Cozad Asset Management
August 4, 2026
•[ ransomware, finance ]
Cozad Asset Management was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-08-04. Sector: Financial Services. Country: United States of America. Website: cozadasset.com. Cozad Asset Management, Inc. provides the highest quality professional and personalized financi
al services and advice to individuals, families and institutional investors throughout the coun
try.
We will upload 13gb corporate data soon. Employee personal information (passport, DLs, SSN), fi
nancials, confidential files, contracts and agreements, legal files and so on.
Keystops
July 29, 2026
•[ ransomware, technology, energy ]
Keystops was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-07-29. Sector: Technology. Country: United States of America. Website: keystops.com. Key Oil Company is the largest distributor of branded motor fuels for Marathon Petroleum Compan
y and also holds contracts with major brands like ExxonMobil and ConocoPhillips. They provide a
wide range of products including lubricants, diesel exhaust fluid, antifreeze, and various fue
l delivery solutions.
We will upload 15gb corporate data soon. Employee and client personal information (NAME, PASSPO
RT, DL, SSN and so on), financials, payment details, contracts and agreements and so on.
Sweet Water Holdings
August 14, 2026
•[ ransomware, manufacturing ]
Sweet Water Holdings was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-08-14. Sector: Agriculture and Food Production. Country: United States of America. Website: swhco.com.
Turner and Townsend
August 14, 2026
•[ ransomware, leak, manufacturing ]
Turner and Townsend was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-08-14. Sector: Professional Services. Country: United Kingdom of Great Britain and Northern Ireland. Website: turnerandtownsend.com. [AI generated] Turner and Townsend is a global professional services company headquartered in the United Kingdom. Founded in 1946, it operates in the construction, real estate, infrastructure, and natural resources sectors. The firm provides project management, cost management, and programme management services. It operates in over 50 countries, serving both public and private sector clients across major capital investment programmes worldwide.
Connections
August 14, 2026
•[ ransomware, retail ]
Connections was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-14. Country: Belgium. Website: www.connections.be.
granjarinya.com
July 20, 2026
•[ ransomware, manufacturing ]
granjarinya.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-07-20. Sector: Agriculture and Food Production. Country: Spain. Website: granjarinya.com. Headquartered in Albal, Valencia, the family-owned company traces its origins to three generations of livestock farming. What began as a
FERRARI MANGIMI SRL
August 14, 2026
•[ ransomware, manufacturing ]
FERRARI MANGIMI SRL was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-14. Sector: Agriculture and Food Production. Country: Italy. Website: lavoroperte.regione.emilia-romagna.it/offerte-lavoro/piacenza/meccanico-auto-sarmato/507478.
www.shalina.com
August 15, 2026
•[ ransomware, healthcare ]
www.shalina.com was listed as a victim on the leak site of the blackwater ransomware group; the attack is estimated to have taken place on 2026-08-15. Country: India. Website: www.shalina.com. system breach, data blocking
www.amca.org.ar
August 15, 2026
•[ ransomware, leak, finance ]
www.amca.org.ar was listed as a victim on the leak site of the blackwater ransomware group; the attack is estimated to have taken place on 2026-08-15. Sector: Professional Services. Country: Argentina. Website: www.amca.org.ar. system breach, data blocking
Lepi Enterprises
August 15, 2026
•[ ransomware, manufacturing ]
Lepi Enterprises was listed as a victim on the leak site of the securotrop ransomware group; the attack is estimated to have taken place on 2026-08-15. Country: United States of America. Website: www.lepienterprises.com. Status: AWAITING
Size: 692 GB
SEARS (Grupo Sanborns)
August 15, 2026
•[ ransomware, retail, technology ]
SEARS (Grupo Sanborns) was listed as a victim on the leak site of the spacebears ransomware group; the attack is estimated to have taken place on 2026-08-15. Sector: Retail & E-Commerce. Country: Mexico. Website: www.sears.com.mx. SEARS (Grupo Sanborns, S.A. de C.V.) is a leading Mexican retail company and a key subsidiary of Grupo Carso, owned by the Slim family.Founded in 1903 by the Sanborn brothers, the company has grown into one of the countrys most iconic and successful retail groups.It owns and operates two of Mexicos most famous brands: Sears (mid-range department stores) and Sanborns (the signature store + restaurant/cafe format).Today, Grupo Sanborns manages more than 41,000 employees and hundreds of stores nationwide, with a strong focus on e-commerce and digital transformation.Website: www.sears.com.mx and www.sanborns.com.mx.AttentionDemo files will appear here in the coming days, ahead of the full-scale release. https://www.sears.com.mx/
servmarmg.cl
August 15, 2026
•[ ransomware, hack ]
servmarmg.cl was listed as a victim on the leak site of the ms13089 ransomware group; the attack is estimated to have taken place on 2026-08-15. Sector: Other. Country: Chile. Website: servmarmg.cl. Empresa con ms de 25 aos de experiencia en el rubro martimo, orientada a ejecutar operaciones con estndares de calidad, control de riesgo y tiempos de respuesta consistentes...
DXS International
August 15, 2026
•[ ransomware, technology, healthcare ]
DXS International was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2026-08-15. Sector: Technology. Country: United Kingdom of Great Britain and Northern Ireland. Website: dxs-systems.co.uk. Healthcare
Colla Health
August 15, 2026
•[ ransomware, healthcare ]
Colla Health was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2026-08-15. Sector: Healthcare. Country: United States of America. Website: collahealth.com. Healthcare
TOTVS
August 15, 2026
•[ ransomware, technology ]
TOTVS was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2026-08-15. Sector: Technology. Country: Brazil. Website: totvs.com. Business Services
AAM:HOA Management
August 15, 2026
•[ ransomware, technology ]
AAM:HOA Management was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2026-08-15. Sector: Professional Services. Country: United States of America. Website: associatedasset.com. HOA Management
DodoPayments
August 15, 2026
•[ ransomware, finance, technology ]
DodoPayments was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2026-08-15. Sector: Financial Services. Country: India. Website: dodopayments.com. Financial Software
RapidFort
August 15, 2026
•[ ransomware, technology, leak ]
RapidFort was listed as a victim on the leak site of the xpl0itrs ransomware group; the attack is estimated to have taken place on 2026-08-15. Sector: Technology. Country: United States of America. Website: rapidfort.com. Software supply chain security
Oz Hair & Beauty
August 15, 2026
•[ ransomware, retail ]
Oz Hair & Beauty was listed as a victim on the leak site of the xpl0itrs ransomware group; the attack is estimated to have taken place on 2026-08-15. Sector: Retail & E-Commerce. Country: Australia. Website: ozhairandbeauty.com. Hair and beauty products
Dynatrace
June 12, 2026
•[ ransomware, technology ]
Dynatrace was listed as a victim on the leak site of the xpl0itrs ransomware group; the attack is estimated to have taken place on 2026-06-12. Sector: Technology. Country: Austria. Website: dynatrace.com. AI observability platform
