BioPharma
August 9, 2026
•[ ransomware, healthcare ]
BioPharma was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-09. Sector: Healthcare. Country: United States of America. BioPharma is a global biopharmaceutical innovator founded in 2003 and headquartered in Taiwan.
It specializes in developing best-in-class therapies and biologics for blood disorders, hematologic cancers, and other serious diseases.
The company is fully integrated and operates internationally with a strong commercial and clinical presence in the U.S., Europe, and Japan.
Cascade Coffee
July 30, 2026
•[ ransomware, retail, manufacturing ]
Cascade Coffee was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-07-30. Sector: Retail & E-Commerce. Country: United States of America. Website: cascadecoffee.com. Cascade Coffee is a premier gourmet coffee contract manufacturer based near Seattle, Washington
, specializing in roasting, grinding, flavoring, and packaging coffee. The company caters to so
me of the world's finest coffee brands, providing a wide range of products including whole bean
, ground, flavored coffees, and specialty blends.
We will upload corporate data soon. Detailed personal employee information (passports, DLs, add
resses, phones, car information), details, financials, contracts and agreements, NDAs and so on
.
Strategy First International College
August 20, 2026
•[ ransomware, education ]
Strategy First International College was listed as a victim on the leak site of the DYSPHOR1A ransomware group; the attack is estimated to have taken place on 2026-08-20. Sector: Education. Country: Myanmar. Website: strategyfirst.edu.mm. Normal Hunters operation compromising Strategy First International College (SFIC) student accounts, exposing personal information, academic records, and financial data.
Job Net .COM.MM
August 20, 2026
•[ ransomware, technology, leak ]
Job Net .COM.MM was listed as a victim on the leak site of the DYSPHOR1A ransomware group; the attack is estimated to have taken place on 2026-08-20. Sector: Professional Services. Country: Myanmar. Normal Hunters operation compromising Job Net .COM.MM business data, exposing corporate information, user accounts, and business operations data.
GUSTO College GLMS
August 20, 2026
•[ ransomware, education, technology ]
GUSTO College GLMS was listed as a victim on the leak site of the DYSPHOR1A ransomware group; the attack is estimated to have taken place on 2026-08-20. Sector: Education. Country: Thailand. Website: gusto-education.com. Compromised user accounts from GUSTO College's GLMS (Global Learning Management System). Exposed user credentials from the Moodle platform at gusto-education.com.
Tedesco & Partners STP srl
August 20, 2026
•[ ransomware, finance ]
Tedesco & Partners STP srl was listed as a victim on the leak site of the titan ransomware group; the attack is estimated to have taken place on 2026-08-20. Sector: Professional Services. Country: Italy. Website: tedescoepartners.it.
Alto Calore Servizi SPA
August 20, 2026
•[ ransomware, energy ]
Alto Calore Servizi SPA was listed as a victim on the leak site of the titan ransomware group; the attack is estimated to have taken place on 2026-08-20. Sector: Energy & Utilities. Country: Italy. Website: www.altocalore.it. [AI generated] Alto Calore Servizi SPA is an Italian public utility company operating in the Campania region of southern Italy. It is primarily engaged in the management and distribution of drinking water and sewage services. The company serves numerous municipalities in the provinces of Avellino and Benevento, handling water supply infrastructure, treatment, and distribution to residential and industrial customers.
CTP S.r.l.
August 20, 2026
•[ ransomware, technology, leak ]
CTP S.r.l. was listed as a victim on the leak site of the titan ransomware group; the attack is estimated to have taken place on 2026-08-20. Country: Italy. Website: ctpsrl.it. [AI generated] CTP S.r.l. is an Italian company operating in the printing and publishing technology sector. Based in Italy, it specializes in the development and supply of software and systems for editorial production, prepress, and content management. The company serves media, publishing, and printing industries, providing workflow automation solutions that help customers manage and streamline the production of newspapers, magazines, and other printed or digital content.
Frisian Flag Indonesia
August 20, 2026
•[ ransomware, manufacturing ]
Frisian Flag Indonesia was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-08-20. Sector: Agriculture and Food Production. Country: Indonesia. Frisian Flag Indonesia specializes in high-quality dairy products, including sweetened condensed milk, UHT milk, powdered milk for families, and cheese. The company aims to provide nutritious options that support the health and well-being of families, offering products enriched with vitamins and minerals. Their target clients include families, pregnant women, and children, focusing on delivering nutritional benefits through their diverse product range. Established in 1871, Frisian Flag is committed to building strong families by promoting healthy dietary habits.
Termotecnica Industriale S.r.l.
August 20, 2026
•[ ransomware, manufacturing, energy ]
Termotecnica Industriale S.r.l. was listed as a victim on the leak site of the titan ransomware group; the attack is estimated to have taken place on 2026-08-20. Sector: Manufacturing. Country: Italy. Website: termotecnica.it. [AI generated] Termotecnica Industriale S.r.l. is an Italian company operating in the industrial thermal engineering sector. Based in Italy, it specializes in the design and manufacturing of heating systems, thermal equipment, and industrial burners. The company serves various industrial clients requiring customized thermal solutions for production processes. It operates primarily in the energy and industrial plant engineering market within Italy and potentially broader European markets.
Qualiflex Datacenter | HWZ-Studiengnge (fh-hwz.ch), myenb.ch, etc
August 20, 2026
•[ ransomware, technology ]
Qualiflex Datacenter | HWZ-Studiengnge (fh-hwz.ch), myenb.ch, etc was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-08-20. Sector: Technology. Country: Switzerland. Website: fh-hwz.ch. Qualiflex Datacenter - data from companies such as HWZ-Studiengnge (fh-hwz.ch), myenb.ch, schelling.ch, kaelteringag.ch & kaeltebucher.ch, cbmswiss.ch, vitabad.ch, ign8.ch, etc., was stolen
Latoplast
August 20, 2026
•[ ransomware, manufacturing ]
Latoplast was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-08-20. Sector: Manufacturing. Country: Latvia. Website: www.latoplast.com. Canada
Be Media
August 20, 2026
•[ ransomware, technology ]
Be Media was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-08-20. Sector: Technology. Country: United States of America. Website: www.bemedia.com. United States
NetExam
August 20, 2026
•[ ransomware, technology, education ]
NetExam was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-08-20. Sector: Technology. Website: netexam.com. NetExam (netexam.com) the website of NetExam LMS+, a US-based SaaS learning management system built for external audiences rather than internal employees. It helps companies train, certify, and enable their channel partners, customers, and association members, with features like certification tracking, self-paced and instructor-led courses, e-commerce, white-labeling, Salesforce integration, and AI-powered course authoring agents. Headquartered in Dallas, with clients including AMD, AT&T, Oracle, Trellix, and Sabre. [Size: 18.1 MB | Sector: Education, Retail, Other]
marvin
August 20, 2026
•[ ransomware, technology ]
marvin was listed as a victim on the leak site of the iah6477 ransomware group; the attack is estimated to have taken place on 2026-08-20. Sector: Technology. Size: 2.2 TiB
acima
August 20, 2026
•[ ransomware, finance ]
acima was listed as a victim on the leak site of the iah6477 ransomware group; the attack is estimated to have taken place on 2026-08-20. Sector: Financial Services. Country: United States of America. Website: acima.com. Size: 2.1 TiB
Cyrus******
August 20, 2026
•[ ransomware, technology ]
Cyrus****** was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-08-20. Sector: Technology. Country: United States of America. Website: cyrusone.com. This is a final warning to reach out by end of day 24 Aug 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 20 Aug 2026 | Warning: FINAL WARNING PAY OR LEAK
Ayuntamiento de Velilla de San Antonio
August 12, 2026
•[ ransomware, government ]
Ayuntamiento de Velilla de San Antonio was listed as a victim on the leak site of the kairos ransomware group; the attack is estimated to have taken place on 2026-08-12. Sector: Government & Defense. Country: Spain. Website: ayto-velilla.es. El Ayuntamiento de Velilla de San Antonio es el organismo oficial de gobierno local y administracin del municipio de Velilla de San Antonio, situado en la Comunidad de Madrid, Espaa. Gestiona los servicios pblicos, el padrn, los impuestos locales y la vida ciudadana de la localidad.
Gruppo Spaggiari Parma
August 20, 2026
•[ ransomware, technology, education ]
Gruppo Spaggiari Parma was listed as a victim on the leak site of the xpl0itrs ransomware group; the attack is estimated to have taken place on 2026-08-20. Sector: Manufacturing. Country: Italy. Website: spaggiari.eu. School management software
The University of Delhi (DU)
August 20, 2026
•[ ransomware, education ]
The University of Delhi (DU) was listed as a victim on the leak site of the DYSPHOR1A ransomware group; the attack is estimated to have taken place on 2026-08-20. Sector: Education. Country: India. Website: du.ac.in. The University of Delhi (DU) is a major public university in New Delhi, India, founded in 1922. It is one of India's most well-known universities, offering undergraduate, postgraduate, and doctoral programs across subjects like science, arts, commerce, law, and technology.
