palletshop
September 8, 2026
•[ ransomware, retail, hack ]
palletshop was listed as a victim on the leak site of the AuditTeam ransomware group; the attack is estimated to have taken place on 2026-09-08. Sector: Retail & E-Commerce. Country: Russian Federation. Website: palletshop.ru. palletshop.ru
xpera.ca
September 17, 2026
•[ ransomware, technology, hack ]
xpera.ca was listed as a victim on the leak site of the BrainCipher ransomware group; the attack is estimated to have taken place on 2026-09-17. Sector: Technology. Country: Canada. Website: xpera.ca.
budgetms.com
September 1, 2026
•[ ransomware, finance, hack ]
budgetms.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-09-01. Sector: Financial Services. Country: Montserrat. Website: budgetms.com. CLEAN WORK The company that cleans other people's buildings and supplies janitorial products left ev...
Young Injury Law
September 19, 2026
•[ ransomware, hack ]
Young Injury Law was listed as a victim on the leak site of the cry0 ransomware group; the attack is estimated to have taken place on 2026-09-19. Sector: Professional Services. Country: United States of America. ## Coming soon...
Final statement re PSA
September 24, 2026
•[ hack, ransomware, automotive ]
Final statement re PSA was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-09-24. Good afternoon, We have no further comments to make regarding our PSA statement we released the other day. Our organisation is highly confident we have achieved our goal and our intentions we repeatedly made clear to journalists and in our public statements. There is 5 days remaining still. We have no comment yet regarding what we will do if the victim entity does not comply with our kind request . Nonetheless, we got what we wanted and we have a business to run and operate as usual. We will not be responding to any press inquiries about this and we will not be sharing updates about other datasets we have that we did not yet disclose to the public. We reiterate and want to assiduously emphasise we are NOT extorting the victim in question, this is NOT financially motivated and this is NOT a ransom. Thank you for your time and attention to this matter. This is now old news. Regards, SH | Updated: 24 Sep 2026
agiliance.fr
August 18, 2026
•[ ransomware, finance, hack ]
agiliance.fr was listed as a victim on the leak site of the ZaWoo ransomware group; the attack is estimated to have taken place on 2026-08-18. Sector: Professional Services. Country: France. Website: agiliance.fr. Agiliance is a French accounting and business advisory group headquartered across the Haute-Sane and Doubs regions. Its website describes Agiliance as the result of bringing together 8 small-to-medium-sized accounting firms, combining their expertise and tools while retaining a local, client-oriented approach.
Beatus Cartons
September 25, 2026
•[ ransomware, manufacturing, hack ]
Beatus Cartons was listed as a victim on the leak site of the Wallstreet ransomware group; the attack is estimated to have taken place on 2026-09-25. Sector: Manufacturing. Country: United Kingdom of Great Britain and Northern Ireland. Website: beatuscartons.co.uk. Beatus Cartons is a UK-based, privately owned manufacturer of printed folding cartons and packaging. Established in 1940, it produces solidboard, litho-laminated, and plastic packaging for industries including confectionery, pharmaceuticals, food, health and beauty, and automotive.
Paid Victim 32373FFB7AF7E725
September 29, 2026
•[ ransomware, hack ]
Paid Victim 32373FFB7AF7E725 was listed as a victim on the leak site of the AuditTeam ransomware group; the attack is estimated to have taken place on 2026-09-29. Country: Italy. [AI generated] N/A
I don't have reliable information about a company with this specific identifier. This appears to be an anonymized or coded reference, possibly from a ransomware leak site or threat intelligence feed, rather than a verifiable company name. Without access to real-time threat intelligence databases or the original source associated with this identifier, I cannot provide factual details about its operations, industry, or country.
North Hills Facility Services
September 30, 2026
•[ ransomware, hack ]
North Hills Facility Services was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Professional Services. Country: United States of America. North Hills Facility Services offers premier facility and janitorial services for both commercial and residential properties in the NY Metro area, backed by over 50 years of experience. Their extensive range of services includes facility cleaning, emergency response, disinfecting, and specialized maintenance solutions tailored to meet the unique needs of their clients. The company prioritizes creating safe, clean, and productive environments, ensuring high standards of quality and reliability. They serve a diverse clientele, including commercial, industrial, and residential sectors, with a commitment to exceptional customer service and ongoing employee training.
The company headquarters is located in 265 Executive Drive, Suite 250, Plainview, NY 11803, United States.201-500 Employees
Agospap
September 29, 2026
•[ ransomware, hack, healthcare ]
Agospap was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-29. Country: Greece. Website: agospap.com. agospap.com zoominfo.com/c/agospap/357851962 AGOSPAP (founded 2 November 1981, Paris) is a non-profit association (loi 1901) that manages social, cultural and leisure benefits for ~150,000 staff of the AP-HP hospital system and the City of Paris plus ~20 affiliated public bodies effectively a cross-institutional works-council fund. With 45 employees and income tied to 0.5% of the two founders' payroll (28M/year in subsidies; 49M total budget), it provides income-scaled holiday stays, children's camps (417), a cultural ticketing platform, Christmas gifts, social grants (birth/marriage/service medals) and the new Pass'Sport sports voucher. Led by president Jean-Paul Brandela (since Oct 2023) and director-general Anne Schaetzel (since 2013), it is ISO 9001-certified and holds an Atout France travel-operator license with UNAT financial guarantees. Funding remains politically sensitive: a 2M cut by the City in 2023 briefly suspended camp registrations
Custom Rx Shoppe
September 29, 2026
•[ ransomware, healthcare, hack ]
Custom Rx Shoppe was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-29. Sector: Healthcare. Country: United States of America. Website: customrxshoppe.com. customrxshoppe.com zoominfo.com/c/custom-rx-shoppe-pharmacy/460515026 Custom Rx Shoppe (The Custom Prescription Shoppe, LLC, founded 2003 in Bellingham/Ferndale, Washington) is a family-owned independent pharmacy founded by pharmacist Kevin Faris with partners Jay Solomon and Rick Adelstein. It combines three specialties retail pharmacy, long-term care pharmacy for nursing homes and assisted-living facilities (blister packaging, MAR records, med reviews) and a compounding lab making custom medications for people and pets, including hormone replacement therapy. The company serves Whatcom, Skagit and Island counties with free delivery, a mobile app and Medicare/Medicaid enrollment help, and books roughly $6.4 million in revenue with a team of under 10. Its owner also runs Happier at Home Bellingham, a senior home-care agency, giving the business an integrated pharmacy-plus-home-care model. Main challenges are competition from chain pharmacies/PBMs and tightening FDA rules on drug
Le Centre National de l'Expertise Hospitalière (CNEH)
September 30, 2026
•[ ransomware, healthcare, hack ]
Le Centre National de l'Expertise Hospitalire (CNEH) was listed as a victim on the leak site of the kairos ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Healthcare. Country: France. Website: cneh.fr. Le Centre National de l'Expertise Hospitalire (CNEH) est une cole de rfrence et un organisme franais fond en 1974 qui accompagne les professionnels de sant et les tablissements sanitaires et mdico-sociaux.
www.buzztrading104.co.za
August 2, 2026
•[ ransomware, manufacturing, finance ]
www.buzztrading104.co.za was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-08-02. Sector: Financial Services. Country: South Africa. Website: www.buzztrading104.co.za. Buzz Trading 104 (Pty) Ltd (also trading as Master Products) is a South African privately owned manufacturer and wholesa...
www.dcpartner.co.za
August 2, 2026
•[ ransomware, finance, hack ]
www.dcpartner.co.za was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-08-02. Sector: Professional Services. Country: South Africa. Website: www.dcpartner.co.za. DC Partner (Pty) Ltd is a South African market-leading Payment Distribution Agency (PDA), one of only four NCR-accredite...
ecfa.org
August 2, 2026
•[ ransomware, finance, hack ]
ecfa.org was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-08-02. Sector: Professional Services. Country: United States of America. Website: ecfa.org. The Evangelical Council for Financial Accountability (ECFA) is an American accreditation agency founded in 1979 that certifies Christian churches and nonprofits based on financial integrity, board governance, and transparent fundraising. It represents over 2,700 member organizations with billions in collective revenue.
FixIT Tek
August 5, 2026
•[ ransomware, hack, technology ]
FixIT Tek was listed as a victim on the leak site of the Orova ransomware group; the attack is estimated to have taken place on 2026-08-05. Sector: Technology. Country: United States of America. Website: fixittek.com. Providing the best possible IT services to businesses of all sizes in Central Florida and Surrounding Areas. ##### FixIT Tek's Syncro MSP panel has been hacked and stolen big data of many clients from their network. #####
Dharma Group
July 17, 2026
•[ ransomware, hack ]
Dharma Group was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-07-17. Sector: Other. Country: Italy. Website: dharmagroup.it.
albanybank.com
October 28, 2025
•[ ransomware, finance, hack ]
albanybank.com was listed as a victim on the leak site of the orion ransomware group; the attack is estimated to have taken place on 2025-10-28. Sector: Financial Services. Country: United States of America. Website: albanybank.com. albanybank.com
Highwoods Properties
August 7, 2026
•[ ransomware, hack ]
Highwoods Properties was listed as a victim on the leak site of the Helix ransomware group; the attack is estimated to have taken place on 2026-08-07. Sector: Other. Country: United States of America. Website: highwoods.com. SharePoint libraries staged T1 (least) T4 (most). Release countdown live on Helix. Tiers unlock by stage when each set timer reaches 0.
LensAss Architecten
August 6, 2026
•[ ransomware, hack ]
LensAss Architecten was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-06. Sector: Professional Services. Country: Belgium. Website: lensass.be. lensass.be LensAss Architecten is a Belgian architecture studio based in Hasselt, founded in 1995 by Bart Lens. The firm centers its work on the relationship between space, light, and context, specializing in both renovation and new construction. Its portfolio spans private homes, galleries, and adaptive reuse of heritage buildings across Belgium.
