Morrison Cohen
October 26, 2026
•[ ransomware, finance, government ]
Morrison Cohen was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Professional Services. Country: United States of America. [AI generated] Morrison Cohen LLP is a United States law firm headquartered in New York City. It provides legal services across practice areas including corporate law, litigation, bankruptcy and restructuring, real estate, intellectual property, and white-collar defense. The firm serves corporate clients, financial institutions, and individuals. It operates within the legal services industry, primarily serving businesses in the New York metropolitan area and nationally.
Terrebonne Parish Government
October 29, 2026
•[ ransomware, government ]
Terrebonne Parish Government was listed as a victim on the leak site of the Booba Project ransomware group; the attack is estimated to have taken place on 2026-10-29. Sector: Government & Defense. Country: United States of America. Website: www.tpcg.org. Government Relations Services Stolen data: 105 GB.
Circleville Police Department
October 29, 2026
•[ ransomware, government ]
Circleville Police Department was listed as a victim on the leak site of the Booba Project ransomware group; the attack is estimated to have taken place on 2026-10-29. Sector: Government & Defense. Country: United States of America. Website: www.circlevillepolice.com. Government Administration Stolen data: 15 GB.
South Weber City
October 29, 2026
•[ ransomware, government ]
South Weber City was listed as a victim on the leak site of the Booba Project ransomware group; the attack is estimated to have taken place on 2026-10-29. Sector: Government & Defense. Country: United States of America. Website: www.southwebercity.gov. Government Administration Stolen data: 295 GB.
EPMMOP
October 26, 2026
•[ ransomware, government, technology ]
EPMMOP was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Country: Ecuador. Website: epmmop.quito.gob.ec. epmmop.quito.gob.ec EPMMOP is the Metropolitan Public Company of Mobility and Public Works of Quito, Ecuador, responsible for urban transportation infrastructure and public works across the capital district of 2.7 million people. It manages the city's integrated transport system including the new Quito Metro, launched in December 2023 as Ecuador's first subway line with 22.4 kilometers and 15 stations. The agency also operates the TelefriQo cable car, one of the highest in the world, plus trolleybus, BRT and cable car systems under the SITM integrated transit framework. It builds and maintains roads, bridges, sidewalks, drainage and one of Latin America's largest cycling networks. The company works within Quito's UNESCO World Heritage context, requiring unique engineering solutions for the historic center.
WIKA Beton
October 26, 2026
•[ ransomware, manufacturing, government ]
WIKA Beton was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Manufacturing. Country: Indonesia. Website: wika-beton.co.id. wika-beton.co.id WIKA Beton (PT Wijaya Karya Beton Tbk) is Indonesia's largest precast and prestressed concrete manufacturer, founded in 1997 and listed on the Indonesia Stock Exchange since 2014 as part of state-owned Wijaya Karya group. It operates over 20 production plants across Indonesia from Java to Papua, producing more than 189 types of concrete products including bridge girders, piles, culverts and railway sleepers. Revenue is estimated at around 5.3 trillion rupiah with a market cap of 1.9 trillion, offering a 3.5 percent dividend yield and trading well below book value. The company is a primary supplier for Indonesia's massive infrastructure boom including toll roads, the Jakarta-Bandung high-speed railway and new port construction. Led as a state-owned enterprise, it benefits from priority access to government contracts and a unique nationwide plant network.
Grupo Sanirent
October 26, 2026
•[ ransomware, healthcare, government ]
Grupo Sanirent was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Healthcare. Country: Mexico. Website: sanirent.com.mx. sanirent.com.mx Grupo Sanirent is a 100 percent Mexican company founded in 1983 in Mexico City, the national leader in portable toilet rental, mobile offices, septic services and waste management. With 178 employees and operations in all 32 Mexican states, it serves everything from private events and luxury weddings to massive construction sites and industrial operations. Its business lines include standard and VIP portable toilets, camper-style luxury stations, mobile office rentals, industrial drain cleaning with specialized vactor and guzzler trucks, and full waste collection including hazardous and bio-infectious materials. The company holds ISO 9001 certification and has won 53 government contracts with major institutions like IMSS, CFE, CAPUFE and the National Culture Secretariat. Its premium Eventos Especiales division provides luxury sanitary facilities for high-end events across the country. Key strengths are 43 years of experience, full national coverage, diversified service.
Machelen (Belgium)
October 27, 2026
•[ ransomware, government, healthcare ]
Machelen (Belgium) was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-10-27. Country: Belgium. Website: machelen.be. Machelen (Belgium) Machelen (Belgium) - municipal and social welfare (OCMW) file servers1.3 million files, ~2.9 TB. Working copy + backup copy (lawer2/lawer3). Language: Dutch, partly French.Contents:Social welfare and migration service client files: passports, ID cards, residence permits, sick notes.WZC nursing home: medical files, staff HR dossiers, workplace accidents.Civil status records (births, marriages) with national register numbers (NISS/RRN).Payslips, financial data.Correspondence (~23k messages), employee home folders.Databases and backups: full OCMW database backup (6 GB, 09/2026), 645 .mdb databases, 12,873 .dbf, 110 .bak (17 GB).Verified: 13,319 files with personal data. Among them - a valid Belgian ID card (expiry 02/2029), Belgian and Moroccan passports, national register numbers (RRN), sick notes with patient addresses, medical documents (GDPR Art. 9 special categories). More
Angeles Contractor
October 28, 2026
•[ ransomware, manufacturing, government ]
Angeles Contractor was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-28. Sector: Manufacturing. Country: Mexico. Website: angelescontractor.com. angelescontractor.com Angeles Contractor Inc is a general contractor founded in 1998 in City of Industry, California, with 8 CSLB license categories and 63 to 95 employees delivering construction projects across Southern California. It has completed 259 public works projects worth over 197 million dollars for 47 government agencies, led by San Bernardino County with 73 contracts. Its portfolio includes the Rose Bowl renovation, UCLA dining hall, CGV Cinemas, Paakuma K-8 School and a 14.5 million dollar Big Bear Airport terminal rebuild. Led by President Young W. Kang and VP Alex Cho, it maintains over 90 percent repeat business across education, healthcare, commercial and residential sectors. It holds multiple JOC contracts with San Bernardino, San Mateo and Sourcewell worth up to 30 million dollars per year. The company is a certified Minority Business Enterprise with active expansion into Northern California through offices in San Jose and Salinas.
Eichstatt
October 27, 2026
•[ ransomware, government, education ]
Eichstatt was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-27. Country: Germany. Website: eichstaett.de. eichstaett.de 1,5 tb information Eichsttt is a small historic town in Upper Bavaria with 13,500 inhabitants and 1400 years of history, famous for its baroque architecture, Jura Museum with Archaeopteryx fossils and UNESCO Altmhltal Geopark. The Katholische Universitt Eichsttt-Ingolstadt enrolls about 4,800 students across 4 faculties spanning theology, philosophy, languages and business in Ingolstadt. Under President Dr. Klaus Stwe since 2023, it received 5.86 million euro in Bavarian funding for digital transformation and AI programs. It is developing an international campus in Shandong, China and launching new sustainability master's degrees. Key strengths are its Catholic identity, small class sizes and strategic location between Munich and Nuremberg.
City of Big Spring
October 27, 2026
•[ ransomware, government ]
City of Big Spring was listed as a victim on the leak site of the Booba Project ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Government & Defense. Country: United States of America. Website: www.mybigspring.com. Government Administration Stolen data: 151 GB.
City of Columbia, SC
October 29, 2026
•[ ransomware, government ]
City of Columbia, SC was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-29. Sector: Government & Defense. Country: United States of America. Website: www.columbiasc.gov.
Svedala Kommun
October 28, 2026
•[ ransomware, government, manufacturing ]
Svedala Kommun was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-28. Sector: Government & Defense. Country: Sweden. Website: svedala.se. svedala.se Revenue $282.1 Million Svedala kommun is a municipality in Skne County, Sweden, part of Greater Malm with 23,722 residents and a projected growth to 26,800 by 2032. It jumped from 63rd to 15th place in Sweden's Bst att leva 2026 ranking, ranking number one nationwide in business climate, self-sufficiency and outbound commuting. The local economy centers on transport and warehousing driven by Malm Airport, with Sandvik SRP as the largest private employer and a new Airport City MMX business park planned to create 1,000 jobs. The municipality runs a balanced budget of SEK 1.66 billion with a tax rate below the national average. Education performs above average with 89.8 percent gymnasium eligibility and 80.3 percent qualified teachers. It is investing 431 million kronor in infrastructure 2025 to 2027.
Commission de la construction du Quebec
September 1, 2026
•[ ransomware, government ]
Commission de la construction du Quebec was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-01. Sector: Government & Defense. Country: Canada. Website: www.ccq.org.
Charter Township of Commerce
October 27, 2026
•[ ransomware, government ]
Charter Township of Commerce was listed as a victim on the leak site of the Booba Project ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Government & Defense. Country: United States of America. Website: www.commercetwp.com. Government Administration Stolen data: 155 GB.
SALEG (Sachsen-Anhaltische Landesentwicklungsgesellschaft mbH)
October 31, 2026
•[ ransomware, leak, government ]
SALEG (Sachsen-Anhaltische Landesentwicklungsgesellschaft mbH) was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-10-31. Sector: Government & Defense. Country: Germany. SALEG (Sachsen-Anhaltische Landesentwicklungsgesellschaft mbH) is a state-owned land development company belonging to the German federal state of Saxony-Anhalt. The organization specializes in urban and regional planning, brownfield redevelopment, land resource management, and the support of infrastructure projects. It operates as a service partner for local municipalities, coordinating and implementing spatial development programs in the interests of the public sector.
Szechenyi Programiroda Nonprofit Kf
September 1, 2026
•[ ransomware, government ]
Szechenyi Programiroda Nonprofit Kf was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-09-01. Sector: Other. Country: Hungary. Szechenyi Programiroda Nonprofit Kf
Ormond Beach Florida
September 2, 2026
•[ ransomware, government ]
Ormond Beach Florida was listed as a victim on the leak site of the Wallstreet ransomware group; the attack is estimated to have taken place on 2026-09-02. Country: United States of America. Ormond Beach, Florida, is a scenic coastal city just north of Daytona Beach, known for its beaches, relaxed atmosphere, historic charm, and outdoor activities.
CareerSource Palm Beach County
August 31, 2026
•[ ransomware, government, leak ]
CareerSource Palm Beach County was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-31. Sector: Professional Services. Country: United States of America. Website: www.careersourcepbc.com. www.careersourcepbc.com https://www.zoominfo.com/c/careersource-palm-beach-county/359202628 Headquartered in West Palm Beach Florida. CareerSource Palm Beach County is a nonprofit organization chartered by the state to lead workforce development in the United States.
Ville de Libercourt
September 2, 2026
•[ ransomware, government ]
Ville de Libercourt was listed as a victim on the leak site of the kairos ransomware group; the attack is estimated to have taken place on 2026-09-02. Sector: Government & Defense. Country: France. Website: libercourt.fr. Libercourt is a commune in the Pas-de-Calais department of the Hauts-de-France region in northern France.