Applied Composites
September 24, 2026
•[ ransomware, manufacturing, technology ]
Applied Composites was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-09-24. Sector: Manufacturing. Country: United States of America. Website: appliedcomposites.com. Applied Composites is a leading U.S. manufacturer specializing in advanced composite components, assemblies, engineering, and tooling for the aerospace, defense, and space industries. The company provides highly engineered composite structures for aircraft, engines, missiles, unmanned aerial vehicles (UAVs), satellites, and launch vehicles. Its vertically integrated capabilities include design, tooling, manufacturing, machining, assembly, testing, and engineering support. Applied Composites operates multiple specialized facilities equipped with autoclaves, CNC machining centers, clean rooms, and advanced testing equipment. The company serves major aerospace and defense organizations and focuses on delivering lightweight, durable, high-performance composite solutions for demanding commercial, military, and space applications.
The company headquarters is located in 25671 Commercentre Drive, Lake Forest, CA 92630, United States. 501-1000 Employees
Apollo 21 – Quality Truck, Bus & Trailer Spare Parts South Africa
September 19, 2026
•[ ransomware, manufacturing, retail ]
Apollo 21 Quality Truck, Bus & Trailer Spare Parts South Africa was listed as a victim on the leak site of the BlackLocks ransomware group; the attack is estimated to have taken place on 2026-09-19. Sector: Transportation. Country: South Africa. Website: apollo21.co.za. Views: 985
International Chemical Co.
September 26, 2026
•[ ransomware, manufacturing, leak ]
International Chemical Co. was listed as a victim on the leak site of the Barracuda ransomware group; the attack is estimated to have taken place on 2026-09-26. Sector: Manufacturing. International Chemical Company (ICC) manufactures specialty metalworking fluids, industrial cleaners, rust preventatives, and custom chemical formulations.
We have extracted the most important files from their main file server and possess data on their sales, formulas, patents, manufacturing, contracts, and partners.
For example, we possess the full formulation and manufacturing instructions for I.C.C.s patented Biodraulic hydraulic oil. And even more than that. It is available for sale to competitors.
Victim website: https://e-icc.com | Severity: HIGH | Size: 90 GB | Status: selling | $50,000
cipher.systems
September 26, 2026
•[ ransomware, technology ]
cipher.systems was listed as a victim on the leak site of the m3rx ransomware group; the attack is estimated to have taken place on 2026-09-26. Sector: Technology. Country: United States of America. Website: cipher.systems. +1 703-672-0051 , At Cipher Systems, we specialize in delivering enterprise-grade IT solutions designed to help businesses evolve, secure, and scale in a rapidly changing digital world. From future-proof cloud infrastructures to next-gen cybersecurity and AI-powered intelligence, our solutions are engineered for performance and built for growth. With deep expertise in software engineering, IT consulting, and data science, we turn complex challenges into streamlined outcomesensuring that your systems are secure, your data is insightful, and your technology is always a step ahead. Stolen: --
ARCA UNLIMITED Architects
September 22, 2026
•[ ransomware, leak ]
ARCA UNLIMITED Architects was listed as a victim on the leak site of the BlackLocks ransomware group; the attack is estimated to have taken place on 2026-09-22. Sector: Professional Services. Country: South Africa. Views: 49
Pantaneiro Capas
September 27, 2026
•[ ransomware, manufacturing ]
Pantaneiro Capas was listed as a victim on the leak site of the arcusmedia ransomware group; the attack is estimated to have taken place on 2026-09-27. Sector: Manufacturing. Country: Brazil. www.pantaneirocapas.com.brPantaneiro Capas has been in the waterproof products market for Deadline: 2026-10-04 11:32:00.000000
Willatt & Flickinger
September 27, 2026
•[ ransomware, finance ]
Willatt & Flickinger was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-27. Country: United States of America. Website: www.wfaustin.com.
Revenga Smart Solutions
September 27, 2026
•[ ransomware, technology ]
Revenga Smart Solutions was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-27. Sector: Technology. Country: Spain. Website: www.gruporevenga.com.
Island
September 27, 2026
•[ ransomware, technology ]
Island was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-27. Sector: Technology. Country: Canada. Website: www.island.ca.
First Secure Bank Group
September 27, 2026
•[ ransomware, finance ]
First Secure Bank Group was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-09-27. Sector: Financial Services. Country: United States of America. First Secure Bank Group is a U.S.-based financial services organization focused on providing community-oriented banking solutions to individuals, families, and businesses. The group operates through affiliated banking institutions, including First Secure Bank and The State Bank Group. Its services include personal and business checking and savings accounts, commercial and consumer lending, mortgages, online banking, treasury services, and other financial products. First Secure Bank Group emphasizes personalized customer service, long-term relationships, and supporting the financial growth of the communities it serves. Through its network of banking institutions, the group provides accessible financial solutions while maintaining a strong focus on local businesses, community development, and responsible banking practices.
The company headquarters is located in 2175 Oneida St, Joliet, IL 60435, USA. 51-200 Employees
Ressources Si
September 27, 2026
•[ ransomware ]
Ressources Si was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-09-27. Sector: Professional Services. Country: France. Website: ressources-si.com. Ressources Si is a company that operates in the Movie Theaters industry. It employs 10to19 people and has 1Mto5M of revenue.
Asesoría FAR
September 27, 2026
•[ ransomware, finance ]
Asesora FAR was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-09-27. Sector: Professional Services. Asesora FAR is a Barcelona-based firm providing property management, accounting, tax, and business advisory services.
nsbsd.org
September 28, 2026
•[ ransomware, government, education ]
nsbsd.org was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Government & Defense. Country: United States of America. Website: nsbsd.org. North Slope Borough School District is a public school district serving the remote communities of Alaska's North Slope, headquartered in Utqiavik. It operates 11 schools across the borough, enrolling approximately 2,044 students from Pre-K through 12th grade. The district's mission is rooted in Iupiaq culture, aiming to develop students who are "empowered, culturally rooted, bilingual, healthy, critical, creative, life-long learners". For the 2025-2026 fiscal year, the district received $38,766,371 in local funding from the North Slope Borough, with per-pupil spending significantly above the national average at approximately $40,367
SMCare
September 28, 2026
•[ ransomware, healthcare ]
SMCare was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Healthcare. Scenario Management is a specialist support provider based in Lancashire, serving areas including Blackpool, Wyre, Fylde, and Preston. The company offers 24-hour supported living and residential services, as well as short stay respite care for individuals with learning disabilities, complex needs, autism, and associated mental health issues. Their services are designed for those who may challenge services or have forensic backgrounds. Scenario Management aims to provide comprehensive support tailored to the needs of their clients.
Electrolux 2...
September 28, 2026
•[ ransomware, manufacturing, retail ]
Electrolux 2... was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Manufacturing. Country: Sweden. Hi Electrolux, im getting kind of inpatient, therefore i might just leak something. If i hear nothing from you in the next 3 days, more data WILL be leaked.
Thanks.
Emails: xdlmfao@morke.ru
Session: 05651c7323273b723588d47455471ee9e27feb5187a30f2933554a705aacb38358 [Sector: Retail, Manufacturing, Transportation]
SiteProRentals
September 28, 2026
•[ ransomware, manufacturing, leak ]
SiteProRentals was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Hospitality. SitePro Rentals is a Texas-based construction and industrial equipment rental company founded in 2021. A subsidiary of Sammons Industrial, it rents aerial lifts, forklifts, and earthmoving equipment, serving contractors across the U.S. from over 30 locations.
We have every employee's Social Security number. Home addresses. Birth dates. Salaries. We know who's sick, who's on leave, who got fired and why. We also have 338,000 pay records....
Shortly, you will receive an email containing the instructions on how to proceed with this situation.
The ransom is relatively small, just $150k USD in XMR...
If you do not receive the email, contact us at:
Email: xdlmfao@morke.ru
Session: 05651c7323273b723588d47455471ee9e27feb5187a30f2933554a705aacb38358 [Sector: Construction]
Dediserve Ltd
September 28, 2026
•[ ransomware, technology, finance ]
Dediserve Ltd was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Technology. Country: United Kingdom of Great Britain and Northern Ireland. Cloud infrastructure provider (iomart group) Dublin, Ireland / FRA1 Frankfurt DC | The complete customer register of the FRA1 cloud 167 tenant accounts with infrastructure details; Disk images of tenant servers: a regulated forex broker's portal (payment gateway configuration, trading-account records), a payment services provider's systems including its internal password vault, and a production real-estate platform; The provider's internal operations mailbox and monitoring configuration | All 46 FRA1 servers are paused and intact - restorable automatically within the hour of settlement. | [ACTIVE: deadline 2026-10-01 05:16 UTC]
Holiday Inn Vilnius
September 28, 2026
•[ ransomware, leak ]
Holiday Inn Vilnius was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Hospitality. Country: Lithuania. Website: Holiday Inn Vilnius. The property operates under the international Holiday Inn brand of IHG Hotels & Resorts. The hotel provides 134 guest rooms,
sumperk.cz
September 28, 2026
•[ ransomware, government, retail ]
sumperk.cz was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Retail & E-Commerce. Country: Czechia. Website: sumperk.cz. The official website, sumperk.cz, serves as the city's principal digital information and service portal for residents, businesses, visitors and other
bio-strath.com
September 28, 2026
•[ ransomware, healthcare ]
bio-strath.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Healthcare. Country: Switzerland. Website: bio-strath.com. The company was established in 1961 and operates the Bio-Strath brand, which is particularly associated with liquid and tablet nutritional
