Culinary Specialties
October 13, 2026
•[ ransomware, manufacturing ]
Culinary Specialties was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-10-13. Sector: Agriculture and Food Production. Country: United States of America. Website: www.culinaryspecialties.net. United States
Saddlers Court MFG
October 13, 2026
•[ ransomware, manufacturing ]
Saddlers Court MFG was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-10-13. Sector: Manufacturing. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.saddlerscourtmfg.com. United States
The New Community School
October 7, 2026
•[ ransomware, education ]
The New Community School was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-10-07. Sector: Education. Country: United States of America. The New Community School is an independent co-educational day school located in Richmond, VA, catering to students in grades 5-12 with dyslexia. The school offers a customized curriculum designed to unlock each student's potential, emphasizing small class sizes and a student-centered approach. With a focus on nurturing relationships and community connections, TNCS empowers students to achieve success academically and personally. The school also provides a range of extracurricular activities, including arts, athletics, and community service opportunities.
TMobile
October 7, 2026
•[ ransomware, technology ]
TMobile was listed as a victim on the leak site of the BYOD ransomware group; the attack is estimated to have taken place on 2026-10-07. Sector: Technology. Country: United States of America. You're in big big trouble, oh no, what will you ever do in this situation? Well, we think you should get in touch with BYOD. We won't display what we have for the public to see, just yet, we'll give you the chance. Anyways, you know where to find us (contact tab). We will take you down when communication has been established between our team and yours.
K...
October 7, 2026
•[ ransomware ]
K... was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-10-07. Redacted entry - full company name pending disclosure (FULL DATA TIMER active).
Royal EGT
July 12, 2026
•[ ransomware, energy ]
Royal EGT was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-07-12. Sector: Energy & Utilities. Country: Egypt. Website: www.egt.com.
INI Fiocruz
July 7, 2026
•[ ransomware, healthcare, government ]
INI Fiocruz was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-07-07. Sector: Healthcare. Country: Brazil. Website: www.ini.fiocruz.br. [AI generated] INI Fiocruz refers to the Instituto Nacional de Infectologia Evandro Chagas, a research and hospital unit of the Oswaldo Cruz Foundation (Fiocruz) in Brazil. It operates in the healthcare and biomedical research industry, specializing in infectious disease treatment, clinical research, and public health initiatives. Based in Rio de Janeiro, Brazil, it is a government-affiliated institution under the Ministry of Health, contributing to disease surveillance, vaccine studies, and medical training programs.
Sinae Phuket Luxury Hotel
July 6, 2026
•[ ransomware, retail ]
Sinae Phuket Luxury Hotel was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-07-06. Sector: Hospitality. Country: Thailand. Website: www.sinaephuket.com.
Baker McKenzie
October 8, 2026
•[ ransomware ]
Baker McKenzie was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-10-08. Sector: Professional Services. Country: United States of America. [AI generated] Baker McKenzie is a global law firm headquartered in Chicago, Illinois, United States. Founded in 1949, it operates in the legal services industry, providing counsel in areas such as corporate law, tax, dispute resolution, mergers and acquisitions, employment law, and intellectual property. The firm serves multinational corporations and organizations, with offices across North America, Europe, Asia-Pacific, Latin America, and the Middle East.
Sangre de Cristo Arts and Conference Center
July 20, 2026
•[ ransomware, leak ]
Sangre de Cristo Arts and Conference Center was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-07-20. Sector: Hospitality. Country: United States of America. Website: sdc-arts.org. [AI generated] Sangre de Cristo Arts and Conference Center is a nonprofit cultural organization located in Pueblo, Colorado, United States. It operates as a multidisciplinary arts facility featuring art galleries, a children's museum, performing arts theaters, and conference and event spaces. The center hosts exhibitions, live performances, educational programs, and community events, serving the arts, culture, and entertainment industry in the southern Colorado region.
Heidi's Events & Catering, Inc.
July 19, 2026
•[ ransomware, retail ]
Heidi's Events & Catering, Inc. was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-07-19. Sector: Hospitality. Country: United States of America. Website: heidisevents.com. [AI generated] N/A
I don't have reliable, verifiable information about a specific company named "Heidi's Events & Catering, Inc." in my training data. This appears to be either a small/local business not well-documented in public sources, or a name that could correspond to multiple unrelated entities.
To provide an accurate threat intelligence profile, I'd need you to supply additional identifying details, such as: a business registration number, headquarters location or address, website domain, known executives, or industry sector specifics. With that information, I could help structure an assessment or guide you on how to verify the company through business registries, sanctions lists, or corporate databases.
Mäntelhaus Kaiser GmbH & Co. KG
July 21, 2026
•[ ransomware, manufacturing, leak ]
Mntelhaus Kaiser GmbH & Co. KG was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-07-21. Sector: Manufacturing. Country: Germany. Website: maentelhaus-kaiser.de. [AI generated] N/A
I don't have reliable, verifiable information about a company called "Mntelhaus Kaiser GmbH & Co. KG" in my knowledge base. Rather than provide fabricated details about its operations, industry specifics, or founding history, I'm flagging this as unverifiable. If you have source material or context about this company, please share it and I can help analyze or summarize that information instead.
PMG Project Management Group
October 9, 2026
•[ ransomware, technology ]
PMG Project Management Group was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-10-09. Sector: Professional Services. Country: United Arab Emirates.
Fondy Food Pantry
October 4, 2026
•[ ransomware, retail ]
Fondy Food Pantry was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-10-04. Sector: Agriculture and Food Production. Country: United States of America. Website: fondyfoodpantry.org.
Dudley Land Company
October 9, 2026
•[ ransomware, energy ]
Dudley Land Company was listed as a victim on the leak site of the bravox ransomware group; the attack is estimated to have taken place on 2026-10-09. Sector: Other. Country: United States of America. Website: www.dudley-land.com. Dudley Land Company, Inc. is a U.S. land-services company founded in 1980 and headquartered in Oklahoma City, Oklahoma. For more than four decades, it has supported energy and infrastructure projects across the United States.
Mynd
October 9, 2026
•[ ransomware, healthcare ]
Mynd was listed as a victim on the leak site of the anubis ransomware group; the attack is estimated to have taken place on 2026-10-09. Sector: Healthcare. Property owners personal data.
North Philadelphia Health System
October 7, 2026
•[ ransomware, healthcare ]
North Philadelphia Health System was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-07. Sector: Healthcare. Country: United States of America. Website: bewellctr.org. bewellctr.org zoominfo.com/c/north-philadelphia-health-system/27968159 The Behavioral Wellness Center at Girard ("Be Well") is a nonprofit addiction and psychiatric treatment provider at 801 W. Girard Ave, Philadelphia, with revenue growing from $38.8M (FY2019) to a record $63.4M (FY2025, 95% from program services), though it posted a $4.4M loss in FY2024 and carries $68.7M in liabilities. Tracing its roots to the 1896 Philadelphia Children's Homeopathic Hospital, it survived a 1990 merger of two bankrupt hospitals, closed St. Joseph's in 2016, filed Chapter 11 that December, and emerged in 2018 after selling its real estate ($8.45M Girard campus sale to Iron Stone) while saving ~500 jobs. Today it employs ~480 staff and runs one of Philadelphia's oldest and largest methadone programs (Goldman Clinic, ~600 clients/day, ~217,000 visits/year), plus detox, residential, and 85 extended-acute psychiatric beds.
Northwestern Polytechnic
October 6, 2026
•[ ransomware, education ]
Northwestern Polytechnic was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Education. Country: Canada. Website: nwpolytech.ca. nwpolytech.ca zoominfo.com/c/northwestern-polytechnic/1310919676 Northwestern Polytechnic (NWP) is a publicly funded polytechnic institution founded in 1966 in Grande Prairie, Alberta, serving 3,800+ students (2,227 full-load equivalents) with ~372438 employees under President & CEO Dr. Vanessa Sheane (since 2023). Its annual budget is ~$79.5M CAD (2026-27), funded 62.5% by government grants and 21.9% by student tuition, with total net assets of $49.8M (CRA data). NWP operates across 4 schools (Applied Science & Technology, Business & Education, Health, Skilled Trades) offering apprenticeships, diplomas, and a new Bachelor of Education degree, plus unique research assets like the National Bee Diagnostic Centre Canada's only bee diagnostics lab (NSERC Technology Access Centre) and a 40,000 sq ft Health Education Centre inside the Grande Prairie hospital. The campus features iconic Douglas J. Cardinal architecture (winner of the Prix du XXe Sicle)
SAS H2O MICHEL
October 6, 2026
•[ ransomware, finance ]
SAS H2O MICHEL was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Other. Country: France. Website: h2o-michel.fr. h2o-michel.fr huissiers-bordeaux.com SAS H2O MICHEL is a French commissaire de justice firm (public judicial officer serving court documents, enforcing judgments, debt recovery) created in 2018 and based in Tours/Chinon, Val de Loire (Indre-et-Loire). It is led by President Alexandra Michel and operates 5 offices (Tours, Chinon, Bourgueil, Langeais, Chteau-la-Vallire) with a small team of 37 employees. Revenue grew rapidly from 223K in 2018 to 631K in 2019 (+183%), with a strong 16.4% net margin (103.5K net profit, ROE 85.8%) though all accounts since 2020 are filed confidentially (estimated 600K1M today). The firm is part of H2O Rseau National, France's first national network of commissaires de justice specialized in debt recovery (group network: 160+ staff, 6 major offices). Core services: enforcement of court decisions (saisie-attribution, wage garnishment, evictions, property seizures), debt collection, legal constats, and auction sales.
DW McMillan Memorial Hospital
September 21, 2026
•[ ransomware, healthcare ]
DW McMillan Memorial Hospital was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Healthcare. Country: United States of America. Website: dwmmh.org. dwmmh.org zoominfo.com/c/dw-mcmillan-memorial-hospital/77170917 D.W. McMillan Memorial Hospital is a small rural hospital in Brewton, Alabama, operating since 1954. It provides a 24/7 emergency room, ICU, surgery, obstetrics, outpatient chemotherapy, lab, imaging, and rehabilitation serving as the main acute-care provider for the county. It has about 3949 beds and employs roughly 85 staff, generating approximately $15 million in annual revenue. The hospital is part of a small county healthcare system that also runs clinics, EMS, and home health services. It has faced serious financial pressure a $6 million deficit but survived after county voters approved a tax increase in December 2025 expected to bring ~$1.8 million per year starting 2027.
