Mercer Advisors
February 21, 2026
•[ ransomware, finance ]
Mercer Advisors was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-02-21. Sector: Financial Services. Country: United States of America. Updated: 21 Feb 2026
Figure Technology Solutions, Inc.
February 13, 2026
•[ ransomware, technology, finance ]
Figure Technology Solutions, Inc. was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-02-13. Sector: Technology. Country: United States of America. Size: 2.5GB (compressed) | Updated: 13 Feb 2026 | Note: Pay or be humiliated. | They were given multiple chances to pay the ransom, but they decided to waste time and hide instead.
SAIC Motor Corporation
March 27, 2024
•[ ransomware, manufacturing, finance ]
SAIC Motor Corporation was listed as a victim on the leak site of the beast ransomware group; the attack is estimated to have taken place on 2024-03-27. Sector: Manufacturing. Country: China. Website: -. Data size claimed by the group: 700GB. SAIC Motor Corporation Limited is the largest state-owned automobile manufacturer in China and one of the "Big Four" in the country's automotive industry. Headquartered in Shanghai, the company's business covers the development, manufacture, and sale of passenger and commercial vehicles, as well as auto parts and financial services Market Capitalization (USD): approx. $23.83 $23.9 Billion.
Global Trust Advisors
February 24, 2026
•[ ransomware, finance ]
Global Trust Advisors was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-02-24. Sector: Financial Services. Country: United States of America. Website: gta.lu. gta.lu zoominfo.com/c/global-trust-advisors-sa/456596303 Global Trust Advisors (GTA) is a high-end independent advisory firm that specializes in finance and corporate services, providing a comprehensive range of financial advisory services. Their clients include investment funds, holding companies, trading companies, listed companies, and small to medium-sized family businesses. With a team of 20 experienced professionals, GTA is known for its flexibility and direct involvement in client management and relations. The firm focuses on efficient day-to-day management, accounting, and administrative support through its specialized teams
A large bank in Asia
February 24, 2026
•[ ransomware, finance ]
A large bank in Asia was listed as a victim on the leak site of the atomsilo ransomware group; the attack is estimated to have taken place on 2026-02-24. Sector: Financial Services. Website: bank.com. [AI generated] A large bank in Asia refers to a financial institution that provides diversified services like deposits, loans, wealth management to individual and corporate clients. Being large-scale, they generally operate across several countries in the Asia region, often having a significant market share. This also involves operating digital banking services, given the widespread internet usage. Their influence in the finance sector can affect regional economic stability.
pay***
February 24, 2026
•[ ransomware, finance ]
pay*** was listed as a victim on the leak site of the vect ransomware group; the attack is estimated to have taken place on 2026-02-24. Sector: Financial Services. Country: Egypt. Website: pay***.com. Status: STATUS: NEGOTIATING | Sector: Finance | Deadline: 18d 19h
for******a****ng
February 24, 2026
•[ ransomware, finance ]
for******a****ng was listed as a victim on the leak site of the vect ransomware group; the attack is estimated to have taken place on 2026-02-24. Sector: Financial Services. Country: United States of America. Website: for******a****ng.com. Status: STATUS: NEGOTIATING | Sector: Finance | Deadline: 18d 7h
***wire
February 24, 2026
•[ ransomware, finance, technology ]
***wire was listed as a victim on the leak site of the vect ransomware group; the attack is estimated to have taken place on 2026-02-24. Sector: Professional Services. Country: United States of America. Website: ***wire.com. Status: STATUS: NEGOTIATING | Sector: LAW | Deadline: 18d 7h
MB Contabilidade
February 24, 2026
•[ ransomware, finance ]
MB Contabilidade was listed as a victim on the leak site of the vect ransomware group; the attack is estimated to have taken place on 2026-02-24. Sector: Professional Services. Country: Brazil. Website: mbcontabilidade.com.br. Status: STATUS: NEGOTIATING | Sector: accounting | Public/shared company directories (general, accounting I & II, HR, legal, indexes, systems, tokens)
Accounting system data and balance databases (multiple company instances)
Client/company... DATA SIZE: 121.03 GB | Deadline: 8d 4h
Mutualista Imbabura
February 13, 2026
•[ ransomware, finance ]
Mutualista Imbabura was listed as a victim on the leak site of the vect ransomware group; the attack is estimated to have taken place on 2026-02-13. Sector: Financial Services. Country: Ecuador. Website: mutualistaimbabura.com. Status: STATUS: LEAKED | Sector: Finance | Customer financial records (loans, savings, balances)
Credit and loan portfolio data
Payroll and salary information
Employee personal data (PII)
National ID documents
Customer... DATA SIZE: 300GB
Grupo VerdeAzul
February 13, 2026
•[ ransomware, leak, finance ]
Grupo VerdeAzul was listed as a victim on the leak site of the vect ransomware group; the attack is estimated to have taken place on 2026-02-13. Sector: Financial Services. Country: Namibia. Website: Grupoverdeazul.com. Status: STATUS: LEAKED | Sector: asset management | Accounting and bookkeeping system data (Sage / Peachtree)
Company financial records and ledgers
Accounts payable and receivable data
Tax configuration and tax table files
Payro... DATA SIZE: 13.36 GB
Tricolor Holdings
February 25, 2026
•[ ransomware, finance ]
Tricolor Holdings was listed as a victim on the leak site of the kittykatkrew ransomware group; the attack is estimated to have taken place on 2026-02-25. Sector: Financial Services. Country: United States of America. Website: tricolor.com. Mission-driven auto lender expanding access to affordable vehicle ownership nationwide. Deadline: 2026-03-03T00:00:00+00:00 Status: Awaiting Contact
Jones Haber
February 24, 2026
•[ ransomware, leak, finance ]
Jones Haber was listed as a victim on the leak site of the termite ransomware group; the attack is estimated to have taken place on 2026-02-24. Sector: Professional Services. Country: United States of America. Website: www.joneshaberlaw.com. Jones, Haber & Rollings is a multi-service law firm based in Cape Coral, Florida, with over 75 years of combined legal expertise. Established in 1988, the firm provides comprehensive legal counsel across various practice areas throughout the state of Florida.
Zaner Group
February 4, 2026
•[ ransomware, finance, technology ]
Zaner Group was listed as a victim on the leak site of the insomnia ransomware group; the attack is estimated to have taken place on 2026-02-04. Sector: Financial Services. Country: United States of America. Website: www.zaner.com. Zaner, a family-owned brokerage since 1980, provides global commodities risk-management, advisory, research, and trading tech. Serving futures, metals, currencies, energies and agriculture, they offer hedging, precious metals solutions, competitive pricing.
Pathstone Family Office, LLC
February 27, 2026
•[ ransomware, finance ]
Pathstone Family Office, LLC was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-02-27. Sector: Financial Services. Country: United States of America. Over 641k records containing PII and other internal corporate data have been compromised. This is a final warning to reach out by 2 Mar 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 27 Feb 2026 | Warning: FINAL WARNING
Law Offices Taenzer & Ettenson, P.C. (tesalaw.com)
February 27, 2026
•[ ransomware, leak, finance ]
Law Offices Taenzer & Ettenson, P.C. (tesalaw.com) was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-02-27. Sector: Professional Services. Country: United States of America. Website: tesalaw.com. TAENZER & ETTENSON, P.C. is well-prepared to effectively serve your personal and business legal needs with years of experience in the practice of law. Our accomplished, professional staff will:
Provide you with expert legal advice
Identify key issues in your case
Maintain your confidentiality at all times
Extend to you the personal service and attention you deserve
We are dedicated to providing you with exceptional legal services.
Laek: 30GB
WE HAS COLLECTED SUCH DATA AS:
- Confidential documents
- Clients Data
- NDA
- Financial data
- Operations
- Corporate data
- Business Agreements
- Development
- Financial databases, all transactions, all clients
And a lot of other VERY IMPORTANT information!
Unisoft Communications
January 26, 2026
•[ ransomware, technology, finance ]
Unisoft Communications was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-01-26. Sector: Technology. Country: United States of America. Website: unisoftonline.com. Unisoft Communications, Inc. specializes in developing advanced c
ommunication software solutions for the non-standard Property and
Casualty Insurance industry. With over 40 years of experience th
rough its sister company, Unicorp Data Processing, Inc., the comp
any addresses the communication challenges faced by insurance com
panies, premium finance companies, and their agents.
We will upload 31gb of corporate data soon. Employee data, client
s' data, financials, lots of contracts and agreements and so on.
Thg
February 27, 2026
•[ ransomware, finance, technology ]
Thg was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-02-27. Sector: Professional Services. Country: United Kingdom of Great Britain and Northern Ireland. Website: gee.be. gee.be zoominfo.com/c/thg/1212983204 Focus on your business, stay a step ahead of events, keep on the right track. thg is here to guide and advise you. The word digitalisation can be scary. Yet it offers some interesting perspectives, particularly in the fields of tax advice and accountancy. Simon Boskin, Partner at thg Luxembourg, talks about the numerous opportunities that the digital revolution offers our clients during an interview that appeared in our last newsletter. A must-read, as well as other current topics
Hrp Hitesh Cpa
February 19, 2026
•[ ransomware, finance, technology ]
Hrp Hitesh Cpa was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-02-19. Sector: Financial Services. Country: United States of America. Website: hrp.cc. HRP HITESH CPA PC specializes in providing cloud-based payroll an
d accounting services to business clients. The firm leverages adv
anced technology to automate payroll processes, compliance filing
, and payroll taxes, ensuring a user-friendly experience.
We will upload corporate data soon. Lots of clients data, financi
als, forms, a bit of personal information and more.
Gemsen
February 27, 2026
•[ ransomware, leak, retail ]
Gemsen was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-02-27. Sector: Professional Services. Country: Canada. Website: gemsen.com. Gemsen is a leading national distributor of high-quality consumer
electronics in Canada. They specialize in supplying Canadian ret
ailers with the finest brands of audio and video products in the
home, mobile, marine, and power sports categories.
We will upload 20gb of corporate data soon. Personal information
of clients and employees, financials, lots of contracts and agree
ments, projects, NDA's, etc.
