MyM ODONTOCLINICA S.A
October 14, 2026
•[ ransomware, healthcare, leak ]
MyM ODONTOCLINICA S.A was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Healthcare. Country: Brazil. ompany from Paraguay operating in the field of dentistry.
Financial documents, personal and customer data.
The archive contains the most important documents [Sector: Medical, Other]
Shediac Lobster Shop
October 14, 2026
•[ ransomware, retail, financial ]
Shediac Lobster Shop was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Retail & E-Commerce. Country: Canada. Shediac Lobster Shop Ltd. specializes in supplying premium frozen Atlantic lobster to restauran
ts, food distributors, and global markets. With over 70 years of processing expertise, the comp
any offers a diverse and customizable line of cold-water lobster products, ensuring high qualit
y and reliability.
We will upload 10gb of corporate data soon. Employee information (passports, SSN numbers, compl
ete forms), client information, contracts and agreements, confidential files, financials, payme
nt details, NDA, etc.
Videk
October 15, 2026
•[ ransomware, technology, financial ]
Videk was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-10-15. Sector: Technology. Country: United Kingdom of Great Britain and Northern Ireland. Videk is a leading global provider of vision-based print verification systems, inserter input a
nd output scanning systems, and data management software.
We will upload 8gb of corporate data soon. Employee information, customer information, contract
s, financials, NDA, and so on.
Adirondack Networks, Inc.
October 24, 2026
•[ ransomware, leak, technology ]
Adirondack Networks, Inc. was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-24. Sector: Technology. Country: United States of America. network and IT services New York, United States | The live accounting database of the company, more than 627 megabytes, active through 20 October 2026; A second company accounting database of Elevate Networks, Inc., more than 331 megabytes, active through 20 October 2026; Transaction logs and scheduled accounting backups | [NOT PAID EXPOSED]
Pure Grow Diamonds Inc.
October 25, 2026
•[ ransomware, manufacturing, financial ]
Pure Grow Diamonds Inc. was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-25. Sector: Manufacturing. diamond and lab grown diamond trading New York, New York, United States | Diamond stock and inventory lists with stock codes and certificate numbers; Customer return records with customer names and tracking references; More than 2,200 bank deposit and invoice documents | [NOT PAID EXPOSED]
TRANSPORTES JIMENEZ and REYES JIM REY S.A.
October 26, 2026
•[ ransomware, financial ]
TRANSPORTES JIMENEZ and REYES JIM REY S.A. was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Transportation. Country: Mexico. Transport company from Ecuador engaged in road freight transport.
Including the transportation of heavy and bulk cargo, cars,
animals and cargo in tanks.
Year Founded: 2020
There are many customer documents and employee data.
Financial documents, accounting and banking data. [Sector: Transportation]
Seetelhotels.de
October 19, 2026
•[ ransomware, financial, healthcare ]
Seetelhotels.de was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-10-19. Sector: Hospitality. Country: Germany. Website: Seetelhotels.de. Seetel Hotels (SEETEL Hotel GmbH & Co. Betriebs KG) has been notified that a substantial volume of confidential and internal corporate data has been compromised.
The affected data includes, but is not limited to:
Full guest identity records, government-issued passport and ID numbers, payment card details (credit card numbers, CVVs, and expiration dates), direct booking notes, special requests, dietary restrictions, documented allergies, and medical/health-related accommodation preferences.
Invoices, payment transaction logs, accounts receivable and payable (Debitorenbuchhaltung / Kreditorenbuchhaltung) records, internal financial audits, and controlling documentation.
SunTechnics Fabrisolar AG
October 23, 2026
•[ ransomware, energy, financial ]
SunTechnics Fabrisolar AG was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-23. Sector: Energy & Utilities. Country: Switzerland. solar energy company Switzerland | Financial and bank records of a Swiss solar energy company, including annual accounts and audit files; Payroll and staff data with employee names and social insurance records; Customer and project files for solar installations at four sites; The accounting database with its backups | [NOT PAID EXPOSED]
Bankruptcy Software Specialists
October 23, 2026
•[ ransomware, technology, financial ]
Bankruptcy Software Specialists was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-10-23. Sector: Professional Services. Bankruptcy Software Specialists, LLC (BSS) is one of the nation's leading providers of debt man
agement software. The major business focus is geared toward providing business application soft
ware that handles the tracking of trust funds to Chapter 13 Bankruptcy Trustees. A Tennessee ba
sed company, BSS provides a vast array of services for Bankruptcy Trustees.
We will upload 19gb of corporate data soon. Employee and clients information (personal informat
ion, financials and so on), contracts and agreements, lots of payment details and so on.
LoveSac
October 26, 2026
•[ ransomware, retail, financial ]
LoveSac was listed as a victim on the leak site of the Whitearmor ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Retail & E-Commerce. Country: United States of America. LoveSac (LOVE) is a premium furniture retailer operating more than 250 showrooms across the United States, generating approximately $700 million in annual revenue.
We have obtained a database containing 1,113,285 order records spanning nearly seven years of transactions, from December 2019 through October 2026, with a combined recorded transaction value exceeding $1.62 billion.
Each record contains detailed customer and transaction information, including full customer names, complete billing and shipping addresses, telephone numbers, order numbers, order dates, order statuses, and order grand totals.
Our demand: $500,000 in BTC or XMR
To verify, samples can be found below.
The Excalibur Group
October 20, 2026
•[ ransomware, technology, government ]
The Excalibur Group was listed as a victim on the leak site of the Dark Project ransomware group; the attack is estimated to have taken place on 2026-10-20. Country: United States of America. Website: theexcaliburgroup.com. About The Excalibur Group The Excalibur Group is a Washington D.C. based company that focuses on enhancing local, state, and federal programs through staff augmentation, training, and program management in the Defense, IT, Workforce, Environmental, and Legal sectors. They provide specialized job training and placement services for individuals in various industries, including transitioning soldiers. The company also offers both permanent and contingent labor to support clients' internal IT and R&D projects. Their mission is to deliver efficient contract management and cost-effective solutions while promoting meaningful Veteran employment. Company The Excalibur Group was attacked, resulting in the theft of more than 600 GB of confidential data, such as banking and other financial information, personal data of employees and customers, and information marked secret. Currently, more than 400,000 files are not protected by The Excalibur Group
Coastal Alabama Community College
October 21, 2026
•[ ransomware, education, financial ]
Coastal Alabama Community College was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-10-21. Sector: Education. Country: United States of America. Website: coastalalabama.edu. Coastal Alabama Community College demonstrates an extreme disregard for its own security and the security of its students and makes no attempt to address these deficiencies. Therefore, we are publishing their sensitive information, such as student education records, protected health information, financial aid and loan information, employee personnel files, Social Security numbers, and payment card data. They are also known for their incidents, and we are making this information publicly available to you. As a result, they violate laws such as HIPAA, FERPA, GLBA, and PCI DSS.
Whirlpool
October 21, 2026
•[ ransomware, manufacturing, leak ]
Whirlpool was listed as a victim on the leak site of the Whitearmor ransomware group; the attack is estimated to have taken place on 2026-10-21. Sector: Manufacturing. Country: United States of America. Whirlpool is a global home appliance manufacturer (NYSE: WHR) making washers, fridges, and cooking appliances under brands like KitchenAid and Maytag. Its 2025 annual revenue was about $15.52 billion.
We hold 4,577 Whirlpool employee records across three plants, names, AD-style usernames, managers, cost centers, shifts, along with 374 corporate emails, ~22,000 SAP invoice records, and the full plant contact infrastructure. Pay, and this stays quiet. Don't, and the data goes public.
We want $140,000 in BTC or XMR. You will receive an email containing instructions on how to proceed.
Samples:
https://biteblob.com/Information/mNTP6w0lBW8P9l/#samples.zip
Contact:
whitearmorrxd@proton.me
Session: 0547b7f96d469ecb332e89d0108e71c92df5bacff6c4ed5b9801ab5fffe872ee67
Astrana Health
October 25, 2026
•[ ransomware, healthcare, financial ]
Astrana Health was listed as a victim on the leak site of the Falcon ransomware group; the attack is estimated to have taken place on 2026-10-25. Sector: Healthcare. Country: United States of America. Healthcare services NASDAQ: ASTH - Our 738 GB extraction includes internal documents, regulatory audit reports, payer financial dispute trackers, internal operational readiness reviews, acquisition pipelines, detailed reimbursement tables, internal system evaluations, regulatory notifications, funds transfer records showing liquidity status, company financial statements, user credential lists, client contact lists, employee PII decks and much more. Contacted us then timewasted, re-attacks incoming.
Antah HealthCare Group
October 26, 2026
•[ ransomware, healthcare, leak ]
Antah HealthCare Group was listed as a victim on the leak site of the crypto24 ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Healthcare. Country: Malaysia. Website: ahcg.com.my. Antah Healthcare Group (AHCG) is one of Malaysia's leading integrated healthcare distribution and commercial partners, specializing in the nationwide marketing, sales, clinical regulatory support, and supply chain logistics of pharmaceuticals, medical equipment, and consumable products to hospitals and clinics.We successfully infiltrated AHCG's network and exfiltrated over 500 GB of highly sensitive data, including human resources and employee records, customer transaction histories, confidential commercial contracts, clinical and regulatory documentation, logistics tracking information, and financial statements.
acclaimcompanies.com
September 8, 2026
•[ ransomware, leak, financial ]
acclaimcompanies.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-09-08. Sector: Professional Services. Country: United States of America. Website: acclaimcompanies.com. The Social Security Numbers of both group executives Gerald C. Johnson Jr. and Mark C. Johnson are fully exposed in corporate documents (IRS Form SS-4). The Johnson Family Trust holds an investment portfolio of $1.67 million at First Republic Bank against a margin loan of $280K, while parent company Acclaim Asset Management simultaneously received two different EINs from the IRS per CP212 notice (January 2025). Baboo Properties LLC, in which Mark C. Johnson is a member, failed to file the required Form 940 for 2015, despite receiving IRS notice CP080. A corporate network of 15+ legal ent
Cascade Flooring America
October 21, 2026
•[ ransomware, retail, leak ]
Cascade Flooring America was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-10-21. Sector: Retail & E-Commerce. Country: United States of America. Cascade Flooring America is a flooring store located in Vancouver, WA, offering a wide range of
products including flooring, furniture, window coverings, and kitchen and bath services. The c
ompany caters to homeowners looking for premium flooring solutions, with options such as carpet
, hardwood, luxury vinyl, laminate, and tile.
We will upload 50gb of corporate data soon. Employee personal information (passports and other
personal information), client information, financials, confidential files, NDA, and so on.
Gamdom
October 26, 2026
•[ ransomware, financial, technology ]
Gamdom was listed as a victim on the leak site of the Whitearmor ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Other. Gamdom is an unregulated crypto casino and sportsbook founded in 2016. It recently suffered a hot-wallet breach, with founder Felix Romer reporting over $3 million in losses, though on-chain analysts estimate the damage closer to $4.2 million.
We hold Gamdom's full user database, 15,420,003 accounts with 146 columns, with Gamdom's total combined profit value exceeding $1 billion.
The way in was something internal, a machine account that was already sitting in their admin side (Metawin).
Issued years back, nobody ever rotated it. Never meant to leave the building.
It had admin reach, and everything after that was their own stuff anyway, their control panels and secret stores.
About your provably fair: what it promised and what it delivered were never the same thing.
We demand $15,000,000 in BTC.
Emails with instructions will be sent to you directly.
To verify, a sample can be found below.
EWM Group
October 28, 2026
•[ ransomware, retail, financial ]
EWM Group was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-10-28. Sector: Other. Country: United Kingdom of Great Britain and Northern Ireland. Website: EWM Group. [fashion] EWM Group the parent group behind Bonmarch, Edinburgh Woollen Mill, and Peacocks, three of the UK's best-known value fashion chains.
The exposed material includes:
503,878 loyalty programme member records full name, home address, date of birth, phone, mobile, email, loyalty card number, and transaction history spanning 20002026.
~21,000 employee records salary, National Insurance number (via P11D), bank sort code and account number (WAGESTRANSFER database), home address, emergency contacts, maternity/paternity data, sickness absence, accident reports with injury details.
100+ GB of Outlook PST email archives complete email histories for named staff members spanning years of business operations.
313+ SQL Server database backups across 122 unique databases the entire digital brain of the retail operation.
83 GB of e-commerce transaction data every online order from January 2021 to August 2026.
Cipsa Industrias Sa De Cv
October 30, 2026
•[ ransomware, manufacturing, financial ]
Cipsa Industrias Sa De Cv was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Manufacturing. Country: Mexico. Cipsa Industrias Sa De Cv Compania Industrial Papelera Poblana, S.A. de C.V. (CIPPSA) and Tubos y Empaques de Puebla, S.A. de C.V. (TEPSA / KJAS TEPSA), a Mexican corrugated cardboard, packaging and paper-tube manufacturer. Complete employee HR records: names, dates of birth, home addresses, phone numbers, personal and corporate email addresses, CURP, RFC, IMSS numbers, salaries and employee badge photographs.Payroll records, tax data, fiscal validation files and HSBC payroll-bank files containing employee account and CLABE data.Information showing executive compensation through an **honorarios** arrangement outside the regular payroll system.Financial and industrial reports, sales/procurement/payroll budgets, production costs, operational analytics, invoices and accounting records.Customer complaint records and overdue receivables data.Occupational-safety, psychosocial-risk, industrial-incident and hazardous-waste documentation. More
