grifosespinoza.com
October 31, 2026
•[ ransomware, retail, financial ]
grifosespinoza.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-10-31. Sector: Other. Country: Peru. Website: grifosespinoza.com. Headquartered in Lima, the company manages fuel stations that serve individual motorists, commercial customers and other transportation-related businesses. Its core
Holcim
October 31, 2026
•[ ransomware, manufacturing ]
Holcim was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-10-31. Sector: Manufacturing. Country: Switzerland. Holcim is a global building-materials and building-solutions company founded in Switzerland in 1912. It provides cement, aggregates, ready-mix concrete and high-value building solutions for infrastructure, buildings and industrial applications. Holcim focuses on sustainable construction through solutions such as ECOPact, ECOPlanet and ECOCycle. In 2025, the company generated CHF 15.7 billion in net sales and operated across 43 markets. [Sector: Manufacturing, Construction]
Punta Shopping
October 31, 2026
•[ ransomware, retail, finance ]
Punta Shopping was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-10-31. Sector: Retail & E-Commerce. Country: Uruguay. Website: puntashopping.com.uy. Commercial organization in Uruguay, located in the city of Punta del Este
Field of activity: shopping center management, rental of commercial space, retail trade and services.
The archive contains the most important personal data and customer data. [Sector: Finance]
JHAMF Group
October 31, 2026
•[ ransomware, technology ]
JHAMF Group was listed as a victim on the leak site of the Vexy Ransomware ransomware group; the attack is estimated to have taken place on 2026-10-31. Country: Bangladesh. Website: www.jhamf.com. JHAMF Group is a Colombian IT services company specializing in IT infrastructure, telecommunications, software licensing and implementation, network installation and certification, technical support outsourcing, and cloud infrastructure solutions, including Microsoft Azure.
hccd-construction.com
September 1, 2026
•[ ransomware, manufacturing ]
hccd-construction.com was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-09-01. Sector: Manufacturing. Country: United States of America. Website: hccd-construction.com. The Holding Company for Construction and Development (HCCD) is an Egyptian public holding company (Egyptian Holding Stoc...
southsign.in
September 1, 2026
•[ ransomware, technology ]
southsign.in was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-09-01. Sector: Professional Services. Country: India. Website: southsign.in. Southsign Technologies is an Indian proprietor firm established in 2021, headquartered in Dindigul, Tamil Nadu, India, o...
amptc.net
September 1, 2026
•[ ransomware, technology ]
amptc.net was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-09-01. Sector: Technology. Country: United States of America. Website: amptc.net. Arab Maritime Petroleum Transport Company (AMPTC) is a leading Arab maritime shipping company established in 1972 as a s...
Hawaii Law Enforcement Fedral Credit Union
October 27, 2026
•[ ransomware, finance ]
Hawaii Law Enforcement Fedral Credit Union was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Financial Services. Country: United States of America. Website: www.hlefcu.com.
NuVista Federal Credit Union
October 27, 2026
•[ ransomware, finance ]
NuVista Federal Credit Union was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Financial Services. Country: United States of America. Website: www.nuvista.org.
RCOA- Regent Christian Online Academy
October 27, 2026
•[ ransomware, education ]
RCOA- Regent Christian Online Academy was listed as a victim on the leak site of the Booba Project ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Education. Country: Canada. Website: www.rcoa.ca. Hospitals and Health Care Stolen data: 1 GB.
QLC
October 27, 2026
•[ ransomware, technology ]
QLC was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Technology. Country: United States of America. Website: www.qlc-labeling.com. United States
Money Concepts Capital
October 27, 2026
•[ ransomware, finance ]
Money Concepts Capital was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Financial Services. Country: United States of America. Website: www.moneyconcepts.com. United States
Coast 2 Coast
October 27, 2026
•[ ransomware, retail, finance ]
Coast 2 Coast was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Retail & E-Commerce. Country: United States of America. Website: www.c2cescrow.com. United States
Machelen (Belgium)
October 27, 2026
•[ ransomware, government, healthcare ]
Machelen (Belgium) was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-10-27. Country: Belgium. Website: machelen.be. Machelen (Belgium) Machelen (Belgium) - municipal and social welfare (OCMW) file servers1.3 million files, ~2.9 TB. Working copy + backup copy (lawer2/lawer3). Language: Dutch, partly French.Contents:Social welfare and migration service client files: passports, ID cards, residence permits, sick notes.WZC nursing home: medical files, staff HR dossiers, workplace accidents.Civil status records (births, marriages) with national register numbers (NISS/RRN).Payslips, financial data.Correspondence (~23k messages), employee home folders.Databases and backups: full OCMW database backup (6 GB, 09/2026), 645 .mdb databases, 12,873 .dbf, 110 .bak (17 GB).Verified: 13,319 files with personal data. Among them - a valid Belgian ID card (expiry 02/2029), Belgian and Moroccan passports, national register numbers (RRN), sick notes with patient addresses, medical documents (GDPR Art. 9 special categories). More
Ryder
October 27, 2026
•[ ransomware, transportation, leak ]
Ryder was listed as a victim on the leak site of the Whitearmor ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Transportation. Country: United States of America. Ryder is a Fortune 500 transportation and supply chain management company providing fleet management, dedicated transportation, and logistics solutions.
What we hold: 18.75M rows, 328 CSVs, consumer names, phones, emails, driver/associate PII, cleartext API keys, LMS credentials, FTP/telematics configs from RyderView, RLM, EFT.
Our demand is only $20M in BTC... i swear.
Samples can be found below.
Emails with instructions will be sent to Ryder shortly, and no we did not buy access from 'shadowbyte' or whatever the niggas name is on pwnforums.
Contact if you do not receive the instructions:
Session: 0547b7f96d469ecb332e89d0108e71c92df5bacff6c4ed5b9801ab5fffe872ee67
Email: whitearmorrxd@proton.me
PQE Group
October 28, 2026
•[ ransomware, technology ]
PQE Group was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-10-28. Sector: Professional Services. Country: Italy. Founded in 1998, PQE Group provides technology solutions and compliance consulting services to the Life Sciences industry. The company is headquartered in Reggello, Florence. Note : The Full Data volume is coming as duplicati (dindex.zip.aes), Our Team with our Affiliates will try to enum the PassPhrase From the Target Network and Crack it with a Custom Pass lists and custom tools, We Also Gonna Share the Guide to how you as a hacker can get the hash with aescrypt2hashcat.pl and Crack it using hashcat, The Rest will depend on your Crack process to see the full data volume, We also available to Recover the data to the company when they contact us via official channels and stop the leak process, Thank you.
Fortrex
October 28, 2026
•[ ransomware, manufacturing ]
Fortrex was listed as a victim on the leak site of the Wallstreet ransomware group; the attack is estimated to have taken place on 2026-10-28. Sector: Manufacturing. Country: United States of America. Website: fortrexsolutions.com. Fortrex is the premier provider of food safety solutions in North America, offering comprehensive sanitation services, chemical products and intervention solutions for food processing facilities. Our team of skilled food sanitors, microbiologists, technical experts and engineers are committed to keeping USDA, FDA, and CFIA processing facilities clean, safe, and audit-ready
xspringcapital.com
October 28, 2026
•[ ransomware, finance ]
xspringcapital.com was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-10-28. Sector: Financial Services. Country: Thailand. Website: xspringcapital.com. XSpring Capital Public Company Limited is a company that operates in the business of investing in va...
California School Boards Association
October 29, 2026
•[ ransomware, education ]
California School Boards Association was listed as a victim on the leak site of the Booba Project ransomware group; the attack is estimated to have taken place on 2026-10-29. Sector: Education. Country: United States of America. Website: www.csba.org. Education Management Stolen data: 80 GB.
www.viehhauser-kfz.at
October 29, 2026
•[ ransomware, automotive ]
www.viehhauser-kfz.at was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-10-29. Sector: Transportation. Country: Austria. Website: www.viehhauser-kfz.at. Viehhauser KFZ GmbH & Co KG is an Austrian family-owned automotive dealership and service center founded on March 20, 19...
