MKS Transformator
June 20, 2026
•[ ransomware, manufacturing, financial ]
MKS Transformator was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-06-20. Sector: Manufacturing. Country: Turkey. Website: www.mksltd.net. - Accounting / Finance Documents- Projects Data, Purchasing / Procurement Documents- Quality / Document Control- Maintenance, and HR documents- Production / Manufacturing Data
The Mountain
July 19, 2026
•[ ransomware, financial ]
The Mountain was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-07-19. Sector: Other. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.themountaincompany.co.uk. - HR & Payroll Data- Financial & Accounting Records- Payment & Credit Card Data- Customer & CRM Data- Orders & Supply Chain Data- SharePoint & Business Application Data
DUCON
July 28, 2026
•[ ransomware, manufacturing, financial ]
DUCON was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-07-28. Sector: Manufacturing. Country: Colombia. Website: ducon.com.co. Unauthorized access has been gained to the company's confidential files, including client data, proprietary R&D, and financial documentation.
minigrip.com.mx
July 28, 2026
•[ ransomware, manufacturing, financial ]
minigrip.com.mx was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-07-28. Sector: Manufacturing. Country: Mexico. Website: minigrip.com.mx. Unauthorized access has been gained to the company's confidential files, including client data, proprietary R&D, and financial documentation.
Della Casa Group AG
July 28, 2026
•[ ransomware, leak, financial ]
Della Casa Group AG was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-07-28. Sector: Other. Country: Switzerland. Website: dellacasa.group. 041 785 61 31 / 041 785 61 46 / info@dellacasa.group
041 785 61 36 / s.pajaziti@dellacasa.group
041 785 61 30 / gdc@dellacasa.group
041 785 61 33 / a.stirnimann@dellacasa.group
041 785 61 43 / a.marku@dellacasa.group
041 785 61 42 / d.meier@dellacasa.group
***************************************************
(240,391,913,425 bytes)
86,332 Files, / 15,359 Folders
Personal / Client Information
Accounting / Finance
Details of current and future projects
Other
Franz Krause artworksgroup
July 28, 2026
•[ ransomware, financial, technology ]
Franz Krause artworksgroup was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-07-28. Sector: Other. Country: United States of America. Franz Krause artworksgroup is a streamlined agency that leverages extensive experience in media
and event management to deliver high-quality services while maintaining budget efficiency. The
company emphasizes strong relationships and a commitment to client satisfaction.
We will upload 81gb of corporate data soon. Employee information, detailed client information,
financials, contracts and agreements, NDAs, confidential files, etc.
Northwood Country Club
July 9, 2026
•[ ransomware, financial, retail ]
Northwood Country Club was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-07-09. Sector: Hospitality. Country: United States of America. Website: northwoodcountryclub.org. Northwood Country Club is a private club located in Meridian, Mississippi, known for its beauti
ful facilities and convenient city location. The club offers a range of amenities including cha
mpionship golf, clubhouse dining, swimming pool, tennis, and fitness services.
We will upload corporate data soon. Employee information (name, home addresses, contacts (emerg
ency ones) and so on), financials, contracts and agreements, etc.
Tong Kong E & E Sdn Bhd (95907X)
July 24, 2026
•[ ransomware, manufacturing, financial ]
Tong Kong E & E Sdn Bhd (95907X) was listed as a victim on the leak site of the Black X ransomware group; the attack is estimated to have taken place on 2026-07-24. Sector: Manufacturing. Country: Malaysia. Website: https://wa.me/tongkong. It contains sensitive data, including customers and banking records.
Gardiner Family Chiropractic
July 31, 2026
•[ ransomware, healthcare, financial ]
Gardiner Family Chiropractic was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-07-31. Sector: Healthcare. Country: United States of America. Website: gardinerfamilychiropractic.com. Gardiner Family Chiropractic has been providing medical services to residents of Gardiner and the surrounding area since 1989. However, it is not responsible for its patients and makes no attempt to ensure the security of its stored information. Therefore, patient data, client records, medical histories, and internal company financial information have been compromised and are being made available to you.
Oztugotomotiv
June 3, 2026
•[ ransomware, manufacturing, financial ]
Oztugotomotiv was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-06-03. Sector: Manufacturing. Country: Turkey. ztu Otomotiv & Endstri is a Turkish company established in 1990 in Bursa, specializing in the production of high-precision components for the automotive, industrial, defense, and aerospace sectors.
The company offers comprehensive services including design, mold manufacturing, and serial production of plastic, metal, and rubber parts, as well as industrial seals and vibration dampers.
ztu Otomotiv utilizes modern equipment (high-tonnage presses, progressive dies) and adheres to international quality standards, including a zero-defect principle and compliance with OEM standards.
Financial performance (not publicly disclosed, but the company positions itself as a stable business):
As of 2025, the company reports over 35 years of successful operations, more than 300 employees, and three production facilities with a total enclosed area of 12,000 m.
Structure and facilities:
The company operates three production sites in Hasantla, Nilfer (Bursa), and Adapazar.
As of 2025, the workforce comprises over 300 specialists. Production capabilities include plastic injection, metal forming, and rubber molding lines.
Laek: 100GB
WE HAS COLLECTED SUCH DATA AS:
- Confidential documents
- Clients Data
- NDA
- Financial data
- Operations
- Corporate data
- Business Agreements
- Development
- Financial databases, all transactions, all clients
And a lot of other VERY IMPORTANT information!
Hal Otey Financial
June 3, 2026
•[ ransomware, financial, leak ]
Hal Otey Financial was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-06-03. Sector: Financial Services. Hal Otey Financial offers a range of financial services including wealth management, financial
planning, retirement planning, investment management, estate planning, and tax planning.
We will upload corporate data soon. Lots client data (passports, DLs, social security numbers,
health and insurance files and so on), contracts and agreements, detailed financials, projects,
etc.
Krum Public Library
May 15, 2026
•[ ransomware, government, financial ]
Krum Public Library was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-05-15. Sector: Government & Defense. Country: United States of America. Website: www.krumlibrary.org. - Financial Documents- HR Data- Supervisor's Information
T/CCI Manufacturing
June 5, 2026
•[ ransomware, manufacturing, leak ]
T/CCI Manufacturing was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-06-05. Sector: Manufacturing. T/CCI is a world leader in compressor technology including reciprocating, swash plate, wobble p
late, variable compressor and air brake compressor designs. We are an Original Equipment Manufa
cturer for trucking, off-highway, agriculture/construction, specialty vehicle and transport ref
rigeration markets.
We will upload 35gb of corporate data soon. Employee personal docs (passports, DLs, SSNs, payme
nt details, credit cards and so on), contracts and agreements, client and partners information,
NDAs, financials, lots of confidential files, etc.
Oaks Park
May 20, 2026
•[ ransomware, retail, financial ]
Oaks Park was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-05-20. Sector: Retail & E-Commerce. Country: United States of America. Website: oakspark.com. Oaks Amusement Park, located in Portland, Oregon, has been a family-friendly entertainment dest
ination since 1905, offering a variety of attractions including rides, a roller rink, and a min
i golf course.
We will upload 10gb of corporate data soon. Employee information, credit cards, payment details
, lots of contracts and agreements, NDAs and so on.
Centre Ellipse
June 9, 2026
•[ ransomware, healthcare, leak ]
Centre Ellipse was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-06-09. Centre Ellipse Strasbourg is an ambulatory medical facility that offers personalized care pathw
ays to improve the health of patients with chronic diseases or syndromes. The center features a
multidisciplinary team that provides both physical and psychological support, focusing on card
iac rehabilitation and mental health services.
We will upload 142gb of corporate data soon. Health information for at least 500 patients, empl
oyees personal information, financials, lots of contracts, confidential agreements and so on.
SMPC Architects
June 9, 2026
•[ ransomware, leak, financial ]
SMPC Architects was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-06-09. Sector: Professional Services. SMPC Architects is an architecture firm based in Albuquerque, New Mexico, specializing in creat
ing innovative and sustainable spaces. The firm focuses on community-oriented projects and coll
aborates closely with clients to meet their needs.
We will upload 163gb of corporate data soon. Employee personal information (passports, DLs, SSN
cards and so on), financials, lots of contracts and confidential settlements, NDAs, clients an
d partners information, etc.
Spray Equipment & Service Center
June 9, 2026
•[ ransomware, manufacturing, leak ]
Spray Equipment & Service Center was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-06-09. Sector: Professional Services. Spray Equipment & Service Center is a leading provider of consultation, turnkey industrial fini
shing equipment, and training services for coating applications. They cater to clients seeking
efficient and high-performance coating solutions, enhancing product quality and streamlining pr
oduction processes.
We will upload 26gb of corporate data soon. Employee personal information (DLs, w-9 forms and s
o on), financials, contracts, projects info, drawings, partners information, etc.
nottingham.ac.uk
June 9, 2026
•[ ransomware, leak, education ]
nottingham.ac.uk was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-06-09. Sector: Education. Country: United Kingdom of Great Britain and Northern Ireland. Website: nottingham.ac.uk. Over 40 GB of billing and payment records, credit card and payment details, student finance data, and campus portal exports from the University of Nottingham and its Malaysia and China campuses was compromised, including payer contact information, transaction amounts, IP addresses, full names, home addresses, postcodes, email addresses, phone numbers, dates of birth, and other internal campus data. | Size: 19GB+ (compressed) | Updated: 10 June 2026 | SHA256: d3aaaf06dd857deec3866072cc2876780623d880992e8d735094db4779535873
Sayre Associates
June 10, 2026
•[ ransomware, leak, technology ]
Sayre Associates was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-06-10. Sector: Professional Services. Country: United States of America. Website: sayreassociates.com. (Including clients, projects, emails and financial documents) Sayre Associates, Inc. is a civil engineering and land surveying firm based in Sioux Falls, South Dakota, established in 1969. The company offers a range of services including land development planning, parks and recreation facilities design, drainage and erosion control, and construction administration. They focus on delivering high-quality solutions through collaboration and innovation, serving clients in South Dakota, Iowa, and Minnesota. Their talented team of engineers and surveyors is dedicated to improving community efficiency and quality of life.
The Midland Theatre
June 10, 2026
•[ ransomware, leak, financial ]
The Midland Theatre was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-06-10. Sector: Hospitality. Country: United Kingdom of Great Britain and Northern Ireland. The Midland Theatre originally opened in December of 1928 in Newark, Ohio. The theatre draws te
ns of thousands of visitors each year to a wide array of programming from family-friendly event
s and holiday specials to top artists in every genre.
We will upload corporate data soon. Employee personal information (w-9 forms and other docs), f
inancials, credit cards, client, partners and guests information, NDAs, etc.
