Ministry of Education — Argentina
September 18, 2026
•[ ransomware, government, education ]
Ministry of Education Argentina was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-09-18. Sector: Government & Defense. Country: Argentina. Website: argentina.gob.ar. Government / education Argentina | Complete network-security configuration of the ministry network; 1.08M connection records: national library (BNM), school-book selection platform, scholarship systems (becasprogresar), titulosvalidez, certificadosinfd, sitrared; Evidence of the Monero cryptocurrency miner operating inside the ministry network | The ministry network is under a total blackout until settlement. | [ACTIVE: deadline 2026-09-21 03:01 UTC]
PayPal support operations (Transcom WorldWide)
September 18, 2026
•[ ransomware, finance, technology ]
PayPal support operations (Transcom WorldWide) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-09-18. Sector: Financial Services. Country: Sweden. Website: transcom.com. Outsourced customer support / financial services Netherlands / Tunisia | 86.7M connection records: daily support-agent sessions into PayPal corporate Citrix/AAA systems; Complete infrastructure map: internal AD, PKI, Netskope/Zscaler tenants, all 8 sites | All 8 sites are enforcing a network blackout until settlement. | [ACTIVE: deadline 2026-09-21 03:01 UTC]
Prefix Corp
September 18, 2026
•[ ransomware, manufacturing ]
Prefix Corp was listed as a victim on the leak site of the securotrop ransomware group; the attack is estimated to have taken place on 2026-09-18. Sector: Other. Country: United States of America. Website: www.prefix.com. Status: AWAITING
Size: 1135 GB
Paid Victim 192EB2B6AD7B98D9
September 18, 2026
•[ ransomware ]
Paid Victim 192EB2B6AD7B98D9 was listed as a victim on the leak site of the AuditTeam ransomware group; the attack is estimated to have taken place on 2026-09-18. Country: Russian Federation. [AI generated] N/A
I don't have any reliable information about a company named "Paid Victim 192EB2B6AD7B98D9." This appears to be an anonymized or coded identifier, possibly from a ransomware leak site or threat intelligence feed, rather than an actual company name. Without access to the specific database or source that generated this identifier, I cannot provide factual details about its operations, industry, or country.
PITTSRAD
September 18, 2026
•[ ransomware, healthcare ]
PITTSRAD was listed as a victim on the leak site of the Spirals ransomware group; the attack is estimated to have taken place on 2026-09-18. Sector: Healthcare. Country: United States of America. Website: pittsrad.net. [AVAILABLE DATA] Radiology and health imaging, client personal and health data.
Barrett Mahony Consulting Engineers
September 18, 2026
•[ ransomware, leak, technology ]
Barrett Mahony Consulting Engineers was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-09-18. Sector: Professional Services. Country: Ireland. Website: www.barrettmahony.com. Ireland
Inglewood Golf
September 18, 2026
•[ ransomware, retail ]
Inglewood Golf was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-09-18. Sector: Hospitality. Country: Canada. Website: www.inglewoodgolfclub.ca. Canada
Vista Plastic Solutions
September 18, 2026
•[ ransomware, manufacturing ]
Vista Plastic Solutions was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-09-18. Sector: Manufacturing. Country: Canada. Website: www.vistahelps.com. Canada
forus.cl
May 13, 2026
•[ ransomware, retail ]
forus.cl was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-05-13. Sector: Professional Services. Country: Chile. Website: forus.cl. Founded in 1980 and headquartered in Santiago, Chile, Forus is a provider of apparel. The company pr...
hygear.com
September 11, 2026
•[ ransomware, healthcare, energy ]
hygear.com was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-09-11. Sector: Healthcare. Country: Germany. Website: hygear.com. yGear specializes in providing reliable and affordable on-site and on-demand hydrogen and industrial...
K3G Solutions Brazil
September 18, 2026
•[ ransomware, technology ]
K3G Solutions Brazil was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-09-18. Sector: Other. Country: Brazil. Website: k3gsolutions.com.br. K3G Solutions is a Brazilian telecom/IT consulting company based in Manaus, providing network engineering, ISP support, monitoring, call-center, CDN, and colocation services.
Quest Group
September 18, 2026
•[ ransomware, technology, leak ]
Quest Group was listed as a victim on the leak site of the anubis ransomware group; the attack is estimated to have taken place on 2026-09-18. Sector: Technology. Country: United States of America. Website: questgroupsearch.com. Employee data, internal files, and a few unexpected discoveries.
Cassias MG Government
September 19, 2026
•[ ransomware, government, healthcare ]
Cassias MG Government was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-09-19. Sector: Government & Defense. Country: Brazil. Website: cassia.mg.gov.br. network commitment, from government credentials to justice panels, such as access to the financial sector, police, personal data, medical (SUS), RG(CIN), BIRTH CERTIFICATE, CPF (identity number in Brazil) among other data from CASSIAS.MG.GOV departments, we will give you a deadline to negotiate with us! [Size: 720.0 MB | Sector: Medical, Government, Finance]
Quy Nhon University
September 18, 2026
•[ ransomware, education ]
Quy Nhon University was listed as a victim on the leak site of the Vexy Ransomware ransomware group; the attack is estimated to have taken place on 2026-09-18. Sector: Education. Country: Vietnam. Website: qnu.edu.vn. Quy Nhon University (QNU) is a public, multidisciplinary university located in Quy Nhon City, Binh Dinh Province, Vietnam. Established in 1977, the university has a long-standing tradition in teacher education and has developed into a comprehensive institution offering a wide range of academic programs.
Young Injury Law
September 19, 2026
•[ ransomware, hack ]
Young Injury Law was listed as a victim on the leak site of the cry0 ransomware group; the attack is estimated to have taken place on 2026-09-19. Sector: Professional Services. Country: United States of America. ## Coming soon...
Kreishandwerkerschaft Borken
September 19, 2026
•[ ransomware, leak ]
Kreishandwerkerschaft Borken was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-09-19. Sector: Professional Services. Country: Germany. Website: kh-borken.de. Kreishandwerkerschaft Borken
Electrolux
September 19, 2026
•[ ransomware, manufacturing, technology ]
Electrolux was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-09-19. Sector: Manufacturing. Country: Sweden. Website: electroluxgroup.com. Electrolux Group is a Swedish multinational home-appliance manufacturer, producing refrigerators, washing machines, ovens, dishwashers, vacuum cleaners, and other household appliances under several brands worldwide.
We were able to access your azure database, and export every piece of data which adds up to ~41GB.
You will receive an email shortly containing the instructions you need to proceed.
Electro_backup.7z is currently password locked, but if they do not pay the ransom, the password and the data WILL be leaked
Time is ticking, Pay the ransom.
If you are having issues receiving instructions, contact me at: xdlmfao@morke.ru [Size: 12.7 GB | Sector: Manufacturing]
AKAZZO
September 19, 2026
•[ ransomware, retail ]
AKAZZO was listed as a victim on the leak site of the arcusmedia ransomware group; the attack is estimated to have taken place on 2026-09-19. Country: Brazil. Website: akazzo.com.br. akazzo.com.brAkazzo Footwear specializes in exclusive fashion products, particularly focu Deadline: 2026-09-26 15:25:00.000000
Schneider’s Computing
September 19, 2026
•[ ransomware, technology ]
Schneiders Computing was listed as a victim on the leak site of the arcusmedia ransomware group; the attack is estimated to have taken place on 2026-09-19. Sector: Technology. Country: Canada. Website: scomputing.ca. www.scomputing.caSchneiders Computing & Websites Ltd. is a Canadian-owned and Deadline: 2026-09-26 15:25:00.000000
ambpvc
August 18, 2026
•[ ransomware, leak ]
ambpvc was listed as a victim on the leak site of the ZaWoo ransomware group; the attack is estimated to have taken place on 2026-08-18. Sector: Other. Country: France. [Unpublished]
