Porter Hedges LLP
October 21, 2026
•[ ransomware, leak, finance ]
Porter Hedges LLP was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-10-21. Sector: Professional Services. Country: United States of America. [AI generated] Porter Hedges LLP is a full-service business law firm based in Houston, Texas, United States. It operates in the legal services industry, providing counsel in areas such as energy, corporate transactions, finance, litigation, bankruptcy, real estate, and labor and employment law. The firm primarily serves corporate clients, including businesses in the oil and gas sector, and operates within the United States.
TOPLIVO AD
October 25, 2026
•[ ransomware, energy, leak ]
TOPLIVO AD was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-25. Sector: Energy & Utilities. Country: Bulgaria. fuel trading and construction materials Bulgaria | The complete counterparty ledger of a fuel trading company: 694 companies with full legal names, addresses, managing persons, national company numbers, tax numbers and bank account details; More than 3,100 live customs and fuel movement documents from December 2025 through October 2026, and a 12 year archive of more than 46,000 documents from 2014 through 2025; Records of 611 drivers and 651 tanker trucks with registration plates; More than 2.6 million automated tank gauge readings from fuel storage tanks; Named staff accounts of the accounting system | [NOT PAID EXPOSED]
Pengurusan Aset Air Berhad
October 18, 2026
•[ ransomware, energy ]
Pengurusan Aset Air Berhad was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-18. Sector: Energy & Utilities. Country: Malaysia. Website: www.paab.my.
PWC
October 22, 2026
•[ ransomware, finance, technology ]
PWC was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-10-22. Sector: Professional Services. Country: United Kingdom of Great Britain and Northern Ireland. [AI generated] PwC (PricewaterhouseCoopers) is a multinational professional services network headquartered in London, United Kingdom. It is one of the "Big Four" accounting firms, offering audit and assurance, tax, consulting, and advisory services to businesses, governments, and organizations worldwide. PwC operates across numerous industries including finance, technology, healthcare, and energy, serving clients in over 150 countries globally.
Conax Technologies
October 23, 2026
•[ ransomware, technology, manufacturing ]
Conax Technologies was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-23. Sector: Technology. Country: Norway. Website: conaxtechnologies.com. conaxtechnologies.com Conax Technologies US manufacturer founded in 1952 in Buffalo, New York, producing temperature sensors like thermocouples and RTDs together with high-pressure compression seal fittings for extreme conditions. Owned by the private equity firm May River Capital, it has around 200 to 500 employees and estimated revenue of roughly 41 million dollars. Its products operate in extreme temperatures up to 2000 Fahrenheit and pressures up to 100,000 psi across aerospace, defense, semiconductor, medical and energy markets. The company runs a 101,000 square foot plant with 150 machines, holds AS9100, NADCAP and ISO certifications, and has over 45 patents with 100 million products installed worldwide. Under CEO John LeFevre since 2023 it is expanding through acquisitions such as Vulcan Electric and Sorregosa Spain plus growth in semiconductor and medical verticals.
Ingelectus Innovative Electrical Solutions S.L.
October 26, 2026
•[ ransomware, energy, technology ]
Ingelectus Innovative Electrical Solutions S.L. was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Energy & Utilities. Country: Spain. smart grid engineering firm Spain | Live electrical telemetry sampled from the plant control network, with voltage, current and energy readings recorded on 23 October 2026; Complete inventory of 49 network devices including substation switches, remote terminal units, power meters and server management controllers, with locations and firmware details; Full maps of the internal control network segments and message broker metrics that carry the plant data | [NOT PAID EXPOSED]
Mann Group
October 26, 2026
•[ ransomware, manufacturing, energy ]
Mann Group was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Manufacturing. Country: Australia. Website: manngroup.com.au. manngroup.com.au Mann Group is an Australian multi-disciplinary engineering and construction company founded in 1992 in Sydney, operating through eight subsidiaries including Mechtronic Engineering, Mann Fab, Mann Energy, Mann Enviro and Mann Solar. With 350 plus employees, it is Australia's leading provider of thermal, electrical, environmental and sanitary engineering solutions. The group covers pipe fabrication, structural steel, pressure vessels, industrial boilers, HVAC, waste-to-energy and renewable energy systems. Its headquarters and central workshop are located in Milperra, Sydney, with a financial year ending in June.
Energy Storage Terminal in Singapore
October 27, 2026
•[ ransomware, energy ]
Energy Storage Terminal in Singapore was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Energy & Utilities. Country: Singapore.
Groupe AC Environnement
October 26, 2026
•[ ransomware, energy ]
Groupe AC Environnement was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Energy & Utilities. Country: France. Website: ac-environnement.com. ac-environnement.com Groupe AC Environnement is a French environmental engineering company founded in 1997 in Pontarlier, delivering integrated solutions for water treatment, wastewater, waste management and bioremediation. With 160 employees across five subsidiaries including GEG, Marach'Hydro and Biova, it has completed over 120 projects in 13 countries. Its standout project is the STEP des Voraces, France's first large-scale wastewater plant featuring demethanization serving 300,000 equivalent inhabitants. The group offers 26 specialized technical solutions spanning drinking water, industrial effluent, zero liquid discharge and circular economy applications. Led by Johan Hansma, it operates across the full project lifecycle from design and construction to long-term operations and maintenance.
Richland Resources Corporation
October 30, 2026
•[ ransomware, energy, hack ]
Richland Resources Corporation was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Energy & Utilities. Country: United States of America. Website: rrcokc.com.
SOME
October 26, 2026
•[ ransomware, technology, manufacturing ]
SOME was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Country: Italy. Website: some.it. some.it SOME Srl is an Italian ERP and financial systems consulting company founded in 2001 in Milan, delivering end-to-end implementations of Epicor Kinetic, Infor SunSystems and Fluentis ERP for manufacturing, hospitality and oil and gas clients. With about 22 employees and revenue of 2.8 million euro, it has completed over 100 implementations across Europe, the Americas and North Africa. The company operates both as a system designer building ERP architectures and as a local specialist adapting global models to Italian fiscal and regulatory requirements. Led by Sales Director Franco Giannini and Partner Hussein Bahobeshi with 25 years of hospitality ERP expertise, it serves international hotel chains, oil companies like Mellitah and ENI Congo, and mid-size manufacturers.
WABAG
October 26, 2026
•[ ransomware, energy, technology ]
WABAG was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Energy & Utilities. Country: India. Website: wabag.in. wabag.in VA Tech WABAG is the world's leading pure-play water technology company, founded in 1924 and headquartered in Chennai, India, operating in over 25 countries with 2000 engineers and over 1500 plants delivered. Listed on NSE and BSE, it posted record FY2026 revenue of 3944 crore rupees with PAT of 371 crore and has been net cash positive for 6 straight years with a credit rating of AA minus stable. Its order book surged to an all time high of 19400 crore rupees in Q1 FY2027, over 4 times annual revenue, backed by World Bank, ADB and JICA funded projects across India, the Middle East, Africa and Southeast Asia. Key projects include Southeast Asia's largest 400 MLD desalination plant in Chennai and a 300 MLD mega desalination order in Saudi Arabia. The company holds 125 plus proprietary patents and ranks 3rd globally among private water operators and desalination suppliers per Global Water Intelligence. Led by Chairman Rajiv Mittal.
Pac Production
October 26, 2026
•[ ransomware, energy, technology ]
Pac Production was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Other. Country: Sweden. Website: pac.se. pac.se PAC Group is a Swedish power plant automation company founded in 1979 in Stockholm, delivering control systems, simulation and optimization solutions for thermal, hydro, nuclear and renewable power plants. It has completed over 600 projects on more than 100 power plants across 50 countries with a combined capacity exceeding 110 gigawatts. Its product portfolio includes PAC Control, PAC-Sim full scope simulators, PAC-Balance and the ARTOCloud optimization platform, plus engineering, commissioning and cybersecurity services. The company is independent from major DCS vendors like Siemens and Emerson, giving it flexibility to integrate any technology. Led by CEO Mikael Andersson, many engineers have been with PAC for 20 to 34 years, ensuring deep institutional expertise. New directions include hydrogen power plants, battery energy storage, hybrid plant control and digital twin solutions.
smithandcasady.com
October 15, 2026
•[ ransomware, manufacturing, energy ]
smithandcasady.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-10-15. Sector: Professional Services. Country: United States of America. Website: smithandcasady.com. Inside: a subcontract agreement and insurance requirements from general contractor Charles Perry Partners, Inc. (CPPI, Gainesville); commercial invoices for the export of insulation materials to the U.S. Virgin Islands (HOVENSA LLC, oil refinery, Christiansted); cost estimate sheets for FOAMGLAS, Armaflex, and aluminum jacketing covering dozens of projects from Tampa to Hollywood; bid proposals for the insulation of a Raytheon PCS classified facility, "Classified NE Operations A"; correspondence on the Raymond James Stadium project with Manhattan Construction and BCH Mechanical a dispute ove
Grayson Rural Electric Cooperative
September 2, 2026
•[ ransomware, energy ]
Grayson Rural Electric Cooperative was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-02. Sector: Energy & Utilities. Country: United States of America. Website: www.graysonrecc.com.
Petrocare Construction
September 2, 2026
•[ ransomware, energy, technology ]
Petrocare Construction was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-09-02. Sector: Energy & Utilities. Country: Canada. Website: petrocare.ca. Petrocare Construction is a company founded on old fashioned principals - yet implementing cutting edge technology and state-of-the-art building methods, and we are proud of this. We have and continue to make a difference by "Teaming in Partnership" with our clients. Important to us is - what is important to you, namely: accurate job costing, timely progress reports, effective construction management, qualified staff, subcontractors and more. Because our team is in partnership with you, we will always work hard to maintain a solid, long-term relationship with you - that is our way of doing business. We understand the challenges of modern construction. We are pro-active in our response to the complex needs of environmental, technological and time sensitive issues. It is our clear focus to meet and exceed the needs of our clients. We are specialists in commercial, industrial, wholesale and retail petroleum facilities. Whether it be design/build construction, environmental remediation ordecommissioning we will serve your needs all over Western Canada. We are a company of people, equipment and technology that will provide the catalyst to meet and exceed your building construction and site maintenance needs for today and beyond.
The company headquarters is located in 1202 Avenue X South, Saskatoon, SK S7M 3H9, Canada. 51-200 Employees
Occidental
September 4, 2026
•[ ransomware, finance, energy ]
Occidental was listed as a victim on the leak site of the gunra ransomware group; the attack is estimated to have taken place on 2026-09-04. Sector: Energy & Utilities. Country: Venezuela (Bolivarian Republic of). Website: laoccidental.com. Sector: Insurance | Revenue: US$ 157,000,000
Homewood Sales
September 4, 2026
•[ ransomware, retail, manufacturing ]
Homewood Sales was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-09-04. Sector: Retail & E-Commerce. Country: United States of America. Website: homewoodsales.com. Homewood Sales Corporation specializes in equipment life extension solutions, offering a wide range of products including automatic voltage regulators, control panels, and motors, all built to Westinghouse specifications. With over a century of expertise, they provide exceptional quality in industrial and power distribution units and components. Their services include global sourcing, factory revitalization, and technical support, ensuring precise and expert assistance for their clients. Homewood primarily serves industries requiring reliable power distribution and equipment maintenance solutions.
SIFCO Industries INC.
September 7, 2026
•[ ransomware, manufacturing, energy ]
SIFCO Industries INC. was listed as a victim on the leak site of the metaencryptor ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Manufacturing. Country: United States of America. Website: sifco.com. SIFCO Industries is a world-wide provider of highly engineered forged components to the Aerospace, Energy and Defense markets. We supply flight-critical forged components and machined assemblies to all of the leading aircraft and engine manufacturers in the world. These components can be found on virtually all of the commercial and military fixed-wing aircraft as well as helicopters and business jets. Our products are also supplied to the leading steam and gas turbine manufacturers and oil producers serving the energy sector.
S A Chile
September 7, 2026
•[ ransomware, technology, energy ]
S A Chile was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Energy & Utilities. Country: Chile. Website: syachile.cl. syachile.cl zoominfo.com/c/sa-chile/372625700 S&A Chile is a Chilean mission-critical IT integrator founded in 1989 by Peruvian-Palestinian immigrant Edward Seleme Chvez from his home dining room today run by his daughters (2nd generation) after his death in 2024, HQ named after him in Providencia, Santiago. Its two moats: a 35+ year IBM Premier/Gold partnership (multiple IBM awards, incl. "Top Infrastructure Sales 2024") and its own Tier III datacenter 100% uptime for 5+ consecutive years, triple ISO-certified (9001/20000/27001), 2 MW power, running on certified renewable energy (Colbn, 2026). Core services: colocation/hosting, cybersecurity (Fortinet SOC), backup/DR, private cloud, plus a new AI vertical on IBM watsonx (2025). Anchor client: Correos de Chile (national postal service) has outsourced its infrastructure to S&A since 2002. Bottom line: a quiet 37-year-old family survivor of the Chilean IT market trusted infrastructure for the state, now pivoting to agentic AI.
