Conax Technologies
October 23, 2026
•[ ransomware, technology, manufacturing ]
Conax Technologies was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-23. Sector: Technology. Country: Norway. Website: conaxtechnologies.com. conaxtechnologies.com Conax Technologies US manufacturer founded in 1952 in Buffalo, New York, producing temperature sensors like thermocouples and RTDs together with high-pressure compression seal fittings for extreme conditions. Owned by the private equity firm May River Capital, it has around 200 to 500 employees and estimated revenue of roughly 41 million dollars. Its products operate in extreme temperatures up to 2000 Fahrenheit and pressures up to 100,000 psi across aerospace, defense, semiconductor, medical and energy markets. The company runs a 101,000 square foot plant with 150 machines, holds AS9100, NADCAP and ISO certifications, and has over 45 patents with 100 million products installed worldwide. Under CEO John LeFevre since 2023 it is expanding through acquisitions such as Vulcan Electric and Sorregosa Spain plus growth in semiconductor and medical verticals.
Penco Products
October 23, 2026
•[ ransomware, manufacturing ]
Penco Products was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-23. Sector: Manufacturing. Country: United States of America. Website: pencoproducts.com. pencoproducts.com Penco Products US metal manufacturer founded in 1869, now based in Greenville, North Carolina, making steel lockers, shelving, pallet racks and garment dispensers at its 375,000 square foot ISO certified plant in Hamilton. It is part of the IMC industrial group and has around 200 employees, up to 350 in summer peaks. Its lockers are an American standard in schools, gyms, hospitals and military facilities, with new smart locker lines for contactless pickup. Led by CEO Craig Atwater since 2021, it sells through a national distributor network with QuickShip warehouses across the country. Strengths are 157 years of brand trust, full US vertical production and diversification into school furniture.
Morrow Meadows Corporation
September 23, 2026
•[ ransomware, manufacturing, technology ]
Morrow Meadows Corporation was listed as a victim on the leak site of the payoutsking ransomware group; the attack is estimated to have taken place on 2026-09-23. Sector: Other. Country: United States of America. Website: morrow-meadows.com. [AI generated] Morrow Meadows Corporation is a United States-based electrical contracting company. It provides electrical construction, design-build, and engineering services for commercial, industrial, institutional, and data center projects. Operating primarily in California, the company serves sectors such as technology, healthcare, education, and manufacturing, offering services including power distribution, lighting, fire alarm systems, and electrical infrastructure installation.
Arthritis Center of Riverside
October 24, 2026
•[ ransomware, healthcare, leak ]
Arthritis Center of Riverside was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-24. Sector: Healthcare. Country: United States of America. Website: thearthritiscenter.com. rheumatology medical practice Riverside, California, United States | Scanned laboratory requisitions of named patients with dates of birth, home addresses and Medicare subscriber details, April through October 2026; Accounts receivable aging with patient names, account numbers, insurers and balances; Patient billing files and records correspondence of the practice | [NOT PAID EXPOSED]
www.optika.ca
October 24, 2026
•[ ransomware, healthcare, technology ]
www.optika.ca was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-10-24. Sector: Technology. Country: Canada. Website: www.optika.ca. Optika Eye Care Center (Centre Visuel Optika Optomtristes) is a Canadian optometry and optical care clinic located in ...
www.zhservices.com
October 24, 2026
•[ ransomware, technology, healthcare ]
www.zhservices.com was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-10-24. Sector: Professional Services. Website: www.zhservices.com. ZH Healthcare (Z & H Consultancy Services Private Limited) is an Indian health-tech platform and EMR/EHR solutions provi...
Heber City, UT
October 24, 2026
•[ ransomware, government ]
Heber City, UT was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-24. Sector: Government & Defense. Country: United States of America. Website: www.heberut.gov.
Castle Howard Estate
October 24, 2026
•[ ransomware, retail ]
Castle Howard Estate was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-24. Sector: Hospitality. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.castlehoward.co.uk.
AB InBev
October 25, 2026
•[ ransomware, manufacturing, retail ]
AB InBev was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-10-25. Sector: Agriculture and Food Production. Country: Belgium. Website: ab-inbev.be. AB InBev is the world's largest brewer, headquartered in Belgium, known for Budweiser, Corona, and Stella Artois .
We hold 329,244 AB InBev social-listening alerts, 2,510 corporate emails across all subsidiaries, 19K access logs, GBS portal records, internal PKI certificates, and 3.2GB of Azure blob assets.
Our demand is $1,000,000 in BTC. [Sector: Retail, Manufacturing]
ETO
October 25, 2026
•[ ransomware, manufacturing, technology ]
ETO was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-25. Country: Germany. Website: www.etogruppe.com.
Hossner-Textil GmbH
October 25, 2026
•[ ransomware, manufacturing ]
Hossner-Textil GmbH was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-25. Sector: Manufacturing. Country: Germany. Website: www.hossner-textile.de.
Miletic GmbH
October 26, 2026
•[ ransomware, manufacturing ]
Miletic GmbH was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-10-26. Country: Germany. Miletic GmbH is a German specialized contractor headquartered in Bad Schnborn that has been operating in the construction sector since 1989. The company's core business focuses on construction and repair work for ecologically sensitive industrial facilities, including gas stations, tank farms, and operations governed by German water protection laws (WHG Class LAU facilities). Its service portfolio includes joint sealing and remediation, the application of chemical-resistant protective coatings, concrete construction, and related earthworks.
Seufert Construction
October 26, 2026
•[ ransomware, manufacturing ]
Seufert Construction was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Manufacturing. Country: United States of America. Website: www.seufertconstruction.com.
Gamdom
October 26, 2026
•[ ransomware, financial, technology ]
Gamdom was listed as a victim on the leak site of the Whitearmor ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Other. Gamdom is an unregulated crypto casino and sportsbook founded in 2016. It recently suffered a hot-wallet breach, with founder Felix Romer reporting over $3 million in losses, though on-chain analysts estimate the damage closer to $4.2 million.
We hold Gamdom's full user database, 15,420,003 accounts with 146 columns, with Gamdom's total combined profit value exceeding $1 billion.
The way in was something internal, a machine account that was already sitting in their admin side (Metawin).
Issued years back, nobody ever rotated it. Never meant to leave the building.
It had admin reach, and everything after that was their own stuff anyway, their control panels and secret stores.
About your provably fair: what it promised and what it delivered were never the same thing.
We demand $15,000,000 in BTC.
Emails with instructions will be sent to you directly.
To verify, a sample can be found below.
Ingelectus Innovative Electrical Solutions S.L.
October 26, 2026
•[ ransomware, energy, technology ]
Ingelectus Innovative Electrical Solutions S.L. was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Energy & Utilities. Country: Spain. smart grid engineering firm Spain | Live electrical telemetry sampled from the plant control network, with voltage, current and energy readings recorded on 23 October 2026; Complete inventory of 49 network devices including substation switches, remote terminal units, power meters and server management controllers, with locations and firmware details; Full maps of the internal control network segments and message broker metrics that carry the plant data | [NOT PAID EXPOSED]
Morrison Cohen
October 26, 2026
•[ ransomware, finance, government ]
Morrison Cohen was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Professional Services. Country: United States of America. [AI generated] Morrison Cohen LLP is a United States law firm headquartered in New York City. It provides legal services across practice areas including corporate law, litigation, bankruptcy and restructuring, real estate, intellectual property, and white-collar defense. The firm serves corporate clients, financial institutions, and individuals. It operates within the legal services industry, primarily serving businesses in the New York metropolitan area and nationally.
Natuzzi
October 27, 2026
•[ ransomware, manufacturing ]
Natuzzi was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Manufacturing. Country: Italy. [AI generated] Natuzzi S.p.A. is an Italian manufacturer and distributor of furniture, specializing in leather and fabric upholstered sofas, chairs, and home furnishings. Founded in 1959 and headquartered in Santeramo in Colle, Italy, the company operates in the home furniture and interior design industry. Natuzzi designs, produces, and markets its products globally, selling through its own branded stores and third-party retailers across multiple countries.
GreenbergFarrow
October 27, 2026
•[ ransomware, technology, finance ]
GreenbergFarrow was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Professional Services. Website: GreenbergFarrow. [architecture] GreenbergFarrow a respected ESOP-owned architecture firm headquartered in Atlanta, Georgia with offices in Charlotte, Dallas, Los Angeles, New York, Myrtle Beach, and international operations in Mexico, Colombia, India, and Canada.
The dataset spans three major divisions:
Client Libraries (152 client folders, AF): Proprietary architectural designs, prototypes, and specifications for major retail chains, banks, and restaurant brands including Circle K, Capital One, 7-Eleven, Chase Bank, Chipotle, Comcast, Bath & Body Works, and DSW.
Corporate Library: The entire institutional memory 24 years of accounting (invoicing, cleared checks, budgets from 20022026), administration (7 acquisitions, active litigation, ESOP governance, FBI clearance, employment agreements), and 72 GB of proprietary CAD standards.
Discipline Libraries (283 GB): Complete architecture reference library.
The exposed material includes:
300650+ individuals' personal data SSNs from three years of payroll tax returns, 57+ W-9 forms, employee censuses with DOBs/salaries/home addresses, and an employee's complete termination package including Medicare enrollment and voicemail recording.
7,450+ cleared check images with routing numbers, account numbers, payee details, and authorised signatures spanning 20142023.
Complete active litigation file for GF v. Storm/RFW (1:25-cv-03532) complaint, amended complaint, answers to interrogatories, discovery requests and responses, settlement negotiations, D&O insurer correspondence, and engagement letters. The entire attorney-client privilege chain.
FBI facility clearance documents SF 328 (Certificate Pertaining to Foreign Interests), DD 441 (Facility Clearance), Key Management Personnel lists, and SCIF project architectural drawings acquired through DBI Architects.
Complete acquisition records for 7 deals (5 completed + 2 in progress) including purchase prices, due diligence materials, certified financial statements, and wire instructions.
Hudson River Museum
October 27, 2026
•[ ransomware, education ]
Hudson River Museum was listed as a victim on the leak site of the Booba Project ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Education. Country: United States of America. Website: www.hrm.org. Museums, Historical Sites, and Zoos Stolen data: 115 GB.
Kerckstede vzw
October 27, 2026
•[ ransomware, healthcare ]
Kerckstede vzw was listed as a victim on the leak site of the Booba Project ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Other. Country: Belgium. Website: www.althus.be. Hospitals and Health Care Stolen data: 10 GB.
