belimed.com
May 28, 2026
•[ ransomware, healthcare, finance ]
belimed.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-05-28. Sector: Healthcare. Country: United States of America. Website: belimed.com. We are announcing the successful breach of the secure network of Belimed AG, a leading provider of sterilization equipment. Our team has gained full access to the digital assets of their finance department and has exfiltrated the entire dataset.
Data Volume: 1.5 Terabytes.
In our possession is the complete financial picture of Belimed AG. This isn't just tables or reports; it is the entire nervous system of their business, including:
* **SAP (SUP) Databases:** Full dumps containing all operational and financial information.
* **Accounting Records:** All transactions, entries, and financial operations spanning many years.
* **Client Contracts and Payments:** Detailed information on deals, pricing, and accounts receivable.
* **Employee Data:** Salaries, bonuses, and personal financial information.
* **Internal Audits and Strategic Planning:** Documents revealing their weaknesses, future plans, and trade secrets.
* **Tax Documentation and Banking Details:** All information necessary for a complete understanding of their financial flows.
The management of Belimed AG was given the opportunity to resolve this matter privately and without consequence. They chose silence, believing they could ignore us. This was a fatal mistake. By refusing to engage, they have jeopardized not only their own reputation but also the security of their clients, partners, and employees.
**This is not a threat. It is an announcement of a coming event.**
Exactly one month from the date of this post, the entire 1.5 TB data archive will be published for public access on this resource. Anyonecompetitors, journalists, regulatorswill be able to download and scrutinize the inner workings of Belimed AG.
To the management of Belimed AG: you have made your choice. Now you will serve as an example to all others. Enjoy the consequences. The clock is ticking.
Schacht Law Office
April 17, 2026
•[ ransomware, leak, finance ]
Schacht Law Office was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-04-17. Sector: Professional Services. Website: schachtlaw.com. Schacht Law Office specializes in intellectual property legal services, focusing on the protect
ion of patents, trademarks, copyrights, and trade secrets. They assist clients in defining and
safeguarding their ideas to ensure the prosperity of their intellectual property and brand.
We will upload 20gb of corporate data soon. Lots of clients data (credit cards, name, addresses
, phones and so on), contracts and agreements, NDAs, projects, etc.
******** & Co
May 29, 2026
•[ ransomware, finance ]
******** & Co was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-05-29. Country: United States of America. Website: .. A provider of financial services
Lee Law Offices
May 30, 2026
•[ ransomware, leak, finance ]
Lee Law Offices was listed as a victim on the leak site of the cmdorganization ransomware group; the attack is estimated to have taken place on 2026-05-30. Sector: Professional Services. Country: United States of America. Website: www.leelawoffices.org. Lee Law Offices is a well-established law firm serving clients in North and South Carolina for over 30 years, specializing in personal injury, workers compensation, and social security disability cases. The firm is dedicated to advocating for individuals affected by auto accidents, workplace injuries, and other forms of negligence, ensuring that clients receive the compensation they deserve. With a no-fee guarantee, they focus on representing the best interests of their clients rather than insurance companies or corporations.
Cedar Street Capital (A part of a Cynvestors Limited Partnership)
May 30, 2026
•[ ransomware, finance ]
Cedar Street Capital (A part of a Cynvestors Limited Partnership) was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-05-30. Sector: Financial Services. Country: United States of America. Website: cedarstreetcapital.com. A private investment entity associated with Cynthia Stiehl
MAPFRE ASSURANCE
April 26, 2026
•[ ransomware, finance ]
MAPFRE ASSURANCE was listed as a victim on the leak site of the lapsus$ ransomware group; the attack is estimated to have taken place on 2026-04-26. Sector: Financial Services. Country: Spain. This data has been acquired by a private party. No public leak will occur.
The GMP Group
March 29, 2026
•[ ransomware, finance ]
The GMP Group was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-03-29. Sector: Financial Services. Country: Singapore. Website: gmprecruit.com. Data size claimed by the group: 2000GB. - Financial Documents- Salaries Documents- Resumes & CV
Tange , Mann & Garza
March 20, 2026
•[ ransomware, finance ]
Tange , Mann & Garza was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-03-20. Sector: Financial Services. Country: United States of America. Website: tmgcpas.com. Tange , Mann & Garza is a full-service accounting firm offering a
broad range of services for individuals, business owners, execut
ives, and independent professionals.
We will upload 40gb of corporate data soon. Employee passports DL
and so on, detailed client information (financials, agreements a
nd so on), NDA, etc.
First Trinity Financial
April 1, 2026
•[ ransomware, finance ]
First Trinity Financial was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-04-01. Sector: Financial Services. Country: United States of America. Website: firsttrinityfinancial.com. FTFC is an insurance holding company based in Tulsa, Oklahoma. FTFC operates two life insurance companies, Trinity Life Insurance Company (TLIC), Tulsa, Oklahoma and Family Benefit Life Insurance Company (FBLIC), Jefferson City, Missouri. In a series of stock offerings FTFC successfully raised $26,475,000 through Private Placement and public stock offerings. FTFC is currently owned by over 4,000 Oklahoma residents. Since inception FTFC has dedicated itself to help stem the outflow of capital from the company's state by providing a broadly held Oklahoma financial services corporation offering innovative, attractive and competitive financial products and financial services
Starr Insurance
February 3, 2026
•[ ransomware, finance, hack ]
Starr Insurance was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-02-03. Sector: Financial Services. Country: United States of America. Website: insurewithstarr.com. Starr Insurance Inc. is an independent insurance agency based in
Chambersburg, Pennsylvania, offering a wide range of insurance pr
oducts including car, home, business, and commercial insurance. T
he agency serves over 18,000 individuals and businesses across Pe
nnsylvania and neighboring states, providing clients with tailore
d coverage options from a selection of reputable insurance carrie
rs.
We will upload 15gb of corporate data soon. Employee passports, D
Ls, SSNs and other personal information, financials, customers' i
nformation, NDA, etc.
Lincoln Property LLC
April 1, 2026
•[ ransomware, financial, hack ]
Lincoln Property LLC was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-04-01. Sector: Professional Services. Country: United States of America. Website: lpc.com. Lincoln Property Company
www.lpc.com
Total data in the leak: : 800GB
Leaked data:
- Clients: Rockhill Capital & Investments, FOCUS FINANCIAL PARTNERS, LLC, IMA Financial Group, Provident Partners RE, Deutsche Bank AG, Government.
- Data Classification: confidential
- Special data: Contracts, NDAs, CONFIDENTIAL Closed Deals,Personal data, INVESTMENTs, Projects, Drawing...
- Financial data: financial planning documents, accounting, CONFIDENTIAL INVESTMENT MEMORANDUMs, Fin. Audits 2021-2026, investors information and VERY IMPORTANT information!
VLawyers
March 2, 2026
•[ ransomware, leak, finance ]
VLawyers was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-03-02. Sector: Professional Services. Country: Greece. Website: vglawyers.gr. VGLawyers is a modern law firm providing professional legal services in Greece and internationally. Its team of experienced lawyers specializes in corporate law, investments, real estate, and business support, offering clients reliable and effective solutions.
260 gb data downloaded
vglawyers.gr
Tscherne Consulting Steuerberatung GmbH
April 3, 2026
•[ ransomware, finance ]
Tscherne Consulting Steuerberatung GmbH was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-04-03. Sector: Financial Services. Country: Austria. Website: tscherne.info. Data size claimed by the group: 104 GB. Tscherne Consulting Steuerberatung GmbH is an Austrian tax consulting firm based in Graz. The company specializes in services for small and medium-sized businesses, including bookkeeping, tax planning, payroll processing, and business consulting.
United Finance Egypt
April 3, 2026
•[ ransomware, finance ]
United Finance Egypt was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-04-03. Sector: Financial Services. Country: Egypt. Website: uf-eg.com. Data size claimed by the group: 327 GB. United Finance Egypt is an Egyptian non-bank financial institution (NBFI) that provides financing services for businesses and real estate. It operates in several areas: financial and operating leases, factoring, and mortgage lending. The data breach involves the companys entire infrastructure. The majority of the leaked data consists of the companys customer information.
Siena Construction
March 29, 2026
•[ ransomware, manufacturing, finance ]
Siena Construction was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-03-29. Sector: Manufacturing. Country: United States of America. Website: sienaconstruction.com. Data size claimed by the group: 350GB. - QBOOK Data- Project Records- Employee Information- Finance Records- Technical Data- Suppliers Information- Bid Documents
Charles River Insurance
September 20, 2025
•[ ransomware, finance ]
Charles River Insurance was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-09-20. Sector: Financial Services. Country: United States of America. Website: charlesriverinsurance.com. Charles River Insurance is an independent insurance agency headqu
artered in the state of Massachusetts that focuses on delivering
personalized risk management and insurance solutions to individua
ls and businesses.
We will upload 63gb of corporate data soon. Detailed employee and
customer personal information (passport, DLs, SSNs, addresses, p
hones, emails and so on), detailed financials, payment details, p
rojects, etc.
jrk.com
April 4, 2026
•[ ransomware, leak, finance ]
jrk.com was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-04-04. Sector: Professional Services. Country: United States of America. Website: jrk.com. A leading real estate investment and property management company specializing in multifamily and commercial assets. The data includes a breach involving 111,000 Social Security numbers from the company jrk.com.
Responsibility for the publication will lie with both the company itself and the insurance providers servicing it - mash.com (the intermediary) and the primary insurer beazley.com - which fails to properly value its clients data and is deliberately ignoring communications in an attempt to avoid payment, thereby putting the company at risk.
Equity Life
April 4, 2026
•[ ransomware, finance ]
Equity Life was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-04-04. Sector: Financial Services. Country: Indonesia. Website: equity.co.id. equity.co.id zoominfo.com/c/equity-life-indonesia/372772715 Equity Life Indonesia offers a range of life and health insurance solutions tailored for individual clients, corporate employee benefits, and retail insurance through various distribution channels. Their services include professional agency support, bancassurance partnerships, and customizable employee benefit programs to ensure the safety and well-being of employees
GCA Group
April 4, 2026
•[ ransomware, leak, finance ]
GCA Group was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-04-04. Sector: Professional Services. Country: United States of America. Website: gcagroupllc.com. gcagroupllc.com zoominfo.com/c/gca-group-llc/539618075 GCA Group LLC (Global Capital Advisors Group LLC) is an international business development and capital formation advisory firm focused on start-ups, early-stage businesses, alternative asset managers, and philanthropic organizations worldwide. Their services include capital introductions, marketing, brand management, new product development plans, and event coordination and logistics. The company is privately held, headquartered in Houston, Texas, with approximately 6 employees and annual revenues of around $7.2 million
GCA Professional
April 4, 2026
•[ ransomware, finance, leak ]
GCA Professional was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-04-04. Sector: Professional Services. Country: Hong Kong. Website: gca-group.com. gca-group.com zoominfo.com/c/gca-professional-services-group-ltd/346680381 GCA Professional Services Group is a leading financial services provider headquartered in Hong Kong, with over 25 years of experience serving blue-chip institutional, corporate, and individual clients globally. Its core services include valuation and advisory, corporate finance, mining and mineral consultancy, and corporate services.