Kooltronic
October 6, 2026
•[ ransomware, manufacturing, technology ]
Kooltronic was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Manufacturing. Country: United States of America. Website: kooltronic.com. kooltronic.com Kooltronic, Inc. is a private, family-owned manufacturer of enclosure cooling products (air conditioners, heat exchangers, fans) founded in 1956 in Princeton, NJ, now based in Pennington, NJ on a 170,000 sq ft facility powered by 90% solar energy. Owned by the Freedman family since 1970 (President: Barry Freedman), the company generates estimated annual revenue of $3545M with 5887 employees (~$650K$750K revenue per employee very high for a manufacturer). Kooltronic invented the world's first closed-loop enclosure air conditioner in 1967 and holds a US patent for Hazardous Location AC systems (NEC Class I Div 1&2), giving it a unique market niche. It offers the industry's widest range 2,00030,000 BTU/H units across all NEMA ratings with 100% in-house production, UL-certified testing labs, and ISO 9001:2015 certification. The company is women-owned (WBE) (CEO Anne Freedman), holds $20.5M in 401(k) assets (stable finances), and is expanding into fast-growing BESS
Smart Value
October 6, 2026
•[ ransomware, retail, leak ]
Smart Value was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Retail & E-Commerce. Country: Belize. Website: smartvalue.biz. smartvalue.biz zoominfo.com/c/smart-value/408286294 Smart Value Limited is an Indian MLM (multi-level marketing) / network marketing company founded in 20032004 in New Delhi by Manoj Kumar Gupta, operating 100+ offices across India with a claimed 2,000,000+ distributors (IBAs). The company sells health supplements, personal care, household products, and educational courses but revenue is not publicly disclosed (private MLM). Its core business model relies on recruiting new distributors rather than actual retail sales, with heavily inflated product pricing (200500% above market) to fund multi-level commissions. The company faces serious and widespread allegations: consumer complaints about pyramid-like structure, inability to recover investments, fake income claims on social media, and reported law enforcement scrutiny in India. ~99% of participants lose money (standard MLM economics), while only top recruitment leaders profit. Despite 20+ years of operation and membership in Indian
TGN
October 6, 2026
•[ ransomware, energy ]
TGN was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Country: Argentina. Website: tgn.com.ar. tgn.com.ar zoominfo.com/c/transportadora-de-gas-del-norte/372392284 Transportadora de Gas del Norte (TGN) is Argentina's largest natural gas transporter, publicly traded on BYMA (TGNO4), founded in 1992 and operating 11,317 km of pipelines and 22 compressor stations across 17 provinces. It moves 40% of all natural gas in Argentina's pipeline system (~20% of the national energy matrix) and is the only operator connecting Argentina to Chile, Brazil, Bolivia, and Uruguay. FY2025 revenue was ~$483M (AR$600.6B, +20%), EBITDA ~$260M (55% margin), and net income surged +351% to ~$176M, driven by tariff reforms and Vaca Muerta export growth. The company has virtually zero debt (Debt/EBITDA 0.2x), $250M cash, and pays record dividends of AR$577/share (~10% yield), with a AA-(arg) credit rating (Fitch, positive outlook). It employs 6001,153 people, is controlled by Gasinvest (56%) a Techint/Tecpetrol + CGC/Eurnekian joint venture and was named a Great Place to Work Top-25 in Argentina 2025
Aquatech
October 6, 2026
•[ ransomware, energy, technology ]
Aquatech was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Energy & Utilities. Country: United States of America. Website: aquatech.com. aquatech.com zoominfo.com/c/aquatech-international-llc/2523742 Aquatech International Corporation is a private water treatment technology company founded in 1981 and headquartered in Canonsburg, Pennsylvania, with operations in 26 countries and 1,000+ projects across 60+ countries. It generates estimated annual revenue of $105165M and employs 9001,368 people globally (growing +31% per year). Aquatech is the world's leading Zero Liquid Discharge (ZLD) provider (160+ installations) and a major desalination player its Corpus Christi, Texas plant (30 MGD) will be the third-largest SWRO facility in the Americas. The company won the prestigious "Water Technology Company of the Year 2025" (Global Water Awards) and acquired three companies in 2025 (Century Water, Koch Li-Pro DLE, FTS H2O) to dominate lithium extraction (PEARL platform) and ultrapure water for semiconductors. Led by CEO Devesh Sharma and President/CTO Ravi Chidambaran, with a private equity investor entering in 2025.
fleetworksinc.com
October 9, 2026
•[ ransomware, manufacturing ]
fleetworksinc.com was listed as a victim on the leak site of the threeam ransomware group; the attack is estimated to have taken place on 2026-10-09. Sector: Transportation. Country: United States of America. Website: fleetworksinc.com. Fleetworks Inc. offers comprehensive heavy-duty truck repair and fleet services across California, with locations in Oakland, Santa Fe Springs, and Riverside. Their skilled team specializes in a wide range of services including diesel repair, flee
Supreme Energy
October 9, 2026
•[ ransomware, energy ]
Supreme Energy was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-10-09. Sector: Energy & Utilities. Country: Indonesia. Supreme Energy is an Indonesian renewable-energy company that develops geothermal power projects to generate clean electricity.
astranahealth.com
October 9, 2026
•[ ransomware, healthcare, technology ]
astranahealth.com was listed as a victim on the leak site of the chaos ransomware group; the attack is estimated to have taken place on 2026-10-09. Sector: Healthcare. Country: United States of America. Website: astranahealth.com. The company's management decided to pull out of the deal with us in order to save money. The data and diagnoses of millions of patients have been published in their entirety. The total data volume is 1,500 GB.
Astrana Health, Inc. is a physician-centric, technology-powered healthcare company headqu
dwi-bau.de
October 9, 2026
•[ ransomware, manufacturing ]
dwi-bau.de was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-10-09. Sector: Other. Country: Germany. Website: dwi-bau.de. The company specializes in building systems for metal roofs and facades, serving customers in the construction and building sectors. Its
KOIKE Sanso Kogoyo Co. Ltd.
October 10, 2026
•[ ransomware, manufacturing ]
KOIKE Sanso Kogoyo Co. Ltd. was listed as a victim on the leak site of the exitium ransomware group; the attack is estimated to have taken place on 2026-10-10. Sector: Manufacturing. Country: Japan. Website: koike-asia.com. Website: koike-japan.com
You have time until Tuesday(10.13.2026). If you wouldn't contact us we will start selling data.
We have 5.8 TB of data:
agreements
confidential data
correspondence files
all customers and clients data
engineering drawings
AND MUCH MORE...
Contact us until your time runs out.
Secretaría de Modernización e Innovación del Municipio
October 10, 2026
•[ ransomware, government, technology ]
Secretara de Modernizacin e Innovacin del Municipio was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-10. Sector: Government & Defense. Country: Argentina. Website: www.riogrande.gob.ar.
Helwan University (HITU)
October 10, 2026
•[ ransomware, education, technology ]
Helwan University (HITU) was listed as a victim on the leak site of the UmBra ransomware group; the attack is estimated to have taken place on 2026-10-10. Sector: Education. Country: Egypt. Website: helwan.edu.eg. Helwan International Technological University a pioneering Egyptian institution offering cutting-edge programs in Cybersecurity, Data Science, Artificial Intelligence, and Mechatronics, equipped with advanced labs and strong industry partnerships to prepare students for the digital future.
HYSYTECH S.r.l.
October 2, 2026
•[ ransomware, manufacturing, technology ]
HYSYTECH S.r.l. was listed as a victim on the leak site of the Majinahanashi ransomware group; the attack is estimated to have taken place on 2026-10-02. Sector: Manufacturing. Country: Italy. HYSYTECH S.r.l. is an Italian engineering and technology company that designs and builds industrial processing plants, specifically systems for the production and processing of hydrogen, biomethane...
PCA Group Sdn. Bhd.
August 21, 2026
•[ ransomware, manufacturing ]
PCA Group Sdn. Bhd. was listed as a victim on the leak site of the Majinahanashi ransomware group; the attack is estimated to have taken place on 2026-08-21. Sector: Other. Country: Malaysia. PCA Group is a Malaysian industrial, engineering, and manufacturing company founded in 1989 that designs, manufactures, installs, and maintains infrastructure and equipment for major international...
ETICOD
August 9, 2026
•[ ransomware, manufacturing, technology ]
ETICOD was listed as a victim on the leak site of the Majinahanashi ransomware group; the attack is estimated to have taken place on 2026-08-09. Country: Poland. Website: eticod.pl. Eticod is a family-run, prominent label printing house based in Katowice, Poland, founded in 1994. It specializes in self-adhesive labels, barcodes, thermal transfer ribbons, and advanced packaging...
CDA
July 8, 2026
•[ ransomware, healthcare ]
CDA was listed as a victim on the leak site of the Majinahanashi ransomware group; the attack is estimated to have taken place on 2026-07-08. Internal domain: CDA.local. Servers encrypted. 100,000+ DICOM files extracted from medical imaging archive. Patient names, IDs, birth dates, study descriptions, and referring physicians are present...
GRUPO STARFOODS
July 6, 2026
•[ ransomware, retail, hack ]
GRUPO STARFOODS was listed as a victim on the leak site of the Majinahanashi ransomware group; the attack is estimated to have taken place on 2026-07-06. Sector: Agriculture and Food Production. Country: Portugal. Website: starfoods.pt. Grupo Starfoods is a Portuguese restaurant group founded in 1993. Headquartered in Cruz Quebrada, Lisbon. Owns 6 brands: Companhia, Loja das Sopas, Bifanas de Vendas Novas, Selfish, Baslico, and T...
TQC S.A.
October 11, 2026
•[ ransomware, manufacturing ]
TQC S.A. was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-10-11. Sector: Manufacturing. Country: Peru. Website: tqc.com.pe. (A release of 750 GB of data, compressed into archives for convenience.) TQC Tecnologa Qumica Comercio S. A. specializes in providing high-quality solutions for the agricultural, veterinary, and environmental health sectors, promoting sustainable agriculture. The company aims to support the development and well-being of these sectors by offering a wide range of products tailored to their needs. With a commitment to excellence, TQC seeks to be a leading provider in Peru and other markets in South America. They work closely with farmers to exceed expectations and contribute to community growth.
CNESTEN
October 11, 2026
•[ ransomware, government, technology ]
CNESTEN was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-11. Sector: Government & Defense. Country: Morocco. Website: kerix.net/fr/annuaire-entreprise/cnesten.
Company #14
October 11, 2026
•[ ransomware, financial ]
Company #14 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-11. Country: Canada. Financial services Canada | [HONORED: settled 2026-10-07 17:00 UTC before their deadline]
Spelman Logistics
October 11, 2026
•[ ransomware, technology, manufacturing ]
Spelman Logistics was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-10-11. Sector: Transportation. Website: spelmanlogistics.com. Dear Spelman Logistics,
We are now in possession of 1.2M contact records (emails and phone numbers), 245K carrier profiles complete with EIN and SSN, 57K bank accounts including routing numbers, 334K live document URLs, and 4.5M carrier registry entries pulled from your MVMNT TMS.
Your exposure extends well beyond your own walls. We have also reached into the systems of your partners, including:
ALG Canada Inc
Line Transportation Inc
Maverick Acquisition Ventures Inc
Reliable Freight Solutions
Rhode Sense
and more.
If you would rather not have us contact your partners and make life difficult for your employees, we suggest you pay the following: $500,000 in BTC or XMR.
You will shortly receive an email explaining how to reach us. If that fails, contact us at:
Email: emperadorlol@proton.me / xdlmfao@morke.ru
Session: 05651c7323273b723588d47455471ee9e27feb5187a30f2933554a705aacb38358 [Sector: Manufacturing, Transportation]