SUNSEA
August 28, 2026
•[ ransomware, manufacturing ]
SUNSEA was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Other. Country: Thailand. Website: sunsea.co.th. sunsea.co.th Sunsea Plastics P.S. Co., Ltd. is a family-owned Thai polyethylene film manufacturer founded in 1988, operating a purpose-built 13,000 sq.m factory in Bangna, Bangkok (office at Soi Lasalle 24, Sukhumvit Rd). It is Thailand's leading independent PE extruder, producing LDPE shrink film (rolls, hoods, sleeves, bags), LLDPE lamination and printing films, mLLDPE, PP/PE coex films, milk pouches and overwrap films, running 16 mono-layer plus 3-layer lines. It is the sole ExxonMobil-authorized producer of Nexxstar collation shrink film in Thailand and is ISO 9001 certified
Probe Test System
August 28, 2026
•[ ransomware, technology, manufacturing ]
Probe Test System was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Technology. Country: Taiwan. Website: ptse.com.tw. ptse.com.tw Probe Test System Corp. (PTS, ) is a Taiwanese semiconductor back-end (OSAT) service provider operating since 2000, with plants in Zhunan and Toufen, Miaoli County (the former Hsinchu site was consolidated into Toufen in Q1 2024). Its services cover System Level Test (SLT), wafer chip probing (CP) on Chroma, ASL1000 and CTA8280 platforms, IC marking/remarking, Tape & Reel packaging (capacity ~150 KK units/month) plus lead/ball scan inspection. Long-term customers include Taiwan's leading chipmakers: Winbond, MediaTek, Novatek, Nuvoton and Macronix. The company is certified under ISO 9001, ISO 14001 and ANSI/ESD S20.20-2021.
Ixa Systems
August 28, 2026
•[ ransomware, technology, manufacturing ]
Ixa Systems was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Technology. Country: Switzerland. Website: ixasystems.ch. ixasystems.ch rocketreach.co/ixa-systems-sa-profile_b40f7faaffd19ede Ixa Systems SA is a Swiss security systems company founded in 2007, headquartered in Crissier (canton Vaud, near Lausanne). A small family-run firm of ~910 staff with revenue of about CHF 3.5 million, it designs and integrates surveillance solutions: video surveillance (IP/CCTV), anti-intrusion systems, intercom, access control, perimeter detection, technical building supervision (GTC) and evacuation PA systems. Since 1 April 2022 it has been majority-owned by the D.E.S Systmes de scurit SA group, with Marc Barraud as director. Its clients include police, banks, museums, schools, hospitals, prisons and railways, and it offers 24/7 maintenance contracts.
General Gruppo
August 28, 2026
•[ ransomware, retail, manufacturing ]
General Gruppo was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Manufacturing. Country: Italy. Website: generalgruppo.it. generalgruppo.it rocketreach.co/general-gruppo-profile_b68428f5c6158b62 General Gruppo / General s.r.l. is a family-owned Italian retail chain founded in 1975 by Pietro Paolo Tognetti and Silvana Bonugli, headquartered in Querceta (Seravezza, Lucca, Tuscany). Historically known as IperSoap one of Italy's first home-care and personal-hygiene retail formats it reached ~250 stores in 2019 and 150 million in revenue (2018). In 2020 it began rebranding into the unified PiMe banner (merging IperSoap, Smoll and Shuki), and it also owns the historic Bacci Profumerie perfumeries (Forte dei Marmi) and the piume.it online shop. The founders' sons run the business Saverio (CEO) and Francesco; the group includes General s.r.l. and General Nord s.r.l.
Northwest Trophy
August 28, 2026
•[ ransomware, leak, retail ]
Northwest Trophy was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Retail & E-Commerce. Country: United States of America. Website: nwtrophy.com. nwtrophy.com rocketreach.co/northwest-trophy-inc-profile_b59c90e0f9bc4cf5 Northwest Trophy & Awards Inc is a fourth-generation, family-owned awards business operating since 1938, with a showroom in Woodinville, WA (Seattle area). It offers personalized awards and gifts: trophies, medals, plaques, crystal and art-glass awards, acrylics, clocks, drinkware and ceremonial items. All engraving and printing (laser, rotary, full-color) is done in-house, serving sports teams, schools and businesses. It sells both through its showroom and an online Shopify store with standard 57 day production; a Seattle location was closed in 2023, leaving Woodinville (and previously Bellevue) to serve customers.
G R Infraprojects
August 28, 2026
•[ ransomware, manufacturing, leak ]
G R Infraprojects was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Manufacturing. Country: India. Website: grinfra.com. grinfra.com zoominfo.com/c/g-r-infraprojects-ltd/353612422 We have taken NDA files, HR data, user data, employee data, technical drawings, models, bank statements, tax and legal documents, confidential files, photographs of work, screenshots, passport scans, VIP client data, and much more the total volume of data exceeds 531 GB. Grinfra G R Infraprojects Ltd is an Indian integrated infrastructure EPC company founded in 1995, headquartered in Udaipur and Gurugram. It builds roads, highways, bridges, metros, railways, tunnels, ropeways and power transmission lines across 23+ Indian states, with a 10,000-strong workforce and an order book of roughly 19,000+ crore ($2.3 bn). Projects are delivered under EPC, BOT, HAM and BOOT models, backed by in-house manufacturing (bitumen, paints, metal crash barriers) and ~7,500 equipment units. Listed on BSE/NSE since July 2021 (ticker GRINFRA), rated CRISIL AA / CARE AA+ (stable).
Glassdoor
August 28, 2026
•[ ransomware, technology ]
Glassdoor was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Professional Services. Country: United States of America. Website: glassdoor.com. glassdoor.com is a U.S. job platform (founded 2007) where employees anonymously review companies culture, salaries, management. It's owned by Recruit Holdings/Indeed (acquired for $1.2B in 2018; legally merged into Indeed on July 1, 2026). It hosts millions of reviews for ~600,000 companies, plus salary data and job listings. Free for job seekers, monetized via employer branding tools; it also publishes the annual "Best Places to Work" awards.
Absolute Consultancy Services
August 30, 2026
•[ ransomware, leak, technology ]
Absolute Consultancy Services was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-30. Sector: Professional Services. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.absolutecs.co.uk.
DistributionNOW (DNOW Inc.)
July 14, 2026
•[ ransomware, manufacturing, leak ]
DistributionNOW (DNOW Inc.) was listed as a victim on the leak site of the Falcon ransomware group; the attack is estimated to have taken place on 2026-07-14. Sector: Manufacturing. Country: United States of America. Website: dnow.com. Energy & industrial distribution NYSE: DNOW - Our 344 GB extraction includes your corporate information, corporate bank statements, vendor payment instructions, detailed payroll records, employee compensation, tax documents, operational secrets, proprietary SCADA gateway backups, PLC logic programs, industrial automation project files, internal audit logs detailing unethical activity investigations, whistleblower reports regarding harassment and discrimination, employee disciplinary records, employee PII, passports, driving licenses, medical drug screen results and much more.
Hospital Clnico Universidad de Chile
August 30, 2026
•[ ransomware, healthcare ]
Hospital Clnico Universidad de Chile was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2026-08-30. Sector: Healthcare. Country: Chile. Website: redclinica.cl. Hospitals
THQ Nordic
August 30, 2026
•[ ransomware, technology ]
THQ Nordic was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2026-08-30. Sector: Technology. Country: Sweden. Website: thqnordic.com. Multimedia,Games,Graphics Software
AFSARD
August 30, 2026
•[ ransomware, government, finance ]
AFSARD was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-30. Country: North Macedonia. Website: ipardpa.gov.mk.
bkc.org
August 31, 2026
•[ ransomware, education ]
bkc.org was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-08-31. Sector: Professional Services. Country: Japan. Website: bkc.org. bkc.org and bethelclassical.org Mission Statement Bethel Classical Academy seeks to guide studen...
allsteelproducts.nl
August 28, 2026
•[ ransomware, manufacturing ]
allsteelproducts.nl was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Manufacturing. Country: Netherlands. Website: allsteelproducts.nl. All Steel Products is a wholesale supplier specializing in hydraulic products, offering a wide range...
vkj.nl
August 28, 2026
•[ ransomware, hack ]
vkj.nl was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Other. Country: Netherlands. Website: vkj.nl. Van Kessel & Janssen begeleidt huisvestingsprojecten met deskundig advies en projectmanagement. Van...
bartelsbv.nl
April 28, 2026
•[ ransomware, manufacturing ]
bartelsbv.nl was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-04-28. Sector: Manufacturing. Country: Netherlands. Website: bartelsbv.nl. Bartels BV is reeds 40 jaar een toonaangevend bedrijf op het gebied van metalen gevels, daken en lic...
Ishbia & Gagleard, P.C.
August 31, 2026
•[ ransomware, healthcare, finance ]
Ishbia & Gagleard, P.C. was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-08-31. Sector: Professional Services. Country: United States of America. Website: iglawfirm.com. [law] Ishbia & Gagleard, P.C. a boutique law firm in Birmingham, Michigan, founded in 1999 by Jeffrey A. Ishbia and Michael A. Gagleard. The firm practises real estate, corporate, estate planning, personal injury, medical malpractice, and commercial litigation for high-net-worth individuals and closely held entities.
The exposed material includes:
360+ client/matter folders the complete attorney-client privilege corpus: litigation strategy memos, settlement agreements, case assessments, deposition notes, correspondence with opposing counsel.
Full Social Security Numbers for 25+ identified individuals trust beneficiaries, family members, employees of client businesses, and a scanned Social Security card.
Protected Health Information hospital admission records from Oakwood Hospital, University of Michigan Hospital, and William Beaumont Hospital. Also: 55+ employee files from a sexual health clinic client with SSN searches and scanned SS cards.
100+ client tax returns spanning 20032024, each containing SSNs, EINs, and income data.
11 email archive files (PST/OST) containing years of unfiltered attorney correspondence.
Personal legal matters of Mat Ishbia CEO of publicly-traded UWM Holdings Corp. (NYSE: UWMC), the largest wholesale mortgage lender in the United States.
fes-sport.de
July 6, 2026
•[ ransomware, technology, manufacturing ]
fes-sport.de was listed as a victim on the leak site of the ZaWoo ransomware group; the attack is estimated to have taken place on 2026-07-06. Sector: Retail & E-Commerce. Country: Germany. Website: fes-sport.de. FES Sport (fes-sport.de) is the Institut fr Forschung und Entwicklung von Sportgerten (FES), a German institute specializing in research, engineering, and development of high-performance sports equipment and technology. It is based in Berlin, Germany, with an additional facility in Oberhof.
zenithtechnology.co.nz
August 18, 2026
•[ ransomware, technology, healthcare ]
zenithtechnology.co.nz was listed as a victim on the leak site of the ZaWoo ransomware group; the attack is estimated to have taken place on 2026-08-18. Sector: Technology. Country: New Zealand. Website: zenithtechnology.co.nz. Zenith Technology Corporation Limited (ZenTech) is a New Zealand-based Contract Research Organisation (CRO) headquartered in Dunedin, New Zealand. The company was incorporated in 1987 and specializes in clinical research and pharmaceutical analytical services for the international pharmaceutical industry.
cimbsecurities.com
August 31, 2026
•[ ransomware, finance ]
cimbsecurities.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-08-31. Sector: Financial Services. Country: Malaysia. Website: cimbsecurities.com. Bank
