The Bernard Osher Foundation
October 4, 2026
•[ ransomware, education ]
The Bernard Osher Foundation was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-10-04. Sector: Education. Country: United States of America.
bayer
October 9, 2026
•[ ransomware, healthcare ]
bayer was listed as a victim on the leak site of the Black X ransomware group; the attack is estimated to have taken place on 2026-10-09. Sector: Healthcare. Country: Germany. Website: www.bayer.com/en. Bayer is a global life science company with more than 160 years of innovation behind us. Operating at the intersection of health and nutrition, we are committed to addressing some of society's most pressing challenges and creating lasting value for people, communities, and the world around us.
Tec Imports
July 10, 2025
•[ ransomware, technology, manufacturing ]
Tec Imports was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2025-07-10. Sector: Other. Country: Brazil. Tec Imports group offers a complete range of logistics solutions, from
coordinating shipments from the manufacturer's plant to the end
customer, whether by sea, air, or road.
Commercial Department - contact@dorte.com.br
Importation - alexandre@dorte.com.br
Export - stefani@dorte.com.br
Hospitalar Cosmtico - ricardolinhares@dorte.com.br
Professional Hairdressing Machines -ricardoamaral@dorte.com.br
Tec Zipper - diogo@teczipper.com.br
Phone/Fax: +55 11 3809-6870
Phone/Fax: 55 27 3318-0888
Wavecrest HFA
July 7, 2026
•[ ransomware, finance ]
Wavecrest HFA was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-07-07. Sector: Financial Services. Country: United States of America. 12,143 Files, 267 Folders
23,991,067,648 bytes
Riviera Healthcare Center
October 7, 2026
•[ ransomware, healthcare ]
Riviera Healthcare Center was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-10-07. Sector: Healthcare. Country: United States of America. Website: https:rivierahealthcare.com. Riviera Healthcare Center is a for-profit skilled nursing facility in operation for over 50 years. It provides 24-hour nursing and rehabilitation services. Due to negligence and poor security practices, confidential data was exposed, including patient protected health information (PHI)names, diagnoses, medical histories, fall/fracture and treatment information, payment records, and employee/HR data. This breach violates HIPAA and the California CMIA (and potentially the CCPA/CPRA) and will result in mandatory breach notification, federal and state fines, civil lawsuits, corrective action plans, and significant reputational and financial damage.
Deese and Locklear Chiropractic Center
July 12, 2026
•[ ransomware, healthcare ]
Deese and Locklear Chiropractic Center was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-07-12. Sector: Healthcare. Country: United States of America. [AI generated] N/A
I don't have reliable, verifiable information about a specific company called "Deese and Locklear Chiropractic Center." While this sounds like it could plausibly be a small, local chiropractic practice (based on the naming convention, likely in the United States, possibly the Carolinas given the surname "Locklear"), I cannot confirm its existence, operations, or details with confidence, and providing fabricated information would not be appropriate for threat intelligence purposes.
Sociedad Portuaria Mardique S.A.
July 3, 2026
•[ ransomware, leak ]
Sociedad Portuaria Mardique S.A. was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-07-03. Sector: Transportation. Country: Colombia. Website: spmardique.com.
simplexengg.in
October 8, 2026
•[ ransomware, manufacturing ]
simplexengg.in was listed as a victim on the leak site of the Eclipse ransomware group; the attack is estimated to have taken place on 2026-10-08. Sector: Manufacturing. Country: India. Website: simplexengg.in.
MCM Telecom
October 8, 2026
•[ ransomware, technology ]
MCM Telecom was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-08. Sector: Technology. Country: Mexico. Website: www.mcmtelecom.com.
O'Hagan Meyer
October 8, 2026
•[ ransomware, finance ]
O'Hagan Meyer was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-10-08. Sector: Professional Services. Website: ohaganmeyer.com. U.S. national law firm focused primarily on business litigation and labor & employment law. It was fou
Vietnam SuperPort
July 20, 2026
•[ ransomware, manufacturing, technology ]
Vietnam SuperPort was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-07-20. Sector: Transportation. Country: Vietnam. Website: superport.vn. [AI generated] N/A
I don't have verified, reliable information about a specific company called "Vietnam SuperPort." There is a known logistics project called "Vietnam SuperPort" associated with YCH Group (a Singapore-based logistics company) and intended to be a smart logistics hub in Vinh Phuc province, Vietnam, but I cannot confirm sufficient reliable details to provide an accurate factual description without risking inaccuracy.
Hagiva Yh
October 9, 2026
•[ ransomware, technology ]
Hagiva Yh was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-09. Country: Israel. Website: www.hagiva.co.il.
RealManage
October 9, 2026
•[ ransomware, finance, technology ]
RealManage was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-10-09. Sector: Professional Services. Country: United States of America. RealManage RealManage is a privately held, tech-enabled community association management company headquartered in Plano, Texas. Founded in 2002 and backed by American Securities, the company has grown into one of the largest and fastest-growing community association management firms in the United States, having been recognized on the Inc.1.84 TBThe tax, banking and debt secrets of hundreds of American HOAs and thousands of homeowners - complete with SSNs, account numbers and signatures.Genuine W-9 forms with Social Security numbers, addresses and signatures; IRS 1099-MISC/NEC e-file transmissions for 20142025 - thousands of vendor TINs/SSNsHomeowners' banking keys: ACH debit files with routing and account numbers, USAA brokerage statements, signed bank signature cardsPeople's debts by name: assessments through September 2026, bankruptcies, late-fee waivers, hardship letters from debtors begging for payment plansPersonal documents: HUD-1 home purchase settlements (names, prices, mortgages), signed waivers with addresses, HOA election ballots with voter namesFull SQL Server databases: RM_Warehouse, RM_Sales, RM_Portals, CiraNetIdentity (portal accounts), CiraBooks_GL (general ledger)Mail and document flow: CiraMail$, CiraDocs$, SalesDocs$ More
Design Electric
October 9, 2026
•[ ransomware, manufacturing, leak ]
Design Electric was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-10-09. Sector: Manufacturing. Design Electric is a company specializing in industrial, government & transportation electrical
in St. Cloud, MN.
We will upload 15gb of corporate data soon. Detailed employee information (passports, DLs of mo
re than 100 employees, about 350 SSN numbers, addresses, phones and so on), projects, lots of c
ontacts, client info, NDA and so on.
iDentalSoft
October 9, 2026
•[ ransomware, healthcare, technology ]
iDentalSoft was listed as a victim on the leak site of the termite ransomware group; the attack is estimated to have taken place on 2026-10-09. Sector: Healthcare. Country: Brazil. Website: www.identalsoft.com. iDentalSoft offers a cloud-based dental practice management software that is secure, modern, and designed for efficiency. The software provides comprehensive features such as smart scheduling, advanced clinical charting, and patient communication tools, making it suitable for both single and multi-practice management.
Ladrillera Mecanizada
October 9, 2026
•[ ransomware, manufacturing ]
Ladrillera Mecanizada was listed as a victim on the leak site of the arcusmedia ransomware group; the attack is estimated to have taken place on 2026-10-09. Sector: Manufacturing. Country: Mexico. Website: ladrillera.mx. ladrillera.mx/Ladrillera Mecanizada is the largest producer and exporter of 100% natural Deadline: 2026-10-16 12:44:00.000000
mblllp
October 9, 2026
•[ ransomware, finance ]
mblllp was listed as a victim on the leak site of the arcusmedia ransomware group; the attack is estimated to have taken place on 2026-10-09. Country: Canada. Website: mblllp.ca. mblllp.caOur objective at MBL LLP is simple: To always exceed the expectations of our cli Deadline: 2026-10-16 12:44:00.000000
AETHOS
October 9, 2026
•[ ransomware, leak, technology ]
AETHOS was listed as a victim on the leak site of the arcusmedia ransomware group; the attack is estimated to have taken place on 2026-10-09. Country: Brazil. Website: aethosconsultoria.com.br. Aethos Sistemas offers a comprehensive suite of software solutions designed to streamline Deadline: 2026-10-16 12:44:00.000000
Melchioni Spa
October 9, 2026
•[ ransomware, manufacturing ]
Melchioni Spa was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-09. Sector: Manufacturing. Country: Italy. Website: www.melchioni.com.
lopay
October 9, 2026
•[ ransomware, finance, technology ]
lopay was listed as a victim on the leak site of the Black X ransomware group; the attack is estimated to have taken place on 2026-10-09. Sector: Financial Services. Country: United Kingdom of Great Britain and Northern Ireland. Website: lopay.com. Lopay is a UK-based fintech company that provides a payment platform enabling small and medium-sized enterprises (SMEs) and sole traders to accept credit card and mobile payments, as well as manage their sales and settlements. This includes financial information belonging to client companies, such as customer payment details, card information, banking data, transaction history, and payment terminal information.
