Taubensee Steel & Wire
October 26, 2026
•[ ransomware, manufacturing ]
Taubensee Steel & Wire was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Manufacturing. Country: Germany. Website: www.taubensee.com.
Bangor Wholesale Laminates
October 26, 2026
•[ ransomware, manufacturing ]
Bangor Wholesale Laminates was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Manufacturing. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.bangorwholesalelaminates.com.
Beasley Allen Law Firm
October 26, 2026
•[ ransomware, leak ]
Beasley Allen Law Firm was listed as a victim on the leak site of the Falcon ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Professional Services. Country: United States of America. Plaintiff litigation law firm - Our 214 GB extraction includes executed agreements, final settlement participation agreements, court-signed stipulations regarding net worth, privileged internal memos, detailed litigation strategies, rough trial transcripts, comprehensive staff FAQs and much more.
Antah HealthCare Group
October 26, 2026
•[ ransomware, healthcare, leak ]
Antah HealthCare Group was listed as a victim on the leak site of the crypto24 ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Healthcare. Country: Malaysia. Website: ahcg.com.my. Antah Healthcare Group (AHCG) is one of Malaysia's leading integrated healthcare distribution and commercial partners, specializing in the nationwide marketing, sales, clinical regulatory support, and supply chain logistics of pharmaceuticals, medical equipment, and consumable products to hospitals and clinics.We successfully infiltrated AHCG's network and exfiltrated over 500 GB of highly sensitive data, including human resources and employee records, customer transaction histories, confidential commercial contracts, clinical and regulatory documentation, logistics tracking information, and financial statements.
SleepEx LabRetriever
October 27, 2026
•[ ransomware, healthcare ]
SleepEx LabRetriever was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Healthcare. [AI generated] N/A
I don't have reliable information about a company called "SleepEx LabRetriever." This does not correspond to any organization I can verify, and the name's unusual construction suggests it may be fictional, a test query, or a misspelling. I'd rather report this than fabricate details about its industry, operations, or country.
binsky.com
September 29, 2026
•[ ransomware, manufacturing ]
binsky.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-09-29. Website: binsky.com. Piscataway, New Jersey. Binsky & Snyder, LLC has been servicing piping, HVAC, and mechanical systems since 1938. Its website tells a story of "family values" and "trust from day one." The actual corporate records tell a different story.
acclaimcompanies.com
September 8, 2026
•[ ransomware, leak, financial ]
acclaimcompanies.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-09-08. Sector: Professional Services. Country: United States of America. Website: acclaimcompanies.com. The Social Security Numbers of both group executives Gerald C. Johnson Jr. and Mark C. Johnson are fully exposed in corporate documents (IRS Form SS-4). The Johnson Family Trust holds an investment portfolio of $1.67 million at First Republic Bank against a margin loan of $280K, while parent company Acclaim Asset Management simultaneously received two different EINs from the IRS per CP212 notice (January 2025). Baboo Properties LLC, in which Mark C. Johnson is a member, failed to file the required Form 940 for 2015, despite receiving IRS notice CP080. A corporate network of 15+ legal ent
passavant-ee.com
September 25, 2026
•[ ransomware, healthcare, leak ]
passavant-ee.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-09-25. Sector: Healthcare. Country: Estonia. Website: passavant-ee.com. German engineering company Passavant Energy & Environment GmbH, which builds wastewater treatment plants with German and Swiss taxpayer money (KfW, SECO), is in reality controlled by Dubai-based conglomerate Drake & Scull International PJSC and through it finances operations in Iraq. Internal debit notes from Drake & Scull Oil & Gas Iraq Branch show that employees of the Iraqi division flew to Muscat (Oman) and stayed at hotels billed to Passavant Frankfurt, with the company's accounting department at Hahnstrae 31-35 approving those charges for payment. Employee Serikan Kire
Company #91
October 18, 2026
•[ ransomware, retail ]
Company #91 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-18. Country: United States of America. home services advertising US | [PENDING EXPOSURE]
Pergande
October 18, 2026
•[ ransomware, manufacturing ]
Pergande was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-18. Country: Germany. Website: www.pergande.de.
Pengurusan Aset Air Berhad
October 18, 2026
•[ ransomware, energy ]
Pengurusan Aset Air Berhad was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-18. Sector: Energy & Utilities. Country: Malaysia. Website: www.paab.my.
mckenneys
October 18, 2026
•[ ransomware, technology ]
mckenneys was listed as a victim on the leak site of the iah6477 ransomware group; the attack is estimated to have taken place on 2026-10-18. Sector: Professional Services. Country: United States of America. Website: mckenneys.com. Size: 295.9 GiB
Llano Independent School District
October 18, 2026
•[ ransomware, education ]
Llano Independent School District was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-18. Sector: Education. Country: United States of America. Website: www.llanoisd.org.
Amagi Media Labs
October 18, 2026
•[ ransomware, technology, misconfiguration ]
Amagi Media Labs was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-18. Sector: Technology. Country: United States of America. media technology / broadcast playout United States | Network and device configuration files from a US broadcast playout site; Internal network maps of the site | [NOT PAID EXPOSED]
American Campus
October 19, 2026
•[ ransomware, education ]
American Campus was listed as a victim on the leak site of the Helix ransomware group; the attack is estimated to have taken place on 2026-10-19. Sector: Education. Country: United States of America. American Campus records. Yearly revenue ~$1 billion yearly. GoFile links and passwords unlock in 6 hours.
GTL Concreto e Logística LTDA
October 19, 2026
•[ ransomware, manufacturing, finance ]
GTL Concreto e Logstica LTDA was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-10-19. Sector: Manufacturing. Country: Brazil. Production and preparation of ready-mixed concrete
and mortars. Production of cement products for
construction. Construction of buildings and other
construction works. Rental of vehicles and industrial
equipment without an operator.
IN THE ARCHIVE FINANCIAL DOCUMENTS, PERSONAL AND CUSTOMER DATA,
EMPLOYEE CREDENTIALS. [Sector: Manufacturing, Finance, Transportation]
Johnson & Pace
October 19, 2026
•[ ransomware, technology ]
Johnson & Pace was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-19. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.johnsonpace.com.
Vormittag Associates Inc
October 19, 2026
•[ ransomware, technology ]
Vormittag Associates Inc was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-19. Country: United States of America. ERP software and hosting company USA | Internal network configurations and security credentials of an ERP hosting company; Administrator and remote access credentials; Network topology of corporate and hosted client environments | [NOT PAID EXPOSED]
Toyota Canarias
October 19, 2026
•[ ransomware, automotive ]
Toyota Canarias was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-19. Sector: Transportation. Country: Spain. Website: www.toyota-canarias.es.
OpenText
October 20, 2026
•[ ransomware, technology ]
OpenText was listed as a victim on the leak site of the Mimori ransomware group; the attack is estimated to have taken place on 2026-10-20. Sector: Technology. Country: Canada. Website: opentext.com. OpenText Corporation is a Canadian company that develops and sells enterprise information management software. OpenText can help you tackle the most complex digital transformation programs with confidence. With the worlds most complete and integrated information management platform, we empower our customers to organize, integrate, and protect data and content as it flows through business processes inside and outside their organization.
Sector: Technology - Files: 94306 - Publication planned: 2026-10-29T19:36:20Z
