Greentech Environmental
October 12, 2026
•[ ransomware, energy, manufacturing ]
Greentech Environmental was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Energy & Utilities. Website: https:greentechenv.com. Greentech Environmental LLC, a manufacturer of air purification systems using patented ODOGard and ARC technologies, has failed to fully secure and address the breach, and therefore we are publishing their confidential information such as (intellectual property/trade secrets, financial statements, employee data, operational/strategic plans, legal documents, corporate governance documents, and manufacturing drawings) that would violate the Defend Trade Secrets Act (CFAA) and state privacy laws, which would subject us to injunctive relief, treble damages, penalties, mandatory notification, class action lawsuits, loss of patent rights and competitive advantage, and possible business failure.
Rechtsanwaltskanzlei Dr. Bien
October 12, 2026
•[ ransomware, leak, finance ]
Rechtsanwaltskanzlei Dr. Bien was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Professional Services. Country: Germany. Website: Rechtsanwaltskanzlei Dr. Bien. [law] Rechtsanwaltskanzlei Dr. Bien a specialist insolvency law firm in Hamm, NRW, appointed as insolvency administrator by 12 Amtsgerichte across Westfalen.
The exposed material includes:
2,387 WinSolvenz case databases each a Microsoft Access MDB containing the complete financial dossier of an insolvency debtor: creditor lists, claim amounts, distribution plans, asset inventories, court appointments, and bank account details.
492+ forced administration (Zwangsverwaltung) case files property addresses, tenant data, rent records, utility accounts, insurance details, court-directed property management reports.
80 GB MailStore email archive the firm's complete email history in MailStoreContainer-v1 format: attorney-client communications, court correspondence, creditor negotiations, debtor disclosures.
1.7 GB beA backup (besonderes elektronisches Anwaltspostfach) three MSSQL database backups containing every electronic communication between the firm and every German court.
35 employee records 25 former + ~10 current staff: contracts, salary, overtime, vacation, pension, disability status, termination agreements.
DATEV tax/accounting archives 33 directories of income tax backups, insolvency accounting, third-party mandates.
RingSide Creative
October 12, 2026
•[ ransomware, technology ]
RingSide Creative was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Professional Services. Country: United States of America. Website: ringsidecreative.com.
AAA Architectural Hardware
October 12, 2026
•[ ransomware, manufacturing ]
AAA Architectural Hardware was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Manufacturing. AAA Architectural Hardware Co. has been a leader in architectural hardware for over 80 years, o
ffering a wide range of products and services including keying systems, electronic security, an
d custom design requests.
We will upload 64gb of corporate data soon. Employee information (name, address and so on), pro
jects, clients and partners info, NDAs and so on.
MarieBelle New York
October 13, 2026
•[ ransomware, retail, healthcare ]
MarieBelle New York was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-13. Sector: Retail & E-Commerce. Country: United States of America. confectionery & telehealth (US) New York, USA | Complete QuickBooks company file of a New York confectionery and luxury foods company: every transaction, customer, vendor and payroll record; Complete inventory database with product, cost and supplier data; Telehealth platform files and clinical system records from hospital partner infrastructure | [NOT PAID EXPOSED]
Zenidoc
October 13, 2026
•[ ransomware, healthcare, technology ]
Zenidoc was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-10-13. Sector: Professional Services. a French healthcare software company that helps hospitals and medical professionals automate documentation, transcribe medical dictation, manage patient records, and streamline workflows using AI and voice-recognition technology. Data Content : - 605k Patient Data, Names, Phone, SSN and more. - Zenidoc Cloud Dev, Data, Prod, Support Chats, Source Codes and more.
Admirals Trading
October 2, 2026
•[ ransomware, retail, finance ]
Admirals Trading was listed as a victim on the leak site of the AuditTeam ransomware group; the attack is estimated to have taken place on 2026-10-02. Sector: Financial Services. Country: United Arab Emirates. Admirals Trading LLC (admirals.ae) is a Dubai-based food and beverage company under the Saudi conglomerate Rashed Abdul Rahman Al Rashed & Sons Group, with over 20 years of experience in the UAE market, specializing in the distribution of 60+ international and local F&B brands, food manufacturing and processing, and third-party logistics services across retail, food service, van sales, and wholesale channels, having recently expanded its operations from the UAE into Saudi Arabia while also running an online store called "Buy Like Chefs."
Guarufilme
October 13, 2026
•[ ransomware, manufacturing ]
Guarufilme was listed as a victim on the leak site of the Vexy Ransomware ransomware group; the attack is estimated to have taken place on 2026-10-13. Sector: Other. Country: Brazil. Website: www.guarufilme.com.br. The company has operated in the packaging sector since 2006, manufacturing PVC and polyethylene films for domestic and industrial applications.
Matadero Frigorífico Avinyó
October 7, 2026
•[ ransomware, manufacturing ]
Matadero Frigorfico Aviny was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-07. Sector: Agriculture and Food Production. Country: Spain. Website: www.avinyo.net.
Qatar National Import & Export
October 7, 2026
•[ ransomware, retail, technology ]
Qatar National Import & Export was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-07. Sector: Other. Country: Qatar. Website: www.qnie.com.
Lumabuilt
July 8, 2026
•[ ransomware, manufacturing, leak ]
Lumabuilt was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-07-08. Sector: Manufacturing. Country: United States of America. Website: lumabuilt.com. [AI generated] N/A
I don't have reliable, verified information about a company called "Lumabuilt." Rather than provide potentially fabricated details about its industry, operations, or country, I'm flagging this as unknown. If you have additional context (website, location, sector) or if this is a fictional/test entity, please share details and I can help frame a description accordingly.
TheraCare
October 6, 2026
•[ ransomware, healthcare, leak ]
TheraCare was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Healthcare. Country: United States of America. TheraCare is a multi-service healthcare, rehabilitation, developmental, and educational organization founded in 1991 and headquartered in New York. The company provides clinical and educational services for children, families, and clients of different ages across New York, New Jersey, Connecticut, and Maryland. Its key services include early intervention, autism services, preschool and school-age programs, speech-language therapy, occupational therapy, physical therapy, special education, behavioral services, and school district staffing. TheraCare focuses on helping children reach their developmental and educational potential through individualized clinical and educational programs. The organization emphasizes quality assurance, continuous improvement, regulatory compliance, and measurable service outcomes.
The company headquarters is located in 1133 Westchester Avenue, Suite N-230, White Plains, NY 10604, United States. 201-500 Employees
Cooperative Des Techniciens Ambulanciers De La Monte
October 7, 2026
•[ ransomware, healthcare ]
Cooperative Des Techniciens Ambulanciers De La Monte was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-10-07. Sector: Healthcare. Country: Canada. CETAM is the largest employer in prehospital care in Montrgie, comprising over 400 ambulance technicians and paramedics. Founded in 1988, it operates on a cooperative model where all workers are members, allowing them to participate in decision-making and benefit from annual financial returns. The organization serves a wide territory, responding to nearly 20,000 calls annually across multiple municipalities. CETAM is dedicated to providing high-quality emergency medical services to the local population.
The company headquarters is located in 310 Rue Lawrence, Greenfield Park, QC J4V 2Z6, Canada. 201-500 Employees
DIPECARR
October 8, 2026
•[ ransomware, retail, automotive ]
DIPECARR was listed as a victim on the leak site of the Eclipse ransomware group; the attack is estimated to have taken place on 2026-10-08. Sector: Other. Country: Brazil. Website: www.dipecarr.com.br. Dipecarr is Brazil's top truck parts distributor, founded in 1994 by Adilson Jos de Almeida. With over 10,000 items ready to ship and partnerships with world-known brands, they serve 80,000 customers across seven branches in key Brazilian states. The company offers everything a truck owner needs, focusing on quality service and continuous growth.
Boullard Musique
October 8, 2026
•[ ransomware, retail ]
Boullard Musique was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-10-08. Sector: Retail & E-Commerce. Country: Switzerland. Website: boullard.ch. Boullard Musique (boullard.ch) is one of Switzerland's premier specialty retailers of musical instruments and audio gear, founded in Morges in 1979. The company operates a dedicated physical showroom alongside an extensive e-commerce platform offering acoustic instruments, electronic gear, and accessories. Beyond retail, they provide comprehensive instrument rentals, maintenance, and expert repair services through their on-site workshops.
FSE, Cairo University
October 8, 2026
•[ ransomware, education ]
FSE, Cairo University was listed as a victim on the leak site of the UmBra ransomware group; the attack is estimated to have taken place on 2026-10-08. Sector: Education. Country: Egypt. FSE, Cairo University Leading Egypts future in arts, music, media, and creative education excellence.
Manipal Academy of Higher Edu
October 8, 2026
•[ ransomware, education ]
Manipal Academy of Higher Edu was listed as a victim on the leak site of the UmBra ransomware group; the attack is estimated to have taken place on 2026-10-08. Sector: Education. Country: India. Website: manipaldubai.com. MAHE Indias global private university excelling in Medicine, Engineering, Business, and Research with 28,000+ students from 57 nations.
dipecarr.com.br
October 8, 2026
•[ ransomware, manufacturing ]
dipecarr.com.br was listed as a victim on the leak site of the Eclipse ransomware group; the attack is estimated to have taken place on 2026-10-08. Sector: Manufacturing. Country: Brazil. Website: dipecarr.com.br. [AI generated] N/A
I don't have reliable, verifiable information about a company operating at "dipecarr.com.br." I'm unable to confirm its business activities, industry classification, or operational details with confidence. Providing fabricated details about an unfamiliar domain could result in inaccurate threat intelligence. If you have additional context or source material about this entity, I'd be glad to help analyze it.
SOCOCO
October 8, 2026
•[ ransomware, technology, leak ]
SOCOCO was listed as a victim on the leak site of the UmBra ransomware group; the attack is estimated to have taken place on 2026-10-08. Sector: Technology. Country: Brazil. SOCOCO A Brazilian mid-sized food company with 40 employees, blending tradition and modern marketing through WordPress-driven platforms.
INAPI
July 13, 2026
•[ ransomware, government, technology ]
INAPI was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-07-13. Sector: Technology. Country: Algeria. Website: www.inapi.cl/en/about-inapi/inapi. [AI generated] N/A
INAPI commonly refers to Chile's Instituto Nacional de Propiedad Industrial (National Institute of Industrial Property), a Chilean government agency responsible for registering trademarks, patents, and other industrial property rights. However, I cannot confirm with certainty that this is the specific entity you are referencing, as there may be other organizations using this name, and I lack sufficient verified detail to provide a confident, accurate profile without risking inaccuracy.
