Evosys Laser GmbH
July 30, 2026
•[ ransomware, manufacturing, technology ]
Evosys Laser GmbH was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-07-30. Sector: Manufacturing. Country: Germany. [manufacturer] Evosys Laser GmbH an Erlangen-based industrial laser welding systems manufacturer with ~130 employees, subsidiaries in the US, China, and a string of Tier 1 automotive customers.
The dataset is the complete corporate repository, spanning every business function:
130 employees' complete HR files employment contracts, salary histories, bank IBANs, tax IDs, social insurance numbers, pension records, medical examinations, disciplinary warnings, and two confirmed minors' health records.
Complete server infrastructure map via mRemoteNG XML 7 servers named, domain admin credentials, internal IPs. The Citrix admin password is Password1.
326 GB of customer project data laser welding process parameters, CAD files, robot control software, and the award-winning AQW process know-how.
Complete financial history Jahresabschlsse (20152025), P&L forecasts through 2028, cash positions, investor documents, executive compensation.
Attorney-client privileged communications (230 MB) and whistleblower reports under HinSchG.
Industrial control data robot SRS source code, PLC programs, nginx private keys for laser system web interfaces, VPN configurations for customer site remote access.
Total Auto Business Solutions
July 31, 2026
•[ ransomware, technology, automotive ]
Total Auto Business Solutions was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-07-31. Sector: Transportation. Country: United States of America. Website: autorepairsoftware.com. autorepairsoftware.com Total Auto Business Solutions, Inc. (TABS) is a leading provider of comprehensive shop management software, best known for its flagship product, AutoFluent. Founded in 2001 and based in Northern California, the company serves auto repair shops, tire dealers, and fleet operators across the US and Canada. Their all-in-one platform streamlines daily operations by seamlessly integrating scheduling, inventory management, accounting, and customer relationship tools into a single, user-friendly system
Preferred
July 31, 2026
•[ ransomware, manufacturing, technology ]
Preferred was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-07-31. Country: United States of America. Website: preferredtool.com. preferredtool.com Preferred Tool & Die is a precision manufacturing company based in Shelton, Connecticut, specializing in custom metal and plastic injection molds as well as complex stamped components. The company serves demanding sectors, including the medical, electrical, consumer products, and automotive industries. Holding ISO and FDA registrations, they are committed to delivering high-quality, reliable, and innovative manufacturing solutions tailored to exact client specifications
Kosh Innovations
July 31, 2026
•[ ransomware, manufacturing, technology ]
Kosh Innovations was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-07-31. Website: koshinnovations.com. koshinnovations.com zoominfo.com/c/kosh-innovations/369426368 Kosh Innovations, established in 2008 in Pondicherry, India, is a leading manufacturing solutions provider specializing in precision engineering, plastic moulding, sheet metal components, and electronic manufacturing services (EMS). Certified with IATF 16949 and multiple ISO standards, the company serves diverse sectors including automotive, consumer durables, green-tech, and healthcare. With a strategic presence across six locations in India, Kosh Innovations is committed to delivering customized, sustainable, and high-quality products through a customer-centric and innovative approach
HYUNDAI
July 31, 2026
•[ ransomware, automotive, manufacturing ]
HYUNDAI was listed as a victim on the leak site of the CRPxO ransomware group; the attack is estimated to have taken place on 2026-07-31. Sector: Manufacturing. Country: South Korea. Website: hyundai.com. Sector: Automotive | Data leaked: 1.5 GB
National Industries
June 1, 2026
•[ ransomware, manufacturing, automotive ]
National Industries was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-06-01. Sector: Manufacturing. Country: India. Website: nationalindustries.in. ***.in ***.com/c/national-industries/453107978 Established in 1976 in Ludhiana, National Industries is a premier automotive manufacturing enterprise and a core part of the esteemed Metalman Group. Specializing in precision-engineered components, the company supplies high-quality parts to top-tier two-wheeler brands, combining decades of expertise with modern manufacturing excellence. With a strong foundation in engineering innovation and award-winning workplace practices, National Industries continues to drive reliability and technological advancement in the automotive sector
Brian Jessel BMW
June 1, 2026
•[ ransomware, retail, automotive ]
Brian Jessel BMW was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-06-01. Sector: Retail & E-Commerce. Country: United States of America. Website: brianjesselbmw.com. ***.com ***.com/c/brian-jessel-bmw/347467232 Established in 1986, Brian Jessel BMW is one of Canada's premier luxury automotive dealerships, proudly located in Vancouver, British Columbia. Recognized as a top-tier retailer for both new and pre-owned vehicles, the company offers an extensive selection of BMW models alongside expert financing and comprehensive service solutions. With a dedicated team of over 200 professionals, they have built a decades-long legacy of delivering exceptional customer experiences and automotive excellence
Integrated Distribution
June 8, 2026
•[ ransomware, manufacturing, automotive ]
Integrated Distribution was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-06-08. Sector: Transportation. Country: United Kingdom of Great Britain and Northern Ireland. Website: int-dist.com. ***.com zoominfo.com/c/integrated-distribution-inc/348479499 ntegrated Distribution Inc. is a prominent industrial distributor based in Comstock Park, Michigan, serving local manufacturers since 1998. The company specializes in fast-response sourcing, technical support, and the supply of critical components such as bearings, belts, motors, and power transmission parts. With a strong focus on minimizing equipment downtime, IDI provides tailored industrial solutions for diverse sectors, including automotive, food processing, and packaging
Lösing Filtertechnik
May 13, 2026
•[ ransomware, leak, manufacturing ]
Lsing Filtertechnik was listed as a victim on the leak site of the spacebears ransomware group; the attack is estimated to have taken place on 2026-05-13. Sector: Manufacturing. Country: Germany. Website: loesing-filter.de. Lsing Filtertechnik (Willibrord Lsing Filtertechnik e.K.) is a leading German specialist in filtration technology with more than 70 years of experience since its founding in 1955.The company offers a wide range of high-quality filters, including oil, air, fuel, hydraulic, and water filtration solutions, along with custom-tailored products for various industries such as automotive, commercial vehicles, construction machinery, rail transport, and more.Known for its expertise with brands like SEPAR and a strong focus on innovation, Lsing develops individual solutions precisely matched to customer requirements while maintaining top quality and reliable service.Headquartered in Hattingen, Germany, the company serves both B2B clients and private customers through its online shop, emphasizing perfect filtration for every challenge. https://***.de/
Did Asia
June 12, 2026
•[ ransomware, automotive, manufacturing ]
Did Asia was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2026-06-12. Country: Thailand. Website: didasia.co.th. Automotive Parts
anglomoil.com
June 15, 2026
•[ ransomware, manufacturing, energy ]
anglomoil.com was listed as a victim on the leak site of the BrainCipher ransomware group; the attack is estimated to have taken place on 2026-06-15. Sector: Energy & Utilities. Country: United Kingdom of Great Britain and Northern Ireland. Website: anglomoil.com. [AI generated] Anglomoil is an Australian company specialising in the manufacture and supply of lubricants and associated products. Operating in the industrial and automotive lubricant sector, it serves mining, transport, agriculture, and general industry markets. Headquartered in Australia, the company produces engine oils, greases, hydraulic fluids, and specialty lubricants, distributing products nationally and to select international markets.
Dosab
June 20, 2026
•[ ransomware, manufacturing, automotive ]
Dosab was listed as a victim on the leak site of the nova ransomware group; the attack is estimated to have taken place on 2026-06-20. Sector: Manufacturing. Country: Saudi Arabia. Demirta Organize Sanayi Blgesi (DOSAB) provides a range of services including waste water treatment, energy supply, and social facilities to support its industrial clients. The region hosts over 573 active companies and employs around 44,000 people, focusing on sectors such as automotive and textile. DOSAB is committed to sustainability and offers various online services and resources for its members. The organization also emphasizes social responsibility through community engagement and educational initiatives - Nova Provide tree and samples from stolen data to the company when its get in touch with support department.
ford.mx
June 28, 2026
•[ ransomware, manufacturing, automotive ]
ford.mx was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-06-28. Sector: Manufacturing. Country: Mexico. Website: ford.mx. Ford Motor Company, S.A. de C.V. (Ford de Mexico) is the Mexican subsidiary of Ford Motor Company (USA), the first autom...
youX / Drive IQ
May 1, 2026
•[ ransomware, technology, automotive ]
youX / Drive IQ was listed as a victim on the leak site of the fulcrumsec ransomware group; the attack is estimated to have taken place on 2026-05-01. Sector: Technology. Country: Australia. Website: youxpowered.com.au. [AI generated] youX, formerly known as Drive IQ, is an Australian technology company specializing in connected vehicle data and mobility intelligence. The company collects and analyzes telematics and driving behavior data to deliver insights for insurers, fleet operators, and automotive businesses. Its platform enables usage-based insurance and risk assessment solutions. youX operates primarily in Australia and positions itself within the insurtech and automotive data analytics sectors.
Tuopu
May 2, 2026
•[ ransomware, manufacturing, automotive ]
Tuopu was listed as a victim on the leak site of the blackwater ransomware group; the attack is estimated to have taken place on 2026-05-02. Sector: Manufacturing. Country: China. Website: tuopu.com. Founded in 1983 and headquartered in Ningbo, China, Ningbo Tuopu Group Co., Ltd. is a multipurpose enterprise specializing in R&D, manufacturing, and sales of auto parts
Lexus
May 4, 2026
•[ ransomware, manufacturing, automotive ]
Lexus was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-04. Sector: Manufacturing. Country: Ukraine. Website: www.lexus.ua.
Clark Fixture Technologies
May 6, 2026
•[ ransomware, manufacturing, automotive ]
Clark Fixture Technologies was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-06. Sector: Manufacturing. Country: United States of America. Website: clarkfixtures.com. clarkfixtures.com zoominfo.com/c/clark-fixture-technologies-inc/31954083 Clark Fixture Technologies, Inc. is a privately held American manufacturer founded in 1978, headquartered at Bowling Green, Ohio, with an estimated annual revenue of $42.9 million and a staff of 51200 employees. The company designs, manufactures, and inspects quality check fixtures and gages for bent tube, hose, wire, and weld products, serving industries including automotive, aerospace, space, medical, and agriculture. Clark Fixtures operates globally with facilities in the US, Mexico (Saltillo), and India (Bangalore), servicing clients across 11 countries, including a prestigious roster of aerospace and space clients who rely on its orbital weld tooling for propulsion and life support assemblies. It also offers CMM inspection services and advanced automated robotic cell fixture solutio
dosocho.es
May 17, 2026
•[ ransomware, retail, automotive ]
dosocho.es was listed as a victim on the leak site of the m3rx ransomware group; the attack is estimated to have taken place on 2026-05-17. Country: Spain. Website: dosocho.es. +34 918 264 028. Recambios Generales del Automvil Dosocho S.L. is a Madrid-based Spanish company specializing in the retail and e-commerce distribution of brand-new automotive spare parts and accessories. Operating through its dedicated platforms like dosochoauto.es, the company provides a comprehensive catalog of high-quality components tailored for various vehicle repairs and maintenance Stolen: 50gb 28k files
TRANSSYSTEM Group
May 24, 2026
•[ ransomware, manufacturing, automotive ]
TRANSSYSTEM Group was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-24. Sector: Transportation. Country: Poland. Website: transsystem.pl. transsystem.pl Polish engineering powerhouse with 30+ years of expertise in designing and manufacturing advanced technological transport systems and steel structures. Delivers turnkey intralogistics solutions for automotive, tire, and industrial sectors, with 200+ successful projects across 30+ countries worldwide. Trusted by global leaders including Tesla, Goodyear, Michelin, Continental, and KUKA for innovation, precision, and operational excellence
PILLER AIMMCO
May 25, 2026
•[ ransomware, manufacturing, technology ]
PILLER AIMMCO was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-05-25. Sector: Manufacturing. Country: United States of America. Website: pilleraimmco.com. PILLER AIMMCO is a leading vertically integrated custom plastic injection molding and tool-making company based in Woodland and Washougal, Washington. The company serves as a "one-stop shop" by managing the entire manufacturing lifecycle under one rooffrom initial part design and engineering to mold production, automated high-volume manufacturing, and secondary assembly.
PILLER AIMMCO holds ISO 9001:2015 certifications across both its tooling and molding operations, enabling it to support rigorous industrial regulations:
1. Medical Devices & Biotech: Fluid management components, orthodontic instruments, and lab devices that meet FDA, biocompatibility, and sterilization metrics.
2. Aerospace & Defense: Specialized tooling, gauges, fixtures, and finished components requiring absolute traceability.
3. Consumer Electronics: Complex enclosures, wearable technology components, and carbon-fiber-filled metal replacements.
4. Industrial & Agriculture: Heavy-duty commodities, nursery containers, large housings, and automotive/heavy trucking aftermarket parts
