Royal Thai Air Force
October 10, 2026
•[ ransomware, government, technology ]
Royal Thai Air Force was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-10. Sector: Government & Defense. Country: Thailand. Website: rtaf.mi.th. rtaf.mi.th is the official portal of the Royal Thai Air Force, one of Asia's oldest air forces (founded November 2, 1913; independent since 1937), with ~46,000 personnel and 11 combat wings, now running a modern Odoo-based portal publishing financial reports, procurement plans, and White Papers on its "Unbeatable Air Force" roadmap to 2037. Its fleet spans 46 F-16s, 11 Gripen C/D, 13 F-5TH Super Tigris, Saab 340 Erieye AEW&C, C-130s, and a VIP fleet including an ex-Thai Airways A340-500. In July 2025 the RTAF fought its first combat since 1988 in the Thai-Cambodian border conflict, with its Gripens achieving the type's first-ever combat weapons launch. The centerpiece modernization is the Gripen E/F program: Thailand signed the $550M "Peace Burapha 1" contract in August 2025 first in APAC with deliveries from 2029 and 8 more jets sought toward a 12-aircraft squadron by 2037. Air Chief Marshal Seksan Kantha, the 31st commander since October 2025
TEXMA International Co., Ltd
October 10, 2026
•[ ransomware, manufacturing ]
TEXMA International Co., Ltd was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-10-10. Sector: Manufacturing. Country: Taiwan. Website: texma.com.tw. TEXMA International Co., Ltd. is a leading Taiwanese apparel manufacturer specializing in high-quality women's woven apparel, activewear, and sportswear. Founded in 1975, the company operates under a "Taiwan orders, global production" business model, supplying some of the world's most recognizable fashion brands.
Goccia S.p.A.
August 3, 2026
•[ ransomware, manufacturing, retail ]
Goccia S.p.A. was listed as a victim on the leak site of the Majinahanashi ransomware group; the attack is estimated to have taken place on 2026-08-03. Sector: Manufacturing. Country: Italy. Website: gocciaspa.com. Goccia S.p.A. is a major Italian jewelry corporation headquartered in Cocconato, Piedmont, which owns the well-known retail chain and popular online store JOY Gioielli. The company is an official d...
KT RESTAURANT
July 2, 2026
•[ ransomware, retail, hack ]
KT RESTAURANT was listed as a victim on the leak site of the Majinahanashi ransomware group; the attack is estimated to have taken place on 2026-07-02. Sector: Hospitality. Website: ktrestaurants.com. KT Restaurant is a Thai restaurant operator, owner of the Santa Fe steakhouse chain in Bangkok, Thailand. The company was acquired by Boon Rawd Brewery (Singha Corporation) one of Thailand's larg...
BONJOUR GROUP
July 2, 2026
•[ ransomware, manufacturing ]
BONJOUR GROUP was listed as a victim on the leak site of the Majinahanashi ransomware group; the attack is estimated to have taken place on 2026-07-02. Sector: Other. Country: India. Website: bonjourgroup.net. Bonjour Group (brand BONJOUR) is India's largest socks manufacturing company. Founded in 1988. Headquartered in Greater Noida, Uttar Pradesh, India. Legal entity: Bonjour Group (privately held) Fou...
Friendship Christian School
October 11, 2026
•[ ransomware, education ]
Friendship Christian School was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-11. Sector: Education. Country: United States of America. Website: www.friendshipchristian.net.
Company #20
October 11, 2026
•[ ransomware, retail ]
Company #20 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-11. cannabis operator Michigan, USA | [PENDING EXPOSURE: data publishes 2026-10-13 09:40 UTC]
Company #21
October 11, 2026
•[ ransomware, healthcare ]
Company #21 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-11. neurology practice New South Wales, Australia | [PENDING EXPOSURE: data publishes 2026-10-13 12:37 UTC]
Canadian Mennonite University (CMU)
October 12, 2026
•[ ransomware, education ]
Canadian Mennonite University (CMU) was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Education. Country: Canada. Website: cmu.ca. Canadian Mennonite University (CMU) is a Christian institution in Winnipeg, Manitoba, offering undergraduate degrees in various fields such as arts, business, music, and sciences, along with three graduate degree programs. The university focuses on a small community environment that fosters academic, social, and spiritual growth, welcoming students from diverse backgrounds and beliefs. CMU emphasizes preparing students as skilled problem solvers and leaders committed to positive change in their communities and beyond. It offers financial aid and supports approximately 50% of its students through scholarships and bursaries
PIC GROUP, INC
September 15, 2026
•[ ransomware, energy, manufacturing ]
PIC GROUP, INC was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-09-15. Sector: Other. Country: United States of America. Website: picgroupinc.com. PIC Group, Inc. is dedicated to delivering value by providing Operation & Maintenance, Commissi
oning and Startup, Documentation & Training and Staffing services to the power generation, oil
and gas, petrochemical, pulp and paper and manufacturing industries globally.
We will upload 8gb of corporate data soon. Employee information, projects (drawings, specificat
ions), clients info, contracts and agreements and so on.
April Asia (port agency operations)
October 12, 2026
•[ ransomware, leak ]
April Asia (port agency operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: Indonesia. Port agency / logistics Indonesia | Container gate movement and damage management records | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
Samudera (coastal shipping operations)
October 12, 2026
•[ ransomware, leak ]
Samudera (coastal shipping operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: Indonesia. Coastal shipping Indonesia | Charter party records and dangerous-goods operational documentation | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
GCS Kuwait (port community system operations)
October 12, 2026
•[ ransomware, leak, technology ]
GCS Kuwait (port community system operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: Kuwait. Port community IT Kuwait | Container movement records and operational EDI archives | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
BNCT Busan New Container Terminal
October 12, 2026
•[ ransomware, leak ]
BNCT Busan New Container Terminal was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: South Korea. Port terminal operations South Korea | Operational EDI archives and internal database scripts | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
Tsuneishi / Kambara Kisen (shipbuilding and ship management)
October 12, 2026
•[ ransomware, manufacturing, leak ]
Tsuneishi / Kambara Kisen (shipbuilding and ship management) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Manufacturing. Country: Japan. Shipbuilding / ship management Japan | Operational EDI archives and commercial contract records | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
Polaris Shipping (dry bulk shipping)
October 12, 2026
•[ ransomware, financial ]
Polaris Shipping (dry bulk shipping) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: South Korea. Dry bulk shipping South Korea | Internal financial records (sales vouchers) and vessel operational reports | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
Portonave (container terminal operations)
October 12, 2026
•[ ransomware, leak, manufacturing ]
Portonave (container terminal operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: Brazil. Port terminal operations Brazil | Terminal operating system database material and operational EDI archives | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
Santos Brasil (port operations)
October 12, 2026
•[ ransomware, transportation ]
Santos Brasil (port operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: Brazil. Port terminal operations Brazil | Terminal operating system database scripts and operational records | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
brookslawfirm.com
October 12, 2026
•[ ransomware, leak, healthcare ]
brookslawfirm.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Professional Services. Country: United States of America. Website: brookslawfirm.com. personal data 8200 client hippa etc
Engineers Contractors Fabricators Inc. (ECF)
October 12, 2026
•[ ransomware, manufacturing, financial ]
Engineers Contractors Fabricators Inc. (ECF) was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Manufacturing. Country: United States of America. Website: https:ecfinc.net. ECF, Inc., a piping and insulation contractor specializing in the design and construction of terminals for the transshipment of liquid hydrocarbons such as asphalt, crude oil, and renewable fuels, has completely failed to ensure the security of its systems and is unwilling to compromise. Therefore, we are providing you with access to confidential information (proprietary pipeline designs, CAD drawings, customer lists, pricing models, financial data, employee information, and trade secrets), which violates the Complaints and Abuse Act (CFAA) and state civil liability laws and may result in injunctions, damages, fines, mandatory notices, class actions, loss of competitive advantage, and possibly termination of operations.
