Vadeto Group
October 9, 2026
•[ ransomware, technology ]
Vadeto Group was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-09. Country: Sweden. Website: www.vadetogroup.com.
solutend
October 9, 2026
•[ ransomware, technology ]
solutend was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-10-09. Sector: Technology. Bolivian technology company that provides audiovisual systems, digital signage, interactive displays, and business computing solutions.
The Margo Hotel
August 19, 2026
•[ ransomware, retail ]
The Margo Hotel was listed as a victim on the leak site of the Majinahanashi ransomware group; the attack is estimated to have taken place on 2026-08-19. Sector: Hospitality. Country: United Kingdom of Great Britain and Northern Ireland. Website: themargohotel.com. The Margo Hotel is a leading 4-star business hotel in Depok that offers premium service, modern facilities for large-scale conferences, and a comfortable stay, and regularly receives top ratings fr...
Camandona SA
August 4, 2026
•[ ransomware, manufacturing ]
Camandona SA was listed as a victim on the leak site of the Majinahanashi ransomware group; the attack is estimated to have taken place on 2026-08-04. Country: Switzerland. Website: camandona.ch. Camandona SA is a major Swiss construction and road-building company founded in 1948 and based in the French-speaking canton of Vaud. It specializes in asphalt paving, road construction, civil engi...
hsc.mb.ca
October 10, 2026
•[ ransomware, healthcare, leak ]
hsc.mb.ca was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-10-10. Sector: Healthcare. Country: Canada. Website: hsc.mb.ca. The Health Sciences Centre in Winnipeg, one of the largest medical institutions, was targeted by us that resulted in the largest data breach among healthcare institutions. Our group chose not to completely disrupt the facilitys operations, recognizing the potentially devastating consequences that such an action could have had on patients lives and health.
Nevertheless, Health Sciences Centre management stated that no sensitive data had been affected, despite having been informed otherwise.
The data included, but was not limited to, the following information:
Patient medical records:
Full name, date of birth, address and phone number
Hospital medical record number
Diagnoses, medical history, allergies and medications
Laboratory results, imaging reports
Appointment dates, treatment details and physician information.
Employee and healthcare professional information:
Names, contact details, dates of birth and employee numbers
Employment, payroll and banking information
Professional credentials, work schedules and departmental assignments.
Financial and insurance information:
Billing records and payment histories
Insurance or benefits claim information.
Confidential hospital documents:
Internal emails and staff communications
System configurations, network diagrams and security procedures
Database backups and exported spreadsheets.
We would have very much preferred to avoid making this data breach public, but the management has left us with no other choice.
Confipetrol
October 11, 2026
•[ ransomware, energy ]
Confipetrol was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-11. Sector: Energy & Utilities. Country: Colombia. Website: www.confipetrol.com.
Company #27
October 11, 2026
•[ ransomware, healthcare ]
Company #27 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-11. Sector: Healthcare. Country: Australia. neurology practice New South Wales, Australia | [PENDING EXPOSURE: data publishes 2026-10-13 12:37 UTC]
Company #23
October 11, 2026
•[ ransomware, technology ]
Company #23 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-11. smart building & surveillance integration California, USA | [PENDING EXPOSURE: data publishes 2026-10-14 18:00 UTC]
Company #24
October 11, 2026
•[ ransomware, technology ]
Company #24 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-11. smart building & surveillance integration California, USA | [PENDING EXPOSURE: data publishes 2026-10-14 18:00 UTC]
MoneyGram
October 10, 2026
•[ ransomware, finance, technology ]
MoneyGram was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-10. Sector: Financial Services. Country: United States of America. Website: moneygram.com. moneygram.com Revenue $2.1 Billion MoneyGram global money transfer network moving nearly $200 billion a year through almost 500,000 retail agent locations in 200+ countries and serving 60 million+ active customers, with over 70% of transactions now digital. It earns mainly from transfer fees plus currency exchange spreads, not from owning stores, since almost all locations are partner agents like post offices and grocery chains. In 2025 it cut 449 jobs to speed up digital growth and in 2026 launched its own MGUSD dollar stablecoin and a Visa card that spends digital dollars anywhere Visa works. MoneyGram owns no factories or stores, it is a licensed money transmitter with 75+ regulatory approvals, around 2,000 employees in 36 countries, and was taken private in 2023 for $1.8 billion.
BigID
October 10, 2026
•[ ransomware, technology ]
BigID was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-10. Sector: Technology. Country: United States of America. Website: bigid.com. bigid.com Revenue $100 Million BigID is the enterprise data security platform that finds and classifies sensitive data across cloud apps, databases and files, showing where private data lives and who can access it. It now focuses on AI, spotting shadow AI tools and checking what data Copilots and agents reach, and in September 2026 launched AgentIQ letting AI assistants trigger data cleanup and access reviews from Claude, Copilot or ChatGPT. It serves hundreds of enterprise clients like Telenor and Fiserv, one of which deleted 27,000 sensitive records from 2.5 petabytes of storage. Money comes from enterprise subscriptions priced per data source, with $175K as one AWS Marketplace benchmark. Around 600 employees work there after cutting 150 roles in May 2026 to go AI-first. It raised $320M at a $1B+ valuation and owns no factories or stores.
Eurogate Tanger (container terminal operations)
October 12, 2026
•[ ransomware, leak, technology ]
Eurogate Tanger (container terminal operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: Morocco. Port terminal operations Morocco | Terminal commercial operation configuration records and systems release documentation | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
T2S (terminal systems operations)
October 12, 2026
•[ ransomware, technology ]
T2S (terminal systems operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: Brazil. Port terminal operations Brazil | Terminal systems gap-analysis documentation and internal database material | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
Korea Ferry (ferry operations)
October 12, 2026
•[ ransomware, financial ]
Korea Ferry (ferry operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: South Korea. Ferry / RoRo shipping South Korea | Internal staff account records with plaintext credentials and financial receipt records | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
BKH ICD (inland container depot operations)
October 12, 2026
•[ ransomware, manufacturing, hack ]
BKH ICD (inland container depot operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: South Korea. Inland container depot South Korea | Commercial invoice records and systems release documentation | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
BMT IQ (marine surveying and inspection)
October 12, 2026
•[ ransomware, leak, manufacturing ]
BMT IQ (marine surveying and inspection) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: United Kingdom of Great Britain and Northern Ireland. Marine surveying United Kingdom | Commercial e-invoice records and equipment interchange receipts | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
GNCNet / DGT Busan (port community IT)
October 12, 2026
•[ ransomware, technology ]
GNCNet / DGT Busan (port community IT) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: South Korea. Port IT services South Korea | Billing service records and operational EDI sample material | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
NEOM Ports (industrial port operations)
October 12, 2026
•[ ransomware, technology ]
NEOM Ports (industrial port operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: Saudi Arabia. Industrial port operations Saudi Arabia | Commercial tariff documentation and invoicing records | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
ZPMC (port machinery and terminal engineering)
October 12, 2026
•[ ransomware, leak, manufacturing ]
ZPMC (port machinery and terminal engineering) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Manufacturing. Country: China. Port machinery / engineering China | Operational EDI archives and cargo loading records | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
Concord Eye Center
October 12, 2026
•[ ransomware, healthcare, leak ]
Concord Eye Center was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Healthcare. Country: United States of America. Website: http:www.concordeyecenternh.com. A private ophthalmology clinic specializing in various fields. However, it completely fails to ensure the security of itself and its clients and is extremely lax in its recordkeeping. The structure of its confidential records is determined by the categories of protected health information (PHI) it creates and stores. Because Concord Eye Center makes no attempt to regulate security, we provide you with the following information: patient identification and administrative data: this includes names, addresses, dates of birth, social security numbers, and contact information; clinical and medical history: detailed symptom records, ophthalmological and systemic medical history, and family history; diagnostic and lab results; surgical and treatment documentation; billing and financial information: insurance information, claims data, and payment records. Leaking these documents would primarily violate the HIPAA Privacy and Security Rules (45 CFR Parts 160 and 164) and the HITECH Act, which provide for tiered civil penalties for each category of violation, leading to distrust of their business by customers and partners and its collapse.
