Burnham Brown
December 31, 2025
•[ ransomware, leak, finance ]
Burnham Brown was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2025-12-31. Sector: Professional Services. Country: United States of America. Website: burnhambrown.com. Burnham Brown is a law firm based in Oakland, California that provides legal services in various practice areas including retail and hospitality, real estate, business and commercial, as well as employment law. The firm caters to clients across industries such as transportation, logistics, and manufacturing, helping them navigate legal risks and compliance issues. They offer updates and resources on changes in law and industry-related news to inform their clients. Additionally, Burnham Brown conducts events and discussions to engage with the community and provide insights on evolving legal matters.
esopdirect.com
October 25, 2025
•[ ransomware, finance ]
esopdirect.com was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2025-10-25. Sector: Financial Services. Country: India. Website: esopdirect.com. ESOP Direct: ESOP Direct, focussed on the Equity compensation domain, is engaged in Plan Design, Le...
Seasons Federal Credit Union
November 3, 2025
•[ ransomware, finance, leak ]
Seasons Federal Credit Union was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-11-03. Sector: Financial Services. Country: United States of America. Website: fourseasonsfcu.com. Montage Marketing Services is an outsourced contact center specia
lizing in handling peak activity periods and supporting back-offi
ce needs through their Customer Contact Center, Custom Fulfillmen
t Center, and Administrative Services.
We will upload 17gb of corporate documents soon. Employee and cus
tomer information, w-9 forms, contracts and agreements, confident
ial files, accounting and financial documents, HR files, NDA, etc
.
Benda Grace Stulz
September 20, 2025
•[ ransomware, finance, hack ]
Benda Grace Stulz was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-09-20. Sector: Professional Services. Country: United States of America. Website: bgscpas.com. You Are Number One at Benda, Grace, Stulz & Co. operates in the C
ertified Public Accountant business/industry within the Engineeri
ng, Accounting, Research, and Management Services sector. Their m
ost valuable assets - our clients. And this company is ready to s
hare 90gb of their data containing the data of their clients. We
will upload corporate documents soon. Detailed client financials,
a bit of employee personal information, NDA, credit card details
, payment information, confidentiality agreements and so on.
Elliott Tax Service
November 4, 2025
•[ ransomware, finance ]
Elliott Tax Service was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-11-04. Sector: Financial Services. Country: United States of America. Website: elliotttaxservice.com. Elliott Tax Service is a local firm in San Mateo specializing in
income tax preparation and advice, boasting 27 years of experienc
e.
We will upload 82gb corporate documents soon. Client personal doc
uments scans, employee personal information and other HR informat
ion. Clients financials and other files, NDA, credit card details
, payment details, confidentiality agreements, legal and court do
cuments, police reports, and so on.
thevisapro.com (Yibirin Law Group)
August 4, 2025
•[ ransomware, leak, finance ]
thevisapro.com (Yibirin Law Group) was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2025-08-04. Sector: Professional Services. Country: United States of America. Website: thevisapro.com. all client cases, personal data
Integra SAP
October 20, 2025
•[ ransomware, technology, finance ]
Integra SAP was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2025-10-20. Sector: Technology. Country: India. Website: integrasap.com. Integra SAP helps businesses solve tough financial challenges. They work with companies to boost cash flow, increase sales performance, and get real-time business insights. Their team helps business owners track finances better, find ways to make more money, and understand exactly what's happening in their company right now
SERAPHITA GmbH
October 20, 2025
•[ ransomware, finance, technology ]
SERAPHITA GmbH was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2025-10-20. Sector: Professional Services. Country: Germany. Website: seraphita.ch. Tax Return February 2025
Good preparation will save time and save time for a transplant. Would you like
to prepare the following documents:
- latest tax return
- last final assessment order
- Salary certificate (including additional earnings)
- Balance sheets and income statement for self-employment
- Certificate from the Unemployment Insurance Fund (daily allowance)
- Reference pensions and pensions (AHV/IV, pension benefits,
lifetime pensions, etc.)
- Certificates of disability compensation (military, sick leave, accidents or unemployment benefits)
- Annual report including VAT on Interest loans and expenses (bank, postal, etc.)
- Catalog of securities of custodian banks, as well as reports on the purchase and
sale of securities (including invoices). Dividend loans)
- Receipts for payment of interest on the debt (receipts are required)
- Rental income or cost of ownership-Disposal
- Supporting documents on the conversion and maintenance of the property
- A certificate of any extraordinary contributions to
Pension Fund
- Certificate of deposits Column 3 a (supporting documents required)
- Supporting documents on travel expenses for work / meals outside the home
- Supporting documents on professional expenses (work tools, technical literature, etc.)
Ketel Thorstenson
November 6, 2025
•[ ransomware, finance ]
Ketel Thorstenson was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-06. Country: United States of America. Website: www.ktllp.com.
Noble Compaña de Seguros
November 6, 2025
•[ ransomware, finance ]
Noble Compaa de Seguros was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-06. Sector: Financial Services. Country: Mexico. Website: www.nobleseguros.com.
elektroanlagen
November 6, 2025
•[ ransomware, manufacturing, finance ]
elektroanlagen was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2025-11-06. Sector: Manufacturing. Country: Austria. Website: schoeller.at. We have data from Piaty Mller-Mezin Schoeller Rechtsanwlte GmbH, payment and tax records, employee and client documents, as well as projects and developments, and personal correspondence with clients.
Ketat Grundstücksverwertungs GmbH
November 6, 2025
•[ ransomware, leak, finance ]
Ketat Grundstcksverwertungs GmbH was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2025-11-06. Sector: Professional Services. Country: Austria. Website: ketat.at. We have data from Piaty Mller-Mezin Schoeller Rechtsanwlte GmbH, payment and tax records, employee and client documents, as well as projects and developments, and personal correspondence with clients.
www.danareksa.com
November 6, 2025
•[ ransomware, finance ]
www.danareksa.com was listed as a victim on the leak site of the stormous ransomware group; the attack is estimated to have taken place on 2025-11-06. Sector: Financial Services. Country: Indonesia. Website: www.danareksa.com. VPN access to the companys internal network is provided
LV.COM
November 7, 2025
•[ ransomware, finance ]
LV.COM was listed as a victim on the leak site of the clop ransomware group; the attack is estimated to have taken place on 2025-11-07. Sector: Financial Services. Country: United Kingdom of Great Britain and Northern Ireland. Website: LV.COM. [AI generated] LV.COM (Liverpool Victoria) is a UK-based insurance company offering a broad range of insurance and retirement products. The company provides services such as car, home, travel, life, and pet insurance, as well as investment and retirement plans. Known for its comprehensive cover, competitiveness and quality customer service, it's one of the largest insurance companies in the UK.
ZANACO.CO.ZM
November 7, 2025
•[ ransomware, finance ]
ZANACO.CO.ZM was listed as a victim on the leak site of the clop ransomware group; the attack is estimated to have taken place on 2025-11-07. Sector: Financial Services. Country: Zambia. Website: ZANACO.CO.ZM. [AI generated] Zambia National Commercial Bank Plc (ZANACO) is a major bank in Zambia. Founded in 1969 by the Zambian Government, it was initially designed to promote national interest in the financial industry. Its services range from personal and business banking, digital banking, to investment banking. The bank caters to both individual and corporate clients, striving to contribute to the country's economic development through innovative banking solutions.
Simon Property Group
October 28, 2025
•[ ransomware, finance, retail ]
Simon Property Group was listed as a victim on the leak site of the medusa ransomware group; the attack is estimated to have taken place on 2025-10-28. Sector: Financial Services. Country: United States of America. Website: simon.com. Ransom demand: 1200000. Simon Property Group is a leading real estate investment trust (REIT) based in Indianapolis, Indiana. Founded in 1993, it owns, develops, and manages premier shopping malls, outlets, and lifestyle centers across the United States and internationally. The companys well-known properties include Premium Outlets and The Mills centers. Led by CEO David E. Simon, it focuses on creating high-quality retail and entertainment destinations that attract millions of visitors each year. Despite challenges from online retail, Simon Property Group continues to innovate by combining shopping, dining, and mixed-use spaces, maintaining its position as a global leader in retail real estate.
company is headquartered in 225 West Washington Street, Indianapolis, Indiana 46204, USA.
3,000 employees
Fidelity Pension Managers, Nigeria
November 9, 2025
•[ ransomware, finance ]
Fidelity Pension Managers, Nigeria was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2025-11-09. Sector: Financial Services. Country: Nigeria. Website: fidelitypensionmanagers.com. Data size claimed by the group: 5 GB. Fidelity Pension Managers, Nigeria
Weintraub Traub Tracy & Virk Cra's LLP
November 10, 2025
•[ ransomware, leak, finance ]
Weintraub Traub Tracy & Virk Cra's LLP was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2025-11-10. Sector: Professional Services. Country: United States of America. Website: tax1040.com. We have data from Piaty Mller-Mezin Schoeller Rechtsanwlte GmbH, payment and tax records, employee and client documents, as well as projects and developments, and personal correspondence with clients.
Land Title Guaranty
October 29, 2025
•[ ransomware, finance ]
Land Title Guaranty was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2025-10-29. Sector: Financial Services. Country: United States of America. Website: www.landtitleweb.com. United States
Public Safety Mutual Benefit Fund
November 4, 2025
•[ ransomware, government, finance ]
Public Safety Mutual Benefit Fund was listed as a victim on the leak site of the ransomhouse ransomware group; the attack is estimated to have taken place on 2025-11-04. Sector: Government & Defense. Country: Philippines. Website: www.psmbfi.com.ph. The Public Safety Mutual Benefit Fund, Inc. (PSMBFI) is a non-stock, non-profit mutual benefit fund association dedicated to providing life insurance protection and financial assistance to its members, including personnel from various public safety agencies in the Philippines. Its services include various insurance plans, loans, and benefits tailored specifically for public safety practitioners, both uniformed and civilian. PSMBFI ensures timely releases of cash advances to beneficiaries for funeral expenses and processes full claims efficiently.