Sunshine Group
December 11, 2025
•[ ransomware, hack ]
Sunshine Group was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-12-11. Sector: Other. Country: Vietnam. Website: www.sunshinegroup.vn.
David M. Schwarz Architects
December 7, 2025
•[ ransomware, hack ]
David M. Schwarz Architects was listed as a victim on the leak site of the minteye ransomware group; the attack is estimated to have taken place on 2025-12-07. Sector: Professional Services. Country: United States of America. Website: www.dmsas.com. Size: 1.9 TB
Chema Ballester
December 13, 2025
•[ ransomware, hack ]
Chema Ballester was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-12-13. Sector: Professional Services. Country: Spain. Website: www.chemaballester.com.
k*m**w.com
December 15, 2025
•[ ransomware, hack ]
k*m**w.com was listed as a victim on the leak site of the obscura ransomware group; the attack is estimated to have taken place on 2025-12-15. Sector: Transportation. Website: k*m**w.com. Transportation & Warehousing
The Araneta Group
December 10, 2025
•[ ransomware, hack, retail ]
The Araneta Group was listed as a victim on the leak site of the osiris ransomware group; the attack is estimated to have taken place on 2025-12-10. Sector: Hospitality. Country: Philippines. Website: aranetacity.com. The Araneta Group is a private, diversified conglomerate in the Philippines active in property development, food service, leisure & entertainment, and hospitality and is composed of five main business units including ACI, Inc., PPI Holdings Inc., Uniprom Inc., Araneta Hotels Inc. and Progressive Development Corporation.
aranetacity.com, aranetagroup.com
The group employs around 12,000 people.
While publicly available consolidated revenue figures for the entire group are not clearly disclosed, one of its listed related entities (separate from the core private group) Araneta Properties, Inc. (PSE: ARA) reported gross revenue of 706.7 million in 2024
The 200,000 Message Bombshell: Bennett’s Game is Over
December 18, 2025
•[ ransomware, government, hack ]
The 200,000 Message Bombshell: Bennetts Game is Over was listed as a victim on the leak site of the handala ransomware group; the attack is estimated to have taken place on 2025-12-18. To Naftali Bennett, We watched your video with great amusement as you tried to brush off the truth, insisting that your phone was never hacked and all reports are fake. How desperate you must be, thinking that repeating a lie makes it any less false. Its almost entertaining to see how confident you are in
Optimum Window Manufacturing
December 18, 2025
•[ ransomware, manufacturing, hack ]
Optimum Window Manufacturing was listed as a victim on the leak site of the sinobi ransomware group; the attack is estimated to have taken place on 2025-12-18. Sector: Manufacturing. Country: United States of America. Website: www.optimumwindowmanufacturing.com. Optimum Window Mfg is the largest and most diversified manufacturer of steel windows and doors in the United States, offering custom high-tech metal systems for commercial and high-end residential applications since 1985. The company specializes in a wide range of products including fire-rated and non-rated steel windows and doors, aluminum windows and doors, as well as bronze and stainless steel options. Optimum collaborates closely with architects to create custom designs that merge performance, structural integrity, and aesthetic appeal. Their mission emphasizes the importance of precision craftsmanship and technology to deliver unique, high-quality products tailored to their clients' specifications.
Larry Pitt & Associates
December 19, 2025
•[ ransomware, hack ]
Larry Pitt & Associates was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2025-12-19. Sector: Professional Services. Country: United States of America. Website: larrypitt.com. Larry Pitt & Associates
eagrealtyinternational.com
December 18, 2025
•[ ransomware, hack, retail ]
eagrealtyinternational.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2025-12-18. Sector: Professional Services. Country: United States of America. Website: eagrealtyinternational.com. COMPOSITION OF FIRMS:
>svlawus.com
Sanchez Vadillo LLP is a full-service boutique law firm established in 1999, dedicated to providing strategic and efficient legal counsel to individuals, businesses, and financial institutions. The firm specializes in various practice areas including business closings, civil litigation, corporate counsel, family law, immigration, and real estate transactions. With a team of 10 attorneys and 30 staff members, they prioritize professionalism and exceptional client solutions. Their commitment to excellence is reflected in numerous awards, including multiple Top Producer recognitions from Old Republic Title Insurance.
Employees: 50
Revenue: $6.3 Million
Industry: Law Firms & Legal Services
Phone Number: (305) 436-1410
>eagrealtyinternational.com
EAG Realty International specializes in assisting clients with buying, selling, and leasing real estate properties, including residential and commercial options in the South Florida area and internationally. The company is committed to providing a high degree of service and professionalism, ensuring a smooth and pleasurable experience for its clients. With a team of licensed real estate agents, EAG Realty offers expert guidance in property valuation and market insights. Their clientele includes individual buyers and sellers, as well as international investors seeking property opportunities.
Employees: 200
Revenue: $17.7 Million
Industry: Real Estate
Phone Number: (305) 477-4413
>torresvadillollp.com
Employees: 50
Revenue: $5 Million
Industry: Law Firms & Legal Services
Phone Number: (214) 295-8473
>mytitlelogic.com
Employees: 50
Revenue: $5 Million
Industry: Consumer Services
Phone Number: (727) 823-7778
Homestead Electrical Contracting
December 18, 2025
•[ ransomware, hack, manufacturing ]
Homestead Electrical Contracting was listed as a victim on the leak site of the sinobi ransomware group; the attack is estimated to have taken place on 2025-12-18. Sector: Professional Services. Country: United States of America. Website: www.homesteadelectricalcontracting.com. Homestead Electrical Contracting, LLC has been providing a range of electrical services since 1981, focusing on core values such as honesty, integrity, and teamwork. Their offerings include electrical design and build, high voltage wiring, fire alarm system installation, and maintenance agreements available 24/7. The company caters to a diverse client base, including notable names like Walgreens Corporation and Lake County Water Reclamation District. They strive to maintain strong relationships with their clients while ensuring high-quality service and client satisfaction.
Kucera International
December 11, 2025
•[ ransomware, manufacturing, hack ]
Kucera International was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2025-12-11. Sector: Manufacturing. Country: United States of America. Website: www.kucerainternational.com. United States
terport.com.py
December 21, 2025
•[ ransomware, hack, leak ]
terport.com.py was listed as a victim on the leak site of the lynx ransomware group; the attack is estimated to have taken place on 2025-12-21. Sector: Transportation. Country: Paraguay. Website: terport.com.py. We are the leading river container, general cargo, and RORO terminal operator in the Parana-Paraguay Waterway. We operate our TERPORT-VILLETA terminal, which is the most sophisticated container terminal in the region, and TERPORT-SAN ANTONIO focused on General Cargo, RORO, Warehousing and Bonded Warehousing services. Our main activities include port services, container depot, warehousing, container freight services, and special cargo projects.
socalroc.com
December 22, 2025
•[ ransomware, education, hack ]
socalroc.com was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-12-22. Sector: Professional Services. Country: United States of America. Website: www.socalroc.com.
cc-estuaire
December 21, 2025
•[ ransomware, government, hack ]
cc-estuaire was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-12-21. Sector: Government & Defense. Country: France. Website: www.cc-estuaire.fr.
Swartz Campbell
December 22, 2025
•[ ransomware, hack, leak ]
Swartz Campbell was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2025-12-22. Sector: Professional Services. Country: United States of America. Website: https;www.swartzcampbell.com. Swartz Campbell LLC is a law firm with multiple locations across the East Coast specializing in areas including class action, employment, medical malpractice, and divorce. The law firm was founded in 1921 and is headquartered in Philadelphia, Pennsylvania.
jefar.be
May 6, 2025
•[ ransomware, hack ]
jefar.be was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2025-05-06. Sector: Professional Services. Country: Belgium. Website: jefar.be. En 2013, lasbl Jeunes Emploi Formation , connue sous le nom de JEF, et lasbl Personnes Handic...
omf.org
May 10, 2025
•[ ransomware, hack ]
omf.org was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2025-05-10. Sector: Professional Services. Country: United States of America. Website: omf.org. OMF is a global fellowship of Christians with a heart for East Asia. We are passionate to demonstra...
VALLEREDONDO
December 27, 2025
•[ ransomware, hack, retail ]
VALLEREDONDO was listed as a victim on the leak site of the morpheus ransomware group; the attack is estimated to have taken place on 2025-12-27. Sector: Agriculture and Food Production. Country: Spain. Website: valleredondo.com.mx. **Website**: valleredondo.com.mx
**Revenue**: $50 Million
Family owned, founded in 1964 by Don Luis Ferruccio Cetto, right in the center of Mxico, in Aguascalientes.
With more than 60 years special
Willowdale Steeplechase
December 29, 2025
•[ ransomware, hack ]
Willowdale Steeplechase was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-12-29. Sector: Other. Country: United States of America. Website: www.willowdalesteeplechase.org.
ESSPL
November 12, 2025
•[ ransomware, technology, hack ]
ESSPL was listed as a victim on the leak site of the ransomhouse ransomware group; the attack is estimated to have taken place on 2025-11-12. Sector: Technology. Country: India. Website: www.esspl.com. ESSPL is a leading software solutions provider specializing in supply chain management and logistics, with over 27 years of experience. The company offers a comprehensive range of services including custom software development, consulting, business intelligence, and managed application services. ESSPL focuses on delivering innovative solutions that enhance operational efficiency and customer satisfaction for logistics and supply chain companies globally.
