare ]
Els for Autism was listed as a victim on the leak site of the cmdorganization ransomware group; the attack is estimated to have taken place on 2026-07-12. Sector: Healthcare. Country: United States of America. Website: www.elsforautism.org. Els for Autism Foundation, founded by Liezl and Ernie Els, offers programs and resources for adults and children with autism spectrum disorder (ASD). The Els Center of Excellence campus is a world-class site hosting leading-edge programs and services for individuals with autism. Based in Jupiter, Florida, The Els Center of Excellence is on track to be a global leader in the field of autism and a leading example of what can be available to individuals on the spectrum.
www.twtci.com Trans World Trading
July 13, 2026
•[ ransomware, manufacturing, technology ]
www.twtci.com Trans World Trading was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-07-13. Sector: Professional Services. Country: Philippines. Website: twtci.com. Trans World Trading Company, Inc. is a leading business conglomerate in the Philippines, recognized for its trust and reliability since 1946. The company specializes in providing sustainable material solutions through its divisions in plastics, chemicals, industrial products, and agrochemicals. With a strong commitment to integrating global innovations with local expertise, it serves various industries across the nation. Trans World continues to expand its operations and influence, shaping the future of the Philippine industry
ARM
July 13, 2026
•[ ransomware, technology, leak ]
ARM was listed as a victim on the leak site of the D1R ransomware group; the attack is estimated to have taken place on 2026-07-13. Sector: Technology. Country: United Kingdom of Great Britain and Northern Ireland. Website: arm.com. Thanks to leaked database by Synopsys, a roadmap was provided Many other group leaks were cross-referenced and thoroughly analyzed One of the leaked companies gave our team access to ARM center Severely incapacitated by 2FA email/sms-code required by ARM on every step, we were still able to download an interesting tool: Athena Download Manager That requires an SSL certificate of a company that owns ARM products, and downloading by means of Athena allows to bypass multiple 2FA checks that are required when downloading same files from www.arm.com This is now free for download to any reverse engineer on Earth and beyond, thanks to Synopsys company data negligence:
Bosch
July 13, 2026
•[ ransomware, manufacturing, technology ]
Bosch was listed as a victim on the leak site of the D1R ransomware group; the attack is estimated to have taken place on 2026-07-13. Sector: Manufacturing. Country: Germany. Website: bosch.de. Again, thanks to database Synopsys provided us with After analyzing technical leaks by other groups and cross-referencing targets from TARGETLIST.txt A company access was found and in the archives, a $10,000 gem: Bosch CAN module implementation Now it is going for free for every engineer and car enthusiast, thanks to Synopsys providing us with neat roadmap to tech sector Sorry, Bosch, you got third-partied! Call the Synopsys CEO and thank them for letting us all know where the valuable data is!
Turbosoft
June 25, 2026
•[ ransomware, technology ]
Turbosoft was listed as a victim on the leak site of the spacebears ransomware group; the attack is estimated to have taken place on 2026-06-25. Sector: Technology. Country: Cameroon. Website: turbosoft.cm/en/home. We specialize in the design and construction of IT and management systems.With us, you manage your business efficiently. Whether for Payroll, Accounting, Human Resources,Finance or Health, many customers trust Turbosoft solutions in Cameroon.-Personal information of employees and clients -Financial documents -Other files https://***.cm/en/home/
Techpol-System
June 15, 2026
•[ ransomware, technology, manufacturing ]
Techpol-System was listed as a victim on the leak site of the spacebears ransomware group; the attack is estimated to have taken place on 2026-06-15. Sector: Technology. Country: Poland. Website: techpolsystem.pl. Techpol-System, based in Bieru, Poland, is an engineering enterprise specializing in industrial power solutions,including traction battery maintenance, along with laser processing and steel structure fabrication. The company provides comprehensive,end-to-end services tailored to industrial clients through precision manufacturing and system integration.-Personal information of employees and clients -Financial documents -Other files https://***.pl/
Ironmark
July 13, 2026
•[ ransomware, leak, technology ]
Ironmark was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-07-13. Sector: Professional Services. Country: United States of America. Website: ironmarkusa.com. Founded and headquartered in Annapolis Junction, Maryland, Ironmark is a provider of marketing,
creative, printing and communications services. They specialize in marketing strategy, creativ
e & web development, digital marketing, printing services, and more.
We will upload 190gb of corporate data soon. Employee personal information (passports, DLs and
other personal information), projects information, detailed financials, client internal informa
tion, contracts and agreements, NDAs and so on.
Webosphere
July 6, 2026
•[ ransomware, technology, sqlinjection ]
Webosphere was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-07-06. Sector: Technology. Country: India. Website: webosphere.in. -SQL Database- Source Code
Northeast Rescue Systems
July 13, 2026
•[ ransomware, manufacturing, retail ]
Northeast Rescue Systems was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-07-13. Sector: Professional Services. Country: United States of America. Website: northeastrescue.com. Northeast Rescue Systems is a dedicated provider of specialized rescue, safety, and protective equipment serving emergency services and industrial safety communities throughout the New England region. The company is known for supplying a wide selection of highquality gear, including protective clothing, technical rescue tools, detection instruments, and missioncritical hardware tailored to the demanding needs of first responders and safety professionals. With a focus on reliability, expert guidance, and personalized service, Northeast Rescue Systems supports teams that operate in hazardous environments by equipping them with trusted products from reputable manufacturers and fostering strong relationships built on professionalism and trust
shuttlemeadowcc.com
July 13, 2026
•[ ransomware, retail ]
shuttlemeadowcc.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-07-13. Sector: Retail & E-Commerce. Country: United States of America. Website: shuttlemeadowcc.com. Founded in 1917, the club is one of the oldest and most prestigious private golf clubs in New England. It
TitanTV, Inc.
July 13, 2026
•[ ransomware, technology ]
TitanTV, Inc. was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-07-13. Sector: Technology. Country: United States of America. Website: www.titantvinc.com.
URH Hoteliers
July 13, 2026
•[ ransomware, retail ]
URH Hoteliers was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-07-13. Sector: Hospitality. Country: Spain. Website: www.urh-hoteliers.com.
Hillebrand Home Health
July 13, 2026
•[ ransomware, healthcare ]
Hillebrand Home Health was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-07-13. Sector: Healthcare. Country: United States of America. Website: www.hillebrandhomehealth.com.
Cooperate consulting CZ s.r.o.
July 13, 2026
•[ ransomware, technology ]
Cooperate consulting CZ s.r.o. was listed as a victim on the leak site of the titan ransomware group; the attack is estimated to have taken place on 2026-07-13. Sector: Professional Services. Country: Czechia.
Busscar de Colombia
July 13, 2026
•[ ransomware, manufacturing ]
Busscar de Colombia was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-07-13. Sector: Transportation. Country: Colombia. Website: www.busscar.com.co.
Cemoi
July 13, 2026
•[ ransomware, manufacturing ]
Cemoi was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-07-13. Sector: Agriculture and Food Production. Country: France. Website: www.cemoi.fr.
Jakub A.S.
July 13, 2026
•[ ransomware, manufacturing ]
Jakub A.S. was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-07-13. Sector: Manufacturing. Country: Czechia. Website: www.jakub.cz.
Counts & Dobyns
July 13, 2026
•[ ransomware ]
Counts & Dobyns was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-07-13. Sector: Professional Services. Country: United States of America. Website: www.countsanddobyns.com.
momenta.cn
July 14, 2026
•[ ransomware, technology, financial ]
momenta.cn was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-07-14. Sector: Technology. Country: China. Website: momenta.cn. Momenta is an AI and autonomous-driving company.
All source code, financial documents, configuration files, employee database, and more were stolen.
Servers and workstations were encrypted.
Momenta is trying to hide everything from Chinese regulators, the HKEX commission, and investors while reporting a $751M profit from its recent IPO.
With a $9B+ market capitalization, this amounts to one of the largest financial frauds in Chinese history.
Sedemi
July 14, 2026
•[ ransomware, technology ]
Sedemi was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-07-14. Sector: Professional Services. Country: Mexico. Website: www.sedemi.com.