Smith, Gambrell & Russell, LLP
November 5, 2026
•[ ransomware, finance ]
Smith, Gambrell & Russell, LLP was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-11-05. Sector: Professional Services. Country: United States of America. They offered $272.500 to keep the data from being published.
Scry Analytics
November 6, 2026
•[ ransomware, leak, technology ]
Scry Analytics was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-11-06. Sector: Technology. Country: United States of America. data analytics and AI services United States | Core banking customer and signer records of a United States private banking client: names, account records, signer roles, addresses and contact details; A global insurance group party master of 7,904 records of legal entities with relationship structures; Production call transcripts and recorded customer calls of the support platform you operate, with consumer names and mobile numbers; Proof that bank and insurer client data was held under contract | [NOT PAID EXPOSED]
Resource Consultants
November 6, 2026
•[ ransomware, leak, finance ]
Resource Consultants was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-11-06. Sector: Professional Services. Country: United States of America. precious metals dealer United States | Customer and buyer records of a United States precious metals dealer: 12,920 contact records from its live customer relationship database, held as full September 2026 backups; Named buyers with home addresses and phones, purchase histories with dollar amounts, and precious metals IRA customer relationships; The complete remainder of the firms document folder: 52,906 files of corporate records, agreements, correspondence and tax return scans | [NOT PAID EXPOSED]
Boyle, Pecharich, Cline, Whittington andStallings
November 6, 2026
•[ ransomware, leak, finance ]
Boyle, Pecharich, Cline, Whittington andStallings was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-11-06. Sector: Professional Services. This law firm has been serving clients in Arizona since 1950, specializing in various legal ar
eas including business law, real estate law, probate, trusts, estate administration, and estat
e planning. They are dedicated to assisting individuals and businesses in Prescott and Yavapai
County with their legal challenges.
Here is the access to 24gb of corporate data. Detailed client information (SSN numbers, passpo
rts, DLs), court files, contracts, financials, lots of confidential files, NDA, and so on.
Click the download button.
You will find several password-free archives. Click on any of them to start the download.
Mutares.com
November 6, 2026
•[ ransomware, manufacturing, finance ]
Mutares.com was listed as a victim on the leak site of the BrainCipher ransomware group; the attack is estimated to have taken place on 2026-11-06. Sector: Manufacturing. Country: Germany. Website: Mutares.com. [AI generated] Mutares SE & Co. KGaA is a German-based private equity holding company headquartered in Munich. It specializes in acquiring and turning around underperforming or non-core businesses divested by larger corporations, operating across sectors such as automotive, engineering, goods & services, and retail. The company operates internationally across Europe and North America, focusing on restructuring and sustainably developing acquired businesses.
Here at Pope and Johnson County Title Company
November 3, 2026
•[ ransomware, finance, government ]
Here at Pope and Johnson County Title Company was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-11-03. Sector: Financial Services. Here at Pope and Johnson County Title Company Pope County Title Company - title insurance & escrow agency2,536,208 files, ~784 GBPope County Title Company / Johnson County Title / Carol Collins Law / Principle Escrow / Principle Intermediary (Russellville, AR) is a title agency closing real-estate deals for First American Title Insurance, running escrow trusts and acting as a qualified intermediary for IRS 1031 like-kind exchanges. Power title plant: 591,000-record county registry, 19832026 data;SoftPro daily closing documents 20202026 plus a SQL backup (fully restored and examined);WordData business documents: 1031 exchanges, escrow registers, HR, taxes, passwords.412 SSNs + 4,549 TaxIDs in the production database; 1,202 buyers/sellers from 2025+; fresh W-2/1099 for all staff (SSN, wages, addresses);scans of passports, driver licenses and Social Security cards of staff and clients;bank portal passwords in plain spreadsheets, plus security answers; Centennial / FSB account numbers, wire instructions, FUND escrow ledgers 20242026;owners' personal finances: joint 1040 returns 20022018 (spouses' SSNs), medical bills, investment accounts, SSA retirement application 12/2024;5th Judicial District criminal-case materials (the owner is a sitting public defender): Cellebrite phone extractions of defendants, jury instructions;law-practice case files: divorces, guardianships, estates. More
USClaims
October 29, 2026
•[ ransomware, finance ]
USClaims was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2026-10-29. Sector: Financial Services. Country: United States of America. Website: usclaims.com. Finance
Company #123
November 3, 2026
•[ ransomware, finance ]
Company #123 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-11-03. Country: United States of America. precious metals dealer United States | [PENDING EXPOSURE]
fidepartners.com
November 3, 2026
•[ ransomware, finance ]
fidepartners.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-11-03. Sector: Financial Services. Country: Spain. Website: fidepartners.com. .
Goldsmith & Hull
November 4, 2026
•[ ransomware, finance, healthcare ]
Goldsmith & Hull was listed as a victim on the leak site of the Aoqin ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Professional Services. Country: United States of America. The Law Offices of Goldsmith & Hull A.P.C. specializes in providing legal representation in various areas of law, including personal injury, medical malpractice, and insurance matters. They offer services such as collection, subrogation, and financial guarantee insurance, catering to both retail and commercial clients. The firm is experienced in handling cases in all Federal and State courts of California. Their intended clients include individuals seeking personal injury claims and Fortune 500 companies requiring collection services. Status: Not paid. Data publication: 2026-11-11 08:00 UTC. Revenue: $5M. Employees: 50. Data type: legal, personal, clientsData, confidential.
Petroshahd(Enap Sipetrol International - Egypt Branch)
November 4, 2026
•[ ransomware, energy, finance ]
Petroshahd(Enap Sipetrol International - Egypt Branch) was listed as a victim on the leak site of the Aoqin ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Energy & Utilities. Country: Chile. Established in 1950 and headquartered in Las Condes, Chile, ENAP is engaged in the exploration, production, and refining of hydrocarbons and their derivatives. ENAP performs logistical and site maintenance to operational sites. Status: Not paid. Data publication: 2026-11-11 11:00 UTC. Revenue: $504.9M. Employees: 5000. Data type: confidential, clientsData, banking.
IHG Hotels & Resorts (Estate)
November 3, 2026
•[ ransomware, misconfiguration, leak ]
IHG Hotels & Resorts (Estate) was listed as a victim on the leak site of the BYOD ransomware group; the attack is estimated to have taken place on 2026-11-03. Sector: Hospitality. Country: United Kingdom of Great Britain and Northern Ireland. Nice LDAP Binding Password being '123'. Rotating things won't really save you casue it's not hard to hop back on your network. Anyways, we now have; Customer Data, AWS Keys, Full Access to CyberArk, Complete Employee PII, Booking information included but not limited to, guest name, billing address, company, rate code, room charges, taxes, spend, property & stay dates. We also have the loyalty data store. Additionally we have reservation and payment ledgers for the folio reservation (guest name, address, phone, email, arrival and departure, rate, property) with Access to the AD + All Financial Records. This affects the big names such as Six Senses, Holiday Inn, Holiday Inn Express, Staybridge Suites, Garner, Candlewood, Crowne Plaza, Mayfair Hotel, etc etc you can pick up what we are putting down at this point. Anyways, you know where to find us (contact tab). We will take you down when communication has been established between our team and yours.
Juge, Napolitano, Ruli, Putfark & Pittman
November 4, 2026
•[ ransomware, leak, healthcare ]
Juge, Napolitano, Ruli, Putfark & Pittman was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Professional Services. Juge, Napolitano, Ruli, Putfark & Pittman Juge, Napolitano, Ruli, Putfark & Pittman / 'WC Defense' - insurer & corporate defense law firm.The Juge Firm (Metairie / Covington, LA, founded 1983) is one of the oldest workers' compensation defense law firms, protecting employers, insurers and TPAs against injured workers' claims.Clients (148 client-guideline files): Sedgwick, Gallagher Bassett, Broadspire/Crawford,ESIS/ACE, AIG, Allstate, Chubb, Zurich, Amazon, Walmart, Home Depot, CVS Health, FedEx, Lyft, Costco, Hilton, Northrop Grumman, State Farm,Travelers, Coca-Cola, Fluor, GEO Group, Archdiocese of New Orleans, the cities of New Orleans / Baton Rouge / Shreveport, and others.2,383,324 files, ~3.2 TB.- 4,477 full workers' comp defense case files: 175,993 PDFs, 73,239 DOCX, 61,622 DOC, 55,798 MSG emails, 28,244 TIF scans;- claimant medical imaging: 6,461 DICOM files (MRI/CT/X-ray);- 28,410 medical EOBs and disputed LDOL-WC-1008 claims (full PII + diagnoses of injured workers);- 1,884 new-file intake sheets with complete claimant PII (SSN, address, DOB, injury);- 3,265 counterparty W-9 forms (EINs, signatures, current 20242025);- 850 claimant surveillance videos ('Surveillance', 214 GB) - covert footage of injured workers;- inbound attorney-correspondence faxes, live ECF/PACER court logins, and 148 confidential insurer client guidelines. More
Company #132
November 4, 2026
•[ ransomware, finance ]
Company #132 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-11-04. Country: United States of America. insurance brokerage United States | [PENDING EXPOSURE]
Krishnan
November 4, 2026
•[ ransomware, finance ]
Krishnan was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-11-04. Krishnan Company is a certified public accounting firm with over 25 years of experience, dedica
ted to helping businesses and individuals achieve their financial and business goals. The firm
offers a wide range of personalized services, including tax preparation, planning, and strategy
, ensuring a comprehensive approach to client needs.
We will upload 27gb of corporate data soon. Detailed employee and client personal information (
passports, drivers licenses, SSNs, medical reports, VISAs, registration docs and so on), intern
al confidential files, contracts and agreements, client information, projects, NDAs and so on.
megastarfinancial.com
November 4, 2026
•[ ransomware, finance ]
megastarfinancial.com was listed as a victim on the leak site of the BrainCipher ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Financial Services. Website: megastarfinancial.com. [AI generated] N/A
I don't have verified, reliable information about a company operating at "megastarfinancial.com." Rather than speculate about a financial services entity's operations, country of registration, or legitimacy, I'd be providing fabricated details, which is especially risky in a threat intelligence context where accuracy about financial sector entities matters for fraud assessment.
If you need to verify this domain, I'd suggest checking WHOIS registration data, corporate/financial regulator registries in suspected jurisdictions, and domain reputation or scam-report databases.
tritonclaims.com
November 4, 2026
•[ ransomware, finance ]
tritonclaims.com was listed as a victim on the leak site of the BrainCipher ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Financial Services. Country: United States of America. Website: tritonclaims.com.
hhjcpa.com
November 4, 2026
•[ ransomware, finance, leak ]
hhjcpa.com was listed as a victim on the leak site of the BrainCipher ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Professional Services. Country: United States of America. Website: hhjcpa.com. [AI generated] N/A
I don't have reliable, verified information about a specific company operating at the domain "hhjcpa.com." While the domain name suggests it could be associated with a CPA (Certified Public Accountant) firm, likely offering accounting, tax, or financial advisory services, I cannot confirm details such as its specific business operations, industry positioning, size, or country of operation without risking providing inaccurate or fabricated information.
Homestead Creamery
November 4, 2026
•[ ransomware, leak, finance ]
Homestead Creamery was listed as a victim on the leak site of the Dark Project ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Agriculture and Food Production. Country: United States of America. Website: www.homesteadcreameryinc.com. About Homestead Creamery Homestead Creamery specializes in premium dairy products made from milk sourced from local A2A2 cows. They offer minimally pasteurized milk, rich ice cream, and all-natural lemonade, all crafted to preserve flavor and quality. Their products are available in returnable glass bottles and can be found in various stores. The company aims to provide delicious, wholesome dairy options for consumers who appreciate quality and taste. As a result of the attack on Company Homestead Creamery, more than 70 GB of confidential data was stolen. More than 120,000 files were not secured by Company and contain data such as banking and other financial information, as well as employees' personal data.
StrucSure Home Warranty
November 4, 2026
•[ ransomware, finance ]
StrucSure Home Warranty was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Financial Services. Country: United States of America. Website: www.strucsure.com. United States
