Stadler Rail
July 28, 2026
•[ ransomware, manufacturing, technology ]
Stadler Rail was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-07-28. Sector: Transportation. Country: Switzerland. Website: stadlerrail.com. [AI generated] Stadler Rail is a Swiss manufacturer of railway vehicles headquartered in Bussnang, Switzerland. Founded in 1942, the company designs and produces a wide range of trains including regional and intercity trains, trams, metros, and rack railways. It operates globally, supplying rail operators across Europe, the Americas, and beyond, and is recognized for its FLIRT and KISS train families.
Mansfield Family Dentistry
July 23, 2026
•[ ransomware, healthcare ]
Mansfield Family Dentistry was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-07-23. Sector: Healthcare. Country: United States of America. Website: mansfielddentistry.com. [AI generated] Mansfield Family Dentistry is a dental practice operating in the United States, likely located in Mansfield, Ohio or a similarly named city. The practice provides general and family dentistry services, including routine cleanings, examinations, fillings, and preventive care for patients of all ages. It operates within the healthcare and dental services industry, serving local community members in a private practice setting.
Rocky Mount Recyclers
July 20, 2026
•[ ransomware, financial, manufacturing ]
Rocky Mount Recyclers was listed as a victim on the leak site of the Dark Project ransomware group; the attack is estimated to have taken place on 2026-07-20. Sector: Manufacturing. Country: United States of America. Website: www.rmrnc.com. Due to cyberattack on Rocky Mount Recyclers more than 40Gb of company personal data was stolen. Leakage contains big amount of sensitive data such as personal emlpoyes documents, company's customers data, bank and financial information documents. About 12,000 files are not secured by RMR for now. Download here: http://2zl5qc3mqap7vziqfis65oyjcgdiedigoequxbqsn6uwian7ieozvoqd.onion/
Powerweave
July 23, 2026
•[ ransomware, manufacturing ]
Powerweave was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-07-23. Sector: Manufacturing. Country: India. Website: powerweave.com.
Aptara
July 22, 2026
•[ ransomware, leak, technology ]
Aptara was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-07-22. Sector: Professional Services. Country: India. Website: aptaracorp.com. [AI generated] Aptara is a US-based digital content transformation company specializing in publishing, learning, and content solutions. Operating primarily in the publishing and e-learning industries, it provides services such as content conversion, instructional design, digital publishing, and XML/DITA authoring. Founded in 1988 and headquartered in Falls Church, Virginia, Aptara serves clients in education, government, and corporate sectors globally, helping organizations transition traditional content into digital formats.
Al-Futtaim Group
July 21, 2026
•[ ransomware, retail, automotive ]
Al-Futtaim Group was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-07-21. Sector: Retail & E-Commerce. Country: United Arab Emirates. Website: alfuttaim.com. [AI generated] Al-Futtaim Group is a diversified conglomerate headquartered in Dubai, United Arab Emirates. Founded in the 1930s, it operates across retail, automotive, real estate, and financial services sectors. The group represents major global brands including IKEA, Toyota, and Marks & Spencer across the Middle East, Africa, and Asia. It is one of the region's most prominent privately held business enterprises.
Brainhunter Companies LLC. and Brainhunter Systems Ltd.
August 3, 2026
•[ ransomware, technology, financial ]
Brainhunter Companies LLC. and Brainhunter Systems Ltd. was listed as a victim on the leak site of the Dark Project ransomware group; the attack is estimated to have taken place on 2026-08-03. Sector: Professional Services. Country: United States of America. Website: www.brainhunter.com. About Brainhunter Companies LLC. and Brainhunter Systems Ltd. Founded in 1995, Brainhunter is an employment agency providing staffing and recruiting services to engineers, information technology, healthcare, and industrial sectors. Brainhunter also offers workplace management products, solutions and consulting, payroll and compliance services, and more. Brainhunter is headquartered in Toronto, Ontario. As a result of the attack on Brainhunter, more than 160 GB of the company's confidential data was stolen, including banking and financial documents, as well as the personal data of employees and customers. At this time, approximately 320,000 files remain unprotected by Brainhunter Foundation.
Sutherland Packaging
July 24, 2026
•[ ransomware, manufacturing, financial ]
Sutherland Packaging was listed as a victim on the leak site of the Dark Project ransomware group; the attack is estimated to have taken place on 2026-07-24. Sector: Manufacturing. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.sutherlandpackaging.com. About SPI Sutherland Packaging LLC is a leading manufacturer specializing in creative digitally printed full-color point-of-purchase displays for brands worldwide. The company offers a range of services including digital printing, retail packaging, and turnkey fulfillment, focusing on delivering custom-blended solutions that meet client demands. With over 50 years of experience, Sutherland Packaging is trusted by global brands for its high-quality and cost-effective solutions. Due to cyberattack on Sutherland Packaging more than "200" Gb of company data was stolen. Leakage contains big amount of sensitive data such as company's customers data, bank and financial information documents. About 250 000 files are not secured by Sutherland Packaging for now.
Emirates Flight Catering
July 17, 2026
•[ ransomware, leak, hospitality ]
Emirates Flight Catering was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-07-17. Sector: Hospitality. Country: United Arab Emirates. Website: emiratesflightcatering.com. [AI generated] Emirates Flight Catering is a leading airline catering company headquartered in Dubai, United Arab Emirates. It operates one of the world's largest catering facilities, providing in-flight meals and hospitality services primarily to Emirates airline and other carriers at Dubai International Airport. The company serves millions of meals annually and also offers event catering and food production services across the region.
Mayco International
July 31, 2026
•[ ransomware, manufacturing, leak ]
Mayco International was listed as a victim on the leak site of the Dark Project ransomware group; the attack is estimated to have taken place on 2026-07-31. Sector: Manufacturing. Country: United States of America. Website: www.maycointernational.com. About Mayco International At least 2Tb of sensitive data were exfiltrated from the companys control following a cyberattack. The compromised dataset leaked from Mayco internatioins company infrastructure includes internal organizational documents, proprietary technical schemas, employee personally identifiable information, and a substantial volume of financial records.
Dharma Group
July 17, 2026
•[ ransomware, hack ]
Dharma Group was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-07-17. Sector: Other. Country: Italy. Website: dharmagroup.it.
Allied Telesis
July 17, 2026
•[ ransomware, technology, leak ]
Allied Telesis was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-07-17. Sector: Technology. Country: Japan. Website: alliedtelesis.com. [AI generated] Allied Telesis is a global networking solutions provider headquartered in Tokyo, Japan. Founded in 1987, the company operates in the telecommunications and IT infrastructure industry, designing and manufacturing network hardware and software including switches, routers, wireless access points, and network management systems. It serves enterprise, government, healthcare, and education sectors across more than 40 countries worldwide.
Storer Transportation and Storer Coachways
July 14, 2026
•[ ransomware, financial ]
Storer Transportation and Storer Coachways was listed as a victim on the leak site of the Dark Project ransomware group; the attack is estimated to have taken place on 2026-07-14. Sector: Transportation. Country: United States of America. Website: www.storerbus.com. The company "Storer Transportation" and "Storer Coachways" was attacked, resulting in the theft of more than 50,000 folders (240+ GB) of the companys confidential information, including more than 1,500 pieces of employee personal data, financial and banking documents, credit card information and a large amount of confidential incident data. Download here: http://pokttabd2hod47ladeeoin22wmq4remyo3wshwvxfuhgqygcbezq2qqd.onion
Rodschinson Investment
July 12, 2026
•[ ransomware, finance ]
Rodschinson Investment was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-07-12. Sector: Financial Services. Country: Belgium. Website: rodschinson.com.
Thermo King
June 8, 2026
•[ ransomware, financial, leak ]
Thermo King was listed as a victim on the leak site of the Dark Project ransomware group; the attack is estimated to have taken place on 2026-06-08. Sector: Transportation. Country: Canada. Website: thermoking.ca. Due to cyberattack on Genesis more than 70 Gb of company data was stolen. Leakage contains big amount of sensitive data such as company's customers data, bank and financial information documents. About 10 000 files are not secured by THERMO KING for now. Download here: http://wjcml4mxpcvsmjxm33zhjb46nzutxk6g3f5w23fopgpwj6pqjcidiyqd.onion
TechCorr
July 9, 2026
•[ ransomware, technology ]
TechCorr was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-07-09. Sector: Technology. Website: techcorr.com.
Ruhrpumpen
July 6, 2026
•[ ransomware, manufacturing, leak ]
Ruhrpumpen was listed as a victim on the leak site of the Dark Project ransomware group; the attack is estimated to have taken place on 2026-07-06. Sector: Manufacturing. Country: Germany. Website: www.ruhrpumpen.com. About Ruhrpumpen Ruhrpumpen is a leading global manufacturer of highly engineered centrifugal and reciprocating pumps. A sophisticated cyberattack in the company's network led to a massive data breach. As a result of the incident, approximately 1 TB of data was leaked, including confidential personal and financial information.
NIMR Oil
July 9, 2026
•[ ransomware, energy ]
NIMR Oil was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-07-09. Sector: Energy & Utilities. Country: United Arab Emirates. Website: nimroil.com. [AI generated] NIMR Oil is an Omani oil and gas company operating primarily in the Sultanate of Oman. It specializes in the production, processing, and management of crude oil and natural gas resources. The company works within Oman's energy sector, often collaborating with the national oil infrastructure. NIMR is known for operating mature oilfields and applying enhanced recovery techniques to maximize output from established reserves.
Labpharma
June 25, 2026
•[ ransomware, healthcare, technology ]
Labpharma was listed as a victim on the leak site of the Dark Project ransomware group; the attack is estimated to have taken place on 2026-06-25. Sector: Healthcare. Country: Mexico. Website: labpharmacorp.com. Labpharmacorp Labpharma is a Clinical Laboratory in Miami dedicated to delivering dependable, high-quality laboratory services for clinical trials and research. About Labpharma Labpharma is a laboratory data company supporting clinical research trials. Company offers Local and Central Laboratory testing and data management. Standard Services: Laboratory Manual (electronic and hardcopy), kit production, door to door shipping (IATA certified), research trained and certified (CGP certified), while testing menu includes the following disciplines: Hematology, Clinical Chemistry, Immunochemistry, Infectious Disease, Hemostasis, and Toxicology. From end to end all samples are barcode, tracked and managed to ensure reliable laboratory services for research studies. Download here: http://t2ru74fbgut26xnagtrl4ajeh5vqytrl6cpr6cubmr6sqdxk5guh5mqd.onion/
Greenbotz
July 7, 2026
•[ ransomware, technology ]
Greenbotz was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-07-07. Sector: Technology. Country: India. Website: greenbotz.co.
