TLC Perinatal
September 30, 2026
•[ ransomware, healthcare ]
TLC Perinatal was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Healthcare. Country: United States of America. Website: tlcperinatal.com. A provider of healthcare services.
Graybar Electric Company, Inc.
October 1, 2026
•[ ransomware, manufacturing ]
Graybar Electric Company, Inc. was listed as a victim on the leak site of the Redact ransomware group; the attack is estimated to have taken place on 2026-10-01. Sector: Manufacturing. Country: United States of America. Sector: Electrical Equipment | Revenue: $11B USD
DPL Group
October 1, 2026
•[ ransomware, retail, leak ]
DPL Group was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-10-01. Sector: Other. DPL Group Ltd. is a supplier of building materials and home improvement products, offering a wi
de range of items including timber sheet materials, heating, plumbing, hand tools, and fixings.
The company also provides doors, floors, stairs, electrical supplies, and decorating materials
.
We will upload 8gb of corporate data soon. Employee personal documents (passports, DLs, medical
information), financials, lots of projects, customer information and so on.
DISK PRECISION GROUP - diskprecision.com
October 1, 2026
•[ ransomware, manufacturing, hack ]
DISK PRECISION GROUP - diskprecision.com was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-10-01. Sector: Manufacturing. Country: Singapore. Website: DISK PRECISION GROUP - diskprecision.com. - Disk Precision Industries Pte Ltd (Singapore, est. 1986)
- Spacetech Industrial Pte Ltd (Singapore)
- Niteac Eng...
Sangre de Cristo Electric Association
October 1, 2026
•[ ransomware, energy, leak ]
Sangre de Cristo Electric Association was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-10-01. Sector: Energy & Utilities. Country: United States of America. Website: myelectric.coop. Sangre de Cristo Electric Association (SDCEA) has been informed that a substantial volume of sensitive information has been compromised. The affected information includes customer personally identifiable information, financial and payment data, utility account information, and information associated with the organizations energy infrastructure and operational technology environment.
The information includes details concerning electrical distribution infrastructure, substations, transformers, feeders, operational systems, renewable-generation assets, outage information, and SCADA/EMS-related environments. The compromise data also include highly sensitive authentication and security information, including control-system credentials, API keys, and OT security configurations.
We previously proposed resolving the incident through a peaceful and confidential process. According to our account, negotiations were subsequently discontinued after SDCEA CEO Jon Beyer indicated that the organization had decided to end discussions. As a result, we are issuing this public statement concerning the incident.
In addition, we will take further disruptive actions to ensure that, in the future, those responsible for making these decisions approach the security of the resources entrusted to themincluding the people within their area of responsibilitywith greater awareness and seriousness.
PT Indo Tambangraya Megah
September 12, 2026
•[ ransomware, leak, energy ]
PT Indo Tambangraya Megah was listed as a victim on the leak site of the ransomhouse ransomware group; the attack is estimated to have taken place on 2026-09-12. Sector: Energy & Utilities. Country: Indonesia. Website: www.itmg.co.id. PT Indo Tambangraya Megah, founded in 1987, is a leading coal producer based in Asia. The company focuses on maintaining high standards in corporate governance, environmental practices, and workplace safety. PT Indo Tambangraya Megah operates with a commitment to collaboration with local communities and stakeholders. The company has established a diverse customer base in the mining industry and offers various services related to coal production.
Pacific Tank Lines
September 26, 2026
•[ ransomware, financial ]
Pacific Tank Lines was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-09-26. Sector: Transportation. Country: United States of America. Website: pacifictanklines.com. Pacific Tank Lines, Inc. is a premier full-service petroleum carrier focused on safety and cust
omer service. They offer reliable petroleum cargo services with a professional team of drivers
and efficient dispatchers. The company operates a modern fleet aimed at reducing their carbon f
ootprint and has received multiple awards for their service excellence.
We will upload 13gb of corporate data soon. Detailed personal information of 118 employees (pas
sports, DLs, addresses, phones, payment details and so on), financials, clients and so on.
Mat Bao Corporation
October 2, 2026
•[ ransomware, technology, government ]
Mat Bao Corporation was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-10-02. Sector: Technology. Country: Vietnam. Mat Bao Corporation Mat Bao Corporation offers a range of services including domain registration, cloud hosting, professional email solutions, and cloud server storage. Files: 746,108Data volume: 106.8 GBGovernment inspection materials - NEAC inspection decision No. 61/QD (29.04.2025) against the certification authority, working minutes naming state inspectors and company staff (through December 2025).Corporate core - GPKD business-registration documents bearing the owner's signature, shareholder records, tax commitments (January 2026).Personal data - national ID cards (CCCD) and employee passports with signatures, staff lists.Regulator correspondence - VNNIC, NEAC, the Government Cipher Committee (including RSA-1024 token vulnerabilities).Litigation and operations - the VINASEED dispute, internal investigations, operations-department mail. More
The Official Collegeof Architects of León (COAL)
October 3, 2026
•[ ransomware, leak, financial ]
The Official Collegeof Architects of Len (COAL) was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-10-03. Sector: Professional Services. Country: Mexico. The Official College of Architects of Len (COAL) was established on July 12, 1931, encompassi
ng the regions of Len, Asturias, and Galicia. The College of Galicia was legally separated in
1973 and the College of Asturias in 1981.
Here is the access to 77gb of corporate data. Detailed personal information (passports), finan
cials, students and clients information and so on.
Click the download button.
You will find several password-free archives. Click on any of them to start the download.
Westrop Primary & Nursery School
October 2, 2026
•[ ransomware, education ]
Westrop Primary & Nursery School was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-02. Sector: Education. Country: United Kingdom of Great Britain and Northern Ireland. Website: westropprimaryschool.co.uk. westropprimaryschool.co.uk Westrop Primary & Nursery School is a state-funded community school in Highworth, Swindon (Wiltshire, UK), founded in 1969, serving children aged 211. It currently has ~380 enrolled students (capacity 495), with 18.6% on free school meals and 16.3% on SEN support. The school employs ~47 staff (15 teachers + 32 teaching assistants, 20:1 student-teacher ratio) under Headteacher Cindy Acres (since 2018). Annual income is approximately 2 million (~5,461 per pupil), with a healthy 75K surplus and ~100K reserves. Rated "Good" by Ofsted (October 2022, maintained since 2012), though 2024/25 exam results showed weaker math progress and 0% at higher standards compared to strong 2018/19 performance. It runs 11 primary classes plus a three-room nursery and is known for its Forest School program and strong pupil premium support.
St. Francis Healthcare Systems of Hawaii
October 3, 2026
•[ ransomware, healthcare ]
St. Francis Healthcare Systems of Hawaii was listed as a victim on the leak site of the Wallstreet ransomware group; the attack is estimated to have taken place on 2026-10-03. Sector: Healthcare. Country: United States of America. Website: stfrancishawaii.org. St. Francis Healthcare System of Hawaii is a Catholic, nonprofit healthcare organization that has served Hawaii families since 1927
Cotesma
October 4, 2026
•[ ransomware, manufacturing ]
Cotesma was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-04. Sector: Manufacturing. Country: Chile. Website: www.cotesma.coop.
METROCOLOR S.A.
October 5, 2026
•[ ransomware, manufacturing, technology ]
METROCOLOR S.A. was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-10-05. Sector: Manufacturing. A Peruvian company from the printing industry.
Commercial printing, packaging, labels, boxes, books,
magazines, booklets and promotional products.
The archives contain several thousand documents with personnel and customer data. [Sector: Manufacturing, Technology]
stuecheli.ch
October 5, 2026
•[ ransomware, retail, technology ]
stuecheli.ch was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-10-05. Sector: Retail & E-Commerce. Country: Switzerland. Website: stuecheli.ch. The firm was founded by architect Werner Stcheli in 1946 and has developed into a third-generation architectural practice. It is
Circulating Air
September 5, 2026
•[ ransomware, manufacturing ]
Circulating Air was listed as a victim on the leak site of the VYPR ransomware group; the attack is estimated to have taken place on 2026-09-05. Sector: Manufacturing. Country: United States of America. Website: www.circulatingair.com. Circulating Air, Inc. specializes in HVAC services in Los Angeles and surrounding areas, offering quality repair, installation, and maintenance for heating and cooling systems. They provide a comprehensive range of services including air conditioning, heating, indoor air quality, and commercial HVAC solutions. The company caters to both residential and commercial clients, ensuring efficient and reliable service for various HVAC systems. With a commitment to customer satisfaction, Circulating Air, Inc. is dedicated to improving indoor comfort and air quality.
Philander Smith University
October 6, 2026
•[ ransomware, education, financial ]
Philander Smith University was listed as a victim on the leak site of the EndZone ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Education. Country: United States of America. Website: philander.edu. Revenue: $25.3 million annual
Philander Smith University is a private, historically Black liberal arts institution in Little Rock, Arkansas, founded in 1877 and affiliated with the United Methodist Church. They provide undergraduate and graduate education with a focus on academic excellence, social justice, and leadership development for a diverse student body. We successfully exfiltrated 500GB+ worth of data which includes VERY confidential information about students and staff, as well as financial information. Alongside, we have encrypted files across the entire network.
Delta Marine
October 6, 2026
•[ ransomware ]
Delta Marine was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Transportation. Country: Finland. Website: www.deltamarine.com.
SweetRush
October 6, 2026
•[ ransomware, technology ]
SweetRush was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Professional Services. Country: United States of America. Dream for a moment that you have the expertise and tools to positively impact the lives of others. You can affect mindsets and behavior. You can help an organization grow, change, prosper, and thrive. The passionate pursuit of this expertise and the development of these tools have been at the heart of the success SweetRush has experienced collaborating with clients who share the same dream. SweetRush's focus on team culture and mastery of performance improvement is reflected in loyal clients, a near-zero turnover of teammates, an 18-year track record of success, and a remarkable portfolio. Our work with clients has earned us gold awards from our peers and high ranking on the top training industry lists. Every solution we deliver is infused with creativity. Instructional creativity allows us to discover effective and unique solutions to our clients' challenges. Artistic creativity spurs us to create visually exciting, engaging user experiences. Technical creativity allows us to embrace.
EPTISA
October 7, 2026
•[ ransomware, technology ]
EPTISA was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-07. Sector: Professional Services. Country: Spain. Website: www.eptisa.com.
Leadec
October 7, 2026
•[ ransomware, manufacturing ]
Leadec was listed as a victim on the leak site of the anubis ransomware group; the attack is estimated to have taken place on 2026-10-07. Sector: Manufacturing. Country: Germany. Will they allow this leak to happen?