Whitehouse
August 28, 2026
•[ ransomware, government ]
Whitehouse was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Government & Defense. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.whitehouseandco.com.
Infinnium
August 28, 2026
•[ ransomware, technology ]
Infinnium was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Technology. Website: www.infinnium.com.
Directorate-General for Education
August 28, 2026
•[ ransomware, government, education ]
Directorate-General for Education was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Government & Defense. Country: Portugal. Website: dgeec.medu.pt. The Direo-Geral de Estatsticas da Educao e Cincia (DGEEC) is a Portuguese government agency responsible for collecting, analyzing, and publishing official statistics on education, science, and technology.
Hanwha Renewables
August 28, 2026
•[ ransomware, energy, financial ]
Hanwha Renewables was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Energy & Utilities. Country: South Korea. The data contains really sensitive information from 4 PV projects looking for investment/financing of Hanwha.
We extracted around 12GB of highly sensitive information relating to the following projects:
- Bonanza Peak (3GB)
- Boulder Solar III (0.7GB)
- Obreron Portfolio (4.8GB)
- Project Sprout (3.7GB)
In the data we found highly sensitive information including:
- PPAs
- Financial models
- Interconnection agreements
- Engineering designs of the assets
- Personal identifiable information
- Sensitive reports, budgets, financial information
Reach out to prevent the leak.
Cost of litigation from counterparties for breach of confidentiality is way higher. Commercially, good luck negotiating after your practices and contracts are leak. Good luck looking for financing/investment for these assets with the data leaked. [Size: 11.7 GB | Sector: Energy]
Cosmocolor SA de CV
August 28, 2026
•[ ransomware, manufacturing ]
Cosmocolor SA de CV was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Manufacturing. Country: Mexico. Website: www.cosmocolor.com.mx.
Tramigo
August 28, 2026
•[ ransomware, technology ]
Tramigo was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Transportation. Country: Finland. Website: www.tramigo.com.
DigiGround
August 28, 2026
•[ ransomware, technology ]
DigiGround was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Technology. Country: Australia. Website: www.digiground.com.au.
ProCare
August 28, 2026
•[ ransomware, healthcare ]
ProCare was listed as a victim on the leak site of the moneymessage ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Healthcare. Country: United States of America. [AI generated] N/A
ProCare is a relatively common business name used by multiple unrelated companies across different industries and countries. Without additional context such as industry sector, country, or full legal name, it is not possible to identify a specific organization with confidence and provide accurate threat intelligence relevant information.
JRT Mechanical
August 28, 2026
•[ ransomware, manufacturing ]
JRT Mechanical was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Manufacturing. JRT Mechanical is a full-service mechanical contractor specializing in plumbing, HVAC, hydronic
s, and mechanical insulation, serving the Pacific Northwest for over 30 years. Founded in 1992,
the company has expanded from a small plumbing business to a robust team of over 160 employees
, focusing primarily on commercial and industrial projects.
We will upload 46gb of corporate data soon. Detailed employee personal information (SSNs, passp
orts, DLs, resumes, and another personal docs scans), medical information, client information,
projects, financials, confidential files, contrast and agreements, NDAs and so on.
BEPeterson
August 28, 2026
•[ ransomware, manufacturing, technology ]
BEPeterson was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-08-28. BEPeterson is a full-service metal fabricator specializing in custom solutions for vessels, tan
ks, and heavy-gauge metal parts since 1935. The company serves a diverse range of industries in
cluding defense, medical, energy, and industrial sectors, providing high-quality products throu
gh advanced manufacturing techniques.
We will upload 20gb of corporate data soon. Employee personal information, client information,
projects, financials, NDAs and so on.
Berlin, Germany
August 28, 2026
•[ ransomware, government, technology ]
Berlin, Germany was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-08-28. Country: Germany. Berlin, Germany Total capacity 5.79 TBArchive scale: ~1.44 million files scanned; by category Maps/Geo 124,823, Legal/complaints 77,939, Financial 55,553, Contracts 46,522, HR 27,299,Government supervisory 13,142, Confidential 11,777, Infrastructure 8,110, Passwords 5,941, Health 2,738, Contacts 2,287.PII leak: 16,389 e-mails, 11,963 phone numbers, 12,076 individuals, 148 IBANs.Credentials in plaintext: GebudeAtlas, the ePayment PAYONE payment database, personal 'password safes' (danz, kramell Z_ADMIN database accounts, franssen), leadership credentials.Disciplinary proceedings: the ANDERSON case (432 files, 20252026, lawsuit at VG Berlin administrative court), the politically motivated misconduct case involving the LKA Staatsschutz (state security police), the forestry cases BLAUTH/MLLER/FIELICKE.State secrets: Bundesrat committee protocols with declassification correspondence, Geheimschutz (classified-material handling) data.Passports/IDs (recent, from personnel files and GI-Vertraulich).KRITIS: vulnerability analyses of Berlin's water supply.Mass personal data: Personalakten (personnel files) >5,000, Convotis payroll, OWi (administrative-offence) files >5,000, Postbuch SQL dumps 20202026, PST archives, leadership private data (IBANs, ID cards, Behrendt's bank card).NDA: 3,226 documentsLegal violation map (GDPR Art. 32/9/33, VSA/StGB upon VS classification confirmation, BSIG/KRITIS) More
Alumax
August 28, 2026
•[ ransomware, manufacturing, leak ]
Alumax was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Manufacturing. Country: United States of America. Alumax Alumnios specializes in the distribution of aluminum and accessories for the constructi
on industry, focusing on providing tailored solutions for builders and metalworkers. The compan
y prides itself on its partnership with Hydro, a global leader in sustainable aluminum, allowin
g them to offer high-quality products that meet the market's demanding needs.
We will upload 58gb of corporate data soon. Detailed employee personal information (passports,
IDs, and another personal docs scans), client information, projects, financials, confidential f
iles, contrast and agreements, NDAs and so on.
Hangzhou Qihan Biotech Co., Ltd.
August 12, 2026
•[ ransomware, healthcare, technology ]
Hangzhou Qihan Biotech Co., Ltd. was listed as a victim on the leak site of the global ransomware group; the attack is estimated to have taken place on 2026-08-12. Sector: Healthcare. Country: China. Website: www.qihanbio.com. Qihan Biotech is a Hangzhoubased biotech company specializing in gene editing and cell/organ therapies. It develops immuneprivileged cells and xenogeneic organs to treat cancer and organ failure. The company aims to make these therapies accessible worldwide.
Vigilia
August 6, 2026
•[ ransomware, technology, healthcare ]
Vigilia was listed as a victim on the leak site of the global ransomware group; the attack is estimated to have taken place on 2026-08-06. Sector: Technology. Country: Uruguay. Website: vigilia.com.uy. VIGILIA is a company that provides support and care services for people.
It offers assistance in medical facilities, home care, ambulance transportation, and related administrative support.
The company also provides insurance policies and helps coordinate medical consultations and tests.
Newton County School System
August 28, 2026
•[ ransomware, education ]
Newton County School System was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Education. Country: United States of America. Website: www.newtoncountyschools.org.
macallister.com
August 28, 2026
•[ ransomware, leak ]
macallister.com was listed as a victim on the leak site of the chaos ransomware group; the attack is estimated to have taken place on 2026-08-28. Country: United Kingdom of Great Britain and Northern Ireland. Website: macallister.com. MacAllister (macallister.com) Countdown to Publication
Management at MacAllister has chosen to completely ignore all attempts to establish a constructive dialogue regarding their security breach. Silence will not make this situation go away.
Since leadership refuses to engage, we are moving fo
corematerials.com
August 28, 2026
•[ ransomware, manufacturing ]
corematerials.com was listed as a victim on the leak site of the chaos ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Manufacturing. Country: United States of America. Website: corematerials.com. Core Materials (corematerials.com) Countdown to Publication
Management at Core Materials has chosen to completely ignore all attempts to establish a constructive dialogue regarding their security breach. Silence will not make this situation go away.
Since leadership refuses to engage, we are m
Elekta AB
August 28, 2026
•[ ransomware, healthcare, leak ]
Elekta AB was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Healthcare. Country: Sweden. This is a final warning to reach out by 1 Sep 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 29 Aug 2026 | Warning: FINAL WARNING
Akpera Gayrimenkul Yatırım A.Ş.
August 28, 2026
•[ ransomware, retail ]
Akpera Gayrimenkul Yatrm A.. was listed as a victim on the leak site of the Doommageddon ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Other. Country: Turkey. Status: upcoming | Data size: | Files: 0 files | Deadline: 2026-09-15T00:00:00Z
SITTNAK Lojistik A.Ş.
August 28, 2026
•[ ransomware, manufacturing ]
SITTNAK Lojistik A.. was listed as a victim on the leak site of the Doommageddon ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Transportation. Country: Turkey. Status: upcoming | Data size: | Files: 0 files | Deadline: 2026-09-15T00:00:00Z
