Rogers Capital
February 19, 2025
•[ ransomware, finance, technology ]
Rogers Capital was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2025-02-19. Sector: Financial Services. Country: Mauritius. https://www.zoominfo.com/c/rogers-capital-ltd/444888383 https://rogerscapital.mu/ Mauritian company offering integrated financial and technology solutions, including corporate/trust services (fiduciary), IT/telecoms, and consumer finance (credit), helping businesses and individuals navigate global financial landscapes with services like fund administration, tech support, and payroll outsourcing. They operate in diverse sectors, leveraging technology and local expertise to serve both the Mauritius International Financial Centre (IFC) and broader global markets. Rogerscapital.mu blatantly disregarded the security of its company and its clients and did not even attempt to resolve the issue, despite the incompetence of its employees.
Chemirol
November 27, 2025
•[ ransomware, manufacturing, retail ]
Chemirol was listed as a victim on the leak site of the payoutsking ransomware group; the attack is estimated to have taken place on 2025-11-27. Sector: Agriculture and Food Production. Country: Poland. Website: chemirol.com. Data size claimed by the group: 704GB. [AI generated] Chemirol is a Polish company acknowledged in the agricultural market for offering a wide variety of services including purchase of agricultural produce, supply of fertilizers, and fuel. It also engages in grain trading, milling, oil industry and provides financial consulting to farmers. The company has been operating since 1992 with the purpose of supporting the growth and advancement of Polish agriculture.
National Money Mart Company - Database leaked
January 14, 2026
•[ ransomware, finance, leak ]
National Money Mart Company - Database leaked was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-01-14. Sector: Financial Services. Country: Canada. [AI generated] National Money Mart Company is a financial service provider that offers services like check cashing, payday loans, and money transfers. In a significant event, a database containing sensitive information of its clients was reportedly leaked, raising serious concerns about client data security and privacy.
Krez & Flores
January 15, 2026
•[ ransomware, finance ]
Krez & Flores was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-15. Country: United States of America. Website: www.krezflores.com.
sjl-legal.com
January 15, 2026
•[ ransomware, finance ]
sjl-legal.com was listed as a victim on the leak site of the ms13089 ransomware group; the attack is estimated to have taken place on 2026-01-15. Sector: Professional Services. Country: Luxembourg. Website: sjl-legal.com. SJL is a high-end independent business law firm renowned for its savoir faire and reliability. The firm has been created in 2010 as an independent alternative investment funds, finance, corporate and insolvency & restructuring boutique law firm...
Title Guaranty
January 18, 2026
•[ ransomware, finance ]
Title Guaranty was listed as a victim on the leak site of the sinobi ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Financial Services. Country: United States of America. Website: www.titleguaranty.com. Title Guaranty Company of Lewis County is a locally owned title escrow provider located in Chehalis, Washington, servicing clients across the entire state. They offer comprehensive title and real estate settlement services tailored for realtors, consumers, lenders, builders, and commercial clients. The company emphasizes integrity and local knowledge, ensuring personal attention and outstanding service for each transaction. Their mission is to simplify the closing process, making significant transactions easier for their clients.
GC Accounting
January 19, 2026
•[ ransomware, finance ]
GC Accounting was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-01-19. Sector: Financial Services. Country: United Kingdom of Great Britain and Northern Ireland. Website: gcaccounting.co.uk.
ETC Companies
October 19, 2025
•[ ransomware, technology, finance ]
ETC Companies was listed as a victim on the leak site of the blackshrantac ransomware group; the attack is estimated to have taken place on 2025-10-19. Sector: Professional Services. Country: United States of America. Website: etcbuild.com. [AI generated] "ETC Companies" is an American consulting company that specializes in providing solutions for employee benefits, HR technology, payroll, and risk management. The company aims to deliver customized programs, strategic planning, and relevant insights to help businesses in different fields efficiently manage their staff and employee services. It offers services like compliance reporting, compensation analysis, among others.
BIB Insurance Brokers
February 19, 2025
•[ ransomware, finance ]
BIB Insurance Brokers was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2025-02-19. Sector: Financial Services. Country: United Kingdom of Great Britain and Northern Ireland. https://www.zoominfo.com/c/bib-insurance-brokers-sdn-bhd/372899696 www.bib.com.my BIB Insurance Brokers Sdn Bhd, established in 1976, offers a wide range of insurance products and services including personal, business, and specialty insurance, as well as risk solutions and consultancy. The company serves various sectors such as aviation, oil and gas, and construction, catering to both individual and corporate clients. With a strong partnership network and a commitment to regional expansion, BIB provides expert broking services and claims management solutions. Their focus on delivering global standard insurance consultancy positions them as a trusted partner in risk management.
Shtainmetz Aminoach
January 20, 2026
•[ ransomware, finance ]
Shtainmetz Aminoach was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-01-20. Sector: Professional Services. Country: Israel. Website: www.cpa.co.il. www.cpa.co.il https://www.zoominfo.com/c/shtainmetz-aminoach--co/447493108 Shtainmetz Aminoach is a leading accounting firm in Israel with 38 years of experience, located in Tel Aviv, and recognized among the top firms in the country. The firm specializes in a wide range of accounting services, including tax planning, international taxation, and financial consulting, catering to large and sophisticated corporations. With a team of experts, including former tax authority officials, they provide tailored solutions for various sectors such as high-tech, real estate, and e-commerce. Additionally, they are part of the global UHY network, enhancing their international service capabilities.
CPF Financial Services
February 19, 2025
•[ ransomware, finance ]
CPF Financial Services was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2025-02-19. Sector: Financial Services. Country: Kenya. cpf.or.ke https://www.zoominfo.com/c/cpf-financial-services-ltd/434613110 CPF Financial Services is a financial institution that specializes in pension fund administration, management consulting, corporate training, and trust fund administration. They offer a range of products including M-Pension, defined contribution schemes, and post-retirement medical schemes. The company aims to provide innovative and sustainable financial solutions to its stakeholders, focusing on enhancing financial security and opportunities. Their intended clients include individuals and organizations seeking comprehensive financial services and retirement planning.
gob.mx
November 15, 2024
•[ ransomware, government, finance ]
gob.mx was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2024-11-15. Sector: Government & Defense. Country: Mexico. Website: gob.mx. Founded in 2001 and headquartered in Mexico City, Mexico, Sociedad Hipotecaria Federal is a governme...
CYMA
January 22, 2026
•[ ransomware, technology, finance ]
CYMA was listed as a victim on the leak site of the nova ransomware group; the attack is estimated to have taken place on 2026-01-22. Sector: Technology. Country: United States of America. Website: cyma.com. CYMA Systems has been producing payroll and accounting software solutions since 1980. CYMA's most recent accounting and payroll software suite is CYMA Accounting for Windows which offers solutions for mid-sized business with 200+ employees, PEOs, ASOs, Payroll Services, Directed Services (Fiscal / Employer Agents) Franchises, Staffing, and Nonprofit Organizations.
Proleasing
January 22, 2026
•[ ransomware, finance ]
Proleasing was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-22. Sector: Financial Services. Country: Argentina. Website: www.provincialeasing.com.ar.
California Tax Data
January 17, 2026
•[ ransomware, finance ]
California Tax Data was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-01-17. Sector: Financial Services. Country: United States of America. Website: www.californiataxdata.com. United States
Betterment, LLC.
September 28, 2025
•[ ransomware, finance ]
Betterment, LLC. was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2025-09-28. Sector: Financial Services. Country: United States of America. Size: 1.6 GB (compressed) | Records: 20M Records | Updated: 23 Jan 2026 | Note: Betterment better(get some)help | Betterment refused our generous offers as low as $0.95 per active customer record stolen. If you are a Betterment customer, remember that they value your privacy and peace of mind lower than the price of a roll of toilet paper.
www.hansemerkurintl.com
January 24, 2026
•[ ransomware, finance ]
www.hansemerkurintl.com was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-01-24. Sector: Financial Services. Country: Germany. Website: www.hansemerkurintl.com. HanseMerkur, founded in 1875 and headquartered in Germany, is an insurance company specializing in health insurance and other insurance products. The company offers customized insurance solutions with a focus on quality service and competitive pricing.
TRUSTPAYMENTS.COM
January 25, 2026
•[ ransomware, finance, leak ]
TRUSTPAYMENTS.COM was listed as a victim on the leak site of the clop ransomware group; the attack is estimated to have taken place on 2026-01-25. Sector: Financial Services. Country: United Kingdom of Great Britain and Northern Ireland. Website: TRUSTPAYMENTS.COM. [AI generated] TRUSTPAYMENTS.COM is a global payments company. They specialize in providing engaging and flexible payment solutions for businesses, ranging from startups to enterprises. They offer a range of services including online payment gateways, merchant accounts, risk & fraud management, payment processing, multi-currency processing, and more. Their aim is to assist businesses in reaching the global market securely and easily.
KOROLFINANCIAL.COM
January 25, 2026
•[ ransomware, finance ]
KOROLFINANCIAL.COM was listed as a victim on the leak site of the clop ransomware group; the attack is estimated to have taken place on 2026-01-25. Sector: Financial Services. Website: KOROLFINANCIAL.COM.
Prince & Schmidt LLP
January 26, 2026
•[ ransomware, leak, finance ]
Prince & Schmidt LLP was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-01-26. Sector: Professional Services. Country: United States of America. Website: LawForPersonalInjury.com. Data size claimed by the group: 1TB. Prince & Schmidt LLP
