PANCARIBBEAN LOGISTICS GROUP
October 5, 2026
•[ ransomware, financial ]
PANCARIBBEAN LOGISTICS GROUP was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-10-05. Sector: Transportation. Country: Trinidad & Tobago. Panamanian logistics company operating
in the field of international cargo transportation.
Financial documents, personal and customer data. [Sector: Transportation]
Jampac Alimentos
August 18, 2026
•[ ransomware, retail, financial ]
Jampac Alimentos was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-08-18. Sector: Agriculture and Food Production. Country: Brazil. Website: jampac.com.br. Jampac Alimentos is a leading producer and distributor of food products in Brazil, with over 20
years of experience and a commitment to quality and efficiency. The company serves more than 6
,500 clients, including restaurants, supermarkets, and industrial kitchens, delivering a wide r
ange of products such as poultry, beef, pork, dairy, and fish.
We will upload 35gb of corporate data soon. Personal information (passports, payment informatio
n and other information), financials, clients information and so on.
Wesmar
October 1, 2026
•[ ransomware, manufacturing, technology ]
Wesmar was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-10-01. Sector: Manufacturing. Country: United States of America. WESMAR specializes in advanced marine technology, offering a range of products including thrust
ers, propulsion systems, and commercial fishing sonar. Their innovative solutions cater to vari
ous clients, from cruise boats and luxury yachts to commercial fishing operations, ensuring enh
anced stability, comfort, and efficiency at sea.
We will upload 66gb of corporate data soon. Employee personal documents (passports, DLs, death
certs), financials, lots of projects, credit cards, payment details, client information, NDAs a
nd so on.
Pacific Tank Lines
September 26, 2026
•[ ransomware, financial ]
Pacific Tank Lines was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-09-26. Sector: Transportation. Country: United States of America. Website: pacifictanklines.com. Pacific Tank Lines, Inc. is a premier full-service petroleum carrier focused on safety and cust
omer service. They offer reliable petroleum cargo services with a professional team of drivers
and efficient dispatchers. The company operates a modern fleet aimed at reducing their carbon f
ootprint and has received multiple awards for their service excellence.
We will upload 13gb of corporate data soon. Detailed personal information of 118 employees (pas
sports, DLs, addresses, phones, payment details and so on), financials, clients and so on.
The Official Collegeof Architects of León (COAL)
October 3, 2026
•[ ransomware, leak, financial ]
The Official Collegeof Architects of Len (COAL) was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-10-03. Sector: Professional Services. Country: Mexico. The Official College of Architects of Len (COAL) was established on July 12, 1931, encompassi
ng the regions of Len, Asturias, and Galicia. The College of Galicia was legally separated in
1973 and the College of Asturias in 1981.
Here is the access to 77gb of corporate data. Detailed personal information (passports), finan
cials, students and clients information and so on.
Click the download button.
You will find several password-free archives. Click on any of them to start the download.
Philander Smith University
October 6, 2026
•[ ransomware, education, financial ]
Philander Smith University was listed as a victim on the leak site of the EndZone ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Education. Country: United States of America. Website: philander.edu. Revenue: $25.3 million annual
Philander Smith University is a private, historically Black liberal arts institution in Little Rock, Arkansas, founded in 1877 and affiliated with the United Methodist Church. They provide undergraduate and graduate education with a focus on academic excellence, social justice, and leadership development for a diverse student body. We successfully exfiltrated 500GB+ worth of data which includes VERY confidential information about students and staff, as well as financial information. Alongside, we have encrypted files across the entire network.
Shalom Christian Academy
October 9, 2026
•[ ransomware, education, leak ]
Shalom Christian Academy was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-10-09. Sector: Education. Country: United States of America. Website: shalomca.com. As a school, Shalom Christian Academy is legally and ethically obligated to maintain a wide range of confidential information. However, they are grossly negligent in protecting their own security and that of their students and staff. Consequently, we provide you with student grades, disciplinary and special education records, health and immunization records, financial aid and tuition information, donation history, employee background checks, salary data, and internal security documents. This leak into the public domain constitutes an unacceptable betrayal that can lead to identity theft, financial fraud, extortion, harassment, and devastating harm to children and families. The school is culpable for this act and must be held accountable to the fullest extent of the law.
Polaris Shipping (dry bulk shipping)
October 12, 2026
•[ ransomware, financial ]
Polaris Shipping (dry bulk shipping) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: South Korea. Dry bulk shipping South Korea | Internal financial records (sales vouchers) and vessel operational reports | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
Engineers Contractors Fabricators Inc. (ECF)
October 12, 2026
•[ ransomware, manufacturing, financial ]
Engineers Contractors Fabricators Inc. (ECF) was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Manufacturing. Country: United States of America. Website: https:ecfinc.net. ECF, Inc., a piping and insulation contractor specializing in the design and construction of terminals for the transshipment of liquid hydrocarbons such as asphalt, crude oil, and renewable fuels, has completely failed to ensure the security of its systems and is unwilling to compromise. Therefore, we are providing you with access to confidential information (proprietary pipeline designs, CAD drawings, customer lists, pricing models, financial data, employee information, and trade secrets), which violates the Complaints and Abuse Act (CFAA) and state civil liability laws and may result in injunctions, damages, fines, mandatory notices, class actions, loss of competitive advantage, and possibly termination of operations.
huntcompanies.com
October 11, 2026
•[ ransomware, financial ]
huntcompanies.com was listed as a victim on the leak site of the BrainCipher ransomware group; the attack is estimated to have taken place on 2026-10-11. Country: United States of America. Website: huntcompanies.com. [AI generated] N/A
I don't have verified, reliable information about a specific company at "huntcompanies.com" to describe accurately. Providing fabricated details about a company's operations, industry, or location would risk spreading misinformation in a threat intelligence context, where factual accuracy is critical. If you can share additional context or verified source material about this company, I can help analyze or summarize that information instead.
Ocean Network Express (container shipping)
October 12, 2026
•[ ransomware, financial ]
Ocean Network Express (container shipping) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: Singapore. Container shipping Singapore | Internal staff directories, operational voyage and fuel-consumption records, and financial-adjacent planning material | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
Company #14
October 11, 2026
•[ ransomware, financial ]
Company #14 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-11. Country: Canada. Financial services Canada | [HONORED: settled 2026-10-07 17:00 UTC before their deadline]
Samjoo Maritime (ship management)
October 12, 2026
•[ ransomware, financial ]
Samjoo Maritime (ship management) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: South Korea. Ship management South Korea | Internal financial records (expense applications and bunker cost calculations) | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
Saehan Marine (ship agency operations)
October 12, 2026
•[ ransomware, leak, financial ]
Saehan Marine (ship agency operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: South Korea. Ship agency South Korea | Port disbursement account records and banking correspondence templates | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
Dongkuk Steel (steel manufacturing)
October 12, 2026
•[ ransomware, manufacturing, financial ]
Dongkuk Steel (steel manufacturing) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Manufacturing. Country: South Korea. Steel manufacturing South Korea | Internal financial systems material (invoice and settlement records) | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
PennEastern Architects LCC
October 12, 2026
•[ ransomware, manufacturing, financial ]
PennEastern Architects LCC was listed as a victim on the leak site of the Dark Project ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Professional Services. Country: United States of America. Website: penneastern.com. About PennEastern Architects LCC The principals of PennEastern Engineers, LLC are Paul Pasonick, Andrew Pasonick, Michael Amato and Daryl Pawlush. All principals have extensive experience in commercial and residential land developments, municipal projects, sanitary sewer projects, storm water projects, pavement projects, flood control projects and soil erosion and sedimentation control plans. In addition, each has assisted in design, specification writing, cost estimating, project bidding and bid review, construction observation and project management of the various projects. The Principals of PennEastern Architects, LLC are Andrew Pasonick, Emil Jarolen and Norman Manovsky. Design Principal Emil Jarolen has been practicing Architecture since 1974 and has been a Registered Architect in the State of Pennsylvania since 1978. As a result of a cyberattack on Company PennEastern Architects, more than 100 GB of corporate data was stolen. The breach includes a large volume of confidential information, including drawings and project documentation, data on the companys customers and employees, as well as documents containing banking and financial information. Currently, approximately 60,000 files are unprotected by Company PennEastern Architects.
Korea Ferry (ferry operations)
October 12, 2026
•[ ransomware, financial ]
Korea Ferry (ferry operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: South Korea. Ferry / RoRo shipping South Korea | Internal staff account records with plaintext credentials and financial receipt records | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
Pedigo Products, Inc.
October 12, 2026
•[ ransomware, manufacturing, healthcare ]
Pedigo Products, Inc. was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Manufacturing. Country: United States of America. Website: https:pedigo-usa.com. Pedigo Products, Inc. is a privately held American manufacturer of stainless steel and chromium medical equipment for the healthcare industry. It disregards its own security, as well as that of its customers and employees, and makes no attempt to negotiate agreements to prevent data leaks. As a result, we provide you with 1.3 TB of sensitive corporate data, such as: carrier account numbers, customer-specific pricing, commission adjustments, customs/MDEL identifiers and customer/employee contact information, customer contracts, price and discount schedules, shipping and routing instructions, employee and customer personal data, FDA quality records (DMR, DHR, DHF, CAPA, complaints, MDR), CAD files and trade secrets, intellectual property and non-disclosure agreements, financial statements, tax returns, payroll records, bank details, and legal documents. Contractual obligations to customers and confidentiality, as well as HIPAA/GDPR/CCPA/PIPEDA regulations, were violated. We urge the authorities to pay attention to these issues. Due to Pedigo's negligence, it will also suffer losses in the form of loss of trade secrets and intellectual property protection, copying by competitors, loss of business with hospitals and dealers, and serious reputational and financial damage.
Estrategias BigMat S.L.U.
October 14, 2026
•[ ransomware, retail, financial ]
Estrategias BigMat S.L.U. was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Retail & E-Commerce. Country: Spain. Website: Estrategias BigMat S.L.U.. [distribution] Estrategias BigMat S.L.U. the Spanish master franchisee of BigMat International, a French cooperative and one of Europe's largest building materials distribution networks.
624 SEPA payroll XML files (20222025) every monthly salary payment for 300500 employees across 15+ entities, with full names, DNI/NIE numbers, IBANs, and exact euro amounts.
20 SILTRA Social Security databases the complete filing history for every subsidiary's workforce, containing nmeros de afiliacin, contribution bases, and employment records.
2,690 customer loyalty cards with DNI/NIF identifiers the entire customer-identity database.
888 Modelo 347 tax notifications annual declarations to the Agencia Tributaria naming customers and suppliers with their DNI and transaction amounts.
Complete financial records 5 years of accounting journals, bank reconciliations, insurance policies, loan agreements, and invoices.
Occupational health data (PRL) for 12+ subsidiaries workplace injury reports, medical certificates, and risk assessments.
