Envision Unlimited
July 9, 2026
•[ ransomware, healthcare ]
Envision Unlimited was listed as a victim on the leak site of the moneymessage ransomware group; the attack is estimated to have taken place on 2026-07-09. [AI generated] Envision Unlimited is a nonprofit human services organization based in the United States, primarily operating in Illinois. Founded in Chicago, it provides support services for individuals with intellectual and developmental disabilities. Its programs include residential services, day programs, employment support, and behavioral health services, aimed at promoting independence, inclusion, and quality of life for the people it serves.
Hynet
July 10, 2026
•[ ransomware, technology ]
Hynet was listed as a victim on the leak site of the nova ransomware group; the attack is estimated to have taken place on 2026-07-10. Sector: Technology. Country: United Kingdom of Great Britain and Northern Ireland. Hynet helps businesses protect and manage their most important asset: information. With a team of skilled tech experts, they solve complex IT challenges by providing smart data storage and network security services. Their remote team works closely with clients to improve productivity and keep company data safe from growing digital threats - Nova Provide tree and samples from stolen data to the company when its get in touch with support department.
New Tiles S.L.
July 10, 2026
•[ ransomware, manufacturing ]
New Tiles S.L. was listed as a victim on the leak site of the gunra ransomware group; the attack is estimated to have taken place on 2026-07-10. Sector: Manufacturing. Country: Spain. Website: new-tiles.com.
Hospital Di Camp
July 10, 2026
•[ ransomware, healthcare ]
Hospital Di Camp was listed as a victim on the leak site of the Doommageddon ransomware group; the attack is estimated to have taken place on 2026-07-10. Sector: Healthcare. Status: upcoming | Data size: N/A | Files: 0 files | Deadline: 2026-07-21T00:00:00Z
txdkj.com
July 10, 2026
•[ ransomware, leak, technology ]
txdkj.com was listed as a victim on the leak site of the blackwater ransomware group; the attack is estimated to have taken place on 2026-07-10. Country: China. Website: txdkj.com. Confidential data will be released soon.
Roofinox
July 10, 2026
•[ ransomware, manufacturing, leak ]
Roofinox was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-07-10. Sector: Manufacturing. Roofinox is an Austrian manufacturer of premium stainless steel specifically engineered for long-lasting roofing and facade systems. The company offers innovative materials with unique matte and textured surfaces that blend beautifully with architecture without creating harsh glare. Thanks to its exceptional corrosion resistance and durability in harsh climates, Roofinox products are recognized as an eco-friendly, virtually timeless architectural solution.
Red Planet Hotels
July 10, 2026
•[ ransomware, retail ]
Red Planet Hotels was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-07-10. Sector: Hospitality. Country: Philippines. Website: www.redplanethotels.com.
Global Strategic Business Process Solutions
July 10, 2026
•[ ransomware, technology ]
Global Strategic Business Process Solutions was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-07-10. Sector: Professional Services. Country: United States of America. Website: www.globalstrategic.com.
SPACElogic
July 10, 2026
•[ ransomware, technology ]
SPACElogic was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-07-10. Sector: Technology. Country: Singapore. Website: www.spacelogic.com.sg.
La ville de Ouangani
July 10, 2026
•[ ransomware, government ]
La ville de Ouangani was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-07-10. Sector: Government & Defense. Country: Mayotte. Website: ville-ouangani.yt. French municipality of Ouangani on Mayotte
EDISA and INVERTIGE
July 10, 2026
•[ ransomware, finance ]
EDISA and INVERTIGE was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-07-10. Sector: Professional Services. Estudios de Investigacin Servicio SL (also known commercially in some rankings as EDISA ) is a Limited liability company of a patrimonial and real estate nature with headquarters in Valencia, Spain.Although its corporate name includes the words "research studies", its real corporate purpose and main activities are focused on asset management, investment in other companies and real estate development. INVERTIGE SL is a Spanish company headquartered in ValenciaThe company is registered for central management functions and consultancy , with a focus on the administration and governance of other companies, and has an annual turnover of around EUR 1.9 million.
Breda Energia
July 10, 2026
•[ ransomware, energy ]
Breda Energia was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-07-10. Sector: Energy & Utilities. Country: Italy. Website: www.bredaenergia.it. Breda Energia S.p.A. is a global leader in the Oil & Gas industry, specializing in innovative products and services for onshore, offshore, and subsea applications. The company offers a wide range of solutions including wellheads, valves, high integrity pressure protection systems, and packaged systems, all designed with a focus on sustainability and cutting-edge technology. With over 60 years of experience, Breda Energia aims to be a partner to its clients, providing not just equipment but also qualified services to optimize performance and maintenance. Their commitment to quality is reflected in their adherence to various international standards and certifications.
Muzeum Valassko
July 10, 2026
•[ ransomware, hospitality ]
Muzeum Valassko was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-07-10. Sector: Hospitality. Country: Czechia. Website: www.muzeumvalassko.cz. Muzeum regionu Valasko (The Museum of the Wallachian Region) is a multi-site cultural institution in the Zln Region of the Czech Republic.
bERS
July 10, 2026
•[ ransomware, manufacturing ]
bERS was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-07-10. Sector: Other. Country: Bulgaria. Website: bers.bg. Bers logistics has been providing logistics services and high quality 3pl outsourcing of integrated logistics services.
NXIT and Franco Vago S.p.a. and Traconf Srl
July 10, 2026
•[ ransomware, manufacturing, technology ]
NXIT and Franco Vago S.p.a. and Traconf Srl was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-07-10. Sector: Professional Services. Country: Italy. Website: www.nipponexpressitalia.com. The leaked files will be available for download on May 15, 2026. Nippon Express Italia SpA (NXIT) is the Italian division of the global NX Group (formerly Nippon Express). It was established on January 1, 2020, following a major merger involving several high-profile Italian logistics companies, including Franco Vago and Traconf . Recorded a consolidated turnover of almost EUR 1 billion in 2022. Core Services: The company specializes in integrated logistics and global freight forwarding, with a particularly strong reputation in the Fashion & Luxury sector. Traconf Srl a major Italian logistics firm specializing in fashion and luxury goods. Portuguese branch of Franco Vago , which, much like Traconf, is now a key part of the Nippon Express Italia SpA (NX Group) network. In Portugal, the company operates as a specialized freight forwarder with a strong focus on the textile, footwear, and luxury sectorsleveraging the historical expertise of the Franco Vago brand. Over 220 gigabytes of sensitive internal data were stolen from this company
AFWorkshop
July 10, 2026
•[ ransomware, technology ]
AFWorkshop was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-07-10. Sector: Professional Services. Country: Singapore. Website: www.afw.sg. AFW an international architectural and design firm based in Singapore. Formerly known as Andy Fisher Workshop, the firm has been operating since 2004. They are a multi-disciplinary practice that works on a variety of large-scale and boutique projects across Asia and beyond.
iASK
July 10, 2026
•[ ransomware, technology, education ]
iASK was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-07-10. Sector: Technology. Country: Hungary. Website: iask.hu/en. The Institute of Advanced Studies Kszeg is a Hungarian research center focusing on interdisciplinary studies, regional transformation in Central/Southeastern Europe, and sustainability. It operates as a hub for research, hosting an annual International Summer University and maintaining specialized collections at the Festetics Palace.
Noega and Esnova
July 10, 2026
•[ ransomware, technology, manufacturing ]
Noega and Esnova was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-07-10. Sector: Technology. Country: Spain. Website: esnova.com. Esnova (Esnova Racks S.A.) is a leading Spanish manufacturer specializing in industrial shelving and warehouse storage systems. Based in Gijn, Asturias, the company designs, manufactures, and installs solutions for logistics and warehouse management across more than 35 countries. Noega Systems is a specialized industrial company that designs, manufactures, and installs metal racking and storage solutions. Founded in 2010 and headquartered in Gijn, Spain, the firm provides end-to-end intralogistics services, including technical inspections (ITE) and automated warehouse planning. Over 130 gigabytes of internal data
IFC Eur
July 10, 2026
•[ ransomware, leak, automotive ]
IFC Eur was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-07-10. Sector: Financial Services. Country: Germany. Website: www.ifceuropa.com. IFC Europa is a Spanish-based distributor specializing in car audio, automotive lighting, and electronics.
EXPRESOKNA SP. Z O.O.
July 10, 2026
•[ ransomware, manufacturing ]
EXPRESOKNA SP. Z O.O. was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-07-10. Sector: Professional Services. Country: Poland. Website: expresokna.pl. EXPRESOKNA SP. Z O.O. a Polish manufacturer and distributor specializing in window and door systems. Based in Siemianowice lskie, the company is known for its exceptionally fast turnaround times for PVC and aluminum products.
