Company #86
October 17, 2026
•[ ransomware, retail ]
Company #86 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-17. Country: United States of America. real estate and land development United States | [PENDING EXPOSURE]
AirQ
October 16, 2026
•[ ransomware, technology ]
AirQ was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-16. Sector: Technology. Country: Andorra. Website: airq-ad.com. airq-ad.com AirQ UAE drone manufacturer founded in 2021 in Masdar City, Abu Dhabi, producing unmanned aerial systems fully in-house. It was started by Croatian entrepreneurs Dino Dedi as CEO and Igor Pongrac as CTO, who previously worked at Rimac Automobili, and has grown from 6 people to about 100 engineers. The flagship product is the Harara modular VTOL drone, carrying 6 kg of payload and flying up to 7 hours or 600 km in hybrid mode, with over 1000 test flights completed. Other products include the StingJet reusable jet target drone for air defense training and the world's first fully electric UAV launcher. The company is backed by Abu Dhabi institutions such as Tawazun Council and Masdar City Free Zone and runs real operations like medical blood sample delivery between hospitals. Its main strengths are full in-house composite production and dual defense plus commercial markets, while the main risks are its young age, ongoing aviation certification and dependence on UAE defense.
Company #88
October 17, 2026
•[ ransomware, healthcare ]
Company #88 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-17. Country: United States of America. home healthcare services United States | [PENDING EXPOSURE]
First Brothers Co., Ltd
October 17, 2026
•[ ransomware, leak ]
First Brothers Co., Ltd was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-17. Sector: Other. Country: Thailand. Website: firstbrothers.com.
Smith Douglas Homes
October 17, 2026
•[ ransomware, manufacturing ]
Smith Douglas Homes was listed as a victim on the leak site of the Helix ransomware group; the attack is estimated to have taken place on 2026-10-17. Sector: Manufacturing. Country: United States of America. Website: smithdouglas.com. Smith Douglas Homes records. Yearly revenue ~$971 million. GoFile links and passwords unlock in 12 hours.
Bay Alarm
October 17, 2026
•[ ransomware, technology ]
Bay Alarm was listed as a victim on the leak site of the Helix ransomware group; the attack is estimated to have taken place on 2026-10-17. Sector: Professional Services. Country: United States of America. Website: bayalarm.com. Bay Alarm records. Yearly revenue ~$256 million. GoFile links and passwords unlock in 12 hours.
Quikrete
October 18, 2026
•[ ransomware, manufacturing ]
Quikrete was listed as a victim on the leak site of the Helix ransomware group; the attack is estimated to have taken place on 2026-10-18. Sector: Manufacturing. Country: United States of America. Quikrete records. GoFile links and passwords unlock in 6 hours.
monroeroadways.com
September 29, 2026
•[ ransomware, manufacturing ]
monroeroadways.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-09-29. Sector: Transportation. Country: United States of America. Website: monroeroadways.com. Rochester, New York. A construction company that goes by Monroe Roadways in bid documents but appears as MRI Contractors of New York, Inc. in banking records. One address: 300 Hogan Road, Fairport. One president: Jeffrey D. Taylor. Two names and not a single public word about what lies behind them.
SMIC US Company (Sunnyvale, CA — US arm of Semiconductor Manufacturing International Corpo...
October 18, 2026
•[ ransomware, leak, manufacturing ]
SMIC US Company (Sunnyvale, CA US arm of Semiconductor Manufacturing International Corpo... was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-18. Sector: Manufacturing. Country: United States of America. Semiconductor manufacturing California, USA | Corporate business records and working files from the company's file servers; Employee and payroll related records; Financial and accounting documents | [NOT PAID EXPOSED]
Company #92
October 18, 2026
•[ ransomware, technology ]
Company #92 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-18. Country: South Korea. IT services South Korea | [PENDING EXPOSURE]
Merit Financial Group
October 19, 2026
•[ ransomware, finance, leak ]
Merit Financial Group was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-10-19. Sector: Financial Services. Country: United States of America. Merit Financial Group, LLC, doing business as Merit Financial Advisors ("Merit"), is a national wealth management firm that supports both the independent broker-dealer and RIA models. Based in Atlanta, Georgia, Merit has 24 additional offices throughout the U.S. and managed $5.59 billion in assets as of June 30, 2021 ($3.53 billion in advisory, $1.95 billion in brokerage assets and with $112 million in assets under advisement). Merit's mission is to establish and exceed the financial goals of its clients, while also providing its advisors and offices with practice management resources, an industry leading technology platform and the investment expertise needed to drive growth and deliver a superior client experience.
The company headquarters is located in 2400 Lakeview Parkway, Suite 550, Alpharetta, GA 30009, United States.
201-500 Employees
Company #94
October 19, 2026
•[ ransomware, automotive, retail ]
Company #94 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-19. Country: United States of America. automotive retail United States | [PENDING EXPOSURE]
Kingwood Endoscopy
October 19, 2026
•[ ransomware, healthcare ]
Kingwood Endoscopy was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-19. Sector: Healthcare. Country: United States of America. Healthcare - Ambulatory Surgery Center (US) Texas, US | The complete network configuration of an outpatient endoscopy surgery center: every account, password and access path; Proof of total control of the center's records, camera and remote-access systems; The center's full device and systems map | [NOT PAID EXPOSED]
Grupo Cronica
October 19, 2026
•[ ransomware, technology ]
Grupo Cronica was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-19. Sector: Other. Country: Argentina. Website: www.grupocronica.com.ar.
Brüninghoff Group
October 20, 2026
•[ ransomware, manufacturing, leak ]
Brninghoff Group was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-10-20. Sector: Manufacturing. Country: Germany. Brninghoff Group (brueninghoff.de) is a German construction and manufacturing company headquartered in Heiden, founded in 1974. The company specializes in turnkey project development, engineering, and the prefabrication of hybrid timber, concrete, and steel building systems. With around 700 employees, it strongly emphasizes sustainable, energy-efficient building methods for commercial, residential, and public architecture.
Fisher59
October 20, 2026
•[ ransomware, retail ]
Fisher59 was listed as a victim on the leak site of the anubis ransomware group; the attack is estimated to have taken place on 2026-10-20. Beverage distributor data breach.
Company #95
October 20, 2026
•[ ransomware, energy, leak ]
Company #95 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-20. Country: Switzerland. solar energy company Switzerland | [PENDING EXPOSURE]
Company #98
October 20, 2026
•[ ransomware, government ]
Company #98 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-20. Country: Ethiopia. Environmental NGO Ethiopia | [PENDING EXPOSURE]
COASTAL CAROLINA NEUROPSYCHIATRIC CENTER, PA
October 20, 2026
•[ ransomware, healthcare, leak ]
COASTAL CAROLINA NEUROPSYCHIATRIC CENTER, PA was listed as a victim on the leak site of the Booba Project ransomware group; the attack is estimated to have taken place on 2026-10-20. Sector: Healthcare. Country: United States of America. Website: www.coastalcarolinapsych.com. Medical Practices Stolen data: 10 GB.
City Hall - Everett, MA
October 20, 2026
•[ ransomware, government ]
City Hall - Everett, MA was listed as a victim on the leak site of the Booba Project ransomware group; the attack is estimated to have taken place on 2026-10-20. Sector: Government & Defense. Country: United States of America. Website: ci.everett.ma.us. Government Administration Stolen data: 15 GB.
