Cipsa Industrias Sa De Cv
October 30, 2026
•[ ransomware, manufacturing, financial ]
Cipsa Industrias Sa De Cv was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Manufacturing. Country: Mexico. Cipsa Industrias Sa De Cv Compania Industrial Papelera Poblana, S.A. de C.V. (CIPPSA) and Tubos y Empaques de Puebla, S.A. de C.V. (TEPSA / KJAS TEPSA), a Mexican corrugated cardboard, packaging and paper-tube manufacturer. Complete employee HR records: names, dates of birth, home addresses, phone numbers, personal and corporate email addresses, CURP, RFC, IMSS numbers, salaries and employee badge photographs.Payroll records, tax data, fiscal validation files and HSBC payroll-bank files containing employee account and CLABE data.Information showing executive compensation through an **honorarios** arrangement outside the regular payroll system.Financial and industrial reports, sales/procurement/payroll budgets, production costs, operational analytics, invoices and accounting records.Customer complaint records and overdue receivables data.Occupational-safety, psychosocial-risk, industrial-incident and hazardous-waste documentation. More
P...
October 30, 2026
•[ ransomware ]
P... was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-10-30. Redacted entry - full company name pending disclosure (FULL DATA TIMER active).
Louisiana Crane & Construction
October 30, 2026
•[ ransomware, manufacturing ]
Louisiana Crane & Construction was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Manufacturing. Country: United States of America. Website: la-crane.com. A construction management company.
Illinois Work Injury Resource Center (IWIRC)
October 30, 2026
•[ ransomware, healthcare ]
Illinois Work Injury Resource Center (IWIRC) was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Healthcare. Country: United States of America. Website: iwirc.biz. A comprehensive occupational health and rehabilitation service provider located in Peoria, IL.
Facts N Figures
October 30, 2026
•[ ransomware, technology ]
Facts N Figures was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Professional Services. Country: United States of America. Website: factsnfiguresinc.com. A consumer insights research company.
Bi Link
October 31, 2026
•[ ransomware, manufacturing, technology ]
Bi Link was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-31. Country: United States of America. Website: bi-link.com. bi-link.com Revenue $380.2 Million Bi-Link US precision manufacturer founded in 1961 (HQ Bloomingdale, IL), making metal stampings and injection-molded plastics with in-house tooling and assembly for automotive, medical, wireless, and consumer electronics OEMs. It owns plants in Shanghai, Nanning, Mexico (Jurez), and a new Vietnam site (2024), offering prototype-to-production under one roof. Revenue isn't reliably public broker estimates range wildly from ~$10M to $50M, but a TaiPEX filing suggests ~$5M+/month after consolidation. The critical development: in October 2025 family owners agreed to sell the company to Taiwan-listed Donpon Precision, closed and consolidated from Jan 2026. Despite the site still claiming "family-owned", control is now Donpon's, and long-time CEO Tom Harris has exited. Certifications (ISO 9001, ISO 13485, IATF 16949) support real OEM work (e.g. Teleflex via a 3D Systems case)
Cherry Bekaert
October 28, 2026
•[ ransomware, leak, manufacturing ]
Cherry Bekaert was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-28. Sector: Professional Services. Country: United States of America. Website: cbh.com. cbh.com Revenue $446.7 Million CBH Group Australia's largest grain cooperative, founded in 1933 in Perth and owned by over 3,700 farmer shareholders across Western Australia. It operates the world's largest grain export network with around 200 receival sites, 20 million tons of storage capacity and four export terminals at Kwinana, Albany, Geraldton and Esperance. Each year it handles approximately 20 million tons of grain and exports 15 to 17 million tons, mainly wheat, barley and canola to Asia, the Middle East and beyond. Led by CEO Brendan White, it has invested over 2 billion dollars in infrastructure modernization including rail upgrades, solar energy and digital platforms like the CBH App. The cooperative is financially strong with a BBB credit rating and returns profits to farmers through patronage dividends. It operates its own rail fleet of 360 wagons, runs quality testing laboratories at every site and is expanding port capacity to load Panamax vessels at Kwinana and Albany.
SK Capital Partners
October 28, 2026
•[ ransomware, financial, manufacturing ]
SK Capital Partners was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-28. Sector: Financial Services. Country: United States of America. Website: skcapitalpartners.com. skcapitalpartners.com Revenue $63 Million SK Capital Partners is a New York-based private equity firm founded in 2007 as a spinoff from Apax Partners, managing approximately 10 billion dollars across 60 plus investments in specialty chemicals, pharmaceuticals and ingredients. Led by co-founder Barry Siadat, it targets control investments in companies with 100 million to 1 billion dollars in revenue and has built platforms like Advansix, Sartomer and Cura Particles through buy-and-build strategies. Its portfolio companies employ over 12,000 people and generate more than 5 billion dollars in annual revenue. Recent deals include the July 2026 acquisition of Lorama Group and the October 2026 purchase of Vesuvius Americas refractory assets. Key strengths are deep sector expertise in real-economy industrial businesses and proven IPO and trade sale exits.
Regency Park Oak Knoll
October 26, 2026
•[ ransomware, healthcare ]
Regency Park Oak Knoll was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Other. Country: United States of America. Website: www.regencypk.com. www.regencypk.com https://www.zoominfo.com/c/regency-park-oak-knoll/235454820 Regency Park Oak Knoll specializes in providing world-class memory care and assisted living services for residents with dementia or memory loss in Pasadena, California. With over 50 years of experience, their expert staff offers personalized care, socialization, and a range of therapies tailored to each resident's needs. The facility is dedicated to ensuring a safe, secure, and homelike environment, focusing on the physical, emotional, and spiritual well-being of its residents. Recognized as a premier memory care community, Regency Park Oak Knoll is committed to treating every resident like family.
Mann Group
October 26, 2026
•[ ransomware, manufacturing, energy ]
Mann Group was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Manufacturing. Country: Australia. Website: manngroup.com.au. manngroup.com.au Mann Group is an Australian multi-disciplinary engineering and construction company founded in 1992 in Sydney, operating through eight subsidiaries including Mechtronic Engineering, Mann Fab, Mann Energy, Mann Enviro and Mann Solar. With 350 plus employees, it is Australia's leading provider of thermal, electrical, environmental and sanitary engineering solutions. The group covers pipe fabrication, structural steel, pressure vessels, industrial boilers, HVAC, waste-to-energy and renewable energy systems. Its headquarters and central workshop are located in Milperra, Sydney, with a financial year ending in June.
Lydenburg Toyota
October 26, 2026
•[ ransomware, retail, manufacturing ]
Lydenburg Toyota was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Retail & E-Commerce. Country: South Africa. Website: lydenburg.toyota.co.za. lydenburg.toyota.co.za Lydenburg Toyota is a Toyota dealership in Lydenburg (Mashishing), Mpumalanga, South Africa, part of the Toyota South Africa Motors dealer network selling new Toyota and Lexus vehicles, certified used cars, service, parts and financial services. The town is also home to Toyota SA Manufacturing, the largest Toyota plant in Africa, assembling Hilux, Fortuner and Corolla Cross with engines and components exported to over 40 countries including the United States. Toyota SA Motors holds 24.2 percent of the South African vehicle market and exported 187 billion rand in FY2023, with 8500 direct employees across its plants. The company invested 2.43 billion rand in hybrid technology and is developing a 2.2 billion dollar Mbombela megaproject including housing, schools and hospitals around the Lydenburg plant. Corolla Cross production from Lydenburg began exports to the US in April 2024.
Unisa Shoes
October 26, 2026
•[ ransomware, retail ]
Unisa Shoes was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Retail & E-Commerce. Country: Spain. Website: unisa.es. unisa.es Unisa Shoes is a Spanish footwear company founded in 1973 in Elche, Alicante, with 52 years of history across three generations of the Prez Parres family. It designs and produces women's, men's and accessories collections sold in 70 plus countries through around 30 own stores, 150 plus Espacio Unisa points of sale and its e-commerce platform. Revenue reached 25.3 million euro in 2024 with 145 employees, and international online sales hit a record 16 percent in 2025. Led by CEO Carlos Prez Parres, the company launched its men's line in 2021 and an eco-friendly recycled suede collection, positioning itself as an accessible Spanish lifestyle brand. It opened a 300 square meter showroom in Madrid and a subsidiary in Italy to expand European distribution. Core strengths are family heritage, global reach across 70 countries and a diversified omnichannel sales model.
Belmont Resorts
October 26, 2026
•[ ransomware, retail ]
Belmont Resorts was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Hospitality. Country: Australia. Website: belmontresorts.com. belmontresorts.com Belmont Resorts is a small boutique hotel in McLeodganj, Dharamshala, Himachal Pradesh, operating as Hotel Satovari Pride on the Strawberry Hills with panoramic views of the snow-capped Dhauladhar mountains. It has just 14 rooms across four categories from Deluxe to Premium Gold corner suites with private balconies, mini-fridges and sunrise-sunset views from both sides. Positioned as a value-for-money alternative next to ITC Hotels and Lemon Tree, it offers a pure vegetarian restaurant with Jain cuisine, 24/7 power backup, fast WiFi and free parking. The hotel caters to relaxation, spiritual tourism, trekking and long-term workation stays with tour packages to Khajjiar and Dalhousie.
EPMMOP
October 26, 2026
•[ ransomware, government, technology ]
EPMMOP was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Country: Ecuador. Website: epmmop.quito.gob.ec. epmmop.quito.gob.ec EPMMOP is the Metropolitan Public Company of Mobility and Public Works of Quito, Ecuador, responsible for urban transportation infrastructure and public works across the capital district of 2.7 million people. It manages the city's integrated transport system including the new Quito Metro, launched in December 2023 as Ecuador's first subway line with 22.4 kilometers and 15 stations. The agency also operates the TelefriQo cable car, one of the highest in the world, plus trolleybus, BRT and cable car systems under the SITM integrated transit framework. It builds and maintains roads, bridges, sidewalks, drainage and one of Latin America's largest cycling networks. The company works within Quito's UNESCO World Heritage context, requiring unique engineering solutions for the historic center.
WIKA Beton
October 26, 2026
•[ ransomware, manufacturing, government ]
WIKA Beton was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Manufacturing. Country: Indonesia. Website: wika-beton.co.id. wika-beton.co.id WIKA Beton (PT Wijaya Karya Beton Tbk) is Indonesia's largest precast and prestressed concrete manufacturer, founded in 1997 and listed on the Indonesia Stock Exchange since 2014 as part of state-owned Wijaya Karya group. It operates over 20 production plants across Indonesia from Java to Papua, producing more than 189 types of concrete products including bridge girders, piles, culverts and railway sleepers. Revenue is estimated at around 5.3 trillion rupiah with a market cap of 1.9 trillion, offering a 3.5 percent dividend yield and trading well below book value. The company is a primary supplier for Indonesia's massive infrastructure boom including toll roads, the Jakarta-Bandung high-speed railway and new port construction. Led as a state-owned enterprise, it benefits from priority access to government contracts and a unique nationwide plant network.
Grupo Sanirent
October 26, 2026
•[ ransomware, healthcare, government ]
Grupo Sanirent was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Healthcare. Country: Mexico. Website: sanirent.com.mx. sanirent.com.mx Grupo Sanirent is a 100 percent Mexican company founded in 1983 in Mexico City, the national leader in portable toilet rental, mobile offices, septic services and waste management. With 178 employees and operations in all 32 Mexican states, it serves everything from private events and luxury weddings to massive construction sites and industrial operations. Its business lines include standard and VIP portable toilets, camper-style luxury stations, mobile office rentals, industrial drain cleaning with specialized vactor and guzzler trucks, and full waste collection including hazardous and bio-infectious materials. The company holds ISO 9001 certification and has won 53 government contracts with major institutions like IMSS, CFE, CAPUFE and the National Culture Secretariat. Its premium Eventos Especiales division provides luxury sanitary facilities for high-end events across the country. Key strengths are 43 years of experience, full national coverage, diversified service.
SoftwareOne
October 26, 2026
•[ ransomware, technology, leak ]
SoftwareOne was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Technology. Country: Turkey. Website: softwareone.com. softwareone.com SoftwareOne Turkiye is the Turkish arm of SoftwareOne Holding AG, a Swiss-listed global software and cloud solutions provider that merged with Crayon to form a 13,000 person company operating in over 70 countries. Based in Ataehir, Istanbul and active since 2019, it employs around 40 to 60 people and works with 100 percent of Turkey's top 50 companies and 80 percent of the top 500. Services span software licensing advisory for Microsoft, IBM and Oracle, cloud migration across Azure, AWS and Google Cloud, DevSecOps, cybersecurity, AI and FinOps. In December 2024 SoftwareOne AG acquired full ownership of the Turkish entity, approved by the Turkish Competition Authority. Led by Managing Director Doa Pekdemir and CFO Hakan Keri, it has delivered projects for Turkish Airlines, TAV Airports, Coca-Cola and Vakf Katlm. Key strengths are its unmatched enterprise market coverage in Turkey and full access to the global SoftwareOne and Crayon ecosystem.
Northwest Micro Systems
October 26, 2026
•[ ransomware, technology ]
Northwest Micro Systems was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Technology. Country: United States of America. Website: nwmicro.com. nwmicro.com Northwest Micro Systems, formally Northwest Micro Inc., is a private IT services and software company founded in 1998 in Atlanta, Georgia, serving small businesses with managed IT, cloud backup, email, CRM and custom .NET development. Led by founder and owner Leo Zhadanovsky, it has around 11 employees and steady revenue of roughly 5 million dollars. Its unique model offers affordable one-time products like the One 2 One email server and Speed To Success CRM for about 100 dollars with lifetime updates and support. The company positions itself as the anti-corporate alternative to Oracle and Microsoft, focused on keeping small business clients for life. Core strengths are 28 years of market presence, a loyal SMB client base and a low-overhead operation. Its tech stack centers on Microsoft 365, SQL Server and .NET with a mix of SaaS and on-premise tools.
nelsenarchitects.com
September 28, 2026
•[ ransomware, technology, leak ]
nelsenarchitects.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Professional Services. Country: United States of America. Website: nelsenarchitects.com. This article is based on a portion of the company's internal documents to which we gained access. Every statement has coordinates file, date, line number. Personal data has been masked the company failed to protect it, so we are protecting it.
everon.com.ar
October 31, 2026
•[ ransomware, technology ]
everon.com.ar was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-10-31. Sector: Other. Country: Argentina. Website: everon.com.ar. The company is headquartered in Resistencia, in Chaco Province, and specializes in providing fiber-optic internet connectivity to residential customers and
