MAP SA
October 13, 2026
•[ ransomware, technology, government ]
MAP SA was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-13. Country: Switzerland. Website: map.ch. map.ch MAP SA Swiss communications agency in Cossonay, Vaud (UID CHE-106.859.955), operating since 1968 as a business; the current legal entity was registered in 1981. It's a ~13-person full-service shop covering brand strategy, SEO/SEA, social media, and event management. Leadership: Sbastien Graap (took over 2003) and Caroline Mller (partner since 2008). Only revenue figure ever made public is ~CHF 2M for 2010; no current financials are disclosed anywhere. Core clients are French-speaking Swiss SMEs and public bodies CarPostal, Transports publics de la rgion lausannoise, La Source, Yverdon nergies, Changins. A separate training arm, map.academy, publishes rates (CHF 8003,900 packages, CHF 1,200/day, CHF 890/month coaching); agency project work is quote-only. Portfolio runs ~30 cases with claimed results (e.g. 7% energy savings, 1,200+ event visitors)
saintpierredescorps.fr
October 14, 2026
•[ ransomware, government ]
saintpierredescorps.fr was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Other. Country: France. Website: saintpierredescorps.fr. Une administration publique franaise. Voici les informations professionnelles et juridiques disp...
Tech Electronics
October 12, 2026
•[ ransomware, technology, healthcare ]
Tech Electronics was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Technology. Country: United States of America. Website: techelectronics.com. Tech Electronics specializes in integrated building technology solutions that enhance safety, communication, and operational efficiency for various industries including healthcare, education, and government. Their extensive product offerings include fire and life safety systems, security solutions, and advanced communication technologies tailored to meet the unique needs of their clients. The company provides a range of services such as fire and security monitoring, inspections, and technology as a service to ensure optimal system performance. With multiple locations across the Midwest, Tech Electronics is committed to delivering responsive service and customized solutions to its clients.
The company headquarters is located in 6437 Manchester Avenue, St. Louis, MO 63139, United States.
201-500 Employees
Ecuadors National Police
October 14, 2026
•[ ransomware, government ]
Ecuadors National Police was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Government & Defense. Country: Ecuador. Website: policia.gob.ec. policia.gob.ec Ecuador's National Police country's main law enforcement agency 180 years old (institutionalized 1846, professionalized 1938), under the Ministry of Interior, commanded by GraS. Pablo Vinicio Dvila Maldonado (since July 2025). Scale: 58,000+ officers, 14 police schools, 317 per 100K population. 2025 was its most active year ever: 712,642 operations, 71,399 arrests, 227 tons of drugs seized, $9.6B in damage to criminal organizations, 21 high-value targets neutralized but also Ecuador's deadliest year (8,847 homicides). 2026 shows improvement: 27.7% homicides, 4356% robberies; new Dinae anti-kidnapping unit achieves 90%+ effectiveness. Budget: ~$11.2B/yr from state funds.
Petroleum Telcom Communications
October 14, 2026
•[ ransomware, technology, energy ]
Petroleum Telcom Communications was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Energy & Utilities. Country: Pakistan. Website: ptelcom.com. ptelcom.com Petroleum Telcom, Inc. (dba Telcom, Inc. / Telcom Communications) Southern California communications integrator founded in 1978 in Oxnard, CA specializing in two-way radio for police/fire, microwave links, fiber optics, cell towers, and FCC licensing. Owned and led by Frank R. Hines (president since 1986), now a lean ~6-person shop (peak 35 in 1999), dealer for Motorola, Kenwood, and Bendix-King, with ~200 owned repeaters across CA/NV/AZ/UT. CA contractor license #620689 (B + C7) active since 1991, zero complaints, bonded and insured. Government track record is real and documented: Ventura County since 1982, Stanislaus County $1.2M, Port of LA police radio system $1.19M (201719), City of Oxnard up to $900K (202327), USGS, and 5 DoD contracts. Revenue not disclosed (est. $15M).
Museum Siam
October 14, 2026
•[ ransomware, government ]
Museum Siam was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Hospitality. Country: Thailand. Website: museumsiam.org. museumsiam.org Museum Siam museum in Bangkok run by NDMI under the public organization OKMD the .org domain is real, but it's a government institute, not a private company. It occupies the former Ministry of Commerce building (19211922) and opened as a museum on 2 April 2008. The core exhibit Decoding Thainess (14 rooms on how Thai identity was formed) has run since 2017; there's also a free Underground Museum at MRT Sanam Chai (2020). Attendance is ~250343K per year (different counting methods), 3.8M over 17 years; museum-level revenue isn't disclosed finances publish only at OKMD level. Tickets: 100 THB adult, 50 students, free for kids under 15, 60+, monks, disabled visitors; open TueSun 10:0018:00. Beyond exhibits: a 4,000+ resource library, digital archives, venue rental (580K THB), and a nationwide museum-network support program.
Commune Du Tampon
October 15, 2026
•[ ransomware, government ]
Commune Du Tampon was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-15. Sector: Government & Defense. Country: Runion. Website: www.letampon.fr.
Shield Wall Systems of Florida
October 15, 2026
•[ ransomware, government ]
Shield Wall Systems of Florida was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-15. Sector: Government & Defense. Country: United States of America. Website: shieldwsfl.com.
Company #98
October 20, 2026
•[ ransomware, government ]
Company #98 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-20. Country: Ethiopia. Environmental NGO Ethiopia | [PENDING EXPOSURE]
City Hall - Everett, MA
October 20, 2026
•[ ransomware, government ]
City Hall - Everett, MA was listed as a victim on the leak site of the Booba Project ransomware group; the attack is estimated to have taken place on 2026-10-20. Sector: Government & Defense. Country: United States of America. Website: ci.everett.ma.us. Government Administration Stolen data: 15 GB.
Natural Energy Laboratory of Hawaii Authority
October 26, 2026
•[ ransomware, energy, government ]
Natural Energy Laboratory of Hawaii Authority was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Energy & Utilities. Country: United States of America. Website: www.nelha.hawaii.gov.
GardaWorld
October 19, 2026
•[ ransomware, government ]
GardaWorld was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-19. Sector: Government & Defense. Country: Canada. Website: www.garda.com.
Partido Liberal
October 25, 2026
•[ ransomware, government, leak ]
Partido Liberal was listed as a victim on the leak site of the Whitearmor ransomware group; the attack is estimated to have taken place on 2026-10-25. Sector: Government & Defense. Country: Argentina. Brazil's Liberal Party (PL) is the political party of the Bolsonaro family. Although named "Liberal," it is currently characterized by conservatism and right-wing populism. Jair Bolsonaro joined the party in 2021, and his son Flvio Bolsonaro is now the party's presidential candidate, advocating reduced government intervention and tough security policies.
We hold the complete Partido Liberal (PL, Brazil) dump: 79K member records with CPF/voter ID/RG photos, 374 live cleartext e-Ttulo credentials, 475 operator accounts with shared password, 2.7M audit events, party dossiers (artist payments, deepfakes, ghost donations), vendor PII, and 340K+ member images.
If you don't want this getting out, we suggest you contact us & pay the ransom amount of $5,000,000 in BTC :)
Contact:
Email: whitearmorrxd@proton.me
Session: 0547b7f96d469ecb332e89d0108e71c92df5bacff6c4ed5b9801ab5fffe872ee67
MediSolution
October 27, 2026
•[ ransomware, healthcare, technology ]
MediSolution was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Healthcare. [AI generated] MediSolution was a Canadian software company based in Montreal, Quebec, specializing in enterprise resource planning and management software solutions for the public sector, including healthcare, local government, and education institutions. It provided financial management, human resources, and payroll software systems. The company operated in the enterprise software and information technology industry before being acquired and integrated into Harris Computer Systems.
Patriot Maritime
October 19, 2026
•[ ransomware, government, manufacturing ]
Patriot Maritime was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-10-19. Sector: Transportation. Country: United States of America. Patriot Maritime is a leading maritime contractor in the United States, specializing in the management and operation of vessels for both government and commercial clients. The company supports U.S. military readiness and commercial trade by managing a variety of vessel classes, including Ready Reserve Force ships and RO-RO cargo vessels. With a commitment to safety, compliance, and operational excellence, Patriot Maritime serves federal agencies, educational institutions, and private maritime organizations. As a privately held company, it aims to advance the future of maritime services in support of U.S. national security.
The company headquarters is located in 1320 Willow Pass Road, Suite 485, Concord, CA 94520, United States. 11-50 Employees
City of Mt. Angel, Oregon
October 20, 2026
•[ ransomware, government, leak ]
City of Mt. Angel, Oregon was listed as a victim on the leak site of the Booba Project ransomware group; the attack is estimated to have taken place on 2026-10-20. Sector: Government & Defense. Country: United States of America. Website: www.ci.mt-angel.or.us. Government Administration Stolen data: 18 GB.
The Excalibur Group
October 20, 2026
•[ ransomware, technology, government ]
The Excalibur Group was listed as a victim on the leak site of the Dark Project ransomware group; the attack is estimated to have taken place on 2026-10-20. Country: United States of America. Website: theexcaliburgroup.com. About The Excalibur Group The Excalibur Group is a Washington D.C. based company that focuses on enhancing local, state, and federal programs through staff augmentation, training, and program management in the Defense, IT, Workforce, Environmental, and Legal sectors. They provide specialized job training and placement services for individuals in various industries, including transitioning soldiers. The company also offers both permanent and contingent labor to support clients' internal IT and R&D projects. Their mission is to deliver efficient contract management and cost-effective solutions while promoting meaningful Veteran employment. Company The Excalibur Group was attacked, resulting in the theft of more than 600 GB of confidential data, such as banking and other financial information, personal data of employees and customers, and information marked secret. Currently, more than 400,000 files are not protected by The Excalibur Group
SGLA (Schwartz, Giannini, Lantsberger & Adamson)
October 22, 2026
•[ ransomware, finance, healthcare ]
SGLA (Schwartz, Giannini, Lantsberger & Adamson) was listed as a victim on the leak site of the spacebears ransomware group; the attack is estimated to have taken place on 2026-10-22. Sector: Professional Services. Country: United States of America. Website: www.sglacpas.com. Schwartz, Giannini, Lantsberger & Adamson (SGLA) Accountancy Corporation is a full-service certified public accounting firm based in Stockton, California, founded in 1988. The firm provides tax planning and compliance, audits, reviews and compilations, bookkeeping, payroll, outsourced CFO support, and business consulting for individuals and companies. It has particular experience with real estate, healthcare, nonprofits, affordable housing, common-interest realty associations, and local government clients. SGLA positions itself as a hands-on local CPA practice that combines traditional accounting work with practical advice to help clients stay compliant and grow.*After the timer expires, you will be able to freely download several fragments of the full archive for review. To purchase the complete archive, please contact our manager. https://www.sglacpas.com
police.rajasthan.gov.in
October 14, 2026
•[ ransomware, government ]
police.rajasthan.gov.in was listed as a victim on the leak site of the Scarlettgroup ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Government & Defense. Country: India. Website: police.rajasthan.gov.in. Rajasthan Police is the official law enforcement agency of Rajasthan, India, responsible for maintaining law and order, preventing crime, ensuring public safety, and protecting citizens across the state.
Heber City, UT
October 24, 2026
•[ ransomware, government ]
Heber City, UT was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-24. Sector: Government & Defense. Country: United States of America. Website: www.heberut.gov.
