Arnold & Blevins Electric
December 28, 2025
•[ ransomware, energy ]
Arnold & Blevins Electric was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-12-28. Sector: Energy & Utilities. Country: United States of America. Website: www.arnoldblevins.com.
C&r Electric
December 29, 2025
•[ ransomware, energy ]
C&r Electric was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2025-12-29. Sector: Energy & Utilities. Country: United States of America. Website: www.candrelec.com. United States
American PowerNet
October 28, 2025
•[ ransomware, energy ]
American PowerNet was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2025-10-28. Sector: Energy & Utilities. Country: United States of America. Website: www.americanpowernet.com. United States
energogroup.net
November 1, 2025
•[ ransomware, energy ]
energogroup.net was listed as a victim on the leak site of the warlock ransomware group; the attack is estimated to have taken place on 2025-11-01. Sector: Energy & Utilities. Country: Russian Federation. Website: energogroup.net.
WOODPLC.COM
November 7, 2025
•[ ransomware, energy, technology ]
WOODPLC.COM was listed as a victim on the leak site of the clop ransomware group; the attack is estimated to have taken place on 2025-11-07. Sector: Energy & Utilities. Country: United Kingdom of Great Britain and Northern Ireland. Website: WOODPLC.COM. [AI generated] Wood PLC is a leading global project, engineering and technical services company headquartered in the UK. Its diverse portfolio spans energy, chemicals, industrial, environmental and infrastructure markets. They provide performance-driven solutions throughout the asset life cycle, from concept to decommissioning, including consulting, projects and operations.
PT Kalimantan Prima Persada
November 6, 2025
•[ ransomware, energy, leak ]
PT Kalimantan Prima Persada was listed as a victim on the leak site of the medusa ransomware group; the attack is estimated to have taken place on 2025-11-06. Sector: Energy & Utilities. Country: Indonesia. Website: pamapersada.com. Ransom demand: 100000. PT Kalimantan Prima Persada (KPP) is a subsidiary of PT Pamapersada Nusantara (PAMA), a leading mining company in Asia. 99,99% shares composition of KPP owned by PT Pamapersada Nusantara and 0.01% by PT United Tractors Pandu Engineering. KPP was freshly born to realize a mining developer concept by establishing a new company to broaden market, offer services engaged in coal mining, started from exploration to sales and to service the booming, small and medium coal mining industry in Kalimantan. Ever since year 2003, KPP has established itself as PAMA'S NEXT GENERATION. The main operation is located in South Kalimantan and East Kalimantan. KPP are proud to contribute to the job market, create business opportunities for local entrepreneurs, as well as the implementation of various CSR programs. The improvement of Human Resources, the correct application of technology, professional management systems and the commitment towards safety at work, and nature preservation will always be the priorities. KPP aims to provide the best result for the stakeholders. In the future, KPP will become a prominent company as well as a trustworthy and reliable partner in the coal mining industry.
company is headquartered in Jl. Rawa Gelam I No. 9, Kawasan Industri Pulogadung, Jakarta Timur 13930, DKI Jakarta, Indonesia.
1,872 Employees
Sarulla Operation
November 11, 2025
•[ ransomware, energy, financial ]
Sarulla Operation was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2025-11-11. Sector: Energy & Utilities. Country: Indonesia. Website: sarullaoperations.com. Administration
Financial operations
Budgets and account balances
User information
Confidential information
Over 1,000 passports
Payment instructions and other accounting documents
Contract discussions and final contracts
and others
Continental Global Group
November 11, 2025
•[ ransomware, manufacturing, energy ]
Continental Global Group was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2025-11-11. Country: United States of America. Website: cgmh.com. A subsidiary of PPI Global
Wiraswasta Gemilang
November 12, 2025
•[ ransomware, energy, leak ]
Wiraswasta Gemilang was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2025-11-12. Sector: Energy & Utilities. Country: Indonesia. Website: wgi.co.id. PT Wiraswasta Gemilang Indonesia (WGI) is the first and largest private lubricant plant in Indonesia, specializing in re-refinery and blending services.
To your attention a small portion of screenshots.
Soleol
October 9, 2025
•[ ransomware, energy, technology ]
Soleol was listed as a victim on the leak site of the ransomhouse ransomware group; the attack is estimated to have taken place on 2025-10-09. Sector: Energy & Utilities. Country: Switzerland. Website: www.soleol.ch. Soleol is an Algerian renewable energy company that designs and installs solar equipment for homes, businesses, and local governments. Their unique products are built using biomimetic technology, which means they copy natural designs to create environmentally friendly solar solutions.
P2ENERGYSERVICES.COM
November 13, 2025
•[ ransomware, energy, technology ]
P2ENERGYSERVICES.COM was listed as a victim on the leak site of the clop ransomware group; the attack is estimated to have taken place on 2025-11-13. Sector: Energy & Utilities. Country: United States of America. Website: P2ENERGYSERVICES.COM. [AI generated] P2 Energy Solutions is a technology company that provides software and data solutions for the energy industry. Their products and services are utilized by oil and gas companies to automate operations, manage data, and enhance decision making processes. Their offerings include production management, land management, accounting and finance solutions, and data solutions. They have a global presence and serve several Fortune 500 energy companies.
PAFL.COM.PK
November 13, 2025
•[ ransomware, leak, energy ]
PAFL.COM.PK was listed as a victim on the leak site of the clop ransomware group; the attack is estimated to have taken place on 2025-11-13. Sector: Agriculture and Food Production. Country: Pakistan. Website: PAFL.COM.PK. [AI generated] PAFL.com.pk is the website for the Pakistan Aviation and Fuel Limited, a major company in Pakistan that specializes in the aviation industry. The company works primarily in the distribution and marketing of aviation fuels and allied products. It also provides refueling services to many international and domestic airlines at airports located throughout Pakistan.
HELIXESG.COM
November 13, 2025
•[ ransomware, technology, energy ]
HELIXESG.COM was listed as a victim on the leak site of the clop ransomware group; the attack is estimated to have taken place on 2025-11-13. Sector: Technology. Country: United States of America. Website: HELIXESG.COM. [AI generated] Helix ESG is a leading provider of offshore energy solutions. With their extensive fleet of vessels, they offer a range of services such as marine construction, repair & maintenance, salvage & decommissioning, and underwater exploration. The company focuses on delivering innovative solutions while also prioritizing their commitment to safety and environmental protection.
TPICOMPOSITES.COM
November 13, 2025
•[ ransomware, manufacturing, energy ]
TPICOMPOSITES.COM was listed as a victim on the leak site of the clop ransomware group; the attack is estimated to have taken place on 2025-11-13. Sector: Manufacturing. Country: United States of America. Website: TPICOMPOSITES.COM. [AI generated] TPI Composites, Inc. is a leading global provider of structural composites products for the wind energy, transportation, and military markets. The company operates its manufacturing plants in North America, Europe, and Asia. TPI delivers innovative composite solutions to its customers including design, engineering, tooling, fabrication, and lifecycle management services.
Spark Power
November 15, 2025
•[ ransomware, energy ]
Spark Power was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-15. Sector: Energy & Utilities. Country: Canada. Website: www.sparkpowercorp.com.
SES Société Energies Services
November 15, 2025
•[ ransomware, energy ]
SES Socit Energies Services was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-15. Sector: Energy & Utilities. Country: France. Website: www.ses-energies-services.fr.
Eagle Oil & Gas
October 11, 2025
•[ ransomware, energy ]
Eagle Oil & Gas was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-10-11. Sector: Energy & Utilities. Country: United States of America. Website: eagleog.com. Eagle Oil & Gas operates and manages its own properties and the a
ssets of other companies, focusing on drilling new wells and opti
mizing legacy assets.
We will upload 70gb of corporate documents soon. Employee persona
l documents (scanned passports, driver licenses, SSNs, phones, ad
dresses, email addresses, credit card payment details and so on),
confidential contracts and agreements, NDA, and other client's f
iles, etc.
LG Energy Solution
November 17, 2025
•[ ransomware, energy, technology ]
LG Energy Solution was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-11-17. Sector: Energy & Utilities. Country: South Korea. Website: lgensol.com. LG Energy Solution is a total energy solutions company that build
s an energy ecosystem with customer-centric advanced technology,
global integrated operations, and sustainable growth.
We will upload almost 1.67TB of corporate documents and 46gb of S
QL databases soon. Lots of employee personal information (visas,
US and Korean passports, medical documents, Korean ID cards, addr
esses, phones, emails and so on), confidential projects, NDAs, co
nfidentiality agreements, detailed financials, information about
clients and partners, lots of contracts, etc.
Petrobras Campos Basin 3D & 4D Seismic Survey Data
November 17, 2025
•[ ransomware, energy, leak ]
Petrobras Campos Basin 3D & 4D Seismic Survey Data was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2025-11-17. Sector: Energy & Utilities. Country: Brazil.
Cardinal Services
November 19, 2025
•[ ransomware, energy, leak ]
Cardinal Services was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-11-19. Sector: Energy & Utilities. Country: United States of America. Website: cardinalservices.org. Cardinal Services, based in New Iberia, LA, is a leading oilfield
service company specializing in land and offshore services.
We will upload 90gb of corporate documents soon. Personal employe
e files (driver licenses, phones, addresses, emails, credit card
details), financials and accounting, contracts and agreements, cl
ients' information, incident reports, NDA, etc.
