Winston Contracting, LLC
September 14, 2026
•[ ransomware, leak ]
Winston Contracting, LLC was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Professional Services. Country: United States of America. Website: winstoncontracting.com.
Foremost Mfg
September 14, 2026
•[ ransomware, manufacturing ]
Foremost Mfg was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Manufacturing. Country: United States of America. Website: www.foremost-mfg.com.
geekybunch.com
September 14, 2026
•[ ransomware, technology ]
geekybunch.com was listed as a victim on the leak site of the unsafe ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Technology. Country: United States of America. Website: geekybunch.com. Revenue: $5 million
Bernath & Rosenberg
September 13, 2026
•[ ransomware, finance ]
Bernath & Rosenberg was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-09-13. Sector: Professional Services. Country: United States of America. Website: .. A full service CPA firm
Better Accounting Solutions
September 14, 2026
•[ ransomware, finance ]
Better Accounting Solutions was listed as a victim on the leak site of the anubis ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Professional Services. Wall Street accountants data breach.
HandyTrac (Greystar Litchfield Park, AZ)
September 15, 2026
•[ ransomware, technology, leak ]
HandyTrac (Greystar Litchfield Park, AZ) was listed as a victim on the leak site of the ShadowByt3$ ransomware group; the attack is estimated to have taken place on 2026-09-15. Sector: Other. Country: United States of America. Website: new.handytrac.com. We have access to sensitive data. It's in your best interest to contact us and negotiate since it will just hurt you if you don't. We stole a lot of sensitive info including the following:
- Physical-to-Digital Key Maps (Reports)
- Property Intelligence & Vulnerability Logs (HandyTrac Key Control.pdf)
- Employee Identity & Credential Data (Employees)
- Financial & Vendor Records (Open_and_closed_Invoices)
- Administrative Portal Control (Dashboard / Administration)
This is not a joke or a bluff it's a sign of a corporate disaster. Figure it out and negotiate and the picture for proof is on are site at the below
url: http://sdwbyttda4uzwdffbt4m7niuodiwhcgmkyxqg5nly2bjxqa6xtbe3fyd.onion/Screenshot_proof.png
As you can see negotiate within 72 hours or we will leak the full data.
veritiv
September 15, 2026
•[ ransomware, manufacturing ]
veritiv was listed as a victim on the leak site of the iah6477 ransomware group; the attack is estimated to have taken place on 2026-09-15. Sector: Manufacturing. Country: United States of America. Size: 1.9 TiB
Geieg
September 15, 2026
•[ ransomware, retail ]
Geieg was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-15. Sector: Other. Country: Spain. Website: www.geieg.cat.
MedSkin Solutions Dr. Suwelack AG
September 14, 2026
•[ ransomware, healthcare, technology ]
MedSkin Solutions Dr. Suwelack AG was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Healthcare. Country: Germany. Website: medskin-suwelack.com. medskin-suwelack.com rocketreach.co/medskin-solutions-dr-suwelack-ag-profile_b44a3a45fd136bbb MedSkin Solutions Dr. Suwelack AG MedSkin Solutions Dr Suwelack AG is a German biotechnology company. It was founded in 1997 and is based in Billerbeck near Mnster.
DATA
Finance Accounting Core
Quality Management System QMS Validation
Manufacturing Production Operations
Corporate Controlling Financial Planning
Health, Safety Environmental Compliance AUM
Corporate Identity Marketing Assets
Supply Chain Vendor Management
Legal Intercompany Contracts
IT Infrastructure Data Repositories
Human Resources Personnel Records
US Subsidiaries International Taxation
Construction Facility Projects
Regulatory Affairs Medical Device Registration
Executive Communications Email Archives
Archived Confectioning Procedures
TMI Tecnicas Mecanicas Ilerdenses
September 14, 2026
•[ ransomware, manufacturing, leak ]
TMI Tecnicas Mecanicas Ilerdenses was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Manufacturing. Country: Spain. Website: tmipal.com. tmipal.com zoominfo.com/c/tmi-tecnicas-mecanicas-ilerdenses-sl/372767545 TMI Tecnicas Mecanicas Ilerdenses Spanish machining and metal-casting factory from Lleida, Catalonia founded 1991, producing and repairing components for agricultural machinery and industrial customers (custom parts made to customer drawings; "Ilerdenses" refers to Ilerda, the Roman name of Lleida). Classic quiet Catalan workshop serving Spain's fruit-growing capital, where farm equipment wears out fast and OEM replacement parts aren't always available.
Sarku Japan
September 14, 2026
•[ ransomware, retail, automotive ]
Sarku Japan was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Retail & E-Commerce. Country: United States of America. Website: sarkujapan.com. sarkujapan.com zoominfo.com/c/sarku-japan/33898946 SARKU Japan Japan's #1 independent service & wholesale network for foreign cars founded 1993 in Chiba by Texan David J. Jones (in Japan since 1989) after seeing that owners of European/American cars in Japan were "orphans": parts take 68 weeks from Europe, service is scarce. SARKU built the full foreign-car infrastructure: 9 service centers (8 Kanto + Nagoya), a wholesale yard of ~4,000 imported cars (one of Japan's two largest), a parts warehouse of 30,000+ SKUs worth 700M+ (also one of Japan's two largest), plus procurement/export arms via US offices in Seattle (since 1997) and Florida selling 20,000+ cars and serving 60,000+ active customers (~150 staff from 15 countries; ~120K monthly site visitors, 170K+ downloaded car-buying guides). Since 2018 it's owned by the Netherlands' Louwman Group (Europe's largest family-run dealer group, est. 1923). Motto: "Foreign cars. Japanese precision."
Librería Santa Fe
September 14, 2026
•[ ransomware, retail ]
Librera Santa Fe was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Retail & E-Commerce. Country: Argentina. Website: santafelibros.com.ar. santafelibros.com.ar Librera Santa Fe APS S.R.L. is an Argentine book retailer and distributor from Buenos Aires founded 1996 (SIC 5942 Book Stores, Active status), operating a chain of bookstores (named after Avenida Santa Fe, the city's legendary book district in Barrio Norte) plus B2B book/stationery distribution to schools and institutions across Argentina, with traces in Italian business aggregators (export/Italy-linked operations). Classic family bookselling business pre-Amazon era model: retail + distribution. Bottom line: a Buenos Aires book chain riding the avenue that made the city UNESCO's 2011 World Book Capital.
Aforpa
September 14, 2026
•[ ransomware, technology, manufacturing ]
Aforpa was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-14. Country: France. Website: aforpa.fr. aforpa.fr zoominfo.com/c/aforpa/427085810 Aforpa French electrical engineering & installation contractor based in Roissy-en-France (next to Paris-CDG airport) founded 1965 (current SAS registered 1978), specializing in high-power electrical works (HTA/BT networks, lighting) and industrial automation for airports, power plants, tunnels, telecom and residential towers. Its verified credentials: RATP certificate Q19 (electrical works for Paris transport tunnels/stations) and registration on SFR's contractor registry (telecom power infrastructure). Headcount ~100250, revenue est. 3060M (private, undisclosed).
Wada Farms
September 14, 2026
•[ ransomware, retail, manufacturing ]
Wada Farms was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Agriculture and Food Production. Country: Japan. Website: wadafarms.com. wadafarms.com Wada Farms third-generation family potato empire from Idaho founded 1945 by Japanese-American farmer Albert Wada (whose family was interned at Minidoka camp during WWII, then returned and bought 160 acres near Pocatello); today run by the third generation (~10,000 acres in Magic Valley growing Idaho Russet potatoes, onions and sweet potatoes) with its own climate-controlled storage, packing shed and three brands: Potato King, Wada Farms and Wada Farms Organic selling into national grocery chains, processors and export channels. Vertical integration from field to branded shelf; revenue undisclosed (est. $50100M+); 50150 seasonal/permanent staff
Technical Asia
September 14, 2026
•[ ransomware, technology, manufacturing ]
Technical Asia was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Technology. Country: Thailand. Website: technicalasia.com. technicalasia.com zoominfo.com/c/technical-asia-pte-ltd/347370168 Technical Asia Thai-Japanese JV (founded 1990, HQ Samut Prakan/Bangkok) the leading engineering-plastics distributor and fabricator in Thailand & Southeast Asia, importing materials from Japan's Sankyo Kasei and processing them locally: UHMW-PE, MC-Nylon, POM, PA6G, HDPE, PEEK, PVC-C, PVDF, PET, PTFE sold as cut-to-size sheets/rods/tubes and CNC-machined custom parts for automotive, food & packaging, semiconductors, chemicals, oil & gas, robotics and water treatment across SEA. Model: local warehouse stock (days vs. months from Japan) + cut-to-size service + CNC fabrication + engineering material consultation; ISO 9001 certified. ~50100 staff, revenue est. 100500M THB (private JV, not disclosed)
Dang Invest Group
September 14, 2026
•[ ransomware, finance, retail ]
Dang Invest Group was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Financial Services. Country: Vietnam. Website: danginvestgroup.com. danginvestgroup.com Dang Invest Group zech family restaurant group from Ostrava, founded in 1998 by Vietnamese immigrants the force behind the country's biggest Asian fast-food network: brands GUTY ("Taste of Modern Asia" bnh m, bao, rice bowls), Multifood (the original, 1998), Rakki Sushi, Tuk Tuk and Amart cafs, running 70+ company-owned outlets across Czechia, Slovakia and Germany, mostly on shopping-mall food courts, with a central kitchen and no franchise/PE money. The Vietnamese-diaspora ladder: one stall in 1998 mall standard in the 2000s sub-brands in the 2010s three countries in the 2020s, with the GUTY trademark registered at EUIPO/UKIPO for future European expansion.
Dome Gold Mines
September 14, 2026
•[ ransomware, manufacturing ]
Dome Gold Mines was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Manufacturing. Dome Gold Mines (ASX: DOM) is an Australian pre-revenue explorer with a stalled copper-gold project in Fiji incorporated 1992 in Perth, it holds the Sigatoka Ironsands Project: unique coastal dune + offshore heavy-mineral sands (Fe-Ti-V-TREO + Au-Cu), with a ready design: modular wet plant, US$38M CAPEX, US$103M NPV, 33% IRR but zero revenue in 34 years. Why stuck: 87% of Fiji's land belongs to indigenous mataqali clans (land-use deals take years), coastal/fisheries opposition, COVID freeze 202022, and repeated dilution from capital raises. Shares now trade off-market via PrimaryMarkets (a sign of suspension/possible delisting) at an implied cap of A$2030M. Bottom line: a textbook "sleeping asset" perfect on paper, stuck on land tenure and financing the classic case of why 90% of exploration companies never build a mine.
Tentac
September 14, 2026
•[ ransomware, technology, manufacturing ]
Tentac was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Technology. Country: Japan. Website: tentac.co.jp. tentac.co.jp zoominfo.com/c/tentac-co-ltd/458253608 TENTAC Co., Ltd world's leading maker of robotic tool changers automatic docking systems that let industrial robots swap end-of-arm tools (welding torch gripper spray gun grinder) mid-production without stopping the line. Founded 1968 as a Kobe Steel division, spun off independent in 1985; HQ in Kobe, Japan; ~3540 employees, ~1.52B revenue yet claims up to 80% global market share in robot docking systems. Technology: micron-level positioning repeatability, safety locks (tool stays attached even on pressure loss), and media-passing (electricity, pneumatics, hydraulics, water, signals) through the joint payload classes from a few kilos to automotive body-welding weights; embedded as the de-facto standard by Japanese (Fanuc, Kawasaki, Yaskawa) and European (ABB, KUKA) robot integrators. Diversification from the same precision-mechanics core: inertial gyro sensors (marine, construction) ISO 9001/14001 certified.
High Oakham Primary School
September 14, 2026
•[ ransomware, education ]
High Oakham Primary School was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Education. Country: United Kingdom of Great Britain and Northern Ireland. Website: highoakham.co.uk. highoakham.co.uk zoominfo.com/c/high-oakham-primary-school/345650404 High Oakham Primary School community primary school in Mansfield, Nottinghamshire opened September 2001 through the amalgamation of schools during Mansfield's education reorganisation; URN 133278, maintained by Nottinghamshire County Council (not an academy). Size: 464 pupils aged 311 (nursery to Year 6, mixed) against a capacity of 428 over-subscribed, with just 9% free-school-meal eligibility (a relatively affluent intake for Mansfield). Headteacher Stephanie Astle (since 2019); chair of governors Lisa Vann; leadership includes a deputy, assistant head, SENCO (Michelle Pollard's inclusion team) and early-years lead. Ofsted (May 2022): "a good school" English and maths standards above average by Year 6, an excellent start in Reception, teaching "consistently good, some outstanding." Culture: "Be true to yourself,"
Humboldt
September 14, 2026
•[ ransomware, education ]
Humboldt was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Other. Country: Brazil. Website: humboldt.com.br. humboldt.com.br zoominfo.com/c/humboldt/372537346 Colegio Humboldt 300gb DATA Germany's official school in So Paulo founded in 1916 by German immigrants (first class: 41 students, May 1, 1916), now a non-profit bilingual school of ~1,2001,300 students (ages 218, ~295 staff) on a 60,000 m Interlagos campus built with German government funding (opened 1999), maintained by the parents' association SEBRB. Its dramatic history: closed twice by world wars 1917 (WWI) and 1942 (WWII, when all assets were confiscated and took a 10-year legal battle to recover) before parents rebuilt it into a top institution. Programs: two tracks (Bilingual 40% German; International German 80% German leading to the Abitur, with 100% pass rate and direct entry to German/European universities), plus DSD I/II, Cambridge, DELE certifications, and its crown jewel the largest German dual vocational training center outside Germany (since 1982: 2-year technical programs in Administration, Logistics, IT.