Brainhunter Companies LLC. and Brainhunter Systems Ltd.
August 3, 2026
•[ ransomware, technology, financial ]
Brainhunter Companies LLC. and Brainhunter Systems Ltd. was listed as a victim on the leak site of the Dark Project ransomware group; the attack is estimated to have taken place on 2026-08-03. Sector: Professional Services. Country: United States of America. Website: www.brainhunter.com. About Brainhunter Companies LLC. and Brainhunter Systems Ltd. Founded in 1995, Brainhunter is an employment agency providing staffing and recruiting services to engineers, information technology, healthcare, and industrial sectors. Brainhunter also offers workplace management products, solutions and consulting, payroll and compliance services, and more. Brainhunter is headquartered in Toronto, Ontario. As a result of the attack on Brainhunter, more than 160 GB of the company's confidential data was stolen, including banking and financial documents, as well as the personal data of employees and customers. At this time, approximately 320,000 files remain unprotected by Brainhunter Foundation.
Sutherland Packaging
July 24, 2026
•[ ransomware, manufacturing, financial ]
Sutherland Packaging was listed as a victim on the leak site of the Dark Project ransomware group; the attack is estimated to have taken place on 2026-07-24. Sector: Manufacturing. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.sutherlandpackaging.com. About SPI Sutherland Packaging LLC is a leading manufacturer specializing in creative digitally printed full-color point-of-purchase displays for brands worldwide. The company offers a range of services including digital printing, retail packaging, and turnkey fulfillment, focusing on delivering custom-blended solutions that meet client demands. With over 50 years of experience, Sutherland Packaging is trusted by global brands for its high-quality and cost-effective solutions. Due to cyberattack on Sutherland Packaging more than "200" Gb of company data was stolen. Leakage contains big amount of sensitive data such as company's customers data, bank and financial information documents. About 250 000 files are not secured by Sutherland Packaging for now.
Storer Transportation and Storer Coachways
July 14, 2026
•[ ransomware, financial ]
Storer Transportation and Storer Coachways was listed as a victim on the leak site of the Dark Project ransomware group; the attack is estimated to have taken place on 2026-07-14. Sector: Transportation. Country: United States of America. Website: www.storerbus.com. The company "Storer Transportation" and "Storer Coachways" was attacked, resulting in the theft of more than 50,000 folders (240+ GB) of the companys confidential information, including more than 1,500 pieces of employee personal data, financial and banking documents, credit card information and a large amount of confidential incident data. Download here: http://pokttabd2hod47ladeeoin22wmq4remyo3wshwvxfuhgqygcbezq2qqd.onion
Thermo King
June 8, 2026
•[ ransomware, financial, leak ]
Thermo King was listed as a victim on the leak site of the Dark Project ransomware group; the attack is estimated to have taken place on 2026-06-08. Sector: Transportation. Country: Canada. Website: thermoking.ca. Due to cyberattack on Genesis more than 70 Gb of company data was stolen. Leakage contains big amount of sensitive data such as company's customers data, bank and financial information documents. About 10 000 files are not secured by THERMO KING for now. Download here: http://wjcml4mxpcvsmjxm33zhjb46nzutxk6g3f5w23fopgpwj6pqjcidiyqd.onion
Ruhrpumpen
July 6, 2026
•[ ransomware, manufacturing, leak ]
Ruhrpumpen was listed as a victim on the leak site of the Dark Project ransomware group; the attack is estimated to have taken place on 2026-07-06. Sector: Manufacturing. Country: Germany. Website: www.ruhrpumpen.com. About Ruhrpumpen Ruhrpumpen is a leading global manufacturer of highly engineered centrifugal and reciprocating pumps. A sophisticated cyberattack in the company's network led to a massive data breach. As a result of the incident, approximately 1 TB of data was leaked, including confidential personal and financial information.
Ohio Living Home Health & Hospice
June 8, 2026
•[ ransomware, healthcare, financial ]
Ohio Living Home Health & Hospice was listed as a victim on the leak site of the Dark Project ransomware group; the attack is estimated to have taken place on 2026-06-08. Sector: Healthcare. Country: United States of America. Website: ohioliving.org. About Ohio Living Founded in 1922, Ohio Living is an experienced not-for-profit provider of life plan communities and services in Ohio. Due to cyberattack at least 600Gb of sensitive data leaked in "Ohio Living Home Health & Hospice" in April 2026. It known that at least 5000 files with personal data were stolen, among whole it contained employee records, driver licenses, patient personal documents including photos, medical records, social security numbers, insurance information, also files with confidential company financial information and bank records covering period for 2022-2026. Download here: http://3i5px2hibsyityv6jixnqba35yz25jekbwwumjdxjqzt3euqsygjx5id.onion/
The Metropolitan Entertainment & Convention Authority
July 7, 2026
•[ ransomware, leak, retail ]
The Metropolitan Entertainment & Convention Authority was listed as a victim on the leak site of the Dark Project ransomware group; the attack is estimated to have taken place on 2026-07-07. Sector: Hospitality. Country: United States of America. Website: omahameca.org. About MECA Omaha MECA is a organization that manages public event venues in Omaha, Nebraska, including the CHI Health Center, Charles Schwab Field, and The RiverFront. Established in 2000, it plays a crucial role in hosting world-class events and fostering community engagement through its facilities. As a result of a successful cyberattack on the company, MECA suffered damage; more than 500 GB of confidential information was stolen, specifically the companys customer data, important financial documents, and the personal data of the organizations employees. About 100 000 files are not secured by domain for now. Download here: http://667k2ck7qlzoqt52i6dq7evcfzko2ezfrhgv6zziccjet2cc653kvbid.onion/
Long-Lewis Automotive Group
August 4, 2026
•[ ransomware, automotive, financial ]
Long-Lewis Automotive Group was listed as a victim on the leak site of the Dark Project ransomware group; the attack is estimated to have taken place on 2026-08-04. Country: United States of America. Website: www.longlewis.com. About Long-Lewis Automotive Group The Long-Lewis Auto Group is Alabamas largest automotive retailer, with origins tracing back to a hardware store founded in Bessemer, Alabama, in 1887. It became one of the nation's very first Ford dealerships in 1915 and operates multiple dealerships across the state. Following a successful cyberattack on Long Lewis, more than 500 GB of confidential information was stolen. More than 15,000 records containing personal data of the organizations customers and employees, important financial and banking documents, and other valuable company information were compromised. Currently, Long Lewis lost control of more than 650,000 files.
Nitrex Chemicals India
July 27, 2026
•[ ransomware, manufacturing, financial ]
Nitrex Chemicals India was listed as a victim on the leak site of the orion ransomware group; the attack is estimated to have taken place on 2026-07-27. Sector: Manufacturing. Country: India. Website: www.nitrex.in. We only seek money. No morals, no political stance Your data is only secure IF you pay us
Namyang Industrial Co., Ltd. \ NAMYANG NEXMO
August 5, 2026
•[ ransomware, manufacturing, financial ]
Namyang Industrial Co., Ltd. \ NAMYANG NEXMO was listed as a victim on the leak site of the Barracuda ransomware group; the attack is estimated to have taken place on 2026-08-05. Sector: Manufacturing. Country: South Korea. Website: nynexmo.com. Selling fresh full database dumps of company Namyang Industrial Co., Ltd. (renamed to Namyang Nexmo).
Infrastructure dump, not website! There information about employers, manufacturing, parts, clients, partners and etc. Total lines (csv format): 17 641 181. | Status: selling | Size: 2.51 GB | Starting at $40000.00
Groupe BPCE
August 6, 2026
•[ ransomware, financial ]
Groupe BPCE was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-06. Sector: Financial Services. Country: Vietnam. Website: bpce-vietnam.com. bpce-vietnam.com zoominfo.com/c/groupe-bpce/457963650 BPCE International (formerly Natixis), the Ho Chi Minh City branch of Frances second-largest banking group, Groupe BPCE. Operating in Vietnam since 1988, it is one of the country's longest-established foreign bank branches, holding a full banking license. The institution specializes in corporate and investment banking, offering specialized finance, trade solutions, and transaction processing to businesses across the region.
ATMS
August 7, 2026
•[ ransomware, leak, financial ]
ATMS was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-08-07. Sector: Transportation. Country: India. Unauthorized access has been gained to the company's confidential files, including client data, proprietary R&D, and financial documentation.
Merge
August 10, 2026
•[ ransomware, technology, financial ]
Merge was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2026-08-10. Sector: Technology. Country: United States of America. Website: merge.money. Financial
Basso Fedele & Figli S.r.l. (Olio Basso) / Villa Raiano
August 12, 2026
•[ ransomware, manufacturing, retail ]
Basso Fedele & Figli S.r.l. (Olio Basso) / Villa Raiano was listed as a victim on the leak site of the spacebears ransomware group; the attack is estimated to have taken place on 2026-08-12. Sector: Agriculture and Food Production. Country: Italy. Website: oliobasso.com. Basso Fedele & Figli S.r.l. is a historic Italian family company founded in 1904 in San Michele di Serino, in the Irpinia region of Campania.For over a century, the Basso family has been dedicated to the production and bottling of high-quality olive oil. Today, the company is a leading name inthe Italian olive oil sector, exporting its products under the Basso brand to more than 90 countries worldwide. Combining tradition with modern technology,Basso offers a wide range of oils, including extra virgin olive oil, seed oils, and specialty blends. The company also produces private-label oils for majorretail chains, maintaining a strong commitment to quality, traceability, and authenticity.https://www.villaraiano.com/Villa Raiano is the wine estate of the Basso family, established in 1996 as a natural extension of their agricultural heritage in Irpinia, Campania.The winery focuses on producing premium organic wines from indigenous grape varieties, particularly Fiano di Avellino, Greco di Tufo, and Aglianico.With approximately 27 hectares of certified organic vineyards, Villa Raiano combines traditional winemaking with modern techniques, including gravity-flowprocessing and minimal batonnage to preserve freshness and minerality. In 2018, the new generation of the Basso family took over management, and in 2024,a state-of-the-art underground cellar was opened for aging. Villa Raiano is now recognized as one of the most dynamic and respected wineries in southern Italy.-Personal information of employees and clients -Financial documents -Other files https://oliobasso.com/
Keystops
July 29, 2026
•[ ransomware, technology, energy ]
Keystops was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-07-29. Sector: Technology. Country: United States of America. Website: keystops.com. Key Oil Company is the largest distributor of branded motor fuels for Marathon Petroleum Compan
y and also holds contracts with major brands like ExxonMobil and ConocoPhillips. They provide a
wide range of products including lubricants, diesel exhaust fluid, antifreeze, and various fue
l delivery solutions.
We will upload 15gb corporate data soon. Employee and client personal information (NAME, PASSPO
RT, DL, SSN and so on), financials, payment details, contracts and agreements and so on.
Planungsgruppe M+M AG
August 17, 2026
•[ ransomware, leak, technology ]
Planungsgruppe M+M AG was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-08-17. Sector: Professional Services. Country: Germany. Website: dieplanungsgruppe.de. Planungsgruppe M+M AG is a German Aktiengesellschaft headquartered in Bblingen, Baden-Wrttemberg, with approximately 432 employees across 10 offices (Bblingen, Stuttgart, Mnchen, Nrnberg, Regensburg, Ingolstadt, Augsburg, Esslingen, Mannheim, Frankfurt). Annual revenue: approximately 52 million. The firm provides architecture, urban planning, structural engineering, building physics, fire protection, BIM, landscape planning, and interior design services. Over 5,200 projects completed across decades of operation.
The exfiltrated dataset spans two complete file servers (MMBB04, MMBB05), plus the DATEV financial processing archives, SFirm banking software databases, the ELO document management system, Outlook email archives (PSTs), and payroll/HR data a total of 268 GB across approximately 124,000 files, covering 2006 to 2026.
Foresee Pharmaceuticals
August 18, 2026
•[ ransomware, healthcare, financial ]
Foresee Pharmaceuticals was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-08-18. Sector: Healthcare. Country: Taiwan. Website: foreseepharma.com. Foresee Pharmaceuticals Co., Ltd.
https://www.foreseepharma.com
Total leak: 1,2TB
Leak includes: Drug Master File, ASMF, FDA/EMA, R&D, Financial statements, Clinical study reports and other confidential information.
Projects: CAMCEVI, SIF, Casppian, NCE, Aderamastat, Linvemastat, FP-045, FP-016, FP-018, FP-014...
Partners: Accord BioPharma, Intas Pharmaceuticals, Primevera Therapeutics, Accord Healthcare...
Type of information: Confidential
SpearFin Ltd
August 18, 2026
•[ ransomware, finance, leak ]
SpearFin Ltd was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-08-18. Sector: Financial Services. Country: Mauritius. SpearFin Ltd
https://spearfin.net
SpearFin offers a wide range of services including fund administration, corporate services, compliance support, and investor relations.
Assets Under Administration US$10 billion.
The leak occurred on June 26, 2026.
Total leak: 416 GB
Leak included: NDA, Correspondence Client, KYC - Passports, Certificates, Investing documents,
Share Registry and Holders, Anti-Money Laundering (AML) audit, Agreements, Application forms, Bank Statements,
Bank Payrolls, Loans Documents, Certificates of GBC (Global Business Company), Register of Directors and many other financial documents.
Clients: YuMee Seven Six, BAMBOO BAY PRIVATE LIMITED, Asio Global Fund, 3B Capital, Abans Group, Amicorp Capital, Apex Fund Services Ltd, Pangaea Fund Limited,
AL Farah Overseas Limited, Zinnia Group, AMG Services Ltd, NEO SEMI SG PTE. LTD, MIC ELECTRONICS LIMITED, Zenbridge Capital Pvt. Ltd., Zinnia Investment Advisers Pvt Ltd,
Onpoint Ventures Limited, Wilson Group, Blue River, Capital Advisors Private Limited, Zenbridge Capital Pvt Ltd,
Topland Group Holdings, Africa Opportunities Fund, Appollo Fund Limited and many other...
Type of information: Confidential
Full publication coming soon...
grecosteel.com
July 9, 2026
•[ ransomware, manufacturing, financial ]
grecosteel.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-07-09. Sector: Manufacturing. Country: Greece. Website: grecosteel.com. How Greco Steel Products Lost Control of Finances and Payroll PROLOGUE: 19 document categories. A co...
Meridian Logistics Group
August 22, 2026
•[ ransomware, financial ]
Meridian Logistics Group was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-22. Sector: Transportation. Country: United States of America. Website: meridianlogisticgroup.com. Full network image staged. ERP exports, dispatch DB and payroll archives recovered. Pending final inventory before publication.