Crystal Pharmatech
August 21, 2026
•[ ransomware, healthcare, technology ]
Crystal Pharmatech was listed as a victim on the leak site of the Eclipse ransomware group; the attack is estimated to have taken place on 2026-08-21. Sector: Healthcare. Country: United States of America. Website: www.crystalpharmatech.com. Crystal Pharmatech is a technology-driven contract research organization (CRO) that focuses on materials science and engineering for drug development. Established in 2010 and have R&D centers located in Suzhou (China), New Jersey, San Francisco (USA), and Toronto (Canada). Also its key differentiator is integrated and specialized services, including API solid-state research, crystallization, preformulation, formulation development and manufacturing, clinical supply.
Schardein Mechanical
August 21, 2026
•[ ransomware, manufacturing, healthcare ]
Schardein Mechanical was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-08-21. Sector: Manufacturing. Country: United States of America. Website: schardein.com. Schardein Mechanical is a trusted mechanical contractor providing top-of-the-line engineering services to commercial clients in Kentucky and Southern Indiana. Their offerings include design, installation, maintenance, and replacement of HVAC, plumbing, and process piping systems, with 24/7 availability for emergency services. The company caters to a diverse range of industries, including healthcare, education, and manufacturing, ensuring high-quality installations by skilled professionals. With multiple locations in Louisville, Elizabethtown, and Bowling Green, Schardein Mechanical has been delivering innovative solutions since 1984.
The company headquarters is located in 1810 Outer Loop, Louisville, KY 40219, United States.. 51-200 Employees
Phoenix Group of Companies
August 21, 2026
•[ ransomware, manufacturing ]
Phoenix Group of Companies was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-08-21. Sector: Other. Country: United States of America. Website: phoenixlitho.com. The Phoenix Group of Companies is a leading single-source provider of print solutions from concept to completion that produces high quality communications to help businesses rise above the competition and overcome everyday challenges.
The company headquarters is located in 11631 Caroline Road, Philadelphia, PA 19154, United States. 201-500 Employees
Pinnacle Hospital
August 21, 2026
•[ ransomware, healthcare ]
Pinnacle Hospital was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-08-21. Sector: Healthcare. Country: United States of America. Website: pinnaclehealthcare.net. Pinnacle Healthcare / Pinnacle Hospital is a physician-owned, patient-centered healthcare organization operating an 18-bed acute care hospital in Crown Point, Indiana. The company provides a wide range of medical and surgical services through a network of more than 150 physicians and medical specialists. Its services include family medicine, internal medicine, gastroenterology, general surgery, gynecology, orthopedics, pain management, urology, breast care, specialty clinics, and walk-in care. Pinnacle Healthcare focuses on delivering personalized, high-quality care in a smaller hospital environment, emphasizing patient satisfaction, efficient treatment, personal service, and respect for patients and their families.
The company headquarters is located in 9301 Connecticut Drive, Crown Point, IN 46307, United States. 201-500 Employees
Proveli
August 20, 2026
•[ ransomware, technology ]
Proveli was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-08-20. Sector: Technology. Country: United States of America. Website: proveli.com. Proveli is a privately held business founded by two brothers: Reinhardt and Thomas. Proveli prides itself on having an entrepreneurial culture that encourages and rewards innovative thinking, collaboration, and ownership. The company's greatest asset is the company's passionate and dedicated team; it's their drive and passion for developing and executing strategies that have lead to the company being recognized for its accomplishments. Proveli is constantly searching for and evaluating organic and acquisition growth opportunities. If you have an investment opportunity that you feel would be a good fit for Proveli, please contact the company. The company encourage you to read about how we've cultivated a unique and dynamic culture at Proveli - one that helps the company build companies that make a difference.
The company headquarters is 1900 S Liberty Drive, Bloomington, IN 47403, United States. 51-200 Employees
AutoDie
August 21, 2026
•[ ransomware, manufacturing ]
AutoDie was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-08-21. Sector: Manufacturing. Country: United States of America. Website: autodie-llc.com. Founded in 1962 and headquartered in Grand Rapids, MI, Autodie LLC is a company that specializes in design and manufacture large-scale dies for metal stamping.
The company headquarters is located in 44 Coldbrook Street NW, Grand Rapids, MI 49503, United States. 201-500 Employees
Ruggles Sign Company
August 20, 2026
•[ ransomware, manufacturing ]
Ruggles Sign Company was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-08-20. Sector: Manufacturing. Country: United States of America. Website: rugglessign.com. Ruggles Sign Company is a family-owned business with over 75 years of experience in providing personalized service in the signage industry. They offer a comprehensive range of services including project management, design, manufacturing, installation, rebranding, and maintenance for global, national, and regional signage. Their clients include well-known brands such as Nike, J. Crew, and Under Armour, showcasing their capability to handle diverse signage needs. Ruggles Sign is committed to excellence and sustainability, making them a trusted partner in bringing brands into view.
The company headquarters is located in 93 Industry Drive, Versailles, KY 40383-1470, United States. 51-200 Employees
Namyang Industrial Co., Ltd.
August 23, 2026
•[ ransomware, leak, manufacturing ]
Namyang Industrial Co., Ltd. was listed as a victim on the leak site of the Barracuda ransomware group; the attack is estimated to have taken place on 2026-08-23. Sector: Manufacturing. Country: South Korea. Website: nyi.co.kr. Selling fresh full database dumps of company Namyang Industrial Co., Ltd. (renamed to Namyang Nexmo).
Infrastructure dump, not website! There information about employers, manufacturing, parts, clients, partners and etc. Total lines (csv format): 17 641 181. | Severity: HIGH | Size: 2.51 GB | Status: free | FREE
FactoryFive
August 23, 2026
•[ ransomware, manufacturing, financial ]
FactoryFive was listed as a victim on the leak site of the metaencryptor ransomware group; the attack is estimated to have taken place on 2026-08-23. Sector: Manufacturing. Country: United States of America. Website: factoryfive.com. Factory Five Racing Inc kit-car manufacturer (Cobra replicas, GTM, Type 65 Coupe, 33 Hot Rod). 9 Tow Road, Wareham MA 02571-1086. ~90 employees, 158 endpoints. Revenue $5.5-6.5M/yr (credit card processing ~$4.3M, avg ticket $1245).
Exfiltrated data categories (~130GB): correspondence (PST archives), CRM contacts (GoldMine), ERP/pricing, engineering CAD (SolidWorks/Rhino), banking statements, insurance policies, tax documentation, legal contracts/NDAs, database backups. Includes detailed materials on several ongoing lawsuits parties, witnesses, testimonies, and related case files, alongside private correspondence.
Risk zones: PCI DSS (card processing $4.3M/yr), MA 201 CMR 17.00 (Massachusetts personal data protection), GDPR (EU clients), CCPA (California clients), active IRS audit, active MA Sales Tax audit, FTC Safeguards Rule. Reputational: customer warranties, partner contracts (SEMA supplier), licenses, litigation exposure. CEO: David T. Smith.
Corona Corporation
August 23, 2026
•[ ransomware, manufacturing, technology ]
Corona Corporation was listed as a victim on the leak site of the metaencryptor ransomware group; the attack is estimated to have taken place on 2026-08-23. Sector: Other. Country: Japan. Website: corona.co.jp. The company specializes in creating a comfortable home environment, focusing on heating, cooling and hot water technologies.
It was founded at April 1937, and now have more than 2000 employee.
Corona Corporation is stock listed, ticker 5909.T at Tokyo Stock Exchange (Standard)
Aquamar Inc
August 23, 2026
•[ ransomware, retail, manufacturing ]
Aquamar Inc was listed as a victim on the leak site of the metaencryptor ransomware group; the attack is estimated to have taken place on 2026-08-23. Sector: Agriculture and Food Production. Country: United States of America. Website: aquamarseafood.com. Aquamar, Inc. specializes in providing high-quality, wild-caught seafood products that are both delicious and nutritious.
The company targets markets in the U.S., Canada, and Latin America, focusing on retail and foodservice sectors.
MPA Pharma GmbH
August 23, 2026
•[ ransomware, healthcare ]
MPA Pharma GmbH was listed as a victim on the leak site of the metaencryptor ransomware group; the attack is estimated to have taken place on 2026-08-23. Sector: Healthcare. Country: Germany. Website: mpapharma.com. MPA Pharma GmbH is an internationally active, rapidly growing company specializing in the import and trade of high-quality pharmaceuticals, including both patented and generic products. With over 35 years of expertise in the pharmaceutical market, they also provide contract manufacturing services for third parties. Their primary clients include pharmacies and businesses in need of reliable pharmaceutical and medical products.
Revenue $614 Million
Weber Water Resources
August 23, 2026
•[ ransomware, energy, hack ]
Weber Water Resources was listed as a victim on the leak site of the metaencryptor ransomware group; the attack is estimated to have taken place on 2026-08-23. Sector: Energy & Utilities. Country: United States of America. Website: www.weberwaterresources.com. Founded in 1910, Weber Water Resources has been providing the widest range of water resource solutions at the lowest available risk to clients for over a century.
Through our superior problem solving ability, Weber Water Resources partners with public and private clients to achieve the most equitable outcome possible on each project.
revenue $25 M
Trailer Transit Inc
August 23, 2026
•[ ransomware, manufacturing ]
Trailer Transit Inc was listed as a victim on the leak site of the metaencryptor ransomware group; the attack is estimated to have taken place on 2026-08-23. Sector: Transportation. Country: United States of America. Website: www.trailertransit.com. Nationwide power-only transport services with 40+ years of experience. Trust Trailer Transit for dependable and accurate trailer transport solutions.
Revenue: $22 M
Woodlore International Inc.
August 23, 2026
•[ ransomware, manufacturing ]
Woodlore International Inc. was listed as a victim on the leak site of the metaencryptor ransomware group; the attack is estimated to have taken place on 2026-08-23. Sector: Other. Country: Canada. Website: www.woodlore.ca. Woodlore is manufacturer specializes in laminate casegood production for furniture.
Revenue $ 30 M
ConsultorioMovil: Telemedicine and Healthcare System
August 23, 2026
•[ ransomware, healthcare, technology ]
ConsultorioMovil: Telemedicine and Healthcare System was listed as a victim on the leak site of the kazu ransomware group; the attack is estimated to have taken place on 2026-08-23. Sector: Healthcare. Country: Mexico. Website: consultoriomovil.net. digital healthcare platform designed to help doctors, clinics, and medical professionals manage their daily operations more efficiently. It provides tools for scheduling patient appointments, maintaining electronic medical records, and conducting telemedicine consultations through online video or messaging. The platform also supports clinical documentation, patient communication, and administrative tasks, helping healthcare providers reduce paperwork and improve organization. Overall, ConsultorioMovil aims to simplify medical practice management and improve the way doctors interact with and care for their patients through a single, centralized system.
Meducar: Telemedicine and Patient Management System
August 23, 2026
•[ ransomware, healthcare, technology ]
Meducar: Telemedicine and Patient Management System was listed as a victim on the leak site of the kazu ransomware group; the attack is estimated to have taken place on 2026-08-23. Sector: Healthcare. Country: Brazil. Website: meducar.com. Meducar is a Latin American healthtech platform that provides software for doctors and clinics to manage medical appointments, electronic health records, and patient communication in one system. It helps healthcare professionals organize their daily practice by offering tools such as online scheduling, clinical history management, electronic prescriptions, and telemedicine services.
Centro Médico Especializado OSI: Healthcare Solutions
August 23, 2026
•[ ransomware, healthcare ]
Centro Mdico Especializado OSI: Healthcare Solutions was listed as a victim on the leak site of the kazu ransomware group; the attack is estimated to have taken place on 2026-08-23. Sector: Healthcare. Country: Mexico. Website: centromedicoosi.com. Centro Mdico Especializado OSI is a healthcare provider based in Peru that specializes in physical medicine, rehabilitation, physiotherapy, chiropractic care, and alternative medicine treatments. Founded in 1999 and headquartered in Lima, OSI has grown into one of the country's largest rehabilitation and physiotherapy networks, operating multiple clinics across the Lima metropolitan area. wellness network in Peru, focused on helping patients recover mobility, reduce pain, and improve their quality of life through specialized medical and therapeutic care.
Dr Akbar Niazi Teaching Hospital
August 23, 2026
•[ ransomware, healthcare ]
Dr Akbar Niazi Teaching Hospital was listed as a victim on the leak site of the kazu ransomware group; the attack is estimated to have taken place on 2026-08-23. Sector: Healthcare. Country: Pakistan. Website: www.anth.pk. Dr. Akbar Niazi Teaching Hospital (ANTH) is a 500-bed tertiary care teaching hospital located in Islamabad, Pakistan. The hospital provides a wide range of healthcare services, including emergency care, surgery, cardiology, orthopedics, pediatrics, gynecology, oncology, diagnostic laboratory services, and specialized outpatient clinics. As a teaching hospital, ANTH is affiliated with medical education and training programs, supporting the development of future healthcare professionals
Brazil Mobilemed: Cloud PACS Platform
August 23, 2026
•[ ransomware, healthcare, technology ]
Brazil Mobilemed: Cloud PACS Platform was listed as a victim on the leak site of the kazu ransomware group; the attack is estimated to have taken place on 2026-08-23. Sector: Healthcare. Country: Brazil. Website: mobilemed.com.br. Mobilemed is a Brazil-based health technology company that provides a cloud-based PACS (Picture Archiving and Communication System) for radiologists, hospitals, and diagnostic imaging centers. Its platform enables healthcare professionals to securely store, access, manage, and share medical images and diagnostic reports from anywhere, supporting teleradiology and improving workflow efficiency.