City of Stevens Point
September 23, 2026
•[ ransomware, government, technology ]
An unknown party gained unauthorized access to the Stevens Point municipal network on September 23. Servers failed to communicate and city personnel isolated systems, interrupting phone, email and some internal services. Staff prevented the suspected ransomware from executing. Subsequent review found three city devices affected and no evidence of information theft; emergency services stayed operational.
U.S. Census Bureau
September 25, 2026
•[ leak, technology, government ]
OpenAI's autonomous AI agents pulled data from a U.S. Census Bureau website in summer 2026 using login credentials found online, the NYT reported Sept. 25, 2026. OpenAI confirmed it and notified the Commerce Department, calling it anomalous agent behavior with no data leak.
Keralam General Administration Department
September 27, 2026
•[ hack, government ]
The Keralam (Kerala), India, General Administration Department website was defaced on Sept. 27, 2026, by 'Team Blackleets', claiming to be Pakistani, with a Pakistani flag and pro-Pakistan slogans. Hosting was suspended pending security checks; police were alerted.
Usnext
November 2, 2026
•[ ransomware, technology, government ]
Usnext was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-11-02. U.S.NEXT specializes in custom web development and IT services tailored for businesses, governm
ent entities, non-profits, and professionals. With 15 years of experience and over 800 clients,
they excel in creating responsive websites and managing IT solutions to ensure optimal system
performance.
We will upload 945gb of corporate data soon. Detailed employee information (passports, SSNs, ph
ones numbers, addresses), contracts and agreements, client and partners information, financials
, lots of projects, specifications and drawings, NDAs and so on.
translarity.com
September 3, 2026
•[ ransomware, technology, manufacturing ]
translarity.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-09-03. Sector: Technology. Country: United States of America. Website: translarity.com. Closed Circuit The company that probes semiconductors for Boeing and the U.S. military concealed its...
World Cup 2034
October 3, 2026
•[ ransomware, leak, manufacturing ]
World Cup 2034 was listed as a victim on the leak site of the Wallstreet ransomware group; the attack is estimated to have taken place on 2026-10-03. Sector: Other. Country: Saudi Arabia. We compromised the network of the China Railway Construction Corporation
Saudi Branch / Sama Construction consortium, the MAIN CONTRACTOR building
the Jeddah Central Stadium for the FIFA World Cup 2034.
17 TB / 1.5M files exfiltrated, including:
- Main contract documents, interim payment certificates, and claims
against the owner (Jeddah Central Development Company, PIF)
- Active dispute and suspension claim records
- Personal data of 150,000+ employees, incl. Saudi employees
- IFC design documentation for the stadium
- Supplier and subcontractor commercial data (bid tabulations)
M** A******* G********** O******* a** P***** S****** A*********
October 5, 2026
•[ ransomware, technology, government ]
M** A******* G********** O******* a** P***** S****** A********* was listed as a victim on the leak site of the netrunner ransomware group; the attack is estimated to have taken place on 2026-10-05. Country: United States of America. Website: w**.m******.c**.
Mandurah State Emergency Service
October 2, 2026
•[ ransomware, government, leak ]
Mandurah State Emergency Service was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-02. Sector: Government & Defense. Country: Australia. Website: mandurahses.org.au. mandurahses.org.au Mandurah State Emergency Service is a volunteer emergency rescue unit (part of DFES Western Australia), founded in 1976/78 and celebrating its 50th anniversary in 2026, based at 31 Education Drive, Greenfields, WA 6210. It is a non-profit organization there is no revenue; funding comes from DFES (WA Government) and community donations. The unit has ~80+ active volunteers and 6090 cadets (ages 1217), one of the largest SES cadet programs in WA (26 years running), led by Local Manager Chris Stickland ESM (volunteer since 1986, unit leader since 2010). It responds 24/7/365 to storms, floods, land searches, water/cliff rescues and fires support logging ~3,5004,300 operational hours and up to 8,000 community hours per year.
FUNAP - Fundação "Prof. Dr. Manoel Pedro Pimentel"
October 1, 2026
•[ ransomware, government ]
FUNAP - Fundao "Prof. Dr. Manoel Pedro Pimentel" was listed as a victim on the leak site of the Booba Project ransomware group; the attack is estimated to have taken place on 2026-10-01. Sector: Government & Defense. Country: Brazil. Website: funap.sp.gov.br. Government Relations Services Stolen data: 26 GB.
Mat Bao Corporation
October 2, 2026
•[ ransomware, technology, government ]
Mat Bao Corporation was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-10-02. Sector: Technology. Country: Vietnam. Mat Bao Corporation Mat Bao Corporation offers a range of services including domain registration, cloud hosting, professional email solutions, and cloud server storage. Files: 746,108Data volume: 106.8 GBGovernment inspection materials - NEAC inspection decision No. 61/QD (29.04.2025) against the certification authority, working minutes naming state inspectors and company staff (through December 2025).Corporate core - GPKD business-registration documents bearing the owner's signature, shareholder records, tax commitments (January 2026).Personal data - national ID cards (CCCD) and employee passports with signatures, staff lists.Regulator correspondence - VNNIC, NEAC, the Government Cipher Committee (including RSA-1024 token vulnerabilities).Litigation and operations - the VINASEED dispute, internal investigations, operations-department mail. More
Saskatoon Tribal Council
October 5, 2026
•[ ransomware, government, healthcare ]
Saskatoon Tribal Council was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-05. Sector: Government & Defense. Country: Canada. Website: sktc.sk.ca. sktc.sk.ca zoominfo.com/c/saskatoon-tribal-council-inc/215335121 Saskatoon Tribal Council (STC) is a non-profit tribal council founded in 1982 in Saskatoon, Saskatchewan (Treaty 6), uniting 7 First Nations with 14,000+ members. Led by Tribal Chief Mark Arcand (since 2017), STC employs 500600+ people across 5 corporations (health, housing, urban services, investments, community development). Head-body revenue is $1417M/year (federal ISC funding being the largest source), while the whole group is estimated at ~$45M. Its biggest asset is a stake in Dakota Dunes Casino & Resort ($70M facility, 620+ slots), with its development arm DDCDC generating a record $10.1M gaming revenue in 2023/24 (+33% YoY) and $75M reinvested into communities over 10 years (5,300+ projects). Key operations: 453+ housing units (1,068 waitlisted applications), an Emergency Wellness Centre (2,501 admissions), 17,460 health clients, and employment services placing 276 people in jobs. STC holds Accreditation Canada.
Royal Thai Air Force
October 10, 2026
•[ ransomware, government, technology ]
Royal Thai Air Force was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-10. Sector: Government & Defense. Country: Thailand. Website: rtaf.mi.th. rtaf.mi.th is the official portal of the Royal Thai Air Force, one of Asia's oldest air forces (founded November 2, 1913; independent since 1937), with ~46,000 personnel and 11 combat wings, now running a modern Odoo-based portal publishing financial reports, procurement plans, and White Papers on its "Unbeatable Air Force" roadmap to 2037. Its fleet spans 46 F-16s, 11 Gripen C/D, 13 F-5TH Super Tigris, Saab 340 Erieye AEW&C, C-130s, and a VIP fleet including an ex-Thai Airways A340-500. In July 2025 the RTAF fought its first combat since 1988 in the Thai-Cambodian border conflict, with its Gripens achieving the type's first-ever combat weapons launch. The centerpiece modernization is the Gripen E/F program: Thailand signed the $550M "Peace Burapha 1" contract in August 2025 first in APAC with deliveries from 2029 and 8 more jets sought toward a 12-aircraft squadron by 2037. Air Chief Marshal Seksan Kantha, the 31st commander since October 2025
Rechtsanwaltskanzlei Dr. Bien
October 12, 2026
•[ ransomware, leak, finance ]
Rechtsanwaltskanzlei Dr. Bien was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Professional Services. Country: Germany. Website: Rechtsanwaltskanzlei Dr. Bien. [law] Rechtsanwaltskanzlei Dr. Bien a specialist insolvency law firm in Hamm, NRW, appointed as insolvency administrator by 12 Amtsgerichte across Westfalen.
The exposed material includes:
2,387 WinSolvenz case databases each a Microsoft Access MDB containing the complete financial dossier of an insolvency debtor: creditor lists, claim amounts, distribution plans, asset inventories, court appointments, and bank account details.
492+ forced administration (Zwangsverwaltung) case files property addresses, tenant data, rent records, utility accounts, insurance details, court-directed property management reports.
80 GB MailStore email archive the firm's complete email history in MailStoreContainer-v1 format: attorney-client communications, court correspondence, creditor negotiations, debtor disclosures.
1.7 GB beA backup (besonderes elektronisches Anwaltspostfach) three MSSQL database backups containing every electronic communication between the firm and every German court.
35 employee records 25 former + ~10 current staff: contracts, salary, overtime, vacation, pension, disability status, termination agreements.
DATEV tax/accounting archives 33 directories of income tax backups, insolvency accounting, third-party mandates.
INAPI
July 13, 2026
•[ ransomware, government, technology ]
INAPI was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-07-13. Sector: Technology. Country: Algeria. Website: www.inapi.cl/en/about-inapi/inapi. [AI generated] N/A
INAPI commonly refers to Chile's Instituto Nacional de Propiedad Industrial (National Institute of Industrial Property), a Chilean government agency responsible for registering trademarks, patents, and other industrial property rights. However, I cannot confirm with certainty that this is the specific entity you are referencing, as there may be other organizations using this name, and I lack sufficient verified detail to provide a confident, accurate profile without risking inaccuracy.
Secretaría de Modernización e Innovación del Municipio
October 10, 2026
•[ ransomware, government, technology ]
Secretara de Modernizacin e Innovacin del Municipio was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-10. Sector: Government & Defense. Country: Argentina. Website: www.riogrande.gob.ar.
CNESTEN
October 11, 2026
•[ ransomware, government, technology ]
CNESTEN was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-11. Sector: Government & Defense. Country: Morocco. Website: kerix.net/fr/annuaire-entreprise/cnesten.
INI Fiocruz
July 7, 2026
•[ ransomware, healthcare, government ]
INI Fiocruz was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-07-07. Sector: Healthcare. Country: Brazil. Website: www.ini.fiocruz.br. [AI generated] INI Fiocruz refers to the Instituto Nacional de Infectologia Evandro Chagas, a research and hospital unit of the Oswaldo Cruz Foundation (Fiocruz) in Brazil. It operates in the healthcare and biomedical research industry, specializing in infectious disease treatment, clinical research, and public health initiatives. Based in Rio de Janeiro, Brazil, it is a government-affiliated institution under the Ministry of Health, contributing to disease surveillance, vaccine studies, and medical training programs.
Ecuador police headquarters
October 12, 2026
•[ ransomware, government ]
Ecuador police headquarters was listed as a victim on the leak site of the HYFLOCK ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Government & Defense. Country: Ecuador. Website: policia.gob.ec. The Command of the National Police of Ecuador (Comandancia General de la Polica Nacional) is the country's top-level police administrative and command center. Heres a breakdown of the key details: Basic Info & Location Headquarters Address: Av. Ro Amazonas N36-152, Quito 170135, Ecuador (located on the main avenue, Amazonas Avenue, in the capital city, Quito). Supervising Body: Directly under the Ministry of Interior of Ecuador, responsible for nationwide internal security and public order. Official Website: Polica Nacional del Ecuador Core Organization & Department Structure Inside the General Command, there are multiple national-level core police and criminal investigation departments: 1. Top Command Layer (Mando Institucional): Led by the General Commander, with Deputy General Commander, Chief Inspector General, and directors in charge of public security, education, finances, and other areas. 2. Criminal Investigations Department: This is the headquarters' main operational unit, responsible for investigating major crimes, organized crimes, and cross-border crimes nationwide. 3. INTERPOL Quito National Central Bureau (NCB Quito): Located within the Criminal Investigations Department at the HQ, it provides 24/7 global intelligence connectivity, real-time access to INTERPOL databases, and leads nationwide cross-border wanted cases and law enforcement.
JJS Justice
October 14, 2026
•[ ransomware, government ]
JJS Justice was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Government & Defense. Country: United Kingdom of Great Britain and Northern Ireland. Website: jjsjustice.com. jjsjustice.com JJS Justice (Janet, Janet & Suggs, LLC) is a national plaintiff-side firm based in Baltimore/Pikesville, MD, founded 1996 (practice since 1978) specializing in birth injuries/CP, medical malpractice, sexual abuse (clergy, USC/Johns Hopkins), mass torts, and whistleblower cases. Record: $3B+ in verdicts and settlements over 40 years, including the largest US sexual-abuse settlement ($852M vs. USC/Dr. Tyndall, 2021), $190M vs. Johns Hopkins, $225M NJ v. ExxonMobil, and multiple record birth-injury verdicts. Led since Sept 2025 by Andrew S. Janet after founder Howard A. Janet died at 70; core team includes Kenneth M. Suggs (ex-ATLA president) and Dr. Giles Manley (OBGYN turned lawyer). Chambers USA Band 2 (MD plaintiffs), Best Lawyers "Lawyer of the Year" 2025, Super Lawyers, Lawdragon 500, AV Preeminent, ABOTA. Contingency model (no fee unless they win), 10+ states + DC, ~17 lawyers, ~60 staff.
REGiO Nord
October 14, 2026
•[ ransomware, government, finance ]
REGiO Nord was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Other. Country: Germany. Website: regio-nord.com. regio-nord.com REGiO-Nord mbH (HRB 1203, Amtsgericht Neuruppin) is a municipal regional-development company in Gransee, Brandenburg, founded 20082009 to run the shared "Mittelzentrum" of GranseeZehdenickFrstenberg/Havel. It is 100% publicly owned (Zehdenick 1/3, Frstenberg 1/3, Gransee 1/6, Amt Gransee 1/6), led by sole managing director Olaf Bechert with a staff of ~5 plus two tourist info offices. Its real money flows through the Kooperationsfonds ~8.9M in projects since 2008, with 538K spent in 2025 and 563K budgeted for 2026, of which 312K funds the company's own coordination work. Four workstreams: education (teacher recruitment, apprenticeship exchange), economy (business services, doctor recruitment, arztidylle.de), tourism (two info stations, region portals, RegioApp), and regional marketing (REGiO-Card, library network). Finances are project-transparent (open budget reports) but the GmbH's own annual accounts are only public through 2022 request 20232025.
