Mutant
September 7, 2026
•[ ransomware, technology, finance ]
Mutant was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Other. Country: Brazil. Website: mutant.com.br. mutant.com.br zoominfo.com/c/mutant/452328184 Mutant is one of Latin America's largest CX & AI companies, founded in 2016 as a spin-off from Genesys Brazil, HQ'd in So Paulo with 4,000+ employees across 14 countries. Backed by Permira, GIC and TCV, its holding "Clash" raised $75M from BlackRock in 2025 for M&A and AI. It runs 3.5 billion AI-driven interactions per year for 100+ enterprise clients including the world's largest corporate WhatsApp operation (Caixa) with clients like Ita, Vivo, Santander, Claro and iFood. Built through 8+ acquisitions (Interaxa, GRB, Intervalor...), it projects ~R$1B revenue in 2026 and pours R$100M+/year into its proprietary generative AI ecosystem (IAM/Xavier/PALI). Bottom line: the quiet AI-giant of Brazilian customer experience "Artificial Intelligence, Human Experiences" now repositioning as the enterprise AI-intelligence layer of LatAm.
Drogueria Saporiti Sacifia
September 7, 2026
•[ ransomware, leak, healthcare ]
Drogueria Saporiti Sacifia was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Retail & E-Commerce. Country: Argentina. Website: drogueria-saporiti.com.ar. drogueria-saporiti.com.ar zoominfo.com/c/drogueria-saporiti-sacifia/462786110 100GB data stolen! Droguera Saporiti is a century-old Argentine pharmaceutical wholesaler and manufacturer, founded in 1901 in Buenos Aires, now run by the Otero Pose family with ~110 employees and 8,700 m of facilities. It's the silent "backbone" of Argentine pharmacies: 3,500+ products, 7,000+ pharmacy clients, wholesale distribution plus imports/exports of raw materials. Its flagship is the legendary Parafarm brand ("orange line" of galenic essentials vaseline, Pasta Lassar, Agua de Dalibour, hydrogen peroxide) sold nationwide since the 1960s, alongside Sweet Rose, Home Test, Wild Skin and Well Being. It survived a devastating fire in the 1990s and a rough 201415 ANMAT season (interjurisdictional trade ban + Parafarm lot withdrawal). Bottom line: a low-profile family institution with huge brand equity Argentina's reference house for pharmacy-grade essentials.
Hollard Insurance Group
September 7, 2026
•[ ransomware, finance, leak ]
Hollard Insurance Group was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Financial Services. Country: South Africa. Website: hollard.co.za. hollard.co.za zoominfo.com/c/the-hollard-insurance-company-ltd/56019572 Hollard is South Africa's largest independent, privately-owned insurance group, founded in 1980 by the Enthoven family, HQ'd in Johannesburg, 4,000+ employees, 6M+ policyholders. Ownership: Enthoven family 57%, B-BBEE group Bushwillow 20%, Tokio Marine ~22.5% (2018, ~$327M); GCR AA(za). Operates in 18 countries on 4 continents via 100+ partnership ventures: Hollard Insure (corporate/broker), Hollard Life Solutions (mass market, prepaid "starter packs" sold like airtime), Hollard International (8 African countries + Philippines). Landmark deals: CommInsure Australia A$625M (2022 top-5 insurer there, 15-year exclusive bancassurance deal with Commonwealth Bank), and in 2025 Global Alliance Seguros (Mozambique) + Absa Life Botswana. Innovations: HUGinsure (world's first social-impact insurer), insurtech bets (Naked, dotsure).
Mefa Group www.mefagroup.com.tr / MEFA Endüstri www.mefaendustri.com / and (Efachem, Eco...
August 25, 2026
•[ ransomware, manufacturing, automotive ]
Mefa Group www.mefagroup.com.tr / MEFA Endstri www.mefaendustri.com / and (Efachem, Eco... was listed as a victim on the leak site of the blacknevas ransomware group; the attack is estimated to have taken place on 2026-08-25. Sector: Manufacturing. Country: Turkey. Website: mefagroup.com.tr. https://send.exploit.in/#37608d72633301fc62801dfdf9111dbe!BsYvGiQz6WmjZo1VvPwTi8lU2K7prrPY2q6CdMORZn0List of files. For details and cooperation, write to Telegram https://t.me/BlackNevas or email happyCarter@mail.com.MEFA Group is a Turkish industrial group (headquartered in Ankara), founded in 2006. It operates in industrial manufacturing, plastics, rubber, processing, and logistics. The group has over 115,000 m of production space, over 2,000 employees, and several facilities in Turkey, Romania, and Poland. Its main areas of focus are the automotive industry, white goods, and related industries.MILKRUN Milkrun Lojistik, the group's logistics division. It provides integrated and smart logistics solutions for group companies and partners (focusing on efficiency, digitalization, and sustainability). It is not the Australian grocery delivery service of a similar name.Efachem, a division specializing in plastic and rubber compounds (compound solutions), develops customized formulas to meet customer needs, ensuring compatibility with production processes and consistent quality.Ecopolymer, a division specializing in raw materials processing and technology, utilizes cutting-edge recycling technologies, converting plastic waste into high-performance raw materials within the framework of a circular economy.All these companies operate as a single ecosystem: production (MEFA Endstri), raw materials/compounds (Efachem), processing (Ecopolymer), and logistics (Milkrun).
Alaska Electrical Apprenticeship
September 8, 2026
•[ ransomware, education ]
Alaska Electrical Apprenticeship was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-08. Sector: Education. Country: United States of America. Website: www.alaskaelectricalapprenticeship.org.
CreateASoft
September 8, 2026
•[ ransomware, technology, financial ]
CreateASoft was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-09-08. Sector: Technology. Inc. is a software company. The company provides dynamic process improvement solutions, predict
ive technology, and end-to-end support to a variety of process-based operations dedicated to im
proving operational efficiency and responsiveness.
We will upload corporate data soon. Employee and customer files, contacts and agreements, finan
cials, projects and so on.
EMS1R
September 8, 2026
•[ ransomware, healthcare, technology ]
EMS1R was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2026-09-08. Country: United States of America. Website: ems1r.com. Corporate Wellness Services
contreras.com.ar
September 8, 2026
•[ ransomware, manufacturing, energy ]
contreras.com.ar was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-09-08. Country: Argentina. Website: contreras.com.ar. Founded in 1947 by the Contreras brothers, the company has continuously evolved and modernized, focu...
fdcputman.nl
September 8, 2026
•[ ransomware, finance ]
fdcputman.nl was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-09-08. Sector: Other. Country: Netherlands. Website: fdcputman.nl. FDC Putman is a financial specialist offering tailored advice on mortgages, insurance, and various f...
copeplastics.com
September 8, 2026
•[ ransomware, manufacturing, hack ]
copeplastics.com was listed as a victim on the leak site of the chaos ransomware group; the attack is estimated to have taken place on 2026-09-08. Sector: Manufacturing. Country: United Kingdom of Great Britain and Northern Ireland. Website: copeplastics.com. Cope Plastics is a leading U.S. distributor and fabricator of performance plastics, serving industrial and commercial customers since 1946. From our headquarters in Alton, Illinois and through multiple branch locations, we support clients across countless sectorsheavy equipment, transportation, aero
Financière d'Uzès
September 8, 2026
•[ ransomware, finance ]
Financire d'Uzs was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-09-08. Sector: Financial Services. Country: France. Website: finuzes.fr. Financire d'Uzs offers a range of financial services tailored for individuals, entrepreneurs, and professionals, focusing on wealth management, investment strategies, and fiscal optimization. Their services include asset management, financial analysis, and dedicated funds, catering to clients looking to enhance their income, organize their assets, and manage their taxes. With over 35 years of experience and a commitment to independence, they have supported 2000 families and manage 1.5 billion euros in assets. The company operates six offices across France, providing personalized service through a single point of contact.
mcnishsteel.com
September 8, 2026
•[ ransomware, manufacturing ]
mcnishsteel.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-09-08. Sector: Manufacturing. Country: Canada. Website: mcnishsteel.com. The company is headquartered in Edmonton, Alberta, and was founded in 1978 by William and Wallace McNish. It has developed
recoverycafe.org
September 8, 2026
•[ ransomware, healthcare ]
recoverycafe.org was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-09-08. Sector: Healthcare. Country: United States of America. Website: recoverycafe.org. The organization was founded in 2003 and opened its first physical caf in Seattle in 2004. Its approach is based
hbpro.pt
September 8, 2026
•[ ransomware, technology ]
hbpro.pt was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-09-08. Sector: Professional Services. Country: Portugal. Website: hbpro.pt. Established in 1994, the company has more than three decades of experience providing technology products, infrastructure, consulting, maintenance, and technical
gsngestion.es
September 8, 2026
•[ ransomware, technology ]
gsngestion.es was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-09-08. Sector: Professional Services. Country: Spain. Website: gsngestion.es. The company is based in Villaviciosa de Odn, Madrid, and operates through the GSN Gestin brand. Its website states that
cenmar-manila.com
September 8, 2026
•[ ransomware, manufacturing ]
cenmar-manila.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-09-08. Sector: Manufacturing. Country: Philippines. Website: cenmar-manila.com. The company was registered with the Philippine Securities and Exchange Commission in 1997 and received authorization to operate as a
cannonpuntana.com
September 8, 2026
•[ ransomware, manufacturing, retail ]
cannonpuntana.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-09-08. Country: Argentina. Website: cannonpuntana.com. The company operated in Argentina and was historically connected with the manufacture and distribution of fragrances, toiletries, and personal-care products.
reichenau.at
September 8, 2026
•[ ransomware, government ]
reichenau.at was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-09-08. Sector: Other. Country: Austria. Website: reichenau.at. The official website, reichenau.at, serves as the municipality's central digital information and service platform for residents, businesses, and visitors. The
palmettoeyeinstitute.com
September 8, 2026
•[ ransomware, healthcare ]
palmettoeyeinstitute.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-09-08. Sector: Healthcare. Country: United States of America. Website: palmettoeyeinstitute.com. The practice was founded by Dr. Prat Itharat, a board-certified ophthalmologist who specializes in cataract surgery and comprehensive eye care.
Red Star Oil
September 8, 2026
•[ ransomware, energy ]
Red Star Oil was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-09-08. Sector: Energy & Utilities. Country: Serbia. Website: www.redstaroil.com. United States
