CureMetrix, Inc.
September 21, 2026
•[ ransomware, healthcare, technology ]
CureMetrix, Inc. was listed as a victim on the leak site of the THE SEVEN DEADLY SINS ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Healthcare. Country: United States of America. Website: curemetrix.com.
Via Credit Union
October 16, 2026
•[ ransomware, finance ]
Via Credit Union was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-16. Sector: Financial Services. Country: United States of America. Website: www.viacu.org.
Campbell Rhea
October 14, 2026
•[ ransomware, manufacturing, education ]
Campbell Rhea was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Country: United States of America. Website: campbellrhea.com. campbellrhea.com Campbell Rhea US manufacturer of laboratory and educational casework legal entity Institutional Casework, Inc. (ICI) with roots to 1951 in Paris, TN. The brand survived a 2005 tornado that destroyed its former parent Mohon International, was relaunched by local investors in 2006 (CEO Jim Arthurs ever since), and acquired Jamestown Metal Products (NY) plus a steel plant in Union City, TN 650,000 sq ft of manufacturing total. Products: wood/steel/stainless lab casework, ISOLATOR fume hoods, countertops, athletic lockers (Olympian), Patriot tables certified SEFA-8, FSC, AIA CES. Revenue $32.1M (2025) per FDMC 300, down from a $63.5M COVID-era peak (2022); ~250 employees, 35+ US dealers, projects at Penn State, UC Davis, Vanderbilt, Case Western, U of Missouri.
Harness Inc.
October 16, 2026
•[ ransomware, technology ]
Harness Inc. was listed as a victim on the leak site of the THE SEVEN DEADLY SINS ransomware group; the attack is estimated to have taken place on 2026-10-16. Sector: Technology. Country: United States of America. Website: harness.io. Enterprise continuous delivery platform; entire Salesforce org with global prospect and customer pipeline.
JJS Justice
October 14, 2026
•[ ransomware, government ]
JJS Justice was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Government & Defense. Country: United Kingdom of Great Britain and Northern Ireland. Website: jjsjustice.com. jjsjustice.com JJS Justice (Janet, Janet & Suggs, LLC) is a national plaintiff-side firm based in Baltimore/Pikesville, MD, founded 1996 (practice since 1978) specializing in birth injuries/CP, medical malpractice, sexual abuse (clergy, USC/Johns Hopkins), mass torts, and whistleblower cases. Record: $3B+ in verdicts and settlements over 40 years, including the largest US sexual-abuse settlement ($852M vs. USC/Dr. Tyndall, 2021), $190M vs. Johns Hopkins, $225M NJ v. ExxonMobil, and multiple record birth-injury verdicts. Led since Sept 2025 by Andrew S. Janet after founder Howard A. Janet died at 70; core team includes Kenneth M. Suggs (ex-ATLA president) and Dr. Giles Manley (OBGYN turned lawyer). Chambers USA Band 2 (MD plaintiffs), Best Lawyers "Lawyer of the Year" 2025, Super Lawyers, Lawdragon 500, AV Preeminent, ABOTA. Contingency model (no fee unless they win), 10+ states + DC, ~17 lawyers, ~60 staff.
Cradlewise Inc.
October 16, 2026
•[ ransomware, technology, retail ]
Cradlewise Inc. was listed as a victim on the leak site of the THE SEVEN DEADLY SINS ransomware group; the attack is estimated to have taken place on 2026-10-16. Sector: Technology. Country: United States of America. Website: cradlewise.com. VC-backed smart crib manufacturer; ~$14M/yr DTC revenue plus Nurture subscription layer.
Skin Center
October 14, 2026
•[ ransomware, healthcare ]
Skin Center was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Healthcare. Country: United States of America. Website: skincenter.com. skincenter.com Skin Center dermatology clinic in Fort Lauderdale, FL (6550 N Federal Hwy, Suite 320) with 40+ years of practice roots (formerly Dr. Roger Stewart's clinic, led by Dr. Barry Galitzer since the 2010s). Full spectrum: medical dermatology, Mohs surgery for skin cancer, cosmetic injectables/lasers (Botox, CoolSculpting, Ultherapy, Fraxel), an Acne Center, aesthetics, and massage. The hidden headline: since 2021 it's owned by Forefront Dermatology (125+ clinics, backed by Canadian pension fund OMERS Private Equity) billing, records, and HR run through the network, not the local brand. Doctors rate excellent (Galitzer 4.7/5 on Healthgrades; Castle Connolly Top Doctor), but admin/office process is the weak spot complaints cite long waits, forgotten patients, and a brusque bedside manner. Team: ~10 providers (Galitzer, Fien, Perrotto, Soro, White, Brown + PAs), plus a second office in Pompano Beach; 200+ patients/day, 10,000 sq ft.
REGiO Nord
October 14, 2026
•[ ransomware, government, finance ]
REGiO Nord was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Other. Country: Germany. Website: regio-nord.com. regio-nord.com REGiO-Nord mbH (HRB 1203, Amtsgericht Neuruppin) is a municipal regional-development company in Gransee, Brandenburg, founded 20082009 to run the shared "Mittelzentrum" of GranseeZehdenickFrstenberg/Havel. It is 100% publicly owned (Zehdenick 1/3, Frstenberg 1/3, Gransee 1/6, Amt Gransee 1/6), led by sole managing director Olaf Bechert with a staff of ~5 plus two tourist info offices. Its real money flows through the Kooperationsfonds ~8.9M in projects since 2008, with 538K spent in 2025 and 563K budgeted for 2026, of which 312K funds the company's own coordination work. Four workstreams: education (teacher recruitment, apprenticeship exchange), economy (business services, doctor recruitment, arztidylle.de), tourism (two info stations, region portals, RegioApp), and regional marketing (REGiO-Card, library network). Finances are project-transparent (open budget reports) but the GmbH's own annual accounts are only public through 2022 request 20232025.
Adams Warehouse & Delivery, Inc.
October 16, 2026
•[ ransomware, leak, manufacturing ]
Adams Warehouse & Delivery, Inc. was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-10-16. Sector: Transportation. Country: United States of America. Website: Adams Warehouse & Delivery, Inc.. Adams Warehouse & Delivery, Inc. a family-owned freight and logistics company operating 11 warehouse facilities in the Houston metro area since 1976.
The dataset includes complete server backup mirrors from multiple drives (D:, E:, Data, Network Shares), capturing the company's entire digital footprint:
Sage/Peachtree accounting system for 8 entities spanning FY2007FY2025+, containing payroll, AR, AP, general ledger, and W-2 filing histories
5272 Social Security Numbers with full identity packages (name, DOB, address, phone, emergency contacts, health insurance IDs) across 4 entities
Domain administrator passwords saved in 4 RDP files, plus plaintext VPN credentials, WiFi passwords, and 18 database connections with blank passwords
WDS source code the company's custom warehouse distribution management system (VB6/.NET, multiple versions)
20+ years of customer data rate cards, operations logs, and contact lists for 100+ warehouse customers including Honeywell, Hospira, Amway, and Kaiser
Medical clinic employee data South Main Medical Clinic's bookkeeping within the Sage system, including physician SSN
11 Outlook PST email archives (largest: 1.5 GB)
Company #71
October 16, 2026
•[ ransomware, manufacturing ]
Company #71 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-16. Country: United States of America. manufacturing USA | [PENDING EXPOSURE]
Company #76
October 16, 2026
•[ ransomware, finance, technology ]
Company #76 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-16. Country: United States of America. fintech payments US | [PENDING EXPOSURE]
Pure Options
October 16, 2026
•[ ransomware, finance ]
Pure Options was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-10-16. Sector: Financial Services. Website: www.pureoptions.com. United States
MicroSearch Corporation
October 16, 2026
•[ ransomware, technology ]
MicroSearch Corporation was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-10-16. Sector: Technology. Website: www.microsearch.net. United States
New Tec Tool Limited
October 16, 2026
•[ ransomware, manufacturing ]
New Tec Tool Limited was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-10-16. Sector: Manufacturing. Country: Hong Kong. Website: www.newtectool.com. Canada
Chugoku Bend
October 17, 2026
•[ ransomware, manufacturing ]
Chugoku Bend was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-10-17. Sector: Manufacturing. [AI generated] N/A
I don't have reliable, verifiable information about a company specifically named "Chugoku Bend." This does not correspond to a company I can confidently identify in my knowledge base. If you have additional contextsuch as an alternate spelling, parent company, industry sector, or locationI would be glad to help clarify or research further based on that information.
First Dental Health
October 16, 2026
•[ ransomware, healthcare, leak ]
First Dental Health was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-16. Sector: Healthcare. Country: United States of America. Website: firstdentalhealth.com. firstdentalhealth.com First Dental Health, Inc. dental consulting company founded in 1995 and based in Sacramento, California. It is led by Chairman and CEO Michael Zhang together with founder Dr. Rick Kershner, a periodontist who previously worked with Western Dental, Coast Dental and Pacific Dental Services. The company transforms existing dental practices of 40 to 250 chairs through leadership development, culture building and operational excellence, typically raising performance by 40 to 80 percent within 2 to 4 years. Its flagship case is Sacramento Dentistry Group, which grew from around 330000 dollars monthly revenue in 2014 to roughly 640000 dollars by 2023. It also runs a DSO consolidation model that merges 6 to 10 practices under one brand with owners keeping equity and a 3 to 7 year exit path. The team has built 14 companies that made the Inc. 5000 list, positioning it as a small but high-impact operator in US dental business consulting.
Gio Dental Med Spa
October 16, 2026
•[ ransomware, healthcare ]
Gio Dental Med Spa was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-16. Sector: Healthcare. Country: Italy. Website: giodentalspa.com. giodentalspa.com Gio Dental & Med Spa private dental and aesthetic clinic founded around 2006 in Ciudad Jurez, Mexico, targeting patients from the US border region of El Paso and Las Cruces. The practice has about 6 employees and estimated annual revenue of roughly 430000 dollars, making it a small self-owned business with no external funding. Its business model is built on cross-border dental tourism, accepting American HMO and PPO insurance and transporting patients from El Paso directly to the clinic. Core services are dental implants, orthodontics, endodontics, veneers and oral surgery, plus a med spa division with botox, fillers and physiotherapy. The clinical founder and director is Dr. Mauro D. lvarez, an implantology specialist, working with a team of about five additional dentists. The company is positioned on price: complex dental procedures cost a fraction of US rates while offering full-service treatment and aftercare for American patients.
polisee Inc
October 16, 2026
•[ ransomware, technology ]
polisee Inc was listed as a victim on the leak site of the Vexy Ransomware ransomware group; the attack is estimated to have taken place on 2026-10-16. Sector: Technology. Country: United States of America. Website: polisee.com. polisee Inc. is a Japanese technology company that develops and operates an AI-powered policy intelligence platform. Its software automates the monitoring, collection, analysis, and sharing of government policy and regulatory information. It uses AI to summarize policy discussions, organize complex documents, and provide real-time alerts, helping businesses and institutions anticipate regulatory changes, manage compliance risks, and identify new business opportunities.
Interseguro
October 13, 2026
•[ ransomware, finance ]
Interseguro was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2026-10-13. Sector: Financial Services. Country: Peru. Website: interseguro.pe. Insurance
Comisión Municipal de Agua Potable y Alcantarillado de Victoria
October 13, 2026
•[ ransomware, energy ]
Comisin Municipal de Agua Potable y Alcantarillado de Victoria was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-13. Sector: Energy & Utilities. Country: Mexico. Website: comapavictoria.gob.mx.