Torus
February 6, 2026
•[ ransomware, finance, healthcare ]
Torus was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-02-06. Sector: Financial Services. Country: United States of America. Website: cfh.money. cfh.money zoominfo.com/c/torus/1313694164 TORUS. Being built to be the worlds leading Neo Wellness Platform, TORUS shall encompass all of wealth, health, education and lifestyle wellness. In short, it will invite users to experience a world of wellness that shall rotate around them. Addressing their every need, every dream and every aspiration. Providing them with infinite investment opportunities, round-the-clock care, multiple avenues to upskill and grow, and the freedom to live the way they
De Gruyter Brill
January 31, 2026
•[ ransomware, education ]
De Gruyter Brill was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-01-31. Sector: Education. Country: Netherlands. Website: www.degruyterbrill.com. United States
RPS Consulting
February 9, 2026
•[ ransomware, education, technology ]
RPS Consulting was listed as a victim on the leak site of the nova ransomware group; the attack is estimated to have taken place on 2026-02-09. Sector: Education. Country: India. Website: rpsconsulting.in. RPS Consulting Pvt Ltd. is a leading enterprise education service provider in India, specializing in digital learning platforms and professional training programs. With 18 years of experience, they offer a variety of training methods including instructor-led, live virtual, and blended training across multiple domains. Their clientele includes international students and enterprise customers, with a focus on empowering professionals through certifications like Power BI and AWS Cloud Practitioner.
UniFil
February 10, 2026
•[ ransomware, education ]
UniFil was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-02-10. Sector: Education. Country: Brazil. Website: unifil.br. unifil.br zoominfo.com/c/unifil/455631359 UniFil offers a wide range of undergraduate and postgraduate programs in various fields, including health sciences, engineering, business, and the humanities, available both in-person and through distance learning. Targeting students seeking quality education with access to modern technology and experienced faculty, the institution provides comprehensive academic support and partnership opportunities for professional development.
Phoenix Art Museum
February 12, 2026
•[ ransomware, education ]
Phoenix Art Museum was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-02-12. Sector: Education. Country: United States of America. Website: phxart.org. Phoenix Art Museum Phoenix Art Museum is an art museum that showcases art from around the U.S. in Phoenix, Arizona.
Archaeological Institute of America
February 13, 2026
•[ ransomware, education ]
Archaeological Institute of America was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-02-13. Sector: Education. Country: United States of America. Website: archaeological.org. Founded in 1879, the Archaeological Institute of America (AIA) is the oldest and largest archaeological organization in North America. Today, the AIA has over 200,000 members and 110 local societies in the United States, Canada, and abroad.
HYDEPARKUMC.ORG
February 14, 2026
•[ ransomware, education ]
HYDEPARKUMC.ORG was listed as a victim on the leak site of the clop ransomware group; the attack is estimated to have taken place on 2026-02-14. Sector: Education. Country: United States of America. Website: HYDEPARKUMC.ORG.
Abrahamsom Center
February 1, 2026
•[ ransomware, education ]
Abrahamsom Center was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-02-01. Sector: Education. Country: Israel. Website: www.abrahamson.co.il/en. Data size claimed by the group: 200GB. - customer info-HR data
University of Mannheim
February 18, 2026
•[ ransomware, education ]
University of Mannheim was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-02-18. Sector: Education. Country: Germany. Website: www.uni-mannheim.de.
Harvard University
February 4, 2026
•[ ransomware, education ]
Harvard University was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-02-04. Sector: Education. Country: United States of America. Size: 1.1GB (compressed) | Updated: 04 Feb 2026 | Note: Make the right decision, don't be the next headline. | This is the direct result of advisors advising you against paying a ransom. It has the opposite effect. Do NOT provoke us again and pay the ransom when we contact you.
University of Pennsylvania
February 4, 2026
•[ ransomware, education ]
University of Pennsylvania was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-02-04. Sector: Education. Country: United States of America. Records: 1.2M Records | Updated: 04 Feb 2026 | Note: Make the right decision, don't be the next headline. | This is the direct result of advisors advising you against paying a ransom. It has the opposite effect. Do NOT provoke us again and pay the ransom when we contact you.
primaria ungheni
February 25, 2026
•[ ransomware, education, government ]
primaria ungheni was listed as a victim on the leak site of the killsec ransomware group; the attack is estimated to have taken place on 2026-02-25. Sector: Education. Country: Romania. Website: primaria-ungheni.ro. Price ??? Disclosures 0/1
Birmingham Museum of Art
February 24, 2026
•[ ransomware, education ]
Birmingham Museum of Art was listed as a victim on the leak site of the termite ransomware group; the attack is estimated to have taken place on 2026-02-24. Sector: Education. Country: United States of America. Website: www.artsbma.org. The Birmingham Museum of Art in Alabama features a vast collection of over 27,000 artworks and offers free admission to visitors. The museum is open from Tuesday to Sunday and hosts various exhibitions and events throughout the year. It serves a diverse audience, including families, students, and art enthusiasts, providing educational resources and opportunities for engagement.
UMSA
February 17, 2026
•[ ransomware, education ]
UMSA was listed as a victim on the leak site of the ShadowByt3$ ransomware group; the attack is estimated to have taken place on 2026-02-17. Sector: Education. File: UMSA_LEAK.7z
Universidade Federal de Sergipe
February 19, 2025
•[ ransomware, education ]
Universidade Federal de Sergipe was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2025-02-19. Sector: Education. Country: Brazil. https://www.zoominfo.com/c/universidade-federal-de-sergipe/429754078 www.ufs.br The Federal University of Sergipe (Portuguese: Universidade Federal de Sergipe, UFS) is a Brazilian public institution based in Sergipe, with campuses in So Cristvo, Aracaju, Itabaiana, Laranjeiras, and Lagarto. Founded in 1967 by the junction of the state's existing colleges, it became its second university (the first being the University of Tiradentes, a private institution founded in 1962)and its first public one. It became the state's most reputable and competitive higher education institution, ranking among the country's 40 best universities and Latin America's top 200 list. IN DATA: Students personal data, private Personal Information, scientific projects, documents for internal use, etc
ACFA
February 26, 2026
•[ ransomware, education ]
ACFA was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-02-26. Sector: Professional Services. Country: Canada. Website: grandeprairie.acfa.ab.ca. grandeprairie.acfa.ab.ca zoominfo.com/c/acfa-regionale-de-grande-prairie/1310418607 ACFA Grande Prairie is dedicated to ensuring the development of the Francophone community in Alberta by providing support for regional initiatives. They offer a range of local activities and services in French, aimed primarily at Francophone individuals and families. Their programming includes cultural events, educational programming, and youth camps, as well as opportunities for community engagement through volunteering and memberships. The association focuses on fostering language pride, community involvement, and educational pursuits related to the Francophonie
American Beauty School
February 18, 2026
•[ ransomware, education, financial ]
American Beauty School was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-02-18. Sector: Education. Country: United States of America. Website: americanbeautyschool.edu. American Beauty School, established over 50 years ago, offers div
erse and innovative educational opportunities in cosmetology, nai
l specialty, and esthetics. Located in the Bronx, NYC, the school
has built strong relationships with local salon and spa owners,
providing hands-on experience and career support for its students
.
We will upload corporate data soon. Employee files (passport and
DL scans and so on), financials and other internal files.
Ellison Educational Equipment
December 24, 2025
•[ ransomware, education ]
Ellison Educational Equipment was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-12-24. Sector: Education. Country: United States of America. Website: www.ellisoneducation.com.
American Health
January 5, 2026
•[ ransomware, healthcare, education ]
American Health was listed as a victim on the leak site of the sinobi ransomware group; the attack is estimated to have taken place on 2026-01-05. Sector: Healthcare. Country: United States of America. Website: americanhealth.com. American Health provides a comprehensive array of healthcare services including hospital operations, emergency medical services, and smart clinics. The organization is focused on delivering world-class education and training for healthcare professionals such as physicians, nurses, and EMTs through their AH Academy and specialized programs. Their intended clients encompass a wide range of healthcare needs, including home healthcare and support for special needs individuals. With a commitment to quality and patient experience, American Health aims to improve healthcare delivery across various sectors.
Westlake Christian Academy
January 7, 2026
•[ ransomware, leak, education ]
Westlake Christian Academy was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-01-07. Sector: Education. Country: United States of America. Website: westlakechristianacademy.org. Westlake Christian Academy is a private Christian school located in Grayslake. Due to security issues, its database, including its entire student list and staff information, was made publicly available. The staff at this institution exhibits extreme indifference and inappropriate behavior toward its students and staff.
