www.viehhauser-kfz.at
October 29, 2026
•[ ransomware, automotive ]
www.viehhauser-kfz.at was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-10-29. Sector: Transportation. Country: Austria. Website: www.viehhauser-kfz.at. Viehhauser KFZ GmbH & Co KG is an Austrian family-owned automotive dealership and service center founded on March 20, 19...
FPT Software
October 27, 2026
•[ ransomware, technology, automotive ]
FPT Software was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Technology. Country: Vietnam. Website: fptsoftware.com. fptsoftware.com FPT Software is the largest IT services company in Southeast Asia, founded in 1999 in Hanoi with 1.34 billion dollars in revenue and over 33,000 employees across 31 countries. It serves 1,100 clients including 130 Fortune Global 500 companies across automotive, banking, healthcare and energy, with Japan as its largest international market. Its AI-first strategy uses the FleziPT platform delivering 30 percent productivity gains, with AI and data services growing 60 percent in 2026. In 2025 it signed a record 256 million dollar AI transformation deal and secured 26 projects above 10 million dollars. Strategic partnerships span NVIDIA, Microsoft, SAP, AWS and OpenAI. Key strengths are unmatched scale from Vietnam, deep AI capabilities and a 152,000 strong education talent pipeline.
Pure Perfection
October 26, 2026
•[ ransomware, retail, automotive ]
Pure Perfection was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Retail & E-Commerce. Country: United States of America. Website: pureperfection.com. pureperfection.com Pure Perfection GmbH is a German live communication agency founded in 2008 in Wiesbaden, ranked number one in the 2026 BlachReport German Event Creativity Ranking ahead of insglck and Vok Dams. With 72 to 80 employees across offices in Wiesbaden, Berlin, Dsseldorf and Florida, it delivered 133 events in 2025, with 90 of them abroad including Shanghai, Miami and Singapore. Led by co-founders Jan Rogozinski and Kim Meisinger, the agency works through three units: Pure Live for events, Pure Space for brand spaces and architecture, and Pure Content for storytelling and PR. Major clients include Audi, KODA, L'Oral, Bentley and Nestl, with pharma being its largest vertical at 90 events per year. Revenue peaked at 26.4 million euro in 2023 and the agency won 60 MUSE Creative Awards in 2026 alone.
Trade Union Co
October 26, 2026
•[ ransomware, hack, automotive ]
Trade Union Co was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Other. Country: United States of America. Website: tradeunionco.com. tradeunionco.com tuc-dxb.com Trade Union Co. is a family-owned automotive spare parts wholesaler and retailer founded in 1960 in Beirut, Lebanon, with over 65 years of experience serving customers across the Middle East, Africa, Europe, Asia and the Americas. The group operates through its Beirut headquarters and The Trade Union International LLC in Dubai, a 5000 square meter global re-export hub established in 2007 with offices also in Germany, Russia and Nigeria. With over 150 employees and 20 plus international aftermarket brands including Bosch, Mahle, ZF and Sachs, it supplies parts for European, Japanese and American passenger and commercial vehicles. Led by CEO Walid El Bissani and Head of Strategy Tarek Jamil, the company is a member of NEXUS Automotive International, the world's largest automotive distribution community. It regularly exhibits at Automechanika Dubai and Frankfurt, showcasing its growing brand portfolio and global logistics network.
Meleghy Automotive & Cie. GmbH
October 28, 2026
•[ ransomware, manufacturing, automotive ]
Meleghy Automotive & Cie. GmbH was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-10-28. Sector: Manufacturing. Country: Germany. Website: Meleghy Automotive & Cie. GmbH. [automotive] The exposed material includes:
Passport/visa/student-admission dossiers
Tesla Model Y/Opal tooling, CAD and DFM tree
Employee contract and HR folders
MEB/BMW NCAR metrology and plant-layout trees
PLC/SPS/robot backups and cross-reference DBs
TISAX/IATF audit and corrective-action records
Restricted management meeting/WLAN record
Browser profile SQLite databases
Grupo Ciosa, SAPI de CV
October 30, 2026
•[ ransomware, hack, automotive ]
Grupo Ciosa, SAPI de CV was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Other. Country: Mexico. Website: www.ciosa.com.
광명산업(주)
September 1, 2026
•[ ransomware, manufacturing, automotive ]
() was listed as a victim on the leak site of the BlackLocks ransomware group; the attack is estimated to have taken place on 2026-09-01. Sector: Manufacturing. Country: South Korea. Website: kmin.co.kr. Kwangmyung Industry is a manufacturing company established in 1985 that produces automotive parts, including automotive seats, molds, and jigs.
Domestic operations consist of the headquarters, the Cheonan Central Research Institute, Asan, Gwangju, and Gyeongju factories, as well as the Export Division and Kwangmyung Engineering.
Overseas subsidiaries include facilities in Ramos, Mexico, and Alabama, USA.
United Group
September 7, 2026
•[ ransomware, manufacturing, retail ]
United Group was listed as a victim on the leak site of the Vexy Ransomware ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Other. Country: India. Website: united-group.in. United Group is a diversified Indian business group delivering innovative products and services across multiple industries. Founded in 2003, the company began as a food and beverage consultancy and has since expanded into food ingredients, nutraceuticals, industrial machinery, infrastructure, fashion, digital branding, packaging, and automotive accessories. With a strong focus on quality, innovation, and customer satisfaction, United Group operates through a network of specialized businesses, serving clients across India and international markets. Backed by certified manufacturing facilities and experienced professionals, the group is committed to providing reliable, sustainable, and value-driven solutions that support business growth and long-term success.
Zanini
September 7, 2026
•[ ransomware, manufacturing, automotive ]
Zanini was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Manufacturing. Country: Brazil. Website: zanini.com. zanini.com zoominfo.com/c/zanini/359207305 Zanini is the global market leader in automotive wheel trim a Spanish family firm founded in 1965 in Barcelona, owned by the Torras family since 1976, with 1,800 employees across 12 plants on 3 continents. It makes 1 in 4 wheel covers sold worldwide (~100M units/year) for virtually every major OEM, plus grilles, emblems, EV charge-port covers and pedestrian airbag parts. Its strategic pivot: radar-transparent, heated & illuminated front emblems (radomes) first launched on VW Atlas, now featured on the new Mercedes CLA (2025) the key sensor window for the autonomous-driving era. Proprietary tech: ZANICHROME metallization (chrome-look without chrome, "night & day" effects, electromagnetic transparency) + 17 patent families and TactoTek IMSE license (2024). Funded privately (81.5M debt raise, Oct 2025), chairman Joan Miquel Torras, CEO Jordi Torras (twice a Dakar Rally racer).
Nile Projects Trading
September 7, 2026
•[ ransomware, retail, automotive ]
Nile Projects Trading was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Other. Country: Egypt. Website: nileprojects.com. nileprojects.com zoominfo.com/c/nile-projects--trading-co/357370722 Nile Projects & Trading is a private Egyptian holding founded in 1972 by Ossama El-Naggar, HQ'd in Giza/Cairo with 3,000+ employees, 750,000+ customers and 6 offices across Egypt and Jordan. It's Egypt's exclusive Bridgestone importer (since 1990) running 50+ Fit & Fix service centers plus unique mobile tire vans and the country's luxury fashion franchise king: Burberry, Ferragamo, BOSS, Calvin Klein, Polo Ralph Lauren, Sandro, Maje (launched Jordan), Kenzo, plus Matalan for mass market and Amorino/Eichholtz/TIMEVALLE in F&B, furniture and watches. Over 50+ years it has introduced 80+ international brands to Egypt and the Middle East, pioneering retail after the 2004 import opening. Key strengths: fully self-financed (no external debt), its own ERP software, owns the malls it anchors (Katameya Downtown), and a 2bn+ EGP credit line recently winning Bridgestone's global Toolbox award 2025.
Mefa Group www.mefagroup.com.tr / MEFA Endüstri www.mefaendustri.com / and (Efachem, Eco...
August 25, 2026
•[ ransomware, manufacturing, automotive ]
Mefa Group www.mefagroup.com.tr / MEFA Endstri www.mefaendustri.com / and (Efachem, Eco... was listed as a victim on the leak site of the blacknevas ransomware group; the attack is estimated to have taken place on 2026-08-25. Sector: Manufacturing. Country: Turkey. Website: mefagroup.com.tr. https://send.exploit.in/#37608d72633301fc62801dfdf9111dbe!BsYvGiQz6WmjZo1VvPwTi8lU2K7prrPY2q6CdMORZn0List of files. For details and cooperation, write to Telegram https://t.me/BlackNevas or email happyCarter@mail.com.MEFA Group is a Turkish industrial group (headquartered in Ankara), founded in 2006. It operates in industrial manufacturing, plastics, rubber, processing, and logistics. The group has over 115,000 m of production space, over 2,000 employees, and several facilities in Turkey, Romania, and Poland. Its main areas of focus are the automotive industry, white goods, and related industries.MILKRUN Milkrun Lojistik, the group's logistics division. It provides integrated and smart logistics solutions for group companies and partners (focusing on efficiency, digitalization, and sustainability). It is not the Australian grocery delivery service of a similar name.Efachem, a division specializing in plastic and rubber compounds (compound solutions), develops customized formulas to meet customer needs, ensuring compatibility with production processes and consistent quality.Ecopolymer, a division specializing in raw materials processing and technology, utilizes cutting-edge recycling technologies, converting plastic waste into high-performance raw materials within the framework of a circular economy.All these companies operate as a single ecosystem: production (MEFA Endstri), raw materials/compounds (Efachem), processing (Ecopolymer), and logistics (Milkrun).
HARLEY-DAVIDSON.COM
September 10, 2026
•[ ransomware, manufacturing, automotive ]
HARLEY-DAVIDSON.COM was listed as a victim on the leak site of the clop ransomware group; the attack is estimated to have taken place on 2026-09-10. Sector: Manufacturing. Country: United States of America. Website: HARLEY-DAVIDSON.COM. [AI generated] Harley-Davidson is an American iconic motorcycle manufacturer headquartered in Milwaukee, Wisconsin, USA. Founded in 1903, the company designs, manufactures, and sells heavyweight motorcycles, related parts, accessories, and branded merchandise. It operates globally across the powersports and automotive industry. Its website serves as a digital hub for product information, dealer locators, community engagement, and e-commerce for enthusiasts worldwide.
DiamondLease
August 30, 2026
•[ ransomware, automotive ]
DiamondLease was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-08-30. Sector: Other. Country: United Arab Emirates. Website: www.diamondlease.com.
Sarku Japan
September 14, 2026
•[ ransomware, retail, automotive ]
Sarku Japan was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Retail & E-Commerce. Country: United States of America. Website: sarkujapan.com. sarkujapan.com zoominfo.com/c/sarku-japan/33898946 SARKU Japan Japan's #1 independent service & wholesale network for foreign cars founded 1993 in Chiba by Texan David J. Jones (in Japan since 1989) after seeing that owners of European/American cars in Japan were "orphans": parts take 68 weeks from Europe, service is scarce. SARKU built the full foreign-car infrastructure: 9 service centers (8 Kanto + Nagoya), a wholesale yard of ~4,000 imported cars (one of Japan's two largest), a parts warehouse of 30,000+ SKUs worth 700M+ (also one of Japan's two largest), plus procurement/export arms via US offices in Seattle (since 1997) and Florida selling 20,000+ cars and serving 60,000+ active customers (~150 staff from 15 countries; ~120K monthly site visitors, 170K+ downloaded car-buying guides). Since 2018 it's owned by the Netherlands' Louwman Group (Europe's largest family-run dealer group, est. 1923). Motto: "Foreign cars. Japanese precision."
Technical Asia
September 14, 2026
•[ ransomware, technology, manufacturing ]
Technical Asia was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Technology. Country: Thailand. Website: technicalasia.com. technicalasia.com zoominfo.com/c/technical-asia-pte-ltd/347370168 Technical Asia Thai-Japanese JV (founded 1990, HQ Samut Prakan/Bangkok) the leading engineering-plastics distributor and fabricator in Thailand & Southeast Asia, importing materials from Japan's Sankyo Kasei and processing them locally: UHMW-PE, MC-Nylon, POM, PA6G, HDPE, PEEK, PVC-C, PVDF, PET, PTFE sold as cut-to-size sheets/rods/tubes and CNC-machined custom parts for automotive, food & packaging, semiconductors, chemicals, oil & gas, robotics and water treatment across SEA. Model: local warehouse stock (days vs. months from Japan) + cut-to-size service + CNC fabrication + engineering material consultation; ISO 9001 certified. ~50100 staff, revenue est. 100500M THB (private JV, not disclosed)
McCarthy Tire Service
September 14, 2026
•[ ransomware, retail, manufacturing ]
McCarthy Tire Service was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Retail & E-Commerce. Country: United States of America. Website: mccarthytire.com. McCarthy Tire Service is a family-owned and operated American tire and automotive service company founded in 1926 and headquartered in Wilkes-Barre, Pennsylvania. The company specializes in commercial tire sales and services, fleet management, truck mechanical repairs, off-the-road (OTR) and industrial tires, passenger vehicle services, and 24-hour commercial roadside assistance. McCarthy Tire also operates Bandag retread manufacturing plants, providing tire retreading solutions for commercial and industrial customers. With more than 70 service locations across eight states on the U.S. East Coast, the company serves transportation, construction, agriculture, forestry, and other industries. McCarthy Tire is one of the largest independent commercial tire dealers in the United States.
The company headquarters is located in 340 Kidder Street, Wilkes-Barre, PA 18702, United States. 1K-5K Employees
Lazyboyz
June 23, 2026
•[ ransomware, retail, manufacturing ]
Lazyboyz was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-06-23. Sector: Other. Website: lazyboyz.no. Lazy Boyz - Harley-Davidson Oslo specializes in motorcycles and workshop services, particularly
for Harley-Davidson and Royal Enfield, with over 30 years of experience. They offer a wide ran
ge of new and used motorcycles, as well as comprehensive services including repairs, customizat
ions, and parts supply.
We will upload corporate data soon. Employee personal information, financials, contracts and ag
reements and so on.
Flex Ltd
September 21, 2026
•[ ransomware, manufacturing, technology ]
Flex Ltd was listed as a victim on the leak site of the metaencryptor ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Manufacturing. Country: United States of America. Website: flex.com. Flex Ltd. is a global technology manufacturing and supply-chain company headquartered in Austin, Texas. It provides design, engineering, electronics manufacturing, supply-chain management, and infrastructure solutions for customers across the data center, AI, automotive, healthcare, industrial, communications, and consumer technology sectors. Flex operates more than 100 facilities worldwide and employs approximately 150,000 people.
Astemo, Ltd.
September 21, 2026
•[ ransomware, manufacturing, automotive ]
Astemo, Ltd. was listed as a victim on the leak site of the metaencryptor ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Manufacturing. Country: Japan. Website: www.astemo.com/en. Astemo operates worldwide as a global mega-supplier of automotive parts, with approximately 80,000 employees across the United States, Asia, China, Europe, and Japan. Through operations in three business segments (Electrification Business, Vehicle Business, and Motorcycle Business), we develop, manufacture, sell and service automotive parts, transportation and industrial machinery, equipment and systems.
universalautogroup.com
August 12, 2026
•[ ransomware, leak, automotive ]
universalautogroup.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-08-12. Sector: Transportation. Country: United States of America. Website: universalautogroup.com. Universal Auto Group PROLOGUE We obtained thousands of documents belonging to two Washington State c...
