Pump Engineering Company
August 25, 2026
•[ ransomware, manufacturing, leak ]
Pump Engineering Company was listed as a victim on the leak site of the Dark Project ransomware group; the attack is estimated to have taken place on 2026-08-25. Sector: Manufacturing. Country: United States of America. Website: www.pumpengineering.net. About Pump Engineering Company Pump Engineering Company is a full-service distributor and supplier of industrial pumps, parts, and fluid handling systems, serving Southern California since 1946. During the cyberattack, 120,000 files (115 GB) were stolen, including an extensive customer database, insurance documents, confidential financial documents, and a vast number of project drawings.
AGROLAND S.A.
August 25, 2026
•[ ransomware, manufacturing ]
AGROLAND S.A. was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-25. Sector: Agriculture and Food Production. Country: Romania. Website: www.agroland.com.
Davis & Ferber
October 8, 2025
•[ ransomware, leak ]
Davis & Ferber was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-10-08. Sector: Professional Services. Website: davisferber.com. Davis & Ferber LLP is a personal injury and malpractice law firm based in New York, specializin
g in various legal areas including medical malpractice, motor vehicle accidents, nursing home a
buse, and family law.
We will upload 60gb of corporate data soon. Detailed personal client information (passports, DL
s, addresses, SSNs, death/birth certs, phones and so on for almost a thousand people), confiden
tial files, court files, hearings, police reports, NDAs, etc.
WINTER Ingenieure
August 11, 2026
•[ ransomware, manufacturing, leak ]
WINTER Ingenieure was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-08-11. Sector: Manufacturing. Country: Germany. Website: winter-ingenieure.de. WINTER Ingenieure specializes in planning and monitoring the construction of technical building
equipment across Germany, focusing on functionality, sustainability, and cost-effectiveness. W
ith a team of over 140 employees located in Dsseldorf, Berlin, and Hamburg, they integrate tec
hnical components into buildings innovatively.
We will upload 340gb of corporate data soon. Employee personal information (German passports, I
Ds, addresses, phones contacts), confidential files, projects, lots of specifications and so on
.
S*******
August 24, 2026
•[ ransomware, technology ]
S******* was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-08-24. Website: .. An International Public Company
A-Plus Software Limited
August 25, 2026
•[ ransomware, sqlinjection, technology ]
A-Plus Software Limited was listed as a victim on the leak site of the ShadowByt3$ ransomware group; the attack is estimated to have taken place on 2026-08-25. Sector: Technology. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.a-plussoft.com. We Breached A-plus through a sql injection vulnerability and downloaded everything in there backend. We gained access to there system on 08/18/2026
The following data was stolen:
1. Website User Data (`usr.csv`)
- This file contains the administrative backend infrastructure for the website, exposing:
- 10 internal accounts, including the usernames `admin`, `debuger`, `camby`, `asuka`, `jimmy`, `ricole`, and `green`.
- Password hashes (SHA-1 format) revealing that almost all administrative users shared the exact same password.
- Internal access metadata
2. Marketing and Public Web Content
- The remaining four files contain the text, configuration, and structural layout used to display information to visitors on `a-plussoft.com`:
`- products.csv`
13 lines): The master list of software solutions and mobile apps sold by the company (such as SalesAnywhere).
`- product_content.csv` (101 lines): The detailed marketing descriptions, features, specifications, and text modules displayed on individual product pages.
`- news.csv` (89 lines): The text content of all historical corporate announcements, updates, and press releases published by the company.
`- news_cate.csv` (2 lines): The category organization tags used to sort the news section on the website
Uncompressed size
total records: 211
2,787,292 Bytes, which equals 2.6582 Megabytes (MB).
mirror 1: https://anonfilesnew.com/s/XtgbXhRkQQ8
mirror 2: https://pixeldrain.com/u/jUpuUyj9
Sinar Mas Agribusiness and Food Golden Agri-Resources)
August 25, 2026
•[ ransomware, leak, manufacturing ]
Sinar Mas Agribusiness and Food Golden Agri-Resources) was listed as a victim on the leak site of the ShadowByt3$ ransomware group; the attack is estimated to have taken place on 2026-08-25. Sector: Agriculture and Food Production. Country: Indonesia. Website: www.smart-tbk.com. We Breached This company a few months ago. we stole 375.66MB.
mirror 1: https://anonfilesnew.com/s/4t-mBJg9wMy
More info is on darkforums.ru about this leak.
Lockheed Architectural Solutions, Inc.
August 25, 2026
•[ ransomware, manufacturing, government ]
Lockheed Architectural Solutions, Inc. was listed as a victim on the leak site of the Global Secret Group ransomware group; the attack is estimated to have taken place on 2026-08-25. Sector: Government & Defense. Country: United States of America. Website: lockheedsolutions.com. Country: Pascoag, RI 02859, United States |
Website: lockheedsolutions.com |
Revenue: $31.2 Million |
Industry: Manufacturing, Construction, Building Materials |
Employees: 100-200 |
Properties: 1.3 TB (558,462 Files, 97,835 Folders)
Johnson City Honda
August 25, 2026
•[ ransomware, retail, automotive ]
Johnson City Honda was listed as a victim on the leak site of the Global Secret Group ransomware group; the attack is estimated to have taken place on 2026-08-25. Sector: Retail & E-Commerce. Country: United States of America. Website: johnsoncityhonda.com. Country: Tennessee, United States |
Website: johnsoncityhonda.com |
Revenue: $6,5 Million |
Industry: Automobile Dealers |
Employees: 11-50 |
Properties: 32.9 GB(34,277 Files, 8,896 Folders)
Studio Legale ESE
August 25, 2026
•[ ransomware, finance ]
Studio Legale ESE was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2026-08-25. Sector: Professional Services. Country: Italy. Website: studiolegaleese.it. Law Firms , Legal Services
National Kidney Registry
August 25, 2026
•[ ransomware, healthcare ]
National Kidney Registry was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2026-08-25. Sector: Healthcare. Country: United States of America. Website: kidneyregistry.com. [AI generated] The National Kidney Registry is a nonprofit organization based in the United States that facilitates kidney paired donation programs. It operates within the healthcare and organ transplantation industry, connecting kidney donors and recipients across a national network of transplant centers. Its mission is to improve transplant outcomes, increase the number of living donor transplants, and reduce patient waiting times for compatible kidneys.
SC PaderTeG Cabluri Electrice
August 25, 2026
•[ ransomware, manufacturing ]
SC PaderTeG Cabluri Electrice was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-25. Sector: Manufacturing. Country: Romania. Website: www.paderteg.ro.
mswalker.com
August 25, 2026
•[ ransomware, hack ]
mswalker.com was listed as a victim on the leak site of the chaos ransomware group; the attack is estimated to have taken place on 2026-08-25. Sector: Professional Services. Country: United States of America. Website: mswalker.com. MS Walker (mswalker.com) Countdown to Publication
Management at MS Walker has chosen to completely ignore all attempts to establish a constructive dialogue regarding their security breach. Silence will not make this situation go away.
Since leadership refuses to engage, we are moving forward o
industry.airliquide.kr
August 16, 2026
•[ ransomware, leak, manufacturing ]
industry.airliquide.kr was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-08-16. Sector: Manufacturing. Country: South Korea. Website: industry.airliquide.kr. Air Liquide has operated in South Korea for several decades and supplies essential gases and related technologies to major industries,
Brazosport College
August 25, 2026
•[ ransomware, education ]
Brazosport College was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-25. Sector: Education. Country: United States of America. Website: www.brazosport.edu.
Arich Enterprise Co., Ltd.
August 25, 2026
•[ ransomware, healthcare, retail ]
Arich Enterprise Co., Ltd. was listed as a victim on the leak site of the Orova ransomware group; the attack is estimated to have taken place on 2026-08-25. Sector: Other. Country: Taiwan. Website: www.arich.com.tw. Currently, our end customers include over 12,000 establishments, such as medical centers, regional hospitals, area hospitals, clinics, chain pharmacies, standalone pharmacies, and hyper market channels. We have created a robust pharmaceutical marketing service system and become the largest domestic company in this field.
Hamilton
August 26, 2026
•[ ransomware, manufacturing, technology ]
Hamilton was listed as a victim on the leak site of the AiLock ransomware group; the attack is estimated to have taken place on 2026-08-26. Sector: Other. Country: United States of America. Website: hamiltoncompany.com. Founded in 1953 and headquartered in Reno, Nevada, Hamilton Company is a global provider in the design and manufacture of liquid handling, process measurement, robotics and automated storage solutions, serving customers in academic and private research laboratories, pharmaceutical and clinical diagnostic companies and government institutions.
Morgan Services
August 26, 2026
•[ ransomware, manufacturing, retail ]
Morgan Services was listed as a victim on the leak site of the AiLock ransomware group; the attack is estimated to have taken place on 2026-08-26. Sector: Professional Services. Country: United Kingdom of Great Britain and Northern Ireland. Website: morganservices.com. Morgan Services, Inc. is a family-owned textile company in business since 1887, they specialize in linen and uniform rental services for all types of facilities. Morgan is headquartered in Chicago, Illinois.
MEMSIC
August 26, 2026
•[ ransomware, manufacturing, technology ]
MEMSIC was listed as a victim on the leak site of the abyss ransomware group; the attack is estimated to have taken place on 2026-08-26. Sector: Manufacturing. Country: United States of America. Founded in 1999, MEMSIC is a company that designs, manufactures Flow sensors, Accelerometers, Sensing technology, Inertial systems, Magnetometers, Tilt sensors. MEMSIC is located in Massachusetts.
ERPIS LLC
August 26, 2026
•[ ransomware, technology, financial ]
ERPIS LLC was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-08-26. Sector: Professional Services. Website: ERPIS LLC. [software] ERPIS LLC (doing business as ShipERP) a Texas-based SAP integrator whose single product is enterprise shipping management software used by Boeing, Pfizer, NVIDIA, John Deere, Medtronic, and 83 other enterprise customers.
The exposed material includes:
Complete product source code all versions (2.05.4) of ShipERP's ABAP source, the company's sole revenue-generating asset ($20.6M backlog)
Live QuickBooks financial database (705 MB) complete payroll (SSN, bank accounts, salaries), vendor banking details, AR/AP, and general ledger
Full customer contract register exact pricing for all 88 enterprise customers with $20.6M in deferred revenue
SAP installation media (245 GB) full HANA, S/4HANA, and kernel distributions
