Grupolider
September 21, 2026
•[ ransomware, manufacturing, retail ]
Grupolider was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Other. Country: Angola. Website: grupolider-ao.com. grupolider-ao.com zoominfo.com/c/grupolider/429885445 Grupolider is an Angolan diversified holding company founded in 1999, headquartered in Catete (Luanda province). The group operates in agriculture, logistics, freight forwarding, construction, and furniture manufacturing, with its flagship business being Novagrolider the largest agricultural producer in Angola. Novagrolider farms around 20,000 hectares of land and produces roughly 150,000 tons of food per year (bananas, vegetables, fruit, and dairy), while the group employs over 3,200 direct staff. The company exports to Portugal, Spain, France, Belgium, Russia, South Africa, and Morocco, and was the first farm in Africa to receive GlobalGAP certification. Estimated annual revenue is around USD 1315 million (Novagrolider alone), though reliable consolidated figures for the private group are not publicly disclosed. Since 2021, after the death of co-founder Joo Macedo, the group has been led by his brother and partner Jos Macedo.
Visual Intelligence, Inc.
September 21, 2026
•[ ransomware, technology ]
Visual Intelligence, Inc. was listed as a victim on the leak site of the metaencryptor ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Technology. Country: United States of America. Website: visualintelligenceinc.com. Visual Intelligence is a managed services company that applies advances in drones, computing, and AI to assess and cleanse existing Telecom company databases, generate critical intelligence, and inform teams with a new digital core.
Flex Ltd
September 21, 2026
•[ ransomware, manufacturing, technology ]
Flex Ltd was listed as a victim on the leak site of the metaencryptor ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Manufacturing. Country: United States of America. Website: flex.com. Flex Ltd. is a global technology manufacturing and supply-chain company headquartered in Austin, Texas. It provides design, engineering, electronics manufacturing, supply-chain management, and infrastructure solutions for customers across the data center, AI, automotive, healthcare, industrial, communications, and consumer technology sectors. Flex operates more than 100 facilities worldwide and employs approximately 150,000 people.
Hudson MD Group, LLC
September 21, 2026
•[ ransomware, healthcare ]
Hudson MD Group, LLC was listed as a victim on the leak site of the metaencryptor ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Healthcare. Country: United States of America. Website: www.hudsonmdgroup.com. Hudson MD Group, LLC is a U.S.-based multispecialty medical group headquartered in West Orange, New Jersey. Established in 2019, the organization brings together physicians and healthcare professionals across multiple medical specialties and operates a network of outpatient medical practices and care centers throughout New Jersey.
The group provides a broad range of healthcare services, including primary and internal medicine, cardiology, gastroenterology, neurology, obstetrics and gynecology, nephrology, urology, and other specialized medical services. Its integrated practice model allows participating physicians to operate within a shared organizational and administrative infrastructure while maintaining their clinical practices.
Telrad Networks
September 21, 2026
•[ ransomware, technology ]
Telrad Networks was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Technology. Country: Israel. Website: www.telrad.com.
Kjla
September 21, 2026
•[ ransomware, technology ]
Kjla was listed as a victim on the leak site of the Global Secret Group ransomware group; the attack is estimated to have taken place on 2026-09-21. Country: United States of America. Website: kjla.com. Country: US |
Website: kjla.com |
Revenue: $6.7 Million |
Industry: Broadcasting |
Employees: 1150 employees |
Properties:: 783 GB (501,662 Files, 42,890 Folders)
Summa Gold
September 21, 2026
•[ ransomware, manufacturing ]
Summa Gold was listed as a victim on the leak site of the anubis ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Manufacturing. Behind the scenes of a gold mining company.
360 Consulenza S.r.l.
September 14, 2026
•[ ransomware, technology, leak ]
360 Consulenza S.r.l. was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Professional Services. Country: Italy. Website: www.360consulenza.com. - Clients' Private Documents- Projects- Software Source Codes
kyyba.com
September 21, 2026
•[ ransomware, technology ]
kyyba.com was listed as a victim on the leak site of the unsafe ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Technology. Country: Finland. Website: kyyba.com. Revenue: $53.1 million
Astemo, Ltd.
September 21, 2026
•[ ransomware, manufacturing, automotive ]
Astemo, Ltd. was listed as a victim on the leak site of the metaencryptor ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Manufacturing. Country: Japan. Website: www.astemo.com/en. Astemo operates worldwide as a global mega-supplier of automotive parts, with approximately 80,000 employees across the United States, Asia, China, Europe, and Japan. Through operations in three business segments (Electrification Business, Vehicle Business, and Motorcycle Business), we develop, manufacture, sell and service automotive parts, transportation and industrial machinery, equipment and systems.
Hurley
September 21, 2026
•[ ransomware, leak ]
Hurley was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Other. Country: United States of America. Website: www.hurleyco.net. United States
Metallco
September 21, 2026
•[ ransomware, manufacturing ]
Metallco was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Manufacturing. Country: Brazil. Website: www.metallco.com. Norway
TruAmerica Multifamily
September 22, 2026
•[ ransomware, finance ]
TruAmerica Multifamily was listed as a victim on the leak site of the termite ransomware group; the attack is estimated to have taken place on 2026-09-22. Country: United States of America. Website: www.truamerica.com. TruAmerica Multifamily is a vertically integrated real estate investment and asset management firm specializing in multifamily housing across the United States. The company focuses on identifying value opportunities within existing apartment communities and enhancing their long-term performance through strategic acquisition, thoughtful renovation, and disciplined property management.
FinSoft (Kolibri retail back-office software)
September 22, 2026
•[ ransomware, technology, retail ]
FinSoft (Kolibri retail back-office software) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-09-22. Sector: Retail & E-Commerce. Country: Uzbekistan. Retail software vendor / IT services Uzbekistan | Client databases of 10+ retail chains (keddo, marc, lancaster, comf_rus, ek, cr, bas_at, bas_juk, bas_nov, bas_zar): sales, stock, pricing, financial records; Back-office platform and API service data | One client database publishes per day after the deadline, starting with keddo. Their clients will know exactly whose software failed them. | [ACTIVE: deadline 2026-09-25 01:06 UTC]
Sealcon
September 22, 2026
•[ ransomware, manufacturing, technology ]
Sealcon was listed as a victim on the leak site of the termite ransomware group; the attack is estimated to have taken place on 2026-09-22. Sector: Manufacturing. Country: United States of America. Website: www.sealconusa.com. Founded in 1989 and headquartered in Colorado, Sealcon is a cable management provider in North America consisting of rated electrical and electronic components such as liquid-tight strain reliefs, cable glands, circular connectors, UL enclosures, conduit, and electrical accessories.
Columbus Informatica
September 22, 2026
•[ ransomware, technology ]
Columbus Informatica was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-22. Sector: Technology. Country: Italy. Website: www.columbusinformatica.it.
Textile City
September 22, 2026
•[ ransomware, manufacturing ]
Textile City was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-22. Sector: Manufacturing. Country: Canada. Website: www.textilecity.ca.
vit.ac.in
September 13, 2026
•[ ransomware, education, technology ]
vit.ac.in was listed as a victim on the leak site of the AuditTeam ransomware group; the attack is estimated to have taken place on 2026-09-13. Sector: Education. Country: India. Website: vit.ac.in. VIT (Vellore Institute of Technology, official site vit.ac.in) is a well-known private university in India: founded in 1984 and granted university status in 2001, with its main campus in Vellore and additional campuses in Chennai, AP, and Bhopal; it is especially strong in engineering and technology (NAAC A++, solid NIRF/QS standing), admits most undergrads via VITEEE, and posts strong placements (often 10,000+ offers in recent years, with top packages around 1 crore INR).
DI.C.S.EL. S.R.L.
September 22, 2026
•[ ransomware, manufacturing, financial ]
DI.C.S.EL. S.R.L. was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-09-22. Sector: Manufacturing. Country: Italy. Introduction DI.C.S.EL. S.R.L., founded in 2005, is an Italian company headquartered in Milan a
nd operating throughout Lombardy, specializing in the provision of technical solutions for the
electrical and measurement sectors.
We will upload 9gb of corporate data soon. Employee personal information (drivers licenses, EU
IDs), financials, payment details, projects, NDAs and so on.
The Fifty/50
September 22, 2026
•[ ransomware, retail ]
The Fifty/50 was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-22. Country: United States of America. Website: www.thefifty50.com.
