MicroSearch
October 27, 2026
•[ ransomware, technology ]
MicroSearch was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Technology. Website: www.microsearch.net. United States
UPDATE: UNM
October 27, 2026
•[ ransomware, education, healthcare ]
UPDATE: UNM was listed as a victim on the leak site of the BYOD ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Education. We are offering the decryption key for the remaining of locked devices for free (ONLY for the hospital sector) we did not know that it was running machines related to assisting patients in real-time, (we would keep it locked if it was appointments, patient information + research data only), we are still going to keep the data, but we will provide the decryption key for the hospital sector only. Feel free to contact us on Session. To any patient that was affected, please provide us proof, and we will pay you up to $2500 each for the inconvenience. We are sorry once again. We have morals and we have a heart, we are not villains, but we will still continue to hold companies responsible for bad security leading to the compromise of any customer data. That's the whole reason why we came about and we plan to keep it that way.
Company #112
October 28, 2026
•[ ransomware, technology ]
Company #112 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-28. Country: Malaysia. telecommunications services Malaysia | [PENDING EXPOSURE: settlement window open]
EWM Group
October 28, 2026
•[ ransomware, retail, financial ]
EWM Group was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-10-28. Sector: Other. Country: United Kingdom of Great Britain and Northern Ireland. Website: EWM Group. [fashion] EWM Group the parent group behind Bonmarch, Edinburgh Woollen Mill, and Peacocks, three of the UK's best-known value fashion chains.
The exposed material includes:
503,878 loyalty programme member records full name, home address, date of birth, phone, mobile, email, loyalty card number, and transaction history spanning 20002026.
~21,000 employee records salary, National Insurance number (via P11D), bank sort code and account number (WAGESTRANSFER database), home address, emergency contacts, maternity/paternity data, sickness absence, accident reports with injury details.
100+ GB of Outlook PST email archives complete email histories for named staff members spanning years of business operations.
313+ SQL Server database backups across 122 unique databases the entire digital brain of the retail operation.
83 GB of e-commerce transaction data every online order from January 2021 to August 2026.
Roberts Consulting Services
October 28, 2026
•[ ransomware, leak ]
Roberts Consulting Services was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-10-28. Sector: Professional Services. Website: jsrconsulting.com. RCS is a full-service engineering firm specializing in Construction Materials Testing, Construc
tion Engineering and Inspection (CEI), and QA/QC services, founded in 2013. With over 60 years
of combined FDOT experience, RCS provides high-quality professional services to clients in road
way and bridge construction projects throughout Central Florida.
We will upload 28gb of corporate data soon. Detailed employee information (passport scans, DLs,
SSN), contracts and agreements, client information, financials, NDA, etc.
Trulife
October 28, 2026
•[ ransomware, healthcare, leak ]
Trulife was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-10-28. Sector: Healthcare. Website: trulife.com. Trulife is an internationally recognized company with over 60 years of experience in the develo
pment and manufacture of specialized healthcare and consumer products. Their extensive product
range includes breastcare solutions, orthotics, lower limb prosthetics, walking aids, and press
ure care products.
We will upload 68gb of corporate data soon. Detailed employee information (passport scans, DLs,
medical certs, birth certs), contracts and agreements, confidential files (employee violations
, terminations and so on), financials, NDA, etc.
The Anglican International School
October 28, 2026
•[ ransomware, education ]
The Anglican International School was listed as a victim on the leak site of the Global Secret Group ransomware group; the attack is estimated to have taken place on 2026-10-28. Sector: Education. Country: Israel. Website: aisj.co.il. Country: Grenada.Spain |
Website: aisj.co.il |
Revenue: $11.1 Million |
Industry: Primary and Secondary Education |
Employees: 50-100 |
Properties: 218 GB (257,960 Files, 28,378 Folders)
A&B Lab
October 27, 2026
•[ ransomware, healthcare, technology ]
A&B Lab was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Other. Country: United States of America. Website: ablabs.com. Provides Laboratory Services.
Cyrious Software
October 26, 2026
•[ ransomware, technology ]
Cyrious Software was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Technology. Country: United States of America. Website: cyrious.com. Specialized business management software designed for sign, graphics, and print providers
Lowenstein Sandler LLP
October 28, 2026
•[ ransomware, finance ]
Lowenstein Sandler LLP was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-10-28. Sector: Professional Services. Country: United States of America. Founded in 1961 and headquartered in New York City, New York, Lowenstein Sandler is a national law fir
Santiam Hospital & Clinics
October 28, 2026
•[ ransomware, healthcare ]
Santiam Hospital & Clinics was listed as a victim on the leak site of the anubis ransomware group; the attack is estimated to have taken place on 2026-10-28. Sector: Healthcare. Country: United States of America. A major medical data breach.
susannecerda.com
October 28, 2026
•[ ransomware, finance ]
susannecerda.com was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-10-28. Country: Mexico. Website: susannecerda.com. Die Unternehmensgruppe Susanne Cerd bietet nicht nur Dienstleistungen im Bereich Unternehmensgrndu...
Terrebonne Parish Government
October 29, 2026
•[ ransomware, government ]
Terrebonne Parish Government was listed as a victim on the leak site of the Booba Project ransomware group; the attack is estimated to have taken place on 2026-10-29. Sector: Government & Defense. Country: United States of America. Website: www.tpcg.org. Government Relations Services Stolen data: 105 GB.
Circleville Police Department
October 29, 2026
•[ ransomware, government ]
Circleville Police Department was listed as a victim on the leak site of the Booba Project ransomware group; the attack is estimated to have taken place on 2026-10-29. Sector: Government & Defense. Country: United States of America. Website: www.circlevillepolice.com. Government Administration Stolen data: 15 GB.
South Weber City
October 29, 2026
•[ ransomware, government ]
South Weber City was listed as a victim on the leak site of the Booba Project ransomware group; the attack is estimated to have taken place on 2026-10-29. Sector: Government & Defense. Country: United States of America. Website: www.southwebercity.gov. Government Administration Stolen data: 295 GB.
LifeFone
October 29, 2026
•[ ransomware, healthcare, manufacturing ]
LifeFone was listed as a victim on the leak site of the Booba Project ransomware group; the attack is estimated to have taken place on 2026-10-29. Sector: Healthcare. Country: United States of America. Website: www.lifefone.com. Medical Equipment Manufacturing Stolen data: Less than 1 GB.
W Interactive
October 28, 2026
•[ ransomware, technology ]
W Interactive was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-28. Sector: Technology. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.w-interactive.com.
IT Foods Industries
October 29, 2026
•[ ransomware, manufacturing ]
IT Foods Industries was listed as a victim on the leak site of the Shiba ransomware group; the attack is estimated to have taken place on 2026-10-29. Sector: Agriculture and Food Production. Manufacturing
Innoe Asesores
October 30, 2026
•[ ransomware, leak ]
Innoe Asesores was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Professional Services. Country: Mexico. Website: www.innoeasesores.com.
FrenchCreek Production
October 30, 2026
•[ ransomware, manufacturing, leak ]
FrenchCreek Production was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Energy & Utilities. Country: United States of America. FrenchCreek Fall Safety specializes in manufacturing high-quality fall protection equipment. Th
eir product range includes harnesses, lanyards, self-retracting lifelines, and comprehensive sa
fety systems for various applications, including confined space entry and rescue.
We will upload 40gb of corporate data soon. Detailed employee information (phones numbers, addr
esses and so on), contracts and agreements, client and partners information, financials, specif
ications and so on.