vgrn.de
July 17, 2026
•[ ransomware, government ]
vgrn.de was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-07-17. Sector: Energy & Utilities. Country: Germany. Website: vgrn.de. Verbandsgemeinde Rhein-Nahe is a company that operates in the Government industry.
Albania's Official National Teacher Training Portal
August 16, 2026
•[ ransomware, leak, education ]
Albania's Official National Teacher Training Portal was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-08-16. Sector: Education. Country: Albania. Albanias official national teacher training portal provides centralized professional development resources and accredited programs for educators nationwide.
This leak include data such as;
Roughly ~100k Full national ID numbers, full names and teacher certificates in PDF. [Size: 5.9 GB | Sector: Education, Government]
Otter Tail County, Minnesota
August 11, 2026
•[ ransomware, government ]
Otter Tail County, Minnesota was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-08-11. Sector: Government & Defense. Country: United States of America. Website: ottertailcounty.gov. https://ottertailcounty.gov/
Castilla La Mancha
August 17, 2026
•[ ransomware, government ]
Castilla La Mancha was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-08-17. Sector: Government & Defense. Country: Spain. Website: castillalamancha.es. The Government of Castilla-La Mancha provides a wide range of services and information related to public administration, economy, education, health, and social services. It aims to support various sectors including agriculture, tourism, and employment, while also addressing issues like sustainability and equality. The intended clients include residents of Castilla-La Mancha, businesses, and individuals seeking assistance in various life situations. The government also promotes transparency and participation through its digital platforms.
Valor Defense Solutions, Inc
August 17, 2026
•[ ransomware, government, manufacturing ]
Valor Defense Solutions, Inc was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-08-17. Sector: Government & Defense. Country: United States of America. Valor Defense Solutions, Inc. is a woman-owned small business and defense contractor headquartered in Odon, Indiana. Founded in 2018, the company provides customized solutions to government, military, and commercial customers. Its services include logistics, engineering support, electronic module and cable manufacturing, military equipment refurbishment, protective coatings, sandblasting, painting, and powder coating. Valor Defense Solutions supports U.S. Department of Defense projects and has worked with government agencies and defense contractors on equipment manufacturing, maintenance, and sustainment. The company focuses on delivering reliable, high-quality products and technical services that support military operations and the broader public sector.
The company headquarters is located in 15484 N 1350 E, Odon, IN 47562, USA. 11-50 Employees
Babcock
August 19, 2026
•[ ransomware, government, manufacturing ]
Babcock was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-19. Sector: Government & Defense. Country: South Africa. Website: babcock.co.za. babcock.co.za rocketreach.co/babcock-international-group-africa-profile_b5cda591f42e0b42 Babcock Africa is a leading engineering and asset management company specializing in critical infrastructure and heavy equipment across the African continent. With over 130 years of experience, it provides lifetime engineering solutions, including industrial power systems, construction machinery, plant hire, and defense support. The company partners with demanding sectors such as energy, mining, transport, and manufacturing to ensure safe, reliable, and efficient operations. Its core focus is on designing, building, and sustaining complex assets through comprehensive maintenance and innovative technical services.
www.mestojilemnice.cz
August 19, 2026
•[ ransomware, government ]
www.mestojilemnice.cz was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-08-19. Sector: Other. Country: Czechia. Website: www.mestojilemnice.cz. Msto Jilemnice (City of Jilemnice) is the official website of the municipality of Jilemnice, a historic town located i...
Ayuntamiento de Velilla de San Antonio
August 12, 2026
•[ ransomware, government ]
Ayuntamiento de Velilla de San Antonio was listed as a victim on the leak site of the kairos ransomware group; the attack is estimated to have taken place on 2026-08-12. Sector: Government & Defense. Country: Spain. Website: ayto-velilla.es. El Ayuntamiento de Velilla de San Antonio es el organismo oficial de gobierno local y administracin del municipio de Velilla de San Antonio, situado en la Comunidad de Madrid, Espaa. Gestiona los servicios pblicos, el padrn, los impuestos locales y la vida ciudadana de la localidad.
ARBEITERKAMMERN
August 21, 2026
•[ ransomware, government ]
ARBEITERKAMMERN was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-21. Sector: Professional Services. Country: Austria. Website: arbeiterkammer.at. arbeiterkammer.at The Austrian Chamber of Labour is a statutory public organization dedicated to representing the interests of employees and consumers across Austria.
It provides its members with free legal advice on labor and social law, educational support, and strong consumer protection services.
The organization actively advocates for workers' rights, fair wages, and social justice through extensive research and political lobbying.
Vietnam Electricity(EVNHANOI)
August 22, 2026
•[ ransomware, energy, government ]
Vietnam Electricity(EVNHANOI) was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-08-22. Sector: Energy & Utilities. Country: Vietnam. Website: evn.com.vn. Vietnam Electricity (EVN), legally known as Tp on in lc Vit Nam, is the largest power company and the sole national electric utility in Vietnam. Fully owned and controlled by the Vietnamese government since its inception in 1994, EVN operates as a vertically integrated monopoly responsible for the nationwide generation, transmission, and distribution of electricity, as well as international power exchanges. The group oversees all major power plants and regional distribution subsidiaries, including EVNHANOI. Serving as a crucial pillar for Vietnam's macroeconomic stability and industrial expansion, EVN is currently undertaking extensive grid digitalization and spearheading the national transition from coal dependency toward clean and renewable energy integration.
The data content exceeds 300GB, comprising 13.36 million rows of customer details, 6.99 million subscriptions, 2.26 million account records, and other miscellaneous data.The price is open to negotiation.
Session:054e5b6edf03e8ba012626b5dcd83a7dd47a046760bcd9b9b32d02a039d24d9608
Tox:852E34CBEBA2D40FD21BAC9F9E588B5194DBA9F31CACF9ECE316403120BE18765D22A8A453C4 [Size: 300.0 GB | Sector: Government, Energy]
Lockheed Architectural Solutions, Inc.
August 25, 2026
•[ ransomware, manufacturing, government ]
Lockheed Architectural Solutions, Inc. was listed as a victim on the leak site of the Global Secret Group ransomware group; the attack is estimated to have taken place on 2026-08-25. Sector: Government & Defense. Country: United States of America. Website: lockheedsolutions.com. Country: Pascoag, RI 02859, United States |
Website: lockheedsolutions.com |
Revenue: $31.2 Million |
Industry: Manufacturing, Construction, Building Materials |
Employees: 100-200 |
Properties: 1.3 TB (558,462 Files, 97,835 Folders)
ATF
August 26, 2026
•[ ransomware, government ]
ATF was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-26. Sector: Government & Defense. Country: United States of America. Website: www.atf.gov.
cgcgabon.com
August 26, 2026
•[ ransomware, government ]
cgcgabon.com was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-08-26. Sector: Other. Country: Gabon. Website: cgcgabon.com. Le Conseil Gabonais des Chargeurs (CGC) is a Gabonese public administrative institution (tablissement public caract...
Health
August 27, 2026
•[ ransomware, healthcare, government ]
Health was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-08-27. Sector: Healthcare. Country: Australia. Website: health.nsw.gov.au. Organization with 103 emails extracted. Domain: health.nsw.gov.au
Whitehouse
August 28, 2026
•[ ransomware, government ]
Whitehouse was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Government & Defense. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.whitehouseandco.com.
Directorate-General for Education
August 28, 2026
•[ ransomware, government, education ]
Directorate-General for Education was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Government & Defense. Country: Portugal. Website: dgeec.medu.pt. The Direo-Geral de Estatsticas da Educao e Cincia (DGEEC) is a Portuguese government agency responsible for collecting, analyzing, and publishing official statistics on education, science, and technology.
Berlin, Germany
August 28, 2026
•[ ransomware, government, technology ]
Berlin, Germany was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-08-28. Country: Germany. Berlin, Germany Total capacity 5.79 TBArchive scale: ~1.44 million files scanned; by category Maps/Geo 124,823, Legal/complaints 77,939, Financial 55,553, Contracts 46,522, HR 27,299,Government supervisory 13,142, Confidential 11,777, Infrastructure 8,110, Passwords 5,941, Health 2,738, Contacts 2,287.PII leak: 16,389 e-mails, 11,963 phone numbers, 12,076 individuals, 148 IBANs.Credentials in plaintext: GebudeAtlas, the ePayment PAYONE payment database, personal 'password safes' (danz, kramell Z_ADMIN database accounts, franssen), leadership credentials.Disciplinary proceedings: the ANDERSON case (432 files, 20252026, lawsuit at VG Berlin administrative court), the politically motivated misconduct case involving the LKA Staatsschutz (state security police), the forestry cases BLAUTH/MLLER/FIELICKE.State secrets: Bundesrat committee protocols with declassification correspondence, Geheimschutz (classified-material handling) data.Passports/IDs (recent, from personnel files and GI-Vertraulich).KRITIS: vulnerability analyses of Berlin's water supply.Mass personal data: Personalakten (personnel files) >5,000, Convotis payroll, OWi (administrative-offence) files >5,000, Postbuch SQL dumps 20202026, PST archives, leadership private data (IBANs, ID cards, Behrendt's bank card).NDA: 3,226 documentsLegal violation map (GDPR Art. 32/9/33, VSA/StGB upon VS classification confirmation, BSIG/KRITIS) More
MB Associates
August 28, 2026
•[ ransomware, technology, government ]
MB Associates was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Professional Services. Country: United Kingdom of Great Britain and Northern Ireland. Website: mbassociates.org. mbassociates.org zoominfo.com/c/mb-associates/372858181 MB Associates is a UK social impact consultancy founded in 2005 by Mandy Barnett (London Business School MBA, chair of Social Value UK), based in Holmfirth, West Yorkshire; its legal entity is Mandy Barnett Associates Ltd (incorporated 7 Sep 2005, registered in Welwyn Garden City). It helps people, projects and organisations understand and increase their social impact impact evaluation, SROI analysis, consultation and research, creative facilitation, training and toolkits working through a PlanDoReview cycle that starts with a "Story of Change". Clients include Arts Council England, the National Lottery, UKRI-AHRC, Natural Resources Wales, Bristol City Council, the National Children's Orchestra, museums and charities; it also runs its own learning platform, Culture3 (culturecubed.org). In February 2026 the founder handed the firm over to colleagues directors Jael Williams and Emily Wilson and the brand
AFSARD
August 30, 2026
•[ ransomware, government, finance ]
AFSARD was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-30. Country: North Macedonia. Website: ipardpa.gov.mk.
awo-suedost.de
June 23, 2026
•[ ransomware, government, healthcare ]
awo-suedost.de was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-06-23. Sector: Government & Defense. Country: Germany. Website: awo-suedost.de. Established in 1994, it is one of the regional branches of the Arbeiterwohlfahrt (AWO), one of Germany's six largest independent
