Referans Lab Ref-Lab
October 26, 2026
•[ ransomware, leak, technology ]
Referans Lab Ref-Lab was listed as a victim on the leak site of the Doommageddon ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Technology. Country: Turkey. Status: leaked | Data size: 3.07 GB | Files: 2 files | Deadline: 2026-10-26T00:00:00Z
TRANSPORTES JIMENEZ and REYES JIM REY S.A.
October 26, 2026
•[ ransomware, financial ]
TRANSPORTES JIMENEZ and REYES JIM REY S.A. was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Transportation. Country: Mexico. Transport company from Ecuador engaged in road freight transport.
Including the transportation of heavy and bulk cargo, cars,
animals and cargo in tanks.
Year Founded: 2020
There are many customer documents and employee data.
Financial documents, accounting and banking data. [Sector: Transportation]
Burnaby Schools - School District 41
October 26, 2026
•[ ransomware, education ]
Burnaby Schools - School District 41 was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Education. Country: Canada. Website: www.burnabyschools.ca.
Natural Energy Laboratory of Hawaii Authority
October 26, 2026
•[ ransomware, energy, government ]
Natural Energy Laboratory of Hawaii Authority was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Energy & Utilities. Country: United States of America. Website: www.nelha.hawaii.gov.
Five Star Sheets
October 26, 2026
•[ ransomware, retail, manufacturing ]
Five Star Sheets was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Retail & E-Commerce. Country: United States of America. Website: www.fivestarsheets.com.
FIRMENGRUPPE APPL Holding GmbH
October 26, 2026
•[ ransomware, manufacturing ]
FIRMENGRUPPE APPL Holding GmbH was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Other. Country: Germany. Website: www.appl.de.
Delta Electric Power Association
October 26, 2026
•[ ransomware, energy ]
Delta Electric Power Association was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Energy & Utilities. Country: United States of America. Website: www.deltaepa.com.
University of New Mexico
October 26, 2026
•[ ransomware, hack, education ]
University of New Mexico was listed as a victim on the leak site of the BYOD ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Education. Country: United States of America. 36,000 Machines Compromised, both AD forests (Main Campus + Hospital Sector(with appointments, patient information + research)) With GPOs, Two Oracle databases, every student + employee PII (including SSNs), research information, entire Entra Tenant, Oracle HR + Payroll + Banner Student Records, Internal Emails, Cerner EHR rosters. This is your entire network and infrastructure compromised, the entire university COMPLETELY. Anyways, you know where to find us (contact tab). We will take you down when communication has been established between our team and yours.
Afflelou
October 26, 2026
•[ ransomware, retail, healthcare ]
Afflelou was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Retail & E-Commerce. Country: France. Alain Afflelou is a leading European franchisor of optical and hearing aid products, founded in France in 1972. The company operates a robust network of over 1,500 stores across 20 countries, driven by aggressive marketing innovations like its famous "Tchin-Tchin" multi-pair offer.
Key Figures
Network Revenue: 1.13 billion (TTC) for the fiscal year ending July 2025
Corporate Revenue: 447.3 million (excl. taxes), generated from corporate stores and franchise fees.
Core Segments: Eyewear and audioprosthetics. [Sector: Retail]
probe-011637cabbf94076-
October 27, 2026
•[ ransomware ]
probe-011637cabbf94076- was listed as a victim on the leak site of the ULose ransomware group; the attack is estimated to have taken place on 2026-10-27. Country: zz | Status: Public
zzq-test
October 27, 2026
•[ ransomware, leak ]
zzq-test was listed as a victim on the leak site of the ULose ransomware group; the attack is estimated to have taken place on 2026-10-27. Country: c | Status: Sale
gamblinglore
October 27, 2026
•[ ransomware, retail ]
gamblinglore was listed as a victim on the leak site of the Whitearmor ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Retail & E-Commerce. Verification for Gamblinglore.com
Personify Health
October 17, 2026
•[ ransomware, healthcare, leak ]
Personify Health was listed as a victim on the leak site of the Helix ransomware group; the attack is estimated to have taken place on 2026-10-17. Sector: Healthcare. Country: United States of America. Personify Health records. Yearly revenue ~$500 million. GoFile links and passwords unlock in 12 hours.
Solid Trading B.V.
October 18, 2026
•[ ransomware, leak, finance ]
Solid Trading B.V. was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-18. Sector: Other. Country: Netherlands. FX liquidity and trading technology Netherlands | Live client trading records: order and execution data for the banks and institutions trading through this firm, with amounts and account identifiers; The client database: companies, platform users with password hashes, credit limits, clearing paths and fee schedules; FIX venue session configurations, including login credentials for liquidity providers; Trade history and bank matching audit records | [NOT PAID EXPOSED]
Company #89
October 18, 2026
•[ ransomware, technology ]
Company #89 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-18. Country: United States of America. online sports betting analytics United States | [PENDING EXPOSURE]
konsis.no
September 29, 2026
•[ ransomware, technology ]
konsis.no was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-09-29. Sector: Professional Services. Country: Norway. Website: konsis.no. We hold a large volume of data from Konsis Grafisk AS a Norwegian design, marketing and print agency with annual revenue of approximately NOK 100 million.
www.marvinpac.com
September 25, 2026
•[ ransomware, manufacturing, retail ]
www.marvinpac.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-09-25. Sector: Manufacturing. Country: United States of America. Website: www.marvinpac.com. Marvinpac CZ, s.r.o. the Czech subsidiary of Swiss group Marvinpac SA specialises in contract packaging and co-packing for some of the world's leading brands: Nespresso, L'Oral, COTY (Gucci, Hugo Boss, Calvin Klein), air up, LEGO, and others. The company has operated since 2010 at its production facility in anyJalovice near Prague, and forms part of an international group with divisions in Switzerland, France, and Italy.
All Business Technologies (Fox Hill bookkeeping and tax practice)
October 18, 2026
•[ ransomware, leak, finance ]
All Business Technologies (Fox Hill bookkeeping and tax practice) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-18. Sector: Professional Services. Accounting & Tax Preparation (US) Massachusetts, USA | Books and tax records of a Massachusetts bookkeeping and tax practice: live accounting company files of more than 60 client companies with all accounting backups 2014 through 2026; Per-client tax return data for tax years 2015 through 2025 and the practice billing database; Accounts receivable ledgers, client lists and scanned client legal documents: deeds, trust certifications and IRS powers of attorney | [NOT PAID EXPOSED]
Telecom Egypt
October 18, 2026
•[ ransomware, technology, education ]
Telecom Egypt was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-18. Sector: Technology. Country: Egypt. Website: te.eg. computer training academy Egypt | Course materials and programming projects; Exam preparation materials; Student account folders and work; A complete copy of the course database | [NOT PAID EXPOSED]
POWERsonic Industries Inc.
October 19, 2026
•[ ransomware, manufacturing, leak ]
POWERsonic Industries Inc. was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-10-19. Sector: Manufacturing. Country: United States of America. Website: POWERsonic Industries Inc.. [manufacturer] POWERsonic Industries Inc. a privately held wire harness and cable assembly contract manufacturer founded in 1998 with ~100-150 employees across 7 locations.
The exposed material spans every entity in the POWERsonic corporate structure:
Employee PII for 93-150 employees SIN documents, passports, I-20 visas, LMIA immigration approvals, W-2 tax forms, pay stubs, banking information. Plus 8 complete email archives totaling 13.2 GB.
Customer proprietary designs 7.5 GB of Demers Ambulance wiring harness data, 15 GB of CIRRIS cable test results, Mold Masters drawings, and a bilateral NDA with Husky Injection Molding.
Full financial records Dec 2025 balance sheet ($285K cash, $5.1M AP), trial balance, revenue data ($17.7M US), loan agreements, order margins (~45%), insurance policies.
