Al Dhow Group
June 24, 2026
•[ ransomware, manufacturing, healthcare ]
Al Dhow Group was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-06-24. Sector: Transportation. Country: United Arab Emirates. Website: al-dhow.com. ***.com zoominfo.com/c/al-dhow/345585723 Dhow International Holding is a diversified group of companies with a portfolio spanning high-growth and high-impact industries across the GCC region.Their extensive operations encompass a wide range of sectors, including engineering, architectural solutions, hospitality, food & beverage, logistics, healthcare, and venture capital. The group is committed to delivering integrated, end-to-end services while fostering long-term sustainable growth across all its businesses
Meccanica Gn
June 24, 2026
•[ ransomware, manufacturing, automotive ]
Meccanica Gn was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-06-24. Sector: Manufacturing. Country: Italy. Website: meccanicagn.com. ***.com zoominfo.com/c/meccanica-gn/368731563 Meccanica GN is an Italian precision manufacturing company based in Carpi, specializing in high-accuracy machining like milling, turning, and grinding.With over two decades of experience, they produce critical components for demanding sectors, including Formula 1 motorsport, aerospace, automotive, and biomedical.The company is recognized for its advanced technology, strict quality assurance, and commitment to maximum performance
MBO GmbH
June 22, 2026
•[ ransomware, technology, manufacturing ]
MBO GmbH was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-06-22. Sector: Professional Services. Country: Germany. Website: mbo-gmbh.com. ***.com MBO GmbH is a German surface technology company based in Roding, serving as the in-house surface treatment unit for the Mhlbauer Parts & Systems Group.With over 40 years of experience, they specialize in various advanced coating processes, including electroplating, powder coating, and painting.The company provides comprehensive technical advice and surface finishing solutions that are directly integrated with their parent company's production lines
ErgoMed
June 22, 2026
•[ ransomware, healthcare ]
ErgoMed was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-06-22. Sector: Healthcare. Country: United Kingdom of Great Britain and Northern Ireland. Website: ergomed.net. ***.net ErgoMed Work Systems is a US-based occupational health and employment testing company that has been providing loss control programs since 1992.They specialize in physical demand simulation testing, musculoskeletal evaluations, and post-offer employment screening to help businesses and HR managers reduce workplace injuries
GIA Partners
June 22, 2026
•[ ransomware, finance ]
GIA Partners was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-06-22. Sector: Professional Services. Country: United States of America. Website: giallc.com. ***.com zoominfo.com/c/gia-partners-llc/347817491 GIA Partners, LLC is a New York-based registered investment advisor specializing in fixed income strategies and credit analysis .The firm focuses on diversified portfolios, including core fixed income, high yield, and emerging market debt, leveraging the extensive experience of its investment team.With over $1 billion in assets under management, GIA emphasizes that credit risk is well-compensated and diversifiable to generate excess returns for its clients
CTM India Limited motherson INDIA
June 22, 2026
•[ ransomware, manufacturing ]
CTM India Limited motherson INDIA was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-06-22. Sector: Manufacturing. Country: India. Website: dnb.com. ***.com/business-directory/company-profiles.ctm_india_limited.c67e34c4f71f7ed11aaf1dc39e0e10a6.html CTM India Limited is located in New Delhi, Delhi, India and is part of the Metalworking Machinery Manufacturing industry. CTM India Limited is associated with the global Motherson Group, focusing on producing specialized equipment and forms essential for industrial manufacturing processes. The company is led by key principal Bimal Dhar and operates within the broader machinery manufacturing sector
Royal Thai Navy Housing Cooperative
June 22, 2026
•[ ransomware, government, finance ]
Royal Thai Navy Housing Cooperative was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-06-22. Sector: Government & Defense. Country: Thailand. Website: kehanavycoop.com. ***.com Royal Thai Navy Housing Cooperative Limited, a service organization based in Bangkok, Thailand.It primarily manages housing projects like "Navy Place," offering residential units for sale and rent to naval personnel and members.Additionally, the cooperative provides financial services such as member shares, loans, and deposits, alongside educational scholarships for members children
International Freight Services
June 22, 2026
•[ ransomware, technology, retail ]
International Freight Services was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-06-22. Sector: Transportation. Country: United States of America. Website: ifs-sfo.com. ***.com zoominfo.com/c/ifs-sfocom/348198952 IFS (International Freight Services, Inc.) is a logistics company headquartered at San Francisco International Airport (SFO). It provides international air and ocean freight forwarding, customs brokerage, warehousing, and end-to-end supply chain solutions. With decades of experience, IFS specializes in time-critical and high-touch cargo, serving industries from technology and life sciences to automotive and retail
Bd
July 1, 2026
•[ ransomware, healthcare, government ]
Bd was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-07-01. Sector: Healthcare. Country: Switzerland. Website: bd.zh.ch. Organization with 772 emails extracted. Domain: bd.zh.ch
FunkeScheid
July 1, 2026
•[ ransomware, manufacturing, leak ]
FunkeScheid was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-07-01. Sector: Manufacturing. Country: Germany. Website: FunkeScheid.com. Notarkanzlei FunkeScheid, Kanzlei im Ostend, Frankfurt. 9755 emails. AD: Kanzlei.FunkeScheid.com
T Online
July 1, 2026
•[ ransomware, technology ]
T Online was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-07-01. Sector: Technology. Country: Germany. Website: t-online.de. Organization with 823 emails extracted. Domain: t-online.de
Dadolighting
July 1, 2026
•[ ransomware, manufacturing ]
Dadolighting was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-07-01. Sector: Manufacturing. Website: dadolighting.com. Organization with 17 emails extracted. Domain: dadolighting.com
Sgs Gmbh
July 1, 2026
•[ ransomware, technology ]
Sgs Gmbh was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-07-01. Sector: Professional Services. Country: Germany. Website: sgs-gmbh.com. Organization with 933 emails extracted. Domain: sgs-gmbh.com
Karneslegal
July 1, 2026
•[ ransomware, leak, technology ]
Karneslegal was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-07-01. Sector: Professional Services. Website: karneslegal.com. Organization with 23 emails extracted. Domain: karneslegal.com
Estrela
July 1, 2026
•[ ransomware, retail ]
Estrela was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-07-01. Sector: Retail & E-Commerce. Country: Brazil. Website: estrela.ind. Organization with 11 emails extracted. Domain: estrela.ind
Colorado Rehabilitation and Occupational Medicine
July 1, 2026
•[ ransomware, healthcare ]
Colorado Rehabilitation and Occupational Medicine was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-07-01. Sector: Healthcare. Country: United States of America. Website: coloradorehabilitation.com. Colorado Rehabilitation & Occupational Medicine (CROM) is a leading Denver-area physiatry practice specializing in non-surgical treatments for musculoskeletal and neurological conditions. Founded in 1992, CROM operates multiple clinics across the Front Range, focusing on helping patients recover from sports, work, and auto injuries without narcotics or surgery.
Salters propane
June 26, 2026
•[ ransomware, energy, financial ]
Salters propane was listed as a victim on the leak site of the spacebears ransomware group; the attack is estimated to have taken place on 2026-06-26. Sector: Energy & Utilities. Country: United States of America. Website: salterspropane.com. Salters Propane is excited and proud to be joining the Salters Family of businesses with competitive pricing, excellent customer service, and 65 combined years of industry experience. We are ready and more than capable to service all of your propane needs.From residential to commercial and everything in between we are confident that your experience with us will be nothing short of spectacular.We have many options available to suit your needs including a variety of tank sizes, and we offer competitive lease or purchase options.-Personal information of employees and clients -Financial documents -Other files https://***.com/
Tofutown
July 2, 2026
•[ ransomware, manufacturing ]
Tofutown was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-07-02. Sector: Agriculture and Food Production. Country: Germany. TOFUTOWN is a traditional organic manufacturer specializing in plant-based foods, founded in 1981. The company offers a diverse range of products including vegan spreads, tofu, and seitan, all made from high-quality organic ingredients. With a commitment to sustainability and natural ingredients, TOFUTOWN caters to health-conscious consumers looking for convenient and delicious plant-based meal options.
Pennant Hills Golf Club
July 2, 2026
•[ ransomware, retail, leak ]
Pennant Hills Golf Club was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-07-02. Sector: Hospitality. Country: Australia. Website: www.pennanthillsgolfclub.com.au.
X-Copper Professional
July 2, 2026
•[ ransomware, manufacturing ]
X-Copper Professional was listed as a victim on the leak site of the moneymessage ransomware group; the attack is estimated to have taken place on 2026-07-02. Sector: Manufacturing. Country: United States of America. Website: xcopper.com. [AI generated] X-Copper Professional is a Canadian legal and paralegal services firm specializing in traffic ticket defense and driving-related legal matters. Based in Ontario, Canada, the company represents clients facing speeding tickets, careless driving charges, and other Highway Traffic Act violations. It employs licensed paralegals and lawyers to help clients reduce or dismiss charges, minimizing fines, demerit points, and insurance premium impacts.