FMS
May 6, 2026
•[ ransomware, technology, government ]
FMS was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-06. Sector: Professional Services. Country: United States of America. Website: fmsinc.com. fmsinc.com zoominfo.com/c/fms-inc/14729979 FMS, Inc. is a privately held American software company founded in 1986 by Luke Chung (Harvard graduate), headquartered in Vienna, Virginia, near Washington DC. The company is the world's leading developer of tools for Microsoft Access, and a top vendor for SQL Server, Visual Studio .NET, and Visual Basic communities, with tens of thousands of customers across 100+ countries, including 90 of the Fortune 100 and every US federal government department. FMS is a Microsoft Gold Certified Partner, has won over 40 industry awards, and is recognized as one of the SD Times Top 100 most innovative software firms. It also offers custom software development consulting and its own Sentinel Visualizer link analysis product, used by intelligence and law enforcement agencies
pvdd.ca
May 6, 2026
•[ ransomware, government ]
pvdd.ca was listed as a victim on the leak site of the m3rx ransomware group; the attack is estimated to have taken place on 2026-05-06. Country: Canada. Website: pvdd.ca. +1 (604) 894-6632. Pemberton Valley Dyking District is an autonomous local government body dedicated to maintaining, adapting, and upgrading flood protection systems for the Pemberton Valley community. The organization provides essential services aimed at safeguarding residents from flood risks. It operates through a Board of Trustees and engages with the public during monthly meetings. The district also offers resources and real-time information during high water events to ensure community safety. Stolen: 148gb 50080 files
Trellix (McAfee & FireEye)
April 17, 2026
•[ ransomware, technology, government ]
Trellix (McAfee & FireEye) was listed as a victim on the leak site of the ransomhouse ransomware group; the attack is estimated to have taken place on 2026-04-17. Sector: Technology. Country: United States of America. Website: www.trellix.com. Trellix is a global cybersecurity company formed from the October 2021 merger of McAfee Enterprise and FireEye. It provides services to over 50,000 business and government customers worldwide, protecting more than 200 million endpoints. The companys open and native extended detection and response (XDR) platform helps organizations confronted by todays most advanced threats gain confidence in the protection and resilience of their operations. Trellix, along with an extensive partner ecosystem, accelerates technology innovation through machine learning and automation to empower over 40,000 business and government customers with living security
McCarthy
May 8, 2026
•[ ransomware, manufacturing, healthcare ]
McCarthy was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-08. Sector: Professional Services. Country: United States of America. Website: mccarthyinc.com. mccarthyinc.com McCarthy, Inc., founded in 1955 and based in Savannah, Georgia, specializes in supplying metal doors and frames, wood doors, builder's hardware, toilet partitions, signage, louvers, and specialty accessories. The company serves diverse industries including healthcare, education, commercial, government, manufacturing, and hospitality sectors across the region. McCarthy provides comprehensive products and services from project inception through completion, focusing on building lasting relationships with project teams to ensure utmost client satisfaction.
Kent District Library
May 11, 2026
•[ ransomware, government, leak ]
Kent District Library was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-05-11. Sector: Government & Defense. Country: United States of America. Website: https:kdl.org. Kent District Library (KDL) is a public library system that owns and operates libraries throughout Michigan. However, it does not manage its own security, which is damaging its reputation. We are providing you with confidential financial documents, contact information for organizations, personal data on customers and employees, building plans and blueprints, as well as information about various incidents that they are concealing.
Casino Gaming Commission
May 8, 2026
•[ ransomware, government, leak ]
Casino Gaming Commission was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-05-08. Sector: Government & Defense. Country: Jamaica. Website: cgc.gov.jm. Official Casino Gaming Commission of Jamaica.
Qatar National Broadband
May 12, 2026
•[ ransomware, technology, government ]
Qatar National Broadband was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-12. Sector: Technology. Country: Qatar. Website: qnbn.qa. qnbn.qa zoominfo.com/c/qatar-national-broadband-network-qnbn/1121927707 Qatar National Broadband Network is a government-owned leader in passive fiber infrastructure, established in 2011 to power Qatar's digital transformation and National Vision 2030. With nationwide fiber-optic coverage, QNBN enables ultra-fast, secure connectivity for homes, businesses, and government through open access for all licensed service providers. Strategic partnerships with Microsoft and Carnegie Mellon Qatar underscore its commitment to innovation, AI readiness, and cyber-resilient infrastructure all delivered with sustainability and future-ready excellence
University Of Georgia
May 14, 2026
•[ ransomware, education, government ]
University Of Georgia was listed as a victim on the leak site of the ShadowByt3$ ransomware group; the attack is estimated to have taken place on 2026-05-14. Sector: Education. Country: United States of America. Website: uga.edu. ShadowByt3$ has breached University of Georgia. The full data is on are leak site. We stole approximately 3.2 MB in raw text files. No customers were affected just exployees the following was stolen. - Physical Locations: Home addresses (like the Columbus, GA residential home) and specific office numbers (like Office 2207). - Private Contact Info: Personal cell phone numbers and home phone numbers (e.g., the 404-736-xxxx). - Employee Information: This often includes full names, contact details, and institutional identification photos. - Project Documentation: Information regarding internal university projects, including tracking logs and administrative data for various departments. - Workforce Data: Internal metadata such as position numbers, departmental assignments, and work schedules. - Technical Details: Notes regarding system maintenance and development that could potentially highlight internal processes - Critical Infrastructure: Active project maps for GEMA (Emergency Management), Georgia Broadband, and GDOT (Transportation) through 2026. - Government Records: Access to Asset Forfeiture logs and County-level GIS (Athens-Clarke, Bibb) that underpins 911 dispatch and land taxes. - Leadership Secrets: The UGA Office of the President Mail Tracker and Gov360 anonymous executive coaching logs. - The "SME" Map: we have identified the "Subject Matter Experts" like Noah Abouhamdan, Chad Rupert, and Pat Russell. we know exactly how many hundreds of hours these people have spent on specific pieces of code. - Security Clearances: we know who is a "Benefited" full-time employee (high-value target) versus a "Student Assistant" (low-value entry point).
Amplify Technology
May 14, 2026
•[ ransomware, technology, government ]
Amplify Technology was listed as a victim on the leak site of the ShadowByt3$ ransomware group; the attack is estimated to have taken place on 2026-05-14. Sector: Technology. Country: United Kingdom of Great Britain and Northern Ireland. Website: amplifytechnology.co.uk. Amplify technology has been a victim of an attack. There project they were working on with the pakistan and other countries got stolen. We stole 1.69Gb of data. for all the proof and files it's on the mega.nz link below. For screenshots go to are telegram channel below. They didn't take us seriosly so now they pay for it. The data contains the following below: financial records, pii, pictures of houses personal stuff like address, fathers name, address, etc The company Website: https://www.amplifytechnology.co.uk In the UK, Amplify Technology Limited is a strategic technology consultancy based in Bromsgrove, England. They specialize in helping organizations align their technology with business goals through advisory and implementation services. WHAT THEY DO... - CIO Advisory: Strategic support for technology leaders, including one-to-one mentoring, coaching, and support for cloud migrations or mergers. -SAP Services: Expertise in SAP leadership and technology integration, particularly for the housing, local government, and healthcare sectors. - Change & Adoption: Guiding organizations through cultural shifts and new operating models to ensure people and technology are aligned during digital transformations. - Technical Reviews: Conducting diagnostic reviews of IT operations, cybersecurity, data, and technology change
Majlis Perbandaran Alor Gajah
May 17, 2026
•[ ransomware, government ]
Majlis Perbandaran Alor Gajah was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-17. Sector: Government & Defense. Country: Malaysia. Website: www.mpag.gov.my.
Trésor Public
May 10, 2026
•[ ransomware, government, finance ]
Trsor Public was listed as a victim on the leak site of the AuditTeam ransomware group; the attack is estimated to have taken place on 2026-05-10. Sector: Government & Defense. Country: Senegal. DGCPT (Direction Gnrale de la Comptabilit Publique et du Trsor) is Senegal's public treasury authority under the Ministry of Finance, responsible for public accounting, government fund management, cash flow, and public debt operations.
ETM-ELECTROMATIC, INC.
April 20, 2026
•[ ransomware, manufacturing, technology ]
ETM-ELECTROMATIC, INC. was listed as a victim on the leak site of the titan ransomware group; the attack is estimated to have taken place on 2026-04-20. Sector: Manufacturing. Country: United States of America. Website: www.teledyneetm.com. [AI generated] ETM-Electromatic, Inc. is a U.S.-based company specializing in the design and manufacture of electronic and electromagnetic equipment. The company operates in the defense and industrial electronics sector, producing products such as traveling wave tubes and related microwave power modules used in radar, electronic warfare, and communications systems. It serves government, military, and commercial clients primarily within the United States.
Indian Creek Valley Water Authority
May 13, 2026
•[ ransomware, government ]
Indian Creek Valley Water Authority was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-05-13. Sector: Government & Defense. Country: United States of America. Website: icvwater.org. Indian Creek Valley Water Authority
narit.or.th
May 21, 2026
•[ ransomware, government, technology ]
narit.or.th was listed as a victim on the leak site of the apt73 ransomware group; the attack is estimated to have taken place on 2026-05-21. Sector: Government & Defense. Country: Thailand. Website: narit.or.th. The National Astronomical Research Institute of Thailand (Thailand's National Astronomical Resear...
tkgm.gov.tr
May 22, 2026
•[ ransomware, government, leak ]
tkgm.gov.tr was listed as a victim on the leak site of the apt73 ransomware group; the attack is estimated to have taken place on 2026-05-22. Sector: Government & Defense. Country: Turkey. Website: tkgm.gov.tr. TKGM (Tapu ve Kadastro Genel Mdrl) is a government agency from Turkey, the General Dire...
bangkok.go.th
May 23, 2026
•[ ransomware, government ]
bangkok.go.th was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-05-23. Sector: Government & Defense. Country: Thailand. Website: bangkok.go.th. The Bangkok Metropolitan Administration (BMA) is the local government of Bangkok, which includes the capital of Thailand...
Le Perreux sur Marne
May 24, 2026
•[ ransomware, government ]
Le Perreux sur Marne was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-24. Sector: Government & Defense. Country: France. Website: leperreux94.fr. leperreux94.fr official municipal portal of this Parisian suburb, offering residents access to e-services: ID appointment booking, local event calendars, transport schedules, and social programs. The site serves as a central hub for citizen engagement with local government and real-time community updates
Prologic Construction
May 24, 2026
•[ ransomware, manufacturing, healthcare ]
Prologic Construction was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-05-24. Sector: Manufacturing. Country: Canada. Website: prologicconstruction.ca. Prologic Construction is a trusted general contractor based in Alberta, specializing in high-quality construction solutions for both public and private sectors since 1999. The company offers a full range of services including commercial, institutional, and municipal projects, ensuring timely completion and adherence to budget. With a commitment to quality craftsmanship and competitive pricing, Prologic Construction has built a strong reputation for reliability and expertise. Their portfolio includes various projects such as school modernizations, arena renovations, and healthcare facilities, reflecting their dedication to excellence and community development
SECONT Secretaria de Controle e Transparência
May 24, 2026
•[ ransomware, government ]
SECONT Secretaria de Controle e Transparncia was listed as a victim on the leak site of the nova ransomware group; the attack is estimated to have taken place on 2026-05-24. Sector: Government & Defense. Country: Brazil. Website: secont.es.gov.br. SECONT is much more than just a website; it is the central body of the Internal Control System for the entire State Executive Branch. Its primary mission is to ensure that state resources are used in compliance with the law and efficiently - Nova Provide tree and samples from stolen data to the company when its get in touch with support department.
Badan Pangan Nasional
May 29, 2026
•[ ransomware, government ]
Badan Pangan Nasional was listed as a victim on the leak site of the nova ransomware group; the attack is estimated to have taken place on 2026-05-29. Sector: Agriculture and Food Production. Country: Indonesia. Website: badanpangan.go.id. Badan Pangan Nasional is an Indonesian government agency focused on ensuring food security and stability in the country. It provides services related to food supply, pricing, and consumption, while also addressing issues of food safety and nutrition. The agency aims to support national food sovereignty through various programs and initiatives, targeting local communities and stakeholders in the agricultural sector. Additionally, it engages in public information services to enhance transparency and accessibility regarding food-related regulations and data - Nova Provide tree and samples from stolen data to the company when its get in touch with support department.
