Ropers Majeski
April 23, 2026
•[ ransomware, leak, finance ]
Ropers Majeski was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-04-23. Sector: Professional Services. Country: United States of America. Website: ropers.com. [AI generated] Ropers Majeski is a law firm based in the United States, operating primarily in California. The firm provides legal services across a range of practice areas including litigation, insurance defense, business law, employment law, and professional liability. It serves corporate clients, insurers, and individuals, with offices in multiple California cities. The firm is known for its work in complex civil litigation and risk management counsel.
Diviso Grupo Financiero
April 29, 2026
•[ ransomware, finance ]
Diviso Grupo Financiero was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-04-29. Sector: Financial Services. Country: Peru. Website: diviso.pe. diviso.pe zoominfo.com/c/diviso-grupo-financiero-sa/372139811 Diviso Grupo Financiero S.A. is a Lima-based financial holding company founded in 2003 (formerly NCF Inversiones SA, rebranded in November 2013). With around 1,0005,000 employees and led by CEO Jos Romero Tapia, it offers a comprehensive portfolio of capital market services through its two main subsidiaries DIVISO Fondos (mutual and investment funds) and DIVISO Bolsa (stock brokerage). The group holds strategic stakes in major regional exchanges, including the Lima Stock Exchange (BVL), CAVALI, and the Chilean Products Exchange. It is publicly traded on the Lima Stock Exchange under ticker DIVIC1 with a market cap of ~313 million PEN
Moorman Harting
April 15, 2026
•[ ransomware, leak, finance ]
Moorman Harting was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Professional Services. Country: United States of America. Website: moormanharting.com. Moorman, Harting & Company is a comprehensive wealthcare firm that provides a variety of soluti
ons for tax, accounting, and financial needs. Their services include accounting, payroll, tax p
reparation, retirement planning, and personalized financial coaching.
We will upload 21gb of corporate data soon. Employee personal information (passport numbers, Dl
s, SSNs and other sensitive information), client files, financials, contracts and agreements, i
nternal confidential files, NDAs and so on.
Mundo Amtae
May 6, 2026
•[ ransomware, hack, healthcare ]
Mundo Amtae was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-06. Country: Mexico. Website: mundoamtae.com. mundoamtae.com zoominfo.com/c/mundo-amtae/372405633 Mundo AMTAE (Asociacion Mutual de Trabajadores Estatales) is one of Argentina's top 5 mutual aid organizations, founded in 1987 and headquartered at Lavalle 3155, Buenos Aires. With over 30 years of experience and 100,000 members spread across 20 branches nationwide, the organization provides a broad range of social, health, and financial services to state workers, retirees, and the general public. Its core offerings include medical consultations across all specialties, dental care, clinical analysis, physiotherapy, home medical visits, 24/7 ambulance service, and optical coverage. AMTAE also offers loan programs and financial assistance, with tiered membership plans (Plata, Dorado, Platino) covering varying levels of healthcare and personal accident protection
Panal Seguros S.A.
May 6, 2026
•[ ransomware, finance ]
Panal Seguros S.A. was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-06. Sector: Financial Services. Country: Paraguay. Website: www.panalseguros.com.py.
Sandberg Phoenix Information
April 29, 2026
•[ ransomware, leak, finance ]
Sandberg Phoenix Information was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-04-29. Sector: Professional Services. Country: United States of America. Website: sandbergphoenix.com. Over 45 years providing superior legal services to clients of every size throughout the Midwest and ac
Farella Braun + Martel LLP Information
May 6, 2026
•[ ransomware, leak, finance ]
Farella Braun + Martel LLP Information was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-05-06. Sector: Professional Services. Country: United States of America. Farella Braun + Martel LLP is a leading Northern California law firm representing corporate and privat
CMC Expertise Comptable
May 8, 2026
•[ ransomware, finance ]
CMC Expertise Comptable was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-05-08. Sector: Professional Services. Country: France. Website: cmcexpertise.fr. CMC Expertise Comptable is a certified accounting firm located in Martinique, dedicated to providing comprehensive support in accounting, social, legal, and fiscal matters. The firm focuses on understanding the unique needs of each client to offer tailored advice and assistance, ensuring precision and efficiency in their services. They specialize in company creation, legal and tax advice, and are committed to simplifying the administrative burdens faced by business leaders. With a strong emphasis on availability and communication, CMC Expertise Comptable aims to be the ideal partner for business growth.
Fogel Capital Management
May 8, 2026
•[ ransomware, finance ]
Fogel Capital Management was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-08. Sector: Financial Services. Country: United States of America. Website: www.fogelcapital.com.
Lindabury
May 9, 2026
•[ ransomware, leak, finance ]
Lindabury was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-09. Sector: Financial Services. Country: United States of America. Website: www.lindabury.com.
eclagestio360.com
May 9, 2026
•[ ransomware, finance ]
eclagestio360.com was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-05-09. Sector: Professional Services. Country: Spain. Website: eclagestio360.com. ECLAGESTI
A Spanish company specializing in comprehensive management for businesses and individuals, operating in the...
https://sibillacapital.com/
May 10, 2026
•[ ransomware, finance ]
https://sibillacapital.com/ was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-05-10. Sector: Financial Services. Country: United States of America. Website: sibillacapital.com. data
Langenberg, Strubberg, Arand & King, LLC
April 28, 2026
•[ ransomware, finance ]
Langenberg, Strubberg, Arand & King, LLC was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-04-28. Sector: Professional Services. Country: United States of America. Website: lsakcpa.com. Firm that specializes in providing accounting, tax, and advisory services
e-jones associates LCC
May 8, 2026
•[ ransomware, leak, finance ]
e-jones associates LCC was listed as a victim on the leak site of the LeakBazaar ransomware group; the attack is estimated to have taken place on 2026-05-08. Sector: Professional Services. Country: United States of America. Website: attorneyatlaw.com. Here are E. Jones & Associates, LLC, our focus is on our clients at all times. We only work on personal filings, leaving the commercial sector to other Atlanta bankruptcy law firms. Each person who comes into our office receives our undivided attention, and our clients benefit from our specialized knowledge and experience. We have an intimate knowledge of our business. We have a thorough understanding of not only the ins and outs of Atlanta bankruptcy filing, but also the needs of our clients. We have seen it all: lost jobs, health issues, divorce. We know how people can feel during trying times such as these. E. Jones & Associates, LLC is the compass pointing to financial freedom. We are with you every step of the way. Our Atlanta Bankruptcy lawyers will advise and direct you through each part of the process, leaving nothing for speculation. We provide you with an exit from your troubles, putting you on the road to financial security.
There are 2,400 unique clients of the law firm in total.
You can purchase both the entire data and the data of individual clients for a price starting from $100. The full list of clients is in the attachment.
AXCERA TRADING
May 10, 2026
•[ ransomware, finance, technology ]
AXCERA TRADING was listed as a victim on the leak site of the lapsus$ ransomware group; the attack is estimated to have taken place on 2026-05-10. Sector: Professional Services. Country: United States of America. Website: AXCERA.IO. Trading Algorithms, Client Portfolios, KYC Data & Financial Logs
Clarkson Walsh & Coulter
April 18, 2026
•[ ransomware, hack, leak ]
Clarkson Walsh & Coulter was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-04-18. Sector: Professional Services. Country: United States of America. Website: clarksonwalsh.com. Clarkson Walsh & Coulter provides innovative legal solutions and aggressive litigation services
to clients of all sizes across South Carolina. The firm specializes in various areas including
general liability, employment, medical malpractice, and commercial matters, representing indiv
iduals, corporations, and insurance carriers in both State and Federal Court.
We will upload 236gb of corporate data soon. Client personal information (passports, DLs, and s
o on), contracts and agreements, lots of legal confidential docs (court records, police reports
, etc), employee information, financials and so on.
Cass information Systems
May 11, 2026
•[ ransomware, finance, technology ]
Cass information Systems was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-05-11. Sector: Professional Services. Country: United States of America. Website: cassinfo.com. [AI generated] Cass Information Systems is a US-based company specializing in payment and information services. It provides freight invoice processing, auditing, and payment solutions, along with utility and telecom expense management. Operating primarily in the financial technology and business process outsourcing industry, Cass serves large corporations across North America and globally, helping clients manage and analyze invoice data to optimize spending and operational efficiency.
Ben F. Barcus and associates pllc
May 9, 2026
•[ ransomware, finance ]
Ben F. Barcus and associates pllc was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-05-09. Sector: Professional Services. Country: United States of America. Website: usattorneys.com. A law firm from Tacoma, WA.
Pequod Associates
May 11, 2026
•[ ransomware, finance ]
Pequod Associates was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-05-11. Sector: Professional Services. Country: United States of America. Website: pequodassociates.com. A global leader in the provision of Marine Claims TPA and Recovery services.
NorthWest Handling Systems
April 23, 2026
•[ ransomware, leak, manufacturing ]
NorthWest Handling Systems was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-04-23. Sector: Transportation. Country: Canada. [warehouse] NorthWest Handling Systems a 55-year-old forklift and warehouse equipment company headquartered in Renton, Washington, with branches across WA, OR, and AK. The dump is the entire corporate file share going back to 1988. 337,000+ files spanning every branch, every department, every era of the company. It includes: Plaintext credit card numbers in an Excel spreadsheet literally titled C.O.D. info (CREDIT CARD INFO).xlsx stored at the root of the file server, unencrypted, for years. Social Security numbers and Taxpayer IDs on W-9 forms and certified payroll documents for government-contract work (USPS, Oregon DHS, public schools). 3+ years of plaintext passwords for Target Corporations vendor portal (TARS), stored in Word documents titled TARGET PASSWORD & SECURITY QUESTIONS. Each password rotation was saved as a new file. Home Depot Maximo DC billing credentials plaintext, in a Word document, enabling fraudulent invoicing against a Fortune 50 company. Albertsons/Safeway Corrigo facility-management portal credentials again, plaintext in a .docx file. 33 GB of customer warehouse CAD files facility layouts, equipment placement, security-zone dimensions, and fire-protection drawings for approximately 50200 companies including Nike, Google, Costco, and Umpqua Bank. 24,669 rows of fixed-asset data in ExportFile.csv the complete equipment inventory, revealing the companys financial structure, depreciation schedules, and capital-investment history. Corporate bank routing and account numbers (ACH authorization forms), employee direct-deposit details, time cards, disciplinary records, accident reports, and decades of invoices.
