bvi.co.bw
May 15, 2026
•[ ransomware, healthcare, government ]
bvi.co.bw was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-05-15. Country: Botswana. Website: bvi.co.bw. The Botswana Vaccine Institute (BVI) is a trusted animal pharmaceutical organization with over 45 ye...
Central Bank of Libya
June 22, 2026
•[ ransomware, finance, government ]
Central Bank of Libya was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-06-22. Sector: Financial Services. Country: Libya. Website: www.cbl.gov.ly.
JMS Southeast
June 2, 2026
•[ ransomware, technology, manufacturing ]
JMS Southeast was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-06-02. Sector: Professional Services. Country: United States of America. Website: jms-se.com. JMS Southeast, Inc. specializes in high-quality temperature measurement and control products, i
ncluding thermocouples, RTDs, thermowells, and transmitters, catering to various industries suc
h as aerospace, pharmaceuticals, and oil and gas.
We will upload 25gb of corporate data soon. Employee personal information (name, addresses and
so on), payment details, NDAs, projects, contracts and agreements, agreements with government,
customer information and so on.
politur.gob.do
June 25, 2026
•[ ransomware, government ]
politur.gob.do was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-06-25. Sector: Government & Defense. Country: Dominican Republic. Website: politur.gob.do. POLITUR (Direccin Central de Polica de Turismo / Central Directorate of Tourism Police), now also known as CESTUR (C...
NSW Rural Fire Service
June 26, 2026
•[ ransomware, government ]
NSW Rural Fire Service was listed as a victim on the leak site of the nova ransomware group; the attack is estimated to have taken place on 2026-06-26. Sector: Government & Defense. Country: Australia. Website: rfs.nsw.gov.au. Data Leaked, Updated from Nova Team by investigate Affiliate provided informations.
Lørenskog kommune
June 29, 2026
•[ ransomware, government, healthcare ]
Lrenskog kommune was listed as a victim on the leak site of the cmdorganization ransomware group; the attack is estimated to have taken place on 2026-06-29. Sector: Government & Defense. Country: Norway. Website: lorenskog.kommune.no. Lrenskog kommune offers a range of services including education, health care, social services, and community development. Their intended clients include residents seeking information on property tax, childcare, and various cultural and recreational activities. The municipality also engages with the public through political meetings and community involvement initiatives. Additionally, Lrenskog kommune celebrates local events and milestones, fostering a sense of community among its residents.
Winona County
May 1, 2026
•[ ransomware, government, leak ]
Winona County was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-05-01. Sector: Government & Defense. Country: United States of America. Website: winonacounty.gov. Winona County is located in the Mississippi River blufflands of southeastern Minnesota. They have been negligent regarding security and the data they store, which has resulted in a breach and the public disclosure of all the confidential data they held. As a result, we are now able to offer you a large database containing resident records, tax and budget documents, police records, and data from other institutions.
townofnorwell.net
August 31, 2025
•[ ransomware, government ]
townofnorwell.net was listed as a victim on the leak site of the threeam ransomware group; the attack is estimated to have taken place on 2025-08-31. Sector: Government & Defense. Country: United States of America. Website: townofnorwell.net. The Town of Norwell MA offers a variety of municipal services including animal control, building permits, health clinics, and recreational programs. It serves the residents of Norwell by ensuring public safety, facilitating community events, and p
wyomingcountyny.gov
June 2, 2025
•[ ransomware, government ]
wyomingcountyny.gov was listed as a victim on the leak site of the threeam ransomware group; the attack is estimated to have taken place on 2025-06-02. Sector: Government & Defense. Country: United States of America. Website: wyomingcountyny.gov. Wyoming County provides various government services to its residents, including job opportunities, economic development initiatives, and electronic forms for managing county affairs. The county actively organizes community events, such as pop-up f
Compass Housing Alliance
April 30, 2026
•[ ransomware, government ]
Compass Housing Alliance was listed as a victim on the leak site of the blackwater ransomware group; the attack is estimated to have taken place on 2026-04-30. Sector: Government & Defense. Country: United States of America. Website: compasshousingalliance.org. Compass Housing Alliance is dedicated to developing and providing essential services, shelter, and affordable housing to ensure that everyone in the community has a safe place to call home.
City of Sandstone
May 4, 2026
•[ ransomware, government ]
City of Sandstone was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-04. Sector: Government & Defense. Country: United States of America. Website: sandstone.govoffice.com.
zonaovest.to.it
May 4, 2026
•[ ransomware, government ]
zonaovest.to.it was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-05-04. Sector: Other. Country: Italy. Website: zonaovest.to.it. Is likely an Italian regional organization or consortium based in the Turin (Torino) area. Entities with similar naming conventions in
Erla Technologies SAS
April 9, 2026
•[ ransomware, technology, government ]
Erla Technologies SAS was listed as a victim on the leak site of the spacebears ransomware group; the attack is estimated to have taken place on 2026-04-09. Sector: Technology. Country: France. Website: www.erla.fr. Our company, Erla Technologies SAS, has specialised for more than 30 years in designing, manufacturing, installing and maintaining a huge range of innovative equipment with Guaranteed French Producedcertification and intended for storage, distribution and management of petroleum products, biofuel, Adblue and industrial and chemical fluids.Aware of environmental issues, new energies are at the heart of the innovations and solutions brought by Erla Technologies.-One of the clients is the French army, documentation.-Personal information of employees and clients-Financial documents-Other files https://www.erla.fr
Académie de Montpellier / CSJM
May 5, 2026
•[ ransomware, education, government ]
Acadmie de Montpellier / CSJM was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Education. Country: France. Website: ac-montpellier.fr. French public school network. Domain CSJM.BEZIERS, part of Acadmie de Montpellier (ac-montpellier.fr). Occitanie region (laregion.fr). Teacher and admin staff credentials.
ActionAid / TACOSA
May 5, 2026
•[ ransomware, government ]
ActionAid / TACOSA was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Government & Defense. Country: United Kingdom of Great Britain and Northern Ireland. Website: actionaid.org. NGO sector. Domains: actionaid.org, tacosa.org.za, immigration.go.tz.
CourtSmart
May 5, 2026
•[ ransomware, technology, government ]
CourtSmart was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Professional Services. Country: United States of America. Website: courtsmart.com. Court technology company. Domain courtsmart.com / COURTSMART2. Dev server: dev-rich20.courtsmart.com. Connections to JIS.org, nashville.org.
ttt.vn TTT Corporation
May 5, 2026
•[ ransomware, manufacturing, government ]
ttt.vn TTT Corporation was listed as a victim on the leak site of the stormous ransomware group; the attack is estimated to have taken place on 2026-05-05. Country: Vietnam. Website: ttt.vn. $900k to Solve the Problem 5TB While TTT Company was preoccupied with designing luxurious interiors and architectural masterpieces, they completely overlooked the design of a secure network. We have spent enough time within their internal infrastructure to conclude that their security is incredibly fragile. We have successfully exfiltrated all of the company's data and now possess 5 TB of the most sensitive information, including complete blueprints and CAD designs for prestigious clients (Toyota showrooms, gyms, luxury resorts, and government projects). We have accessed every employee's personal drive, including IDs, passports, and private medical records. Furthermore, we hold confidential contracts, tax reports (BCTC), internal financial audits, and detailed security schematics for client buildings.
Magisterial Service
April 29, 2026
•[ ransomware, government, leak ]
Magisterial Service was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-04-29. Sector: Professional Services. Country: Papua New Guinea. Website: magisterialservices.gov.pg. magisterialservices.gov.pg The Magisterial Service of Papua New Guinea (MS) is the administrative arm of the country's District Court system, established in 1975 under Section 173(1) of the PNG Constitution. It oversees the effective and efficient administration of 63 District Court establishments and over 400 gazetted court-holding locations across the country. Headquartered in Port Moresby, the service is led by the Chief Magistrate and operates under the Ministry of Justice and Attorney General. Its budget for 2025 was projected at K109 million, reflecting the government's commitment to improving access to justice nationwide
ACFA Regionale de Calgary
April 27, 2026
•[ ransomware, government ]
ACFA Regionale de Calgary was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-04-27. Sector: Professional Services. Country: Canada. Website: acfa.ab.ca. acfa.ab.ca zoominfo.com/c/acfa-regionale-de-calgary/354494275 The ACFA (French Canadian Association of Alberta) was founded in 1926 and serves as the official political spokesperson for all French-speaking people in Alberta. Its core mission is to protect francophone linguistic rights, advance French-language education, and strengthen the cultural vitality of Alberta's Francophone communities across 13+ regional branches. The non-profit is headquartered in Edmonton and employs between 1150 people. It is currently approaching its 100th anniversary, with the board actively planning centennial celebrations
Le Maire de QUIBERON
May 6, 2026
•[ ransomware, government ]
Le Maire de QUIBERON was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-06. Sector: Government & Defense. Country: France. Website: www.ville-quiberon.fr.
