eAssist Dental Solutions
September 6, 2026
•[ ransomware, healthcare, technology ]
eAssist Dental Solutions was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2026-09-06. Sector: Healthcare. Country: United States of America. Website: dentalbilling.com. Healthcare
RTAD GOV MM
September 6, 2026
•[ ransomware, government ]
RTAD GOV MM was listed as a victim on the leak site of the DYSPHOR1A ransomware group; the attack is estimated to have taken place on 2026-09-06. Sector: Government & Defense. Country: Myanmar. Website: rtad.gov.mm. Road Transport Administration Department (RTAD) official government portal providing public transport services, driving license issuance, vehicle registration, and safety regulations. Full databases dump total 1.08 GB. Victim domain https://rtad.gov.mm.
Norwood Law Firm
September 4, 2026
•[ ransomware, hack, leak ]
Norwood Law Firm was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-09-04. Sector: Professional Services. Country: United States of America. Website: norwoodlegal.com. Norwood Law is a Tulsa-based legal firm that specializes in personal injury law, criminal defense, business law, and family law. Founded by attorney Joe Norwood in 2004, the firm is known for its success in high-profile cases and achieving significant legal victories for its clients. The team also includes Todd Maxwell, who specializes in contracts, construction law, and dispute mediation. Norwood Law serves clients in Oklahoma seeking expert legal representation in complex legal matters.
Homewood Sales
September 4, 2026
•[ ransomware, retail, manufacturing ]
Homewood Sales was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-09-04. Sector: Retail & E-Commerce. Country: United States of America. Website: homewoodsales.com. Homewood Sales Corporation specializes in equipment life extension solutions, offering a wide range of products including automatic voltage regulators, control panels, and motors, all built to Westinghouse specifications. With over a century of expertise, they provide exceptional quality in industrial and power distribution units and components. Their services include global sourcing, factory revitalization, and technical support, ensuring precise and expert assistance for their clients. Homewood primarily serves industries requiring reliable power distribution and equipment maintenance solutions.
rubbermill.com
August 15, 2026
•[ ransomware, manufacturing, financial ]
rubbermill.com was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-08-15. Sector: Manufacturing. Country: United States of America. Website: rubbermill.com.
RUBBERMILL, INC. DUMP: BREAKDOWN OF AN OEM MANUFACTURER LEAK
Target: RubberMill, Inc. (North Carolina, USA) contract manufacturer of non-metallic components for appliance, HVAC, automotive, and heavy equipment. Certifications: ISO 9001:2015, WOSB, WBENC. Probable defense contracts (Mil-Spec).
DUMP SIZE: ~296K files / 276K data objects / 340+ GB
146 GB disk image (.mrimg) full copy of the system
AES PASSWORDS.xlsx file + APWDxx libraries credentials
outlook.pst (487 MB) corporate email archive
creditcard.xls payment data
EMPLOYEE CALL LIST + Employee Information Record Form PII
Insurance data
Tax forms containing SSNs
ENGINEERING DATA:
3,000+ CAD files (.dxf, .stp, .dwg) with client part numbers: 7J314, K2A31, K7K11, V1324, etc.
Complete set of 3D models
Client drawings
FINANCIAL DATA:
Sales analysis.mdb (38 MB) complete sales database
commercial terms
customer segmentation
REGULATORY RISKS:
C-TPAT / NAFTA / Certificate of Origin
Conflict Minerals Reporting Template
Supplier Quality Assurance Manual
Probable Mil-Spec specifications
The dump contains a full cross-section of the business: from passwords and SSNs to automotive OEM drawings and military specifications.
Medela.com
September 7, 2026
•[ ransomware, healthcare ]
Medela.com was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Healthcare. Country: Switzerland. Website: Medela.com. This is a final warning to reach out by 08 Sep 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 07 Sep 2026 | Warning: FINAL WARNING
MSM Unify: Global Education Platform - CA
September 7, 2026
•[ ransomware, education, technology ]
MSM Unify: Global Education Platform - CA was listed as a victim on the leak site of the kazu ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Education. Country: Canada. Website: www.msmunify.com. MSM Unify is a global education technology platform that helps students find and apply to international universities and programs. It connects students with 1,500+ campuses and more than 50,000 programs across destinations such as Canada, the USA, the UK, Australia, and Germany. The platform provides support with course selection, university applications, scholarships, visa assistance, education loans, accommodation, and test preparation
LIBRERIA SANTA FE A P S SRL
September 7, 2026
•[ ransomware, retail ]
LIBRERIA SANTA FE A P S SRL was listed as a victim on the leak site of the Vexy Ransomware ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Retail & E-Commerce. Country: Argentina. Website: lsf.com.ar. LSF (Librera Santa Fe) is a bookstore based in Buenos Aires, Argentina, with multiple branches across the city (CABA). It offers a wide selection of both national and imported books across various genres and authors. The store provides an easy online shopping experience where customers can browse and purchase titles with just a few clicks. It also maintains an active social media presence on Instagram (@libreriasantafe) to share news, promotions, and updates. Visitors are welcome to visit their physical locations in person.
Hologic, Inc.
September 7, 2026
•[ ransomware, healthcare, technology ]
Hologic, Inc. was listed as a victim on the leak site of the metaencryptor ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Healthcare. Country: United States of America. Website: www.hologic.com. Hologic, Inc. is a U.S.-based medical technology company specializing in womens health. It develops and manufactures diagnostic, imaging, and surgical products, with a strong focus on breast health, gynecology, diagnostics, and osteoporosis assessment.
SIFCO Industries INC.
September 7, 2026
•[ ransomware, manufacturing, energy ]
SIFCO Industries INC. was listed as a victim on the leak site of the metaencryptor ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Manufacturing. Country: United States of America. Website: sifco.com. SIFCO Industries is a world-wide provider of highly engineered forged components to the Aerospace, Energy and Defense markets. We supply flight-critical forged components and machined assemblies to all of the leading aircraft and engine manufacturers in the world. These components can be found on virtually all of the commercial and military fixed-wing aircraft as well as helicopters and business jets. Our products are also supplied to the leading steam and gas turbine manufacturers and oil producers serving the energy sector.
Jbc
September 7, 2026
•[ ransomware, manufacturing, technology ]
Jbc was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-07. Country: Spain. Website: www.jbctools.com.
EllisDon Corporation
September 7, 2026
•[ ransomware, leak, manufacturing ]
EllisDon Corporation was listed as a victim on the leak site of the metaencryptor ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Professional Services. Country: Canada. Website: www.ellisdon.com. EllisDon Corporation is a leading Canadian construction and infrastructure services company. Founded in 1951, the company provides construction management, engineering, project development, and facilities management services across a wide range of sectors, including healthcare, transportation, commercial, industrial, government, and defense infrastructure. EllisDon operates across Canada and internationally.
Semper Laser
September 7, 2026
•[ ransomware, manufacturing ]
Semper Laser was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Manufacturing. Country: Sweden. Website: semperlaser.com. Spa and Salon Management Florida
Benshaw, Inc.
August 27, 2026
•[ ransomware, manufacturing, financial ]
Benshaw, Inc. was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-08-27. Sector: Manufacturing. Country: United States of America. Website: Benshaw, Inc.. [manufacturer, research] Benshaw, Inc. (Pittsburgh) and affiliated UTG entities (Unico, Benshaw Canada, AuCom, Excel, Noble Victoria).
~100+ corporate Visa/PCard records with full PAN + SSN + DOB + home address
637 former employees with full SSN/DOB/address on one spreadsheet
88 active employee folders plus multi-year Canada payroll
Global bank account numbers (PNC, BMO, BNZ, St George, Commerzbank, JPM London, BBVA, GNB)
ACH NACHA files with vendor routing/account numbers
UEdit source with hardcoded XOR key 4148865678 and date-based CalcBackDoor()
Oil & gas customer job packs (Chevron, Petrobras, EOG, Santos AU, KOC)
Jinny Beauty Supply
September 7, 2026
•[ ransomware, retail, technology ]
Jinny Beauty Supply was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Retail & E-Commerce. Country: United States of America. Website: Jinny Beauty Supply. [distributors] Jinny Beauty Supply is one of the largest Korean-American wholesale beauty distributors in the US, operating 9 distribution centers from Doraville, Georgia to Commerce, California. They serve 7,400+ beauty supply stores and 2,800+ international distributors.
The exposed material includes:
A complete password vault export 50+ plaintext credentials for PayPal, Braintree, Amazon Seller Central, eBay, Acumatica ERP (production), 12 state tax portals, FedEx, UPS, ShipStation, Microsoft 365, Google Analytics, and internal email.
VMware hypervisor root credentials vCenter and ESXi root passwords giving complete control over the entire virtual infrastructure.
911 scanned credit card authorization forms full card numbers, CVV, expiry dates, and cardholder signatures for beauty supply store customers across 26 US states.
Complete employee compensation database ~260 employees with Korean and English names, departments, salaries, bonuses, and 1099 contractor data spanning 20152018.
A 340 MB Shopify database backup full customer table (names, emails, phones, addresses), product catalog, pricing, and warehouse assignments.
Active Directory domain enumeration all 239+ user accounts including 17 admin accounts, the complete server topology across 7 geographic sites (50+ servers), and DPAPI-encrypted RDP passwords.
Employee tax documents W-4 forms (SSN), I-9 forms (SSN + DOB + citizenship), direct deposit forms (bank account and routing numbers).
3.6 GB of SQL Server database backups e-commerce customer/order/product data spanning November 2019 to March 2020.
Lightcast
September 7, 2026
•[ ransomware, technology ]
Lightcast was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Professional Services. Country: United States of America. Website: lightcast.io. Human Resources Software
GENESILICO
September 7, 2026
•[ ransomware, technology ]
GENESILICO was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Technology. Country: Italy. [AI generated] GeneSilico is a Polish bioinformatics company based in Warsaw, operating within the life sciences and computational biology sector. It specializes in RNA and protein structure prediction, molecular modeling, and bioinformatics software development. The company provides research services and tools to academic and pharmaceutical clients, supporting drug discovery and genomic research. It is affiliated with the Institute of Biochemistry and Biophysics of the Polish Academy of Sciences.
KÖRBER
September 7, 2026
•[ ransomware, manufacturing, technology ]
KRBER was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Manufacturing. Country: Germany. [AI generated] Krber is a German technology conglomerate headquartered in Hamburg, Germany. The company operates across multiple industries including supply chain automation, pharma, tissue, tobacco, and digital solutions. Krber develops and delivers software, machinery, and integrated systems to help businesses optimize their operations. With a global presence spanning numerous countries, it serves clients in logistics, healthcare, and manufacturing sectors worldwide.
TrainMe
September 7, 2026
•[ ransomware, education ]
TrainMe was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Education. Country: Colombia. Website: trainme.co. Corporate Wellness Services
Rug & Home
September 7, 2026
•[ ransomware, retail, financial ]
Rug & Home was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Retail & E-Commerce. Country: United States of America. Rug & Home Rug & Home is a leading destination in the USA for rugs, furniture, and home decor, offering a vast selection of unique designs and top brands.Database of 50,193 customersfull names, home addresses, email addresses, phone numbers, purchase amounts (CSV)~10,800 scanssigned delivery notes with customer addresses/phone numbersPlaintext passwords for ~60 B2B supplier portalsW-2, 1099, W-9 tax forms with employees' and contractors' SSNsPayroll database for all employees (Sage EMPLOYEE/ESWAGE)Company bank details (First Citizens Bank deposits) and employee accounts (direct deposit)HR: background checks, terminations, workplace injuries, 401(k)And much more More
