First Secure Bank Group
September 27, 2026
•[ ransomware, finance ]
First Secure Bank Group was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-09-27. Sector: Financial Services. Country: United States of America. First Secure Bank Group is a U.S.-based financial services organization focused on providing community-oriented banking solutions to individuals, families, and businesses. The group operates through affiliated banking institutions, including First Secure Bank and The State Bank Group. Its services include personal and business checking and savings accounts, commercial and consumer lending, mortgages, online banking, treasury services, and other financial products. First Secure Bank Group emphasizes personalized customer service, long-term relationships, and supporting the financial growth of the communities it serves. Through its network of banking institutions, the group provides accessible financial solutions while maintaining a strong focus on local businesses, community development, and responsible banking practices.
The company headquarters is located in 2175 Oneida St, Joliet, IL 60435, USA. 51-200 Employees
Asesoría FAR
September 27, 2026
•[ ransomware, finance ]
Asesora FAR was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-09-27. Sector: Professional Services. Asesora FAR is a Barcelona-based firm providing property management, accounting, tax, and business advisory services.
Dediserve Ltd
September 28, 2026
•[ ransomware, technology, finance ]
Dediserve Ltd was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Technology. Country: United Kingdom of Great Britain and Northern Ireland. Cloud infrastructure provider (iomart group) Dublin, Ireland / FRA1 Frankfurt DC | The complete customer register of the FRA1 cloud 167 tenant accounts with infrastructure details; Disk images of tenant servers: a regulated forex broker's portal (payment gateway configuration, trading-account records), a payment services provider's systems including its internal password vault, and a production real-estate platform; The provider's internal operations mailbox and monitoring configuration | All 46 FRA1 servers are paused and intact - restorable automatically within the hour of settlement. | [ACTIVE: deadline 2026-10-01 05:16 UTC]
lfgholding.com
September 28, 2026
•[ ransomware, finance ]
lfgholding.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Other. Country: Switzerland. Website: lfgholding.com. The company operates as an independent, partner-owned wealth-management group and manages a portfolio of specialized financial-services businesses. Its operating companies
bhn-expertise.com
September 28, 2026
•[ ransomware, finance ]
bhn-expertise.com was listed as a victim on the leak site of the threeam ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Professional Services. Country: Germany. Website: bhn-expertise.com. BHN Expertise is an accounting firm that helps businesses manage their financial records and grow smartly. With offices across Normandy in cities like Bolbec, Caen, Rouen, and Yvetot, they provide local support and personalized accounting services
oterolaw.com
September 29, 2026
•[ ransomware, finance ]
oterolaw.com was listed as a victim on the leak site of the m3rx ransomware group; the attack is estimated to have taken place on 2026-09-29. Sector: Professional Services. Country: United States of America. Website: oterolaw.com. +1 (305) 567-9000. Otero Geeza Law, P.A. is a professional service corporation that offers high-quality legal representation to individuals and business organizations in South Florida and beyond. The firm specializes in various areas of law, including real estate, corporate and business law, litigation, and estate planning. Their mission is to provide accessible, responsive, and skilled legal services while maintaining the highest ethical standards. Otero Geeza Law is dedicated to delivering prompt, personal service and excellent work products to meet the diverse needs of their clients. Stolen: 82.5 GB 106,460 Files
Josee Bendaaa-Guerrero Asociados
September 29, 2026
•[ ransomware, finance, technology ]
Josee Bendaaa-Guerrero Asociados was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-29. Sector: Professional Services. Country: Belize. Website: guybendana.com. guybendana.com Guy Jos Bendaa-Guerrero & Asociados (roots to 1907, Managua, Nicaragua) is the leading intellectual-property boutique in Nicaragua, specializing in trademarks, patents, industrial designs, copyright, plant varieties and anti-counterfeiting, plus corporate law, regulatory (sanitary registrations) and litigation. It traces its lineage over 100 years through three legal dynasties founders Henry Caldera & Henry Caldera-Pallais (who secured Nicaragua's first Trademark Law in 1907 and co-founded ASIPI in 1964), then the Caldera generation, and since 1985 Dr. Guy Jos Bendaa-Guerrero (a former judge, law professor, author and ex-president of ANIPI) alongside his wife Blanca Aragn de Bendaa and their son Julin. Recognized as Nicaragua's top IP firm by Chambers and Partners, Legal 500 and World Trademark Review 1000, it serves global pharmaceutical, technology, fashion and consumer-goods clients from its Bolonia district office in Managua. With 510 lawyers
Auren
September 29, 2026
•[ ransomware, finance ]
Auren was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-29. Sector: Professional Services. Country: Spain. Website: auren.es. auren.es zoominfo.com/c/auren/1115886722 AUREN (founded 1998, Madrid) is Spain's leading home-grown multidisciplinary professional-services firm audit, legal/tax advisory, consulting and corporate finance with 104 million revenue in Spain and 1,100+ staff in 15 offices (2,500+ people and 62 offices worldwide). Founded and chaired by Mario Alonso Ayala, it sells an integrated "Big Four-style" service portfolio to mid-market companies with a "humanist, close-to-client" culture, plus standout niches in forensic/expert-witness work, public-sector audit and M&A. In March 2025, Dutch private equity fund Waterland took a 49% stake the first PE investment in a Spanish professional-services firm giving it firepower for acquisitions. Revenue is split roughly Legal 42M, Consulting 35M, Audit 24M, Corporate Finance 3.4M, and the firm is now on a buy-and-build spree (1518 deals planned for 2026, its largest being the absorption of Moore Espaa's Madrid and Barcelona offices).
Samwumed
September 29, 2026
•[ ransomware, healthcare, finance ]
Samwumed was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-29. Sector: Healthcare. Country: South Korea. Website: samwumed.org. samwumed.org zoominfo.com/c/samwumed/346685548 SAMWUMED (founded 1952, Cape Town) is a closed, self-administered medical aid scheme serving South African municipal workers roughly 35,000 members and 73,000 covered lives. It collects about R1.9 billion/year in contributions, kept reserves over R1.3 billion and posted a R14.3 million surplus in 2024 (solvency 68% vs the 25% legal minimum). Plans are income-banded and cheap (from ~R750/month with a 60% employer subsidy), covering hospitals, doctors, medication, dentistry and optics. Led by Principal Officer Francina Mosoeu with a union-appointed board, it administers benefits with Medscheme across a network of private hospital groups. Key problems right now: membership shrinking ~15%/year as young people leave, and an ongoing court battle with the Melomed hospital group over contract exclusions plus the long-term threat of national health insurance reform.
MCAP — MortgageHub commercial lending platform
September 30, 2026
•[ ransomware, finance ]
MCAP MortgageHub commercial lending platform was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Financial Services. Country: Canada. Mortgage securitization and servicing (Canada) Canada | The complete MortgageHub borrower database of a major Canadian mortgage company: seven years of records with social insurance numbers, dates of birth, full addresses, and complete loan and payment histories; The daily commercial servicing book: the full national portfolio of active commercial mortgages with balances, interest rates, credit scores, insurer policy numbers, arrears, and investor reporting fields; The full backup archive of the platform, 2019 through today | [ACTIVE: deadline 2026-10-03 15:00 UTC]
Dr Damiel Pugliese
September 30, 2026
•[ ransomware, finance, healthcare ]
Dr Damiel Pugliese was listed as a victim on the leak site of the lamashtu ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Healthcare. Website: pugliese.lo. Dr. Daniel P. Pugliese is a certified Argentine accountant graduated from the prestigious University of Buenos Aires (U.B.A.). He is officially registered with the Professional Council of Economic Sciences of Buenos Aires (C.P.C.E.C.A.B.A.), which
Blaise C. Bender, PC
September 30, 2026
•[ ransomware, leak, finance ]
Blaise C. Bender, PC was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Professional Services. Country: United States of America. Website: bcbenderlaw.com. The law firm of Blaise C. Bender, PC handles confidential client tax records/working papers, mergers and acquisitions (M&A) and transaction agreements, estate/trust documents, corporate management records, and confidential attorney-client communications, and fails to maintain security. Due to this negligent mishandling, we disclose confidential information that will subject Blaise C. Bender, PC to disciplinary action by the Bar/CPA, penalties under Section 7216 of the Internal Revenue Code and the Texas Privacy Act, civil claims for professional negligence/breach of fiduciary duty/breach of contract, and serious damage to our reputation and clients.
Philippine Savings Bank
August 1, 2026
•[ ransomware, finance ]
Philippine Savings Bank was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-01. Sector: Financial Services. Country: Philippines. Website: psbank.com.ph. psbank.com.ph zoominfo.com/c/philippine-savings-bank/83461899 SBank is widely recognized across the Philippines for its highly accessible Auto and Home Loan programs that make vehicle and property ownership easier for everyday consumers.
One of its most unique financial products is the Flexi Personal Loan, a revolving credit line that allows clients to withdraw, repay, and reuse funds flexibly
www.buzztrading104.co.za
August 2, 2026
•[ ransomware, manufacturing, finance ]
www.buzztrading104.co.za was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-08-02. Sector: Financial Services. Country: South Africa. Website: www.buzztrading104.co.za. Buzz Trading 104 (Pty) Ltd (also trading as Master Products) is a South African privately owned manufacturer and wholesa...
nigeria.asa-international.com
August 2, 2026
•[ ransomware, finance ]
nigeria.asa-international.com was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-08-02. Sector: Professional Services. Country: Nigeria. Website: nigeria.asa-international.com. ASHA Microfinance Bank Limited (ASA Nigeria) is a Nigerian for-profit deposit-taking microfinance institution, a fully l...
www.dcpartner.co.za
August 2, 2026
•[ ransomware, finance, hack ]
www.dcpartner.co.za was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-08-02. Sector: Professional Services. Country: South Africa. Website: www.dcpartner.co.za. DC Partner (Pty) Ltd is a South African market-leading Payment Distribution Agency (PDA), one of only four NCR-accredite...
INTERTRUST AUSTRALIA PTY LTD
August 2, 2026
•[ ransomware, finance, technology ]
INTERTRUST AUSTRALIA PTY LTD was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-02. Sector: Professional Services. Country: Australia. Website: www.seedoutsourcing.com.
ecfa.org
August 2, 2026
•[ ransomware, finance, hack ]
ecfa.org was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-08-02. Sector: Professional Services. Country: United States of America. Website: ecfa.org. The Evangelical Council for Financial Accountability (ECFA) is an American accreditation agency founded in 1979 that certifies Christian churches and nonprofits based on financial integrity, board governance, and transparent fundraising. It represents over 2,700 member organizations with billions in collective revenue.
Freedom Claims Management
August 3, 2026
•[ ransomware, finance ]
Freedom Claims Management was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-03. Sector: Financial Services. Country: United States of America. Website: www.freedomclaimsinc.com.
azn.co.jp
August 3, 2026
•[ ransomware, retail, finance ]
azn.co.jp was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-08-03. Sector: Retail & E-Commerce. Country: Japan. Website: azn.co.jp. Founded in 1991, the company specializes in comprehensive asset management, inheritance planning, business succession consulting, real estate advisory services, and
