www.coopecaja.fi.cr
October 15, 2026
•[ ransomware, finance ]
www.coopecaja.fi.cr was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-10-15. Sector: Financial Services. Country: Costa Rica. Website: www.coopecaja.fi.cr. /
Evolution Spine / All Labs
October 16, 2026
•[ ransomware, healthcare, manufacturing ]
Evolution Spine / All Labs was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-16. Sector: Healthcare. Medical device manufacturing (US) Texas, USA | FDA quality system records of a Texas spinal implant manufacturer: CAPAs, device history records for implant lots, management reviews, design drawings and audit files; The complete inventory database of the business, 317 tables, with hospital and surgical-center customers, purchase orders and implant lot shipping records; Finance records: purchase orders, tax forms and payroll timesheets; Hospital product packets for spinal fusion systems and staff mailbox exports | [NOT PAID EXPOSED]
Company #75
October 16, 2026
•[ ransomware, finance, technology ]
Company #75 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-16. Country: United States of America. fintech payments US | [PENDING EXPOSURE]
Tech Electronics
October 12, 2026
•[ ransomware, technology, healthcare ]
Tech Electronics was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Technology. Country: United States of America. Website: techelectronics.com. Tech Electronics specializes in integrated building technology solutions that enhance safety, communication, and operational efficiency for various industries including healthcare, education, and government. Their extensive product offerings include fire and life safety systems, security solutions, and advanced communication technologies tailored to meet the unique needs of their clients. The company provides a range of services such as fire and security monitoring, inspections, and technology as a service to ensure optimal system performance. With multiple locations across the Midwest, Tech Electronics is committed to delivering responsive service and customized solutions to its clients.
The company headquarters is located in 6437 Manchester Avenue, St. Louis, MO 63139, United States.
201-500 Employees
Ecuadors National Police
October 14, 2026
•[ ransomware, government ]
Ecuadors National Police was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Government & Defense. Country: Ecuador. Website: policia.gob.ec. policia.gob.ec Ecuador's National Police country's main law enforcement agency 180 years old (institutionalized 1846, professionalized 1938), under the Ministry of Interior, commanded by GraS. Pablo Vinicio Dvila Maldonado (since July 2025). Scale: 58,000+ officers, 14 police schools, 317 per 100K population. 2025 was its most active year ever: 712,642 operations, 71,399 arrests, 227 tons of drugs seized, $9.6B in damage to criminal organizations, 21 high-value targets neutralized but also Ecuador's deadliest year (8,847 homicides). 2026 shows improvement: 27.7% homicides, 4356% robberies; new Dinae anti-kidnapping unit achieves 90%+ effectiveness. Budget: ~$11.2B/yr from state funds.
Tulsat
October 14, 2026
•[ ransomware, technology, manufacturing ]
Tulsat was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Technology. Country: Kazakhstan. Website: tulsat.com. tulsat.com TULSAT leading US distributor and repair center for cable TV (CATV) equipment headend gear, fiber nodes, amplifiers, taps, power supplies founded 1985 by brothers David and Ken Chymiak in Broken Arrow, OK (100,000+ sq ft). From a bankruptcy buyout it became exclusive Master Distributor and authorized service center for Scientific-Atlanta (now Cisco), plus Motorola/Arris, CommScope, ATX, Quintech. It merged into public ADDvantage Technologies (NASDAQ: AEY) in 1999 (peak revenue $50.3M in 2005), then the cable segment was bought back by David Chymiak's Leveling 8 Inc. for $10.3M in 2019 private again. Today: ~25 staff, est. ~$10M revenue; group includes NCS Industries (PA), ComTech Services (MO), Tulsat-Atlanta (GA), Nave Communications (MD), Triton Datacom (FL). Core value: largest legacy/obsolete CATV parts inventory + factory-authorized repair, a lifeline for aging networks as cord-cutting shrinks the industry.
Newport Beach Dentistry
October 14, 2026
•[ ransomware, healthcare ]
Newport Beach Dentistry was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Healthcare. Country: United States of America. Website: dentistryofnewportbeach.com. dentistryofnewportbeach.com Newport Beach Dentistry family dental practice in Newport Beach, CA (1401 Avocado Ave, Ste 209), founded 30+ years ago and currently run by brothers Dr. F. Frank Foroutan (USC DDS 1998) and Dr. F. Ryan Foroutan (USC DDS 1996) a practice that changed ownership from Dr. Rasch Kantor/Appelsies Foroutan over the decades. Services: implants, crowns, veneers, Invisalign, root canals, periodontics, extractions, sedation, whitening, emergency care (same-day); accepts Delta Dental Premier/PPO and most major insurance, CareCredit financing; $99 new-patient special (exam + X-rays + cleaning). Team ~10 (Nancy office manager, Monica front desk, Erica hygienist); languages: English, Farsi, Spanish. Related entities: Foroutan Dental Inc. (Buena Park), OC Elite Dental (Buena Park + Anaheim Hills); also connected to F. Foroutan DDS Inc. (Corona). No revenue disclosed (private practice, est. $25M/yr for 3 doctors in this location).
ServiceMaster of Ottawa
October 14, 2026
•[ ransomware, leak ]
ServiceMaster of Ottawa was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Professional Services. Country: Canada. Website: svmottawa.ca. svmottawa.ca ServiceMaster of Ottawa Canadian property restoration and commercial cleaning company (legal entity 1351120 Ontario Inc.), a ServiceMaster franchise since 1969 owned since 2006 by John Cooke. HQ at 180 Wescar Lane, Ottawa (Carp/Richmond), ~140 staff, 24/7/365 emergency service across the National Capital Region. Core: water/fire/mold remediation, asbestos removal, reconstruction, odor control, janitorial backed by IICRC techs, HCRA license B62544, Tarion, WSIB+liability, Restore 365/Xactimate. Record: 40,000+ customers served; Cooke won ServiceMaster's "Brand Ambassador of the Year" 2026, "Mid-Market Business of the Year" (Ottawa Chamber, 2008). Reputation mixed (3.84.3/5, 313+ reviews) excellent on small jobs and named techs (Ryan Potestio, Jeff Jerome)
Sladek Partners
October 14, 2026
•[ ransomware, finance, hack ]
Sladek Partners was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Professional Services. Country: Czechia. Website: epravo.cz. ak-sladek_cz Sladek & Partners Prague law firm operating as Mgr. Ivana Sldkov, advokt (IO 66252946), with 24 years of practice since 2002 specializing in real estate transactions, divorce/family law, and attorney escrow (advoktn schova). The firm's flagship claim: 500M CZK ($23M) held in escrow annually across 100+ segregated accounts, backed by 500M CZK insurance and 25 day payout guarantees. Led by Ivana Sldkov (AK ev. . 09496, Charles University, licensed for escrow since 2002, speaks English/German/Russian), with a tiny 35 person team (accountant + secretary). Listed in EPRAVO.CZ's notable law firm yearbooks (2013, 2016); pricing is quote-only (hourly/fixed/contingency), no published rates.
Canva
October 16, 2026
•[ ransomware, technology ]
Canva was listed as a victim on the leak site of the THE SEVEN DEADLY SINS ransomware group; the attack is estimated to have taken place on 2026-10-16. Sector: Technology. Country: Australia. Website: canva.com. Global design platform; entire Salesforce org plus platform data warehouse export.
Globeia Inc.
October 16, 2026
•[ ransomware, technology ]
Globeia Inc. was listed as a victim on the leak site of the THE SEVEN DEADLY SINS ransomware group; the attack is estimated to have taken place on 2026-10-16. Country: United States of America. Website: globeia.com. Document-processing platform for FBI clearance, RCMP criminal records, and Canadian corporate screening via portal.globeia.app.
Axle Logistics
October 14, 2026
•[ ransomware, leak, technology ]
Axle Logistics was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Transportation. Country: United States of America. Website: axlelogistics.com. axlelogistics.com Axle Logistics non-asset freight brokerage founded in 2012 in Knoxville, Tennessee, by Drew Johnson and Jon Clay two University of Tennessee grads who started with two people and one trucking software license. It organizes truckload, LTL, intermodal, and port drayage shipments across the US, Canada, and Mexico by matching loads with third-party carriers, focusing on Fortune 500 shippers and mid-market brands. Revenue exploded from $80M (2018) to over $1.2B gross / $159M net (2025), and headcount grew from 2 to roughly 700 making it one of the fastest-scaling brokers in the country. It's landed on the Inc. 5000 list over a decade straight, ranked #52 among Transport Topics' top 50 logistics companies, and won Knoxville Top Workplaces seven years running. The company invested $38M in a gleaming new 84,000 sq ft HQ with state support and pays employees an average of ~$117K/year. It's a brokerage, not a carrier so shipment quality depends on the carriers.
Petroleum Telcom Communications
October 14, 2026
•[ ransomware, technology, energy ]
Petroleum Telcom Communications was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Energy & Utilities. Country: Pakistan. Website: ptelcom.com. ptelcom.com Petroleum Telcom, Inc. (dba Telcom, Inc. / Telcom Communications) Southern California communications integrator founded in 1978 in Oxnard, CA specializing in two-way radio for police/fire, microwave links, fiber optics, cell towers, and FCC licensing. Owned and led by Frank R. Hines (president since 1986), now a lean ~6-person shop (peak 35 in 1999), dealer for Motorola, Kenwood, and Bendix-King, with ~200 owned repeaters across CA/NV/AZ/UT. CA contractor license #620689 (B + C7) active since 1991, zero complaints, bonded and insured. Government track record is real and documented: Ventura County since 1982, Stanislaus County $1.2M, Port of LA police radio system $1.19M (201719), City of Oxnard up to $900K (202327), USGS, and 5 DoD contracts. Revenue not disclosed (est. $15M).
Museum Siam
October 14, 2026
•[ ransomware, government ]
Museum Siam was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Hospitality. Country: Thailand. Website: museumsiam.org. museumsiam.org Museum Siam museum in Bangkok run by NDMI under the public organization OKMD the .org domain is real, but it's a government institute, not a private company. It occupies the former Ministry of Commerce building (19211922) and opened as a museum on 2 April 2008. The core exhibit Decoding Thainess (14 rooms on how Thai identity was formed) has run since 2017; there's also a free Underground Museum at MRT Sanam Chai (2020). Attendance is ~250343K per year (different counting methods), 3.8M over 17 years; museum-level revenue isn't disclosed finances publish only at OKMD level. Tickets: 100 THB adult, 50 students, free for kids under 15, 60+, monks, disabled visitors; open TueSun 10:0018:00. Beyond exhibits: a 4,000+ resource library, digital archives, venue rental (580K THB), and a nationwide museum-network support program.
Netcore Unbxd
October 14, 2026
•[ ransomware, technology, retail ]
Netcore Unbxd was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Technology. Country: India. Website: netcoreunbxd.com. netcoreunbxd.com Netcore Unbxd AI product-discovery platform for enterprise e-commerce: smart site search, 1:1 personalization, recommendations, visual intelligence ("Complete the Look"), catalog enrichment, and its 2026 bet a Shopping Agent (agentic commerce). Owned by India's Netcore Cloud since March 2022 (~$100M deal, 90%), run by founders Pavan Sondur and Prashant Kumar; SaaS sits on composable, API-first infra (Cloudflare, Kubernetes, multi-region), with <10ms response on 95% of queries and 35M documents processed monthly. Recognition: Gartner Magic Quadrant Leader 3 years running, highest "Current Offering" score in Forrester Wave Q3 2025, 7 G2 badges Summer 2025. Claimed customer results (self-reported): +38% AOV, +28% conversion, 60% null searches, 53% bounce. Positioning is sharply anti-native-search and anti-generic-AI, aimed at retail merchandisers with no-code workbenches and full override control. Site's main CTA is a free "personalized site experience audit."
Saga University
October 14, 2026
•[ ransomware, education, healthcare ]
Saga University was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Education. Country: Japan. Website: saga-u.ac.jp. saga-u.ac.jp Saga University is a national Japanese university in Saga Prefecture, Kyushu founded in 1949 (roots back to 1875), merged with Saga Medical School in 2003, operating as a national university corporation since 2004. Scale: ~6,600 students, ~3,300 staff, 6 faculties (including medicine with a ~600-bed hospital) across Honjo, Nabeshima, and Arita campuses. Annual revenue 44B ($300M), ~57% of it generated by the university hospital; state capital 47.3B, with a +1.6B surplus in FY2024. Signature strength: the Institute of Ocean Energy (IOES) a world leader in OTEC (ocean thermal energy), pursuing the world's first 1-MW commercial plant ~2026-27 with Mitsui O.S.K. Lines. Rector since Oct 2025: Koichi Node (cardiologist); 2026 launches include Japan's first national-university cosmetic science program (30 students, 7x oversubscribed) and a joint teacher-training degree with Kumamoto University. Weak points: rankings have slid for a decade (QS Asia 801-850, THE 1501+)
Suhai Segurana Pessoal
October 14, 2026
•[ ransomware, leak ]
Suhai Segurana Pessoal was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Professional Services. Country: Brazil. Website: suhaiseguranca.com.br. suhaiseguranca.com.br Suhai Segurana Pessoal Brazilian personal security company founded in 1992 one of the older, established firms in its niche. Core business: bodyguard/executive protection, family and residential security, security drivers, and corporate guarding, delivered nationwide. Teams are described as vetted, licensed professionals backed by 24/7 monitoring and in-house tactical training. The firm claims ISO 9001 and Great Place to Work certification, but doesn't publish certificates claims are self-reported. No revenue, pricing, or verified headcount is public; everything is custom-quoted per job. Critically: since Brazil's 2024 law, security work is only legal if the firm holds a current federal police permit for that specific service and state confirm yours before hiring. Also beware the unrelated "Suhai" auto insurer sharing the name most complaints you'll find online are about insurance, not this company.
Minkon
October 16, 2026
•[ ransomware, manufacturing, technology ]
Minkon was listed as a victim on the leak site of the bravox ransomware group; the attack is estimated to have taken place on 2026-10-16. Country: Germany. Website: www.minkon-international.com. Metallurgical Products and Engineering Solutions for Industry.
Solar Communications International
October 14, 2026
•[ ransomware, technology ]
Solar Communications International was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Technology. Country: United States of America. Website: rftransparent.com. Prominent supplier and developer of RFTransparent products that seamlessly integrate wireless infrastructure into various community settings
Macfarlan Capital Partners
October 14, 2026
•[ ransomware, finance ]
Macfarlan Capital Partners was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Financial Services. Country: United States of America. Website: macfarlan.com. Equity real estate investment sponsor that serves institutional investors, family offices, wealth management advisors, and high net worth individuals