Navitrans
September 13, 2026
•[ ransomware, leak, manufacturing ]
Navitrans was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-09-13. Sector: Transportation. Navitrans is a leading Colombian distributor and service provider specializing in commercial trucks and heavy machinery, offering a comprehensive range of products and services including vehicle sales, spare parts distribution, and maintenance and repair services through a nationwide network of workshops. This post includes sensitive data about prices, financing, and other operational information. [Size: 223.2 MB | Sector: Manufacturing, Transportation]
Cumar Marble & Granite
September 11, 2026
•[ ransomware, manufacturing, financial ]
Cumar Marble & Granite was listed as a victim on the leak site of the Dark Project ransomware group; the attack is estimated to have taken place on 2026-09-11. Sector: Manufacturing. Country: Turkey. Website: www.cumar.com. About Cumar Cumar Marble & Granite is a leading fabricator and supplier of high-quality marble, granite, limestone, and exotic stones in New England, specializing in luxury kitchens, bathrooms, and custom projects. The company caters to designers, architects, developers, and discerning homeowners, offering a wide range of custom stone products including countertops, sinks, and fireplaces. Their extensive inventory features various natural stones from around the world, ensuring elegance and durability in every project. Cumar is recognized for its commitment to quality and craftsmanship, making it the preferred choice for luxury stone solutions. Cumar Marble & Granite, a company specializing in luxury kitchens, bathrooms, and custom projects, has been the target of a massive cyberattack. Hackers stole 489 gigabytes of data from the companys servers, including personal information, technical drawings, and financial documents. This incident raises serious concerns regarding the theft of intellectual property and potential breaches of employee and customer privacy.
Anderson Industries
September 18, 2026
•[ ransomware, manufacturing, financial ]
Anderson Industries was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-09-18. Sector: Manufacturing. Country: United States of America. Website: anderson-industries.com. Anderson Industries is a cutting-edge engineering and manufacturing company that assists forwar
d-thinking businesses in bringing innovative products to market. They offer a range of products
including agricultural equipment, trailers, and foundry services.
We will upload 9gb of corporate data soon. Employee personal information, client information, l
ots of projects, specifications, orders, financials, NDAs and so on.
FinSoft (Kolibri retail back-office software)
September 22, 2026
•[ ransomware, technology, retail ]
FinSoft (Kolibri retail back-office software) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-09-22. Sector: Retail & E-Commerce. Country: Uzbekistan. Retail software vendor / IT services Uzbekistan | Client databases of 10+ retail chains (keddo, marc, lancaster, comf_rus, ek, cr, bas_at, bas_juk, bas_nov, bas_zar): sales, stock, pricing, financial records; Back-office platform and API service data | One client database publishes per day after the deadline, starting with keddo. Their clients will know exactly whose software failed them. | [ACTIVE: deadline 2026-09-25 01:06 UTC]
DI.C.S.EL. S.R.L.
September 22, 2026
•[ ransomware, manufacturing, financial ]
DI.C.S.EL. S.R.L. was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-09-22. Sector: Manufacturing. Country: Italy. Introduction DI.C.S.EL. S.R.L., founded in 2005, is an Italian company headquartered in Milan a
nd operating throughout Lombardy, specializing in the provision of technical solutions for the
electrical and measurement sectors.
We will upload 9gb of corporate data soon. Employee personal information (drivers licenses, EU
IDs), financials, payment details, projects, NDAs and so on.
TDMI
September 22, 2026
•[ ransomware, manufacturing, leak ]
TDMI was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-09-22. TDMI has an in-house sample department for outstanding product development and quality testing.
The company stay alert to emerging trends and develop innovative textiles based on constant ma
rket research analyses.
We will upload 33gb of corporate data soon. Detailed employee personal information (SSNs, drive
rs licenses, passports), financials, credit cards, projects, client data, NDAs and so on.
Coe Press Equipment
September 22, 2026
•[ ransomware, manufacturing, financial ]
Coe Press Equipment was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-09-22. Sector: Manufacturing. Country: United States of America. COE Press Equipment designs and manufactures a complete line of premiere coil handling and serv
o roll feed equipment from stand-alone roll feeds, precision straighteners, and reels to comple
te integrated feed systems and cut-to-length lines.
We will upload 25gb of corporate data soon. Detailed employee personal information (SSNs, drive
rs licenses, passports and other HR files), financials, projects, confidential client docs, NDA
s and so on.
Apex Litigation Support
September 23, 2026
•[ ransomware, leak, financial ]
Apex Litigation Support was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-09-23. Sector: Professional Services. Apex Litigation Support is a business that provides comprehensive litigation services to attorn
eys and law firms. Our team of experienced professionals is committed to delivering accurate an
d timely results that exceed our client's expectations.
We will upload 77gb of corporate data soon. Detailed employee and clients personal information
(passports, licenses, names, addresses, phones, emails and so on), personal financials, confide
ntial files, enormous amount of client data, lots of NDAs and so on.
Urban Engineering
September 23, 2026
•[ ransomware, manufacturing, financial ]
Urban Engineering was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-09-23. Sector: Manufacturing. Urban Engineering is a company that specializes in providing engineering services. They focus o
n delivering innovative solutions for various projects. Their intended clients include business
es and organizations seeking professional engineering expertise. The company is headquartered i
n Annandale, Virginia.
We will upload 20gb of corporate data soon. Employee information, projects, lots of financial d
ocuments, contracts and agreements, NDAs and so on.
Abtach Ltd.
September 23, 2026
•[ ransomware, technology, financial ]
Abtach Ltd. was listed as a victim on the leak site of the Barracuda ransomware group; the attack is estimated to have taken place on 2026-09-23. Abtach Ltd. was renamed Intersys Ltd.a Pakistani company engaged in fraud targeting the US. The companys employees charged fees for services that did not actually exist.
The companys founder, Azneem Bilwani, was involved in the illicit trafficking of synthetic opioids and fentanyl analogues, which were supplied to the US market via the eWorldTrade marketplace.
We encrypted all virtual machines and snapshots on their ESXi hypervisors and all files on employee computers, and exfiltrated 1.5 TB of data from their infrastructure. We possess all their documents and bank records, which contain evidence of Azneem Bilwanis illegal activities.
Will be published soon... | Severity: HIGH | Size: 1.5 TB | Status: selling | $100,000
Wallatec
September 24, 2026
•[ ransomware, manufacturing, financial ]
Wallatec was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-09-24. Sector: Other. Wallatec creates high-performance carbonation systems for restaurants and busy kitchens. Their
equipment is built to handle intense daily use, working perfectly even in the most hectic envir
onments.
We will upload 15gb of corporate data soon. Employee information (passports), projects, financi
als, client information and so on.
Knit
September 28, 2026
•[ ransomware, technology, financial ]
Knit was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Technology. One of our essential beliefs is that architecture changes lives. This belief guides our path ev
ery day. We seek clients and relationships who are equally interested in improving their city,
their business, their school, their neighborhood or the place they call home.
We will upload 175gb of corporate data soon. Employee information (passports, DLs, credit cards
), projects, financials, client information, NDAs and so on.
Geebee Garments
September 28, 2026
•[ ransomware, retail, manufacturing ]
Geebee Garments was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Retail & E-Commerce. Geebee Garments is a renowned apparel manufacturer with over 130 years of experience, operating
facilities in the UAE and Bangladesh. The company specializes in a wide range of products, inc
luding casual wear, formal wear, and workwear, catering to leading brands globally.
We will upload 100gb of corporate data soon. Employee information (passports, SSN), financials,
client information, NDAs and so on.
Amazon Informatica
September 28, 2026
•[ ransomware, technology, government ]
Amazon Informatica was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Technology. Country: Brazil. Amazon Informtica LTDA is a prominent Information Technology (IT) solutions integrator and managed services provider founded in Brazil in 1995.
Amazon Informtica's primary market focus is the public sector and government agencies, serving various state and federal entities in Brazil.To support these operations, they maintain strategic corporate offices in Braslia/DF (to service the federal government cluster) and Belm/PA. Furthermore, the company has expanded its footprint internationally with operational branches in Latin America and Europe (Portugal), where they deliver customized government tech solutions and enterprise infrastructure support to large private corporations in those regions.
Full commitment of the network having full access to infrastructure, thus ensuring full access to the databases containing confidential and financial information!
Virtual Infrastructure and Database Cluster with active administrative master credentials exposed in text clear inside get_bk.bat. Hosts compromised. The targets contain production and integration databases with sensitive PII schemas, employee registries, banking credentials, CPF, and RG data.
TOX ID: 3D6EF83C3C4517FE42B212A934D4B08579A5F20522828C4E4818EA117F53063377C4D769640B
SESSION: 052a5fe97f7b1822c2225ba884b5f719c07ec99da7d838421a20958938f54cb539 [Sector: Government, Technology]
mccordclaims.com
September 29, 2026
•[ ransomware, financial, leak ]
mccordclaims.com was listed as a victim on the leak site of the BrainCipher ransomware group; the attack is estimated to have taken place on 2026-09-29. Sector: Financial Services. Country: United States of America. Website: mccordclaims.com. [AI generated] N/A
I don't have verified information about a company operating at "mccordclaims.com." Rather than speculate about its industry, services, or country of operation, I should note that this appears to be a claims-related domain name (possibly insurance claims adjusting, legal claims, or similar), but I cannot confirm details without reliable, verifiable data about this specific entity.
Polikem
September 29, 2026
•[ ransomware, manufacturing, financial ]
Polikem was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-09-29. Sector: Manufacturing. Country: Turkey. Polikem is a Colombian company dedicated to the development, manufacture, and marketing of chemical products for industrial and automotive applications. With decades of experience, the company provides practical and reliable solutions tailored to the needs of various industries and consumers.
This leak includes sensitive information, such as the companys financial status, inventory records, and other internal data. [Sector: Manufacturing]
Buford-Thompson Company, LTD
September 30, 2026
•[ ransomware, manufacturing, financial ]
Buford-Thompson Company, LTD was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Manufacturing. Country: United States of America. Website: Buford-Thompson Company, LTD. [construction] Buford-Thompson Company, LTD, a Texas construction general contractor with 30+ years of history building schools for K-12 districts across the state.
The exposed dataset totals 1.707 TB and includes:
5 years of W-2 EFW2 files (20212025) containing plaintext Social Security numbers, wages, and addresses for 350+ current and former employees every SSN readable without any decryption.
9.3 GB of attorney-client privileged files from the Stanton ISD v. BTC litigation legal strategy, discovery responses, and counsel communications.
Complete Frost Bank infrastructure four account numbers, ACH routing credentials, line-of-credit agreements (renewed April 2026), signature cards, and monthly bank statements spanning 20222026.
36+ active school construction projects blueprints, bid estimates, cost structures, subcontractor pricing, and change orders for ISD projects across Texas. A competitor's dream dataset.
2,000+ donor records from Human Services Campus (Phoenix homeless-services nonprofit) with full PII: name, address, phone, email, employer, and donation amounts.
QuickBooks company files (.QBW) from Along Side Ministries (Phoenix prison ministry) containing complete accounting, donor, and likely payroll data.
Thompson family personal records owner personal insurance, loans, ranch property (Jack County), airplane ownership, bond dividends, and personal tax documents.
Belasco Electric
July 24, 2026
•[ ransomware, energy, financial ]
Belasco Electric was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-07-24. Sector: Energy & Utilities. Country: United States of America. Website: belascoelectric.com. Belasco Electric is a reliable electrical service provider based in Muskegon, Michigan, caterin
g to both residential and commercial clients. They offer a wide range of services including eme
rgency generator systems, fire alarm security systems, HVAC wiring, and EV installation.
We will upload 16gb corporate data soon. Employee information (name, home addresses, passport,
SSN, DL numbers, photos, credit card scans and so on), financials, contracts and agreements, ND
A, etc.
Oleoductos del Valle
August 3, 2026
•[ ransomware, energy, financial ]
Oleoductos del Valle was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-08-03. Sector: Energy & Utilities. Country: Argentina. Website: oldelval.com. During the analysis of data obtained from Oldelval, we have compiled information covering key aspects of the company's operations. The materials include:
1.HR documentation: full payroll data, bank account details (CBU), employee health insurance records (OSDE, SWISS MEDICAL), as well as severance calculations and compensation agreements.
2.Financial and regulatory reports filed with CNV and BYMA, including documents related to rating agencies (Moody's) and internal shareholder agreements.
3.Tax declarations and reports submitted to AFIP (Sicore, Ganancias, DDJJ IVA).
4.Documents related to tariff policy and SEN interactions, including WACC and TIR calculations used in tariff reviews.
5.Incident reports and environmental documentation, including reports on spills in Catriel and Medanito, as well as Rosen OSSR technical reports on pipeline conditions.
6.Confidentiality agreements with key partners, including Halliburton, Horizon, YPF, Otasa, McKinsey, and KPMG.
7.Internal whistleblower channel materials (Ley 27.401), including internal complaints and compliance reports.
8.Documents related to dividend payments and banking transactions.
9.Personal data of directors, candidates, and key employees, including ID numbers and CVs.
Rocky Mount Recyclers
July 20, 2026
•[ ransomware, financial, manufacturing ]
Rocky Mount Recyclers was listed as a victim on the leak site of the Dark Project ransomware group; the attack is estimated to have taken place on 2026-07-20. Sector: Manufacturing. Country: United States of America. Website: www.rmrnc.com. Due to cyberattack on Rocky Mount Recyclers more than 40Gb of company personal data was stolen. Leakage contains big amount of sensitive data such as personal emlpoyes documents, company's customers data, bank and financial information documents. About 12,000 files are not secured by RMR for now. Download here: http://2zl5qc3mqap7vziqfis65oyjcgdiedigoequxbqsn6uwian7ieozvoqd.onion/
