BOTEC-CZ
August 18, 2026
•[ ransomware, manufacturing, technology ]
BOTEC-CZ was listed as a victim on the leak site of the ZaWoo ransomware group; the attack is estimated to have taken place on 2026-08-18. Sector: Manufacturing. Country: Germany. boTec helps companies in process and production industries improve efficiency, manage data, and optimize business operations using software solutions, consulting, and integration services.
acqbuilt.com
August 15, 2026
•[ ransomware, manufacturing ]
acqbuilt.com was listed as a victim on the leak site of the ZaWoo ransomware group; the attack is estimated to have taken place on 2026-08-15. Sector: Professional Services. Country: Canada. Website: acqbuilt.com. company based in Edmonton, Alberta, Canada. It specializes in using factory-based construction methods to build residential homes faster, with more precision, and with reduced waste compared with traditional on-site building.
frm.ind.br
August 18, 2026
•[ ransomware, manufacturing ]
frm.ind.br was listed as a victim on the leak site of the ZaWoo ransomware group; the attack is estimated to have taken place on 2026-08-18. Sector: Other. Country: Brazil. Website: frm.ind.br. FRM - Fbrica de Rolamentos e Mancais Ltda is a Brazilian industrial manufacturer specializing in bearings, bearing housings, and industrial movement solutions. The company is based in Curitiba, Paran, Brazil and has been operating since 1980.
montronix.de
August 18, 2026
•[ ransomware, manufacturing, technology ]
montronix.de was listed as a victim on the leak site of the ZaWoo ransomware group; the attack is estimated to have taken place on 2026-08-18. Sector: Manufacturing. Country: Germany. Website: montronix.de. MONTRONIX GmbH is a German industrial technology company specializing in machine-tool monitoring, process monitoring, machine protection, and condition monitoring. The company was founded in 1990 as a spin-off of Kennametal, Inc. and focuses primarily on monitoring solutions for metal-cutting and machining operations.
rsk-immobilien.de
August 18, 2026
•[ ransomware, retail ]
rsk-immobilien.de was listed as a victim on the leak site of the ZaWoo ransomware group; the attack is estimated to have taken place on 2026-08-18. Sector: Retail & E-Commerce. Country: Germany. Website: rsk-immobilien.de. RSK Immobilien GmbH is a German real-estate project developer and property company headquartered in Weienfels, Saxony-Anhalt. Its core activities are the development, realization, renovation and marketing of residential and commercial properties, with a strong current focus on residential projects.
berghotel-oberhof.de
August 18, 2026
•[ ransomware, retail ]
berghotel-oberhof.de was listed as a victim on the leak site of the ZaWoo ransomware group; the attack is estimated to have taken place on 2026-08-18. Sector: Hospitality. Country: Germany. Website: berghotel-oberhof.de. Konsumhotel Berghotel Oberhof is a wellness and leisure hotel in Oberhof, Thuringia, Germany, located in the Thuringian Forest. It is operated by Berghotel Oberhof GmbH, with Markus Barth as managing director.
ng-engineering.de
August 18, 2026
•[ ransomware, technology, leak ]
ng-engineering.de was listed as a victim on the leak site of the ZaWoo ransomware group; the attack is estimated to have taken place on 2026-08-18. Sector: Professional Services. Country: Germany. Website: ng-engineering.de. NG Engineering Gruppe is a German engineering and technical-services group headquartered in Rdental, Bavaria. The group has been operating for more than 20 years and has locations in Germany, Poland and the Czech Republic. It provides engineering services throughout the product-development process and also offers personnel/recruitment services.
hd-werkstaetten.de
August 18, 2026
•[ ransomware, manufacturing, social ]
hd-werkstaetten.de was listed as a victim on the leak site of the ZaWoo ransomware group; the attack is estimated to have taken place on 2026-08-18. Sector: Manufacturing. Country: Germany. Website: hd-werkstaetten.de. hd-werkstaetten.de belongs to Heidelberger Werksttten der Lebenshilfe Heidelberg e. V., a German social enterprise / sheltered workshop organization supporting people with disabilities through employment, vocational training, and workplace inclusion. Its main site is in Heidelberg, Baden-Wrttemberg, Germany.
winterdienst-berlin.com
August 18, 2026
•[ ransomware, leak ]
winterdienst-berlin.com was listed as a victim on the leak site of the ZaWoo ransomware group; the attack is estimated to have taken place on 2026-08-18. Sector: Other. Country: Germany. Website: winterdienst-berlin.com. The company is located at Boschweg 1820, 12057 Berlin, and lists info@winterdienst-berlin.com and +49 30 684 083-6 as contact details. According to their company website, their services include:Snow and slush removal Clearing and gritting of sidewalks, roads, parking areas and public spaces Manual and machine-assisted winter maintenance Winter-service operations for businesses, private households and municipalities GPS-supported fleet and quality controls Environmentally conscious winter-service methods.Availability around the clock during winter conditions .The company says it combines around 30 years of experience with modern technology and environmentally friendly materials.
vectorsoft.de
August 18, 2026
•[ ransomware, technology ]
vectorsoft.de was listed as a victim on the leak site of the ZaWoo ransomware group; the attack is estimated to have taken place on 2026-08-18. Sector: Technology. Country: Germany. Website: vectorsoft.de. vectorsoft is Vectorsoft AG, a German software-development company headquartered in Heusenstamm, Hesse, near Frankfurt am Main, Germany.
esopartnerscpa
August 18, 2026
•[ ransomware, finance ]
esopartnerscpa was listed as a victim on the leak site of the ZaWoo ransomware group; the attack is estimated to have taken place on 2026-08-18. Sector: Professional Services. Country: China. Website: esopartnerscpa.com. [Unpublished]
fessport
July 6, 2026
•[ ransomware, retail, technology ]
fessport was listed as a victim on the leak site of the ZaWoo ransomware group; the attack is estimated to have taken place on 2026-07-06. Country: Germany. Website: fes-sport.de. [Unpublished]
zenithtechnology
August 18, 2026
•[ ransomware, technology ]
zenithtechnology was listed as a victim on the leak site of the ZaWoo ransomware group; the attack is estimated to have taken place on 2026-08-18. Sector: Technology. Country: New Zealand. Website: zenithtechnology.co.nz. [Unpublished]
Servicios Aereos Estrella
August 28, 2026
•[ ransomware, hack ]
Servicios Aereos Estrella was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Transportation. Country: Mexico. Website: sae.com.mx. sae.com.mx zoominfo.com/c/servicios-aereos-estrella-s-a/457170292 Servicios Areos Estrella, S.A. de C.V. (SAE) is a Mexican business-aviation company and pioneer of executive aviation in Mexico with 30+ years of experience, based at Toluca International Airport the main private-aviation gateway to Mexico City. It claims to be Latin America's largest FBO, with 12,000 m of apron, 10,000 m of hangar storage, four VIP lounges, a caf/bar, VIP ground transport and an office next to immigration. Services include private jet charter and rental (from piston aircraft to long-range jets, plus discounted "Empty Legs"), aircraft management and administration, full handling/dispatch (permits, catering, documents, flight closures), aircraft storage and pet-friendly flights, operating 24/7 year-round.
Exacta Optech Labcenter
August 28, 2026
•[ ransomware, healthcare, manufacturing ]
Exacta Optech Labcenter was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Healthcare. Country: Brazil. Website: exactaoptech.com. exactaoptech.com zoominfo.com/c/exactaoptech-labcenter-spa/426158257 Exacta + Optech Labcenter S.p.A. is an Italian one-stop distributor of instruments, consumables and reagents for scientific laboratories, founded in 1974/75 by Gian Amico Alessandrini and headquartered at Via Bosco 21, San Prospero (Modena). It supplies lab optics and instruments under its own Optech brand (biological/stereo/inverted microscopes, spectrophotometers, refractometers, polarimeters, micropipettes, cuvettes), chemicals, lab furniture, and designs turnkey laboratories; market segments include pharma, food, petrochemical/Oil&Gas, environment, education and oenology where it is Hach-Lange's worldwide official partner. Its 1,500-page catalogue and e-shop list ~100,000 items; the team of ~3545 includes 7 dedicated service technicians, backed by agreements with Avantor, Honeywell and LLG and the acquisitions of Ing. C. Bullio (2006) and Alkimia (2022). In 2024 the company rebranded from EXA
MB Associates
August 28, 2026
•[ ransomware, technology, government ]
MB Associates was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Professional Services. Country: United Kingdom of Great Britain and Northern Ireland. Website: mbassociates.org. mbassociates.org zoominfo.com/c/mb-associates/372858181 MB Associates is a UK social impact consultancy founded in 2005 by Mandy Barnett (London Business School MBA, chair of Social Value UK), based in Holmfirth, West Yorkshire; its legal entity is Mandy Barnett Associates Ltd (incorporated 7 Sep 2005, registered in Welwyn Garden City). It helps people, projects and organisations understand and increase their social impact impact evaluation, SROI analysis, consultation and research, creative facilitation, training and toolkits working through a PlanDoReview cycle that starts with a "Story of Change". Clients include Arts Council England, the National Lottery, UKRI-AHRC, Natural Resources Wales, Bristol City Council, the National Children's Orchestra, museums and charities; it also runs its own learning platform, Culture3 (culturecubed.org). In February 2026 the founder handed the firm over to colleagues directors Jael Williams and Emily Wilson and the brand
Brebur
August 28, 2026
•[ ransomware, manufacturing, healthcare ]
Brebur was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-28. Country: United Kingdom of Great Britain and Northern Ireland. Website: breburltd.co.uk. breburltd.co.uk zoominfo.com/c/brebur-ltd/445718566 Brebur Ltd is a UK specialist subcontractor for steel frame systems (SFS), dry-lining, partitions, plastering and suspended ceilings, founded in 2002 (trading as Ace Fire Solutions Ltd until Dec 2012); it is based at Unit 1 Capitol Close, Dodworth, Barnsley, South Yorkshire. It delivers projects across the North of England for main contractors such as BAM, Kier and Willmott Dixon, and also installs lead-lined radiation-protection partitions for hospitals and acoustic raft/baffle solutions. It holds long-standing manufacturer partnerships (British Gypsum, Siniat/Knauf, and Ecophon's EPIC status since 2016) and has won a Gold National Quality Award plus BAM's Regional Contractor of the Year. With ~20 staff and net assets of ~2.7m (2025), it sits under the Brebur Holdings / Brebur Group Ltd structure created in 2024 (directors Jamie Brenton and Vincenzo Lilley);
Nutrypollo
August 28, 2026
•[ ransomware, manufacturing ]
Nutrypollo was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Agriculture and Food Production. Country: Mexico. Website: nutrypollo.com.mx. nutrypollo.com.mx zoominfo.com/c/nutrypollo/427100153 Nutrypollo / Agroindustrias Quesada, S. de R.L. de C.V. is a Mexican family-owned poultry company (4th generation) based in Aguascalientes; it began as Bernardo Quesada de Alba's egg-laying farm in 1950 and entered broiler production in 1963 under founder Jorge Quesada Morn. It is fully vertically integrated genetics and hatching, feed milling, grow-out farms, slaughter and processing (12,000 birds/hour, up to 80,000 birds/day, ~60 million birds a year) and distribution across 30+ Mexican states. Brands include fresh chicken under Nutrypollo, the marinated Nutryfcil and Premium lines, and, since November 2023, its own NutryTienda retail concept. Certified TIF (SENASICA) and international Halal (FSSC 22000 in progress), it built a state-of-the-art plant with Marel/Stork lines in 20122015 Mexico's first Marel demonstration site; the Quesada family still runs the business (CEO Cesar Quesada, Marketing Directo
ESB Puerto Rico Corp
August 28, 2026
•[ ransomware, energy, automotive ]
ESB Puerto Rico Corp was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Energy & Utilities. Country: Puerto Rico. Website: esbpr.com. esbpr.com ESB Puerto Rico Corp is a distributor of automotive and industrial products that has served Puerto Rico since 1965 ("Energizando a Puerto Rico desde 1965"); it is headquartered in Carolina, PR, is a Hispanic-/minority-owned small business and a federal contractor (CAGE 3DPU1). Its portfolio spans automotive, traction and stationary/backup batteries, tires, lubricants and DEF, AUTEL diagnostics, tools, plus Hyundai and EP forklifts, warehouse equipment, rental, maintenance, OEM parts and e-commerce a "one-stop source" for material handling, automotive and industrial operations in Puerto Rico and the Virgin Islands, representing ~9 brands (including Eternity Technologies). The president is Omar Aponte; the company stays lean (under ~25 staff, ~$2M revenue) and handles ~150 sea import shipments a year, mostly from Asia.
Thai Film Industries PCL
August 28, 2026
•[ ransomware, manufacturing, leak ]
Thai Film Industries PCL was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Other. Country: Thailand. Website: thaifilmind.com. thaifilmind.com Thai Film Industries PCL (TFI) is a Thai film maker founded in 1983 (originally Rachadachai O.P.P. Co., Ltd.) by industrialist Prayudh Mahagitsiri Thailand's first BOPP film producer and Southeast Asia's industry pioneer, today a global top-20 BOPP manufacturer. Its portfolio covers BOPP (Thai-Lene), CPP (Thai-Cast), PET and metallized films for flexible packaging, printing, lamination, labels, adhesive tape, flower wrap and biodegradable uses. It runs two plants in Samut Prakan (Bang Phli, Bangna-Trad Km.13) and Rayong (Nikhom Pattana) with ~760 employees and exports across Asia, Europe and the Americas. Listed on the Stock Exchange of Thailand since 29 Dec 1989 (ticker TFI, paid-up capital ~THB 2.05 bn); renamed Thai Future Incorporation PCL in 2023, it is affiliated with Thai Copper Industries and Thai Film Bangladesh; CEO since 2023: Phadetkiat Imdacha.
