PT. Bank Perekonomian Rakyat Bintan
August 22, 2026
•[ ransomware, finance ]
PT. Bank Perekonomian Rakyat Bintan was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-08-22. Sector: Financial Services. Country: Indonesia. [AI generated] PT. Bank Perekonomian Rakyat Bintan is an Indonesian rural bank, known as a Bank Perkreditan Rakyat or BPR, operating in the Bintan regency of Riau Islands province, Indonesia. It provides basic financial services including savings, deposits, and credit facilities primarily to local communities, small businesses, and micro-enterprises. As a rural bank, it operates under supervision of the Indonesian Financial Services Authority, OJK, serving the local economy.
Abacus Advisors
August 22, 2026
•[ ransomware, finance ]
Abacus Advisors was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-08-22. Sector: Financial Services. Website: abacusadv.com.
Patel
August 22, 2026
•[ ransomware, finance ]
Patel was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-08-22. Country: United States of America. Website: patelcpaoffice.com. [AI generated] N/A
The name "Patel" is too generic to identify a specific company with reliable information. It is a common surname and business name used by numerous unrelated entities across many industries and countries. Please provide additional context such as the full company name, industry, or country to allow for an accurate description.
Netim Company
August 23, 2026
•[ ransomware, technology, finance ]
Netim Company was listed as a victim on the leak site of the DYSPHOR1A ransomware group; the attack is estimated to have taken place on 2026-08-23. Sector: Technology. Country: France. Website: netim.com. Netim is a French domain name registrar and web hosting provider. Full compromise of internal systems source code, infrastructure IPs, payment processing databases, customer PII, and internal business data.
Brookview Financial
August 24, 2026
•[ ransomware, finance ]
Brookview Financial was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-08-24. Sector: Financial Services. Country: Canada. Website: www.brookviewfinancial.com. (data of many thousands of customers, including credit reports, SSNs, addresses, etc.) Brookview Financial is a boutique private lender specializing in quick-close financing solutions for real estate projects. Established in 1992, the company has served as a trusted capital partner for thousands of real estate investors across the nation. They offer a range of loan programs, including commercial bridge loans, fix & flip loans, and special situation financing, with amounts ranging from $75,000 to over $50 million. Known for their personal service and flexible terms, Brookview can close deals in as little as 7 days.
Jones, Little & Co., CPAs, LLP
August 24, 2026
•[ ransomware, finance, leak ]
Jones, Little & Co., CPAs, LLP was listed as a victim on the leak site of the Dark Project ransomware group; the attack is estimated to have taken place on 2026-08-24. Sector: Professional Services. Country: United States of America. Website: www.jonesandlittle.com. About Jones, Little & Co., CPAs, LLP Jones, Little & Co., CPAs, LLP is a professional accounting firm that offers a wide range of services including business accounting, tax preparation, and IRS problem resolution. They cater to small businesses, non-profit organizations, and specialized industries such as auto dealers and retailers. At least 100 gigabytes of company dataincluding financial records, internal files, and employee personal informationwere stolen in a cyberattack. Hackers encrypted the firm's systems after exfiltrating the documents, leaving operations paralyzed.
SHAHEEN LAW GROUP PLC - Richmond, Virginia, USA
August 24, 2026
•[ ransomware, leak, finance ]
SHAHEEN LAW GROUP PLC - Richmond, Virginia, USA was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-08-24. Sector: Professional Services. Country: United States of America. Website: slgjustice.com. Family law firm, established 1995 by Victor A. Shaheen (2025 - the General Assembly of Virginia honored him with a resolution; google it, it is touching). Now run by his three sons. 48 employees across four offices: Richmond, Midlothian, Virginia Beach, Newport News. What do they do? They close 150+ real estate transactions EVERY MONTH for some of the largest corporate relocation programs in America. When a Fortune-500 moves an employee to Virginia, this firm holds that employee's Social Security Number, bank wiring details, home address, family identities, and sometimes their medical clearance. They hold everyone's future in a shared folder. We now hold the folder. WHAT WE TOOK 36,788 files 27GB 21,789 fully read 67,000+ SSN patterns (their own dedup says 6,017 real people we will let their customers decide which number to believe) EVIDENCE SERIES PREVIEW (from their actual files) - S1 DEEDS WITH SOCIAL SECURITY NUMBERS File: "5053815 - Unsigned Deed.docx" (verbatim from their server): "***-**-XXXX B H Social Security Number ***-**-XXXX J H Social Security Number 10356 Ashburn Road, North Chesterfield, VA 23235" File: "Kelley 5042085 - DEED.docx": "PURCHASER(S): N S SELLER'S NAME: S E. K SS#: ***-**-XXXX ...including the withholding of twenty percent (20%) of the sales proceeds." FIRPTA: foreign sellers. IRS will want this list. We have it. Thousands of these. Every deed folder = a name, a number, an address, a transaction. Their client roster IS the leak. - S3 INSIDE THEIR BANKING & THEIR NETWORK File: "shared_Accounting/Banking/Other Banking/Shaheen DDA Statements SunTrust DDA" (email from SunTrustOnlineCourier to their own staff headers verbatim): Received: from barracuda.shaheenlaw.com ([10.0.0.6]) by ricdcex1.shaheenlaw.com ... X-ASG-Debug-ID: 1291233029-... for ; Wed, 1 Dec 2010 Why we publish an email HEADER: their internal map is in it. Barracuda at 10.0.0.6. Exchange "ricdcex1". Domain SHAHEENWORLD. We did not forget how to enter. Neither will the next group, when we sell the map. 150 banking statement attachments ride along in this folder. - S5 THE CLIENT LIST, WRITTEN IN FOLDERNAMES They named folders after their customers. Verbatim paths: shared_PENDING_SALE/HENNY/Closed Files/ Wisniewski-Markel, Suzanne_5027384_12263 Eagle ... Merza, Jamal & Adrienne_5027826_811 Woodberry ... Name, file number, STREET ADDRESS in the path itself. Marketing lists sell for money. This one is annotated with purchase history. Relocation buyers are premium leads. - S2 MEDICAL - S4 LITIGATION Held. 120 medical files exist (their own audit counted them). Litigation: we confirm their December escrow dispute is public (Porchlight Homes v. Almeida & Shaheen, Henrico google it, BizSense covered it). Virginia residents: 18.2-186.6. Illinois relocations: BIPA. Opposing counsel and journalists: samples on request. Media & researchers: samples on request, we answer fast We keep our word to everyone who pays. We keep it also to everyone who does not.
Consultores de Seguros
August 24, 2026
•[ ransomware, finance ]
Consultores de Seguros was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-24. Sector: Financial Services. Website: www.consegsa.com.
Studio Legale ESE
August 25, 2026
•[ ransomware, finance ]
Studio Legale ESE was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2026-08-25. Sector: Professional Services. Country: Italy. Website: studiolegaleese.it. Law Firms , Legal Services
Northern Leasing Systems
August 26, 2026
•[ ransomware, finance, hack ]
Northern Leasing Systems was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-26. Sector: Financial Services. Country: Canada. Website: www.northerndirect.com.
finodayacapital.com
August 26, 2026
•[ ransomware, finance, technology ]
finodayacapital.com was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-08-26. Sector: Financial Services. Website: finodayacapital.com. Finodaya Capital Private Limited is an Indian tech-enabled Non-Banking Financial Company (NBFC) incorporated on Septembe...
Capitol Mechanics
August 27, 2026
•[ ransomware, leak, manufacturing ]
Capitol Mechanics was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-08-27. Sector: Transportation. Country: United States of America. Capitol Mechanics , fresh databases, important docs [Size: 120.9 MB | Sector: Finance, Transportation]
LGG Advisors
August 27, 2026
•[ ransomware, finance ]
LGG Advisors was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-27. Sector: Professional Services. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.lggadvisors.com.
fpmanagement.nl
August 23, 2026
•[ ransomware, finance ]
fpmanagement.nl was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-08-23. Sector: Professional Services. Country: Netherlands. Website: fpmanagement.nl. FP Management BV is a licensed trust office based in Rotterdam, Netherlands, offering a range of ser...
singleton.com
August 27, 2026
•[ ransomware, finance ]
singleton.com was listed as a victim on the leak site of the chaos ransomware group; the attack is estimated to have taken place on 2026-08-27. Country: Australia. Website: singleton.com. Founded in 1986, Singleton Reynolds is a law firm. They are headquartered in Vancouver, British Columbia.
ETNA Software
August 27, 2026
•[ ransomware, technology, finance ]
ETNA Software was listed as a victim on the leak site of the Eclipse ransomware group; the attack is estimated to have taken place on 2026-08-27. Sector: Technology. Country: Italy. Website: etnasoft.com. ETNA Software is a company that provides white-label online trading solutions for brokers and FinTech firms, including mobile and web trading platforms. Their products are designed to help retail broker-dealers launch trading capabilities efficiently and cost-effectively.
cutlercapital
August 27, 2026
•[ ransomware, finance ]
cutlercapital was listed as a victim on the leak site of the lynx ransomware group; the attack is estimated to have taken place on 2026-08-27. Sector: Financial Services. Cutler Capital Management, LLC of Worcester, MA is an investment advisory firm registered with the Securities and Exchange Commission, specializing primarily in investing in convertible securities, community banks and real estate investment trusts to provide growth and income to high-net-worth investors, corporations, family offices, endowments and charitable foundations. Cutler currently manages $300 million in assets.
ITC Properties Group Limited
August 29, 2026
•[ ransomware, finance, retail ]
ITC Properties Group Limited was listed as a victim on the leak site of the Orova ransomware group; the attack is estimated to have taken place on 2026-08-29. Sector: Other. Country: Hong Kong. Website: www.itcproperties.com. ITC Properties is an investment holding company and the Group is principally engaged in development of, selling of and investment in properties in Macau, Hong Kong, the People's Republic of China (the "PRC") and Canada; securities investments and provision of loan financing services.
FE CREDIT
August 28, 2026
•[ ransomware, finance ]
FE CREDIT was listed as a victim on the leak site of the Black X ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Financial Services. Country: Vietnam. Website: www.fecredit.com.vn. We have obtained the personal information of your company's millions of customers. If the reverse clock is terminated, customer information will be leaked from our site. Please contact us to prevent customer information leakage.
esopartnerscpa
August 18, 2026
•[ ransomware, finance ]
esopartnerscpa was listed as a victim on the leak site of the ZaWoo ransomware group; the attack is estimated to have taken place on 2026-08-18. Sector: Professional Services. Country: China. Website: esopartnerscpa.com. [Unpublished]
