Krum Public Library
May 15, 2026
•[ ransomware, government, financial ]
Krum Public Library was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-05-15. Sector: Government & Defense. Country: United States of America. Website: www.krumlibrary.org. - Financial Documents- HR Data- Supervisor's Information
obrieneng.com
June 5, 2026
•[ ransomware, manufacturing, government ]
obrieneng.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-06-05. Sector: Manufacturing. Country: United States of America. Website: obrieneng.com. contract nda confidential gov\dot\military\va\sam.gov other
Mid-Cumberland Human Resource Agency
May 18, 2026
•[ ransomware, healthcare, government ]
Mid-Cumberland Human Resource Agency was listed as a victim on the leak site of the insomnia ransomware group; the attack is estimated to have taken place on 2026-05-18. Sector: Professional Services. Country: United States of America. Website: www.mchra.com. MCHRA is a nonprofit promoting self-sufficiency via Meals-on-Wheels, public transit, in-home services, and community corrections. It serves adults needing care, transit users, and long-term care residents, emphasizing inclusivity and translation services.
Allensbach Volunteer
June 10, 2026
•[ ransomware, government ]
Allensbach Volunteer was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-06-10. Sector: Government & Defense. Country: Germany. Website: feuerwehr-allensbach.de. ***.de The Allensbach Volunteer Fire Brigade is the local fire service responsible for fire suppression, technical rescue, and emergency response in the municipality of Allensbach, on Lake Constance. It is staffed by trained volunteers committed to continuous training and rapid deployment. The brigade also runs an active youth wing and public fire-safety education programmes
Scenic Hudson
June 10, 2026
•[ ransomware, government ]
Scenic Hudson was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-06-10. Sector: Government & Defense. Country: United States of America. Website: scenichudson.org. ***.org zoominfo.com/c/scenic-hudson-inc/61506079 Scenic Hudson is a U.S. nonprofit environmental organization founded in 1963 to protect the Hudson River Valleys natural beauty. It preserves scenic landscapes, creates public parks, and fights industrial pollution. Today, Scenic Hudson also champions clean energy, climate resilience, and environmental justice throughout the region
aisem.gob.bo
June 9, 2026
•[ ransomware, government, healthcare ]
aisem.gob.bo was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-06-09. Sector: Government & Defense. Country: Bolivia (Plurinational State of). Website: aisem.gob.bo. AISEM (Agencia de Infraestructura en Salud y Equipamiento Mdico) is a Bolivian government agency responsible for the d...
American Tower Corporation
June 12, 2026
•[ ransomware, technology, government ]
American Tower Corporation was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-06-12. Sector: Technology. Country: United States of America. Over 5.2 million records consiting of a significant amount of customer and landowner PII, other records tied to other companies such as T-Mobile, Verizon, and the US DHS, several tower asset records containing GPS data and plaintext physical access/gate codes for cell tower compunds across the United States, thousands of internal corporate data, and a lot more were compromised. We urge you to reach out. This is a final warning to reach out by 15 June 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 12 June 2026 | Warning: FINAL WARNING PAY OR LEAK
myipo.gov.my
June 13, 2026
•[ ransomware, government, technology ]
myipo.gov.my was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-06-13. Sector: Government & Defense. Country: Malaysia. Website: myipo.gov.my. MyIPO provides a range of intellectual property services including patents, copyrights, trademarks, geographical indications, industrial designs, and integrated circuit layout designs. The organization aims to protect the rights of creators and innovators by offering exclusive rights for inventions and creative works. MyIPO serves a diverse clientele, including authors, inventors, and businesses seeking to safeguard their intellectual property.
coe.int
June 13, 2026
•[ ransomware, government, finance ]
coe.int was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-06-13. Sector: Government & Defense. Country: France. Website: coe.int. Over 297 GB of Council of Europe HR and payroll data (429,000+ files) was compromised across the Secretariat, Directorate of Human Resources, Parliamentary Assembly, EDQM, permanent and temporary staff, interpreters, conference services, language booth units, and payroll administration, including 409,000+ payslips for 10,000+ staff from 2011 to 2026, 14,000+ CVs and 3,700+ in-house personnel files, 10,700+ per-employee document stores, contract and purchase order records, mission travel overpayments, interpreter scheduling and 2026 salary scales, Blue List rosters, absence and illness reports, bank account and URSSAF payroll data, performance evaluations, and payroll exports, covering full names, employee IDs, home addresses, phone numbers, dates of birth, salaries, bank details, tax and social security information, medical and absence records, mission references, and other internal institutional data. This is a final warning to reach out by 16 June 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 14 June 2026 | Warning: FINAL WARNING PAY OR LEAK
Silsbee Police Department
May 27, 2026
•[ ransomware, government ]
Silsbee Police Department was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-05-27. Sector: Government & Defense. Country: United States of America. Website: www.silsbeeisd.org/departments/silsbee-isd-police-department. Court Information
Divine IT
June 15, 2026
•[ ransomware, technology, government ]
Divine IT was listed as a victim on the leak site of the nova ransomware group; the attack is estimated to have taken place on 2026-06-15. Sector: Technology. Country: Bangladesh. Website: divineit.net. Divine IT Limited is a CMMI Level 3 IT consultancy and software development company based in Bangladesh, established in 2005. The company specializes in creating ERP systems, security solutions, and various software applications for diverse industries. Their primary clients include enterprises and government organizations seeking robust IT solutions and support. With a commitment to excellence, Divine IT has received multiple awards for its innovative products, including the flagship PrismERP - Nova Provide tree and samples from stolen data to the company when its get in touch with support department.
National Museum
June 15, 2026
•[ ransomware, government ]
National Museum was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-06-15. Sector: Government & Defense. Country: Denmark. Website: natmus.dk. ***.dk zoominfo.com/c/national-museum/372526094 The National Museum of Denmark, located in the heart of Copenhagen, is the country's premier institution for cultural history, spanning from the Stone Age to the present day. It houses world-renowned archaeological treasuresincluding Viking hoards, the ancient Sun Chariot, and the Egtved Girlalongside extensive global ethnographic collections. The museum is dedicated to exploring and sharing Denmark's rich heritage and global human history through engaging, research-driven exhibitions
Ministarstvo zdravstva Republike Hrvatske
June 15, 2026
•[ ransomware, government, healthcare ]
Ministarstvo zdravstva Republike Hrvatske was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-06-15. Sector: Government & Defense. Country: Croatia. Website: zdravlje.gov.hr. ***.gov.hr zoominfo.com/c/ministarstvo-zdravstva-republike-hrvatske/1339932847 The Ministry of Health of the Republic of Croatia is the central government authority responsible for shaping national health policies, regulating medical standards, and managing the public healthcare system. Through its official portal, it provides citizens with crucial public health guidelines, legislative updates, and secure access to modern digital e-Health services. Their primary mission is to protect population well-being, ensure equitable access to high-quality medical care, and continuously modernize the national health infrastructure
hoodriversheriff.com
June 15, 2026
•[ ransomware, government ]
hoodriversheriff.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-06-15. Sector: Government & Defense. Country: United States of America. Website: hoodriversheriff.com. Headquartered in Hood River, the organization provides a broad range of services, including patrol operations, criminal investigations, emergency communications, search
Kedah
June 16, 2026
•[ ransomware, government ]
Kedah was listed as a victim on the leak site of the nova ransomware group; the attack is estimated to have taken place on 2026-06-16. Country: Malaysia. The Kedah State Government operates an official corporate portal that provides information and services to the public, businesses, and tourists. It offers various services including online transactions, customer satisfaction surveys, and updates on government policies. The portal also features sections dedicated to tourism, education, and corporate financing, aiming to enhance the quality of life for residents and visitors. Its intended clients include citizens of Kedah, local businesses, and tourists seeking information about the state - Nova Provide tree and samples from stolen data to the company when its get in touch with support department.
Diamond Truck Centres
June 16, 2026
•[ ransomware, leak, manufacturing ]
Diamond Truck Centres was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-06-16. Sector: Transportation. Country: Canada. [dealership, trucks] *** Western Canada's largest International Trucks dealership group (9 dealer + 13 sub-dealer locations, ~$63M revenue, 250 employees).
The dataset spans 17 years of unbroken operational history (20092026) and represents the full shared-drive contents of the entire company: HR, payroll, accounting, military contracts, and individual employee profiles.
The exposed material includes:
53 customer Pre-Authorized Debit (PAD) forms full bank account numbers, transit numbers, institution numbers, and authorized signatures for commercial customers including the City of Saskatoon.
17 years of employee payroll data wages, SINs (implied), pension contributions, benefits, termination calculations for every employee since 2009.
Biometric data ADP fingerprint timeclock enrollment records for all locations.
Immigration documents for 6+ foreign workers LMIA applications, offers of employment, provincial nominee support docs.
System credentials in plaintext ADP timeclock passwords, manager training logins, safe combination.
Military contract documentation Diamond's Controlled Goods Security Plan (ITAR/CGP), MSVS delivery matrices, military vehicle VINs, CFB Edmonton and RCMP vehicle program data.
289 GB of daily bank deposit scans (20172026) customer cheque images with names, amounts, and account details.
A complete Outlook PST archive (166 MB) years of internal email likely containing credentials and customer data.
Gerencial
May 21, 2026
•[ ransomware, finance, government ]
Gerencial was listed as a victim on the leak site of the spacebears ransomware group; the attack is estimated to have taken place on 2026-05-21. Sector: Professional Services. Country: Brazil. Website: gerencialcontabil.com.br. Gerencial Contbil (Gerencial PR) is a Brazilian accounting and business advisory firm based in the state of Paran.The company provides accounting, tax, payroll, business consulting, and HR outsourcing services for small and medium-sized businesses.It also assists entrepreneurs with company formation, tax compliance, and business management.The firm operates through multiple officesacross Paran, including locations in Pato Branco, Francisco Beltro, Dois Vizinhos, Cascavel, Guarapuava, and other cities.Its services are tailored to sectors such as commerce, industry, service providers, and non-profit organizations.-personal digital certificates (amount ~ 1 000) (.pfx / .p12 files) and the corresponding passwords for accessing the Brazilian official government websites.-Clients info (tel, mail, id, passwords, etc)-600 000 + files with personal information https://***.com.br/
Prince George County
June 10, 2026
•[ ransomware, government ]
Prince George County was listed as a victim on the leak site of the ransomhouse ransomware group; the attack is estimated to have taken place on 2026-06-10. Sector: Government & Defense. Country: United States of America. Website: www.princegeorgecountyva.gov. Prince George County is a local government entity focused on providing essential services and fostering community development. It offers a range of services including public safety, waste management, parks and recreation, and social services to its residents. The county aims to embrace its rural character while planning for a prosperous future. Its intended clients include local residents, businesses, and visitors seeking information and services related to the county.
Commune d'Eyguires
June 19, 2026
•[ ransomware, government ]
Commune d'Eyguires was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-06-19. Sector: Government & Defense. Country: France. Website: www.eyguieres.org.
idefeey.yucatan.gob.mx
December 31, 2025
•[ ransomware, government ]
idefeey.yucatan.gob.mx was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2025-12-31. Sector: Government & Defense. Country: Mexico. Website: idefeey.yucatan.gob.mx. The Institute for the Development and Certification of Educational and Electrical Physical Infrastru...
