AFSARD
August 30, 2026
•[ ransomware, government, finance ]
AFSARD was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-30. Country: North Macedonia. Website: ipardpa.gov.mk.
Ishbia & Gagleard, P.C.
August 31, 2026
•[ ransomware, healthcare, finance ]
Ishbia & Gagleard, P.C. was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-08-31. Sector: Professional Services. Country: United States of America. Website: iglawfirm.com. [law] Ishbia & Gagleard, P.C. a boutique law firm in Birmingham, Michigan, founded in 1999 by Jeffrey A. Ishbia and Michael A. Gagleard. The firm practises real estate, corporate, estate planning, personal injury, medical malpractice, and commercial litigation for high-net-worth individuals and closely held entities.
The exposed material includes:
360+ client/matter folders the complete attorney-client privilege corpus: litigation strategy memos, settlement agreements, case assessments, deposition notes, correspondence with opposing counsel.
Full Social Security Numbers for 25+ identified individuals trust beneficiaries, family members, employees of client businesses, and a scanned Social Security card.
Protected Health Information hospital admission records from Oakwood Hospital, University of Michigan Hospital, and William Beaumont Hospital. Also: 55+ employee files from a sexual health clinic client with SSN searches and scanned SS cards.
100+ client tax returns spanning 20032024, each containing SSNs, EINs, and income data.
11 email archive files (PST/OST) containing years of unfiltered attorney correspondence.
Personal legal matters of Mat Ishbia CEO of publicly-traded UWM Holdings Corp. (NYSE: UWMC), the largest wholesale mortgage lender in the United States.
cimbsecurities.com
August 31, 2026
•[ ransomware, finance ]
cimbsecurities.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-08-31. Sector: Financial Services. Country: Malaysia. Website: cimbsecurities.com. Bank
Gale Credit Union
August 7, 2026
•[ ransomware, finance ]
Gale Credit Union was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-08-07. Sector: Financial Services. Country: United States of America. Website: galecu.net. Gale Credit Union offers a variety of financial products and services including loans, savings
and checking accounts, and credit cards. Their intended clients are individuals and businesses
residing or working in ten counties in Illinois.
We will upload 50gb of corporate data soon. Employee personal information (passport, SSNs, DLs,
credit cards and so on), clients and partners information, projects, financials, contracts and
agreements and so on.
cfsnow.com
August 18, 2026
•[ ransomware, technology, finance ]
cfsnow.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-08-18. Sector: Technology. Country: Canada. Website: cfsnow.com. Challenge Financial Services, Inc.: Internal Documents of a California Auto Lending Company PROLOGUE...
ahadandco.com
August 31, 2026
•[ ransomware, leak, finance ]
ahadandco.com was listed as a victim on the leak site of the BrainCipher ransomware group; the attack is estimated to have taken place on 2026-08-31. Sector: Other. Country: United Arab Emirates. Website: ahadandco.com.
hoaattorneys.com
July 31, 2026
•[ ransomware, leak, finance ]
hoaattorneys.com was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-07-31. Sector: Professional Services. Country: United States of America. Website: hoaattorneys.com. For more than 40 years, Beaumont Tashjian has provided common interest developments with the legal e...
svfcu.org
August 29, 2026
•[ ransomware, finance ]
svfcu.org was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-08-29. Sector: Financial Services. Country: United States of America. Website: svfcu.org. Susquehanna Valley Federal Credit Union is a member-owned financial institution that offers a range...
https://www.roundshield.com/
July 1, 2026
•[ ransomware, finance, hack ]
https://www.roundshield.com/ was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-07-01. Sector: Professional Services. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.roundshield.com. 400gb
CUI Agency
June 30, 2026
•[ ransomware, finance ]
CUI Agency was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-06-30. Sector: Professional Services. Country: United States of America. Website: cuiagency.com. ***.com zoominfo.com/c/cui-agency/397459082 CUI Agency, a family-owned independent insurance firm founded in Utah in 1969. Headquartered in the Salt Lake City area, the company specializes in risk management, offering comprehensive commercial insurance, employee benefits, personal lines, and bonds. They provide tailored insurance solutions designed to mitigate risks and protect the assets of businesses and families across the region
Oron Law Firm
June 30, 2026
•[ ransomware, leak, finance ]
Oron Law Firm was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-06-30. Sector: Professional Services. Country: Switzerland. ***.com/c/eilon-oron-attorneys/1341420873 Oron Law Firm, a legal practice specializing in traffic law, traffic accidents, and torts. Founded by Adv. Ilon Oron,The team provides comprehensive legal representation for licensing issues, accident claims, and traffic violations, offering 24/7 customer support to assist their clients.
Ayres Carr & Sullivan, P.C.
June 27, 2026
•[ ransomware, finance ]
Ayres Carr & Sullivan, P.C. was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-06-27. Sector: Professional Services. Country: United States of America. Ayres Carr & Sullivan, P.C. is a longstanding, general civil practice and trial law firm based in Indianapolis, Indiana. Tracing its roots back to 1914, the firm serves clients across the state with a focus on civil litigation, trial practice, and specialized matters including probate, bankruptcy, and corporation law. Primary Location: 251 E. Ohio St., Suite 500, Indianapolis, IN 46204 Primary Practice Areas: Civil Litigation, Trial Practice, Personal Injury, Corporation Law, Probate, and Bankruptcy Key Attorneys: William S. Ayres, John R. Carr III, and Bret Clement https://www.***.com/company/ayres-carr-&-sullivan-pc
Al Dhow Group
June 24, 2026
•[ ransomware, manufacturing, healthcare ]
Al Dhow Group was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-06-24. Sector: Transportation. Country: United Arab Emirates. Website: al-dhow.com. ***.com zoominfo.com/c/al-dhow/345585723 Dhow International Holding is a diversified group of companies with a portfolio spanning high-growth and high-impact industries across the GCC region.Their extensive operations encompass a wide range of sectors, including engineering, architectural solutions, hospitality, food & beverage, logistics, healthcare, and venture capital. The group is committed to delivering integrated, end-to-end services while fostering long-term sustainable growth across all its businesses
GIA Partners
June 22, 2026
•[ ransomware, finance ]
GIA Partners was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-06-22. Sector: Professional Services. Country: United States of America. Website: giallc.com. ***.com zoominfo.com/c/gia-partners-llc/347817491 GIA Partners, LLC is a New York-based registered investment advisor specializing in fixed income strategies and credit analysis .The firm focuses on diversified portfolios, including core fixed income, high yield, and emerging market debt, leveraging the extensive experience of its investment team.With over $1 billion in assets under management, GIA emphasizes that credit risk is well-compensated and diversifiable to generate excess returns for its clients
Royal Thai Navy Housing Cooperative
June 22, 2026
•[ ransomware, government, finance ]
Royal Thai Navy Housing Cooperative was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-06-22. Sector: Government & Defense. Country: Thailand. Website: kehanavycoop.com. ***.com Royal Thai Navy Housing Cooperative Limited, a service organization based in Bangkok, Thailand.It primarily manages housing projects like "Navy Place," offering residential units for sale and rent to naval personnel and members.Additionally, the cooperative provides financial services such as member shares, loans, and deposits, alongside educational scholarships for members children
Md Lewis
July 3, 2026
•[ ransomware, finance ]
Md Lewis was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-07-03. Sector: Professional Services. Country: United States of America. Website: www.mdlewiscpa.com.
TQ Financial Services
July 3, 2026
•[ ransomware, finance ]
TQ Financial Services was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-07-03. Sector: Financial Services. Website: www.tqfinancials.com.
Deutsche Bank
July 4, 2026
•[ ransomware, finance ]
Deutsche Bank was listed as a victim on the leak site of the unsafe ransomware group; the attack is estimated to have taken place on 2026-07-04. Sector: Financial Services. Country: Germany. Website: db.com. Revenue: 30 billion
Dunagan Associates
July 3, 2026
•[ ransomware, finance, retail ]
Dunagan Associates was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-07-03. Sector: Professional Services. Country: United States of America. Website: dunaganassociates.com. Provides services in residential real estate and insurance
Solventa & Riskmetrica | Calificadora de Riesgos
July 6, 2026
•[ ransomware, finance ]
Solventa & Riskmetrica | Calificadora de Riesgos was listed as a victim on the leak site of the Doommageddon ransomware group; the attack is estimated to have taken place on 2026-07-06. Sector: Financial Services. Country: Paraguay. Website: syr.com.py. Status: upcoming | Files: 0 files | Deadline: 2026-07-08T00:00:00Z
