The Excalibur Group
October 15, 2026
•[ ransomware, hack ]
The Excalibur Group was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-15. Sector: Other. Country: United States of America. Website: www.theexcaliburgroup.com.
Miljaus Producciones S.L (www.miljaus.com)
October 23, 2026
•[ ransomware, hack ]
Miljaus Producciones S.L (www.miljaus.com) was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-23. Sector: Other. Country: Spain. Website: www.miljaus.com.
Sanders Law Group
October 23, 2026
•[ ransomware, hack, finance ]
Sanders Law Group was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-10-23. Sector: Professional Services. Sanders Law Group DATA SALE LISTING - Sanders Law Group / Sanders Law Firm, PLLC (Uniondale, NY)Target: Sanders Law Firm, PLLC (d/b/a Sanders Law Group; former brands - Barshay Sanders PLLC, Baker Sanders) Addresses: 333 Earle Ovington Blvd, Suite 402, Uniondale, NY 11553 100 Garden City Plaza, Garden City, NY 11530 Phone: (516) 203-7600 Owner: Craig B. Sanders, Esq. (founding partner) Size: ~8 TB 4.5 million files 20052026, history through most recent Format: full file-server clones + 2 dumps of the firm's ARES case-management DB + mail archives (33 PST, ~120 GB + 2,479 mailbox dumps)Who they are and who they work withA high-volume litigation factory out of Long Island, NY, running three conveyor-belt practices:FDCPA mill - 9,332 mass cases against banks and collectors. Their evidence pipeline: 1,144 audio recordings of their own clients' calls with banksCopyright machine - ~17,000 'photo-enforcement' suits. In January 2022 Sanders bought the entire practice of Richard Liebowitz the most-sanctioned copyright attorney in U.S. history (discredited, bar-suspended). Included: the executed Asset Purchase Agreement, a confidential WZMP settlement (7 versions incl. redlines), the acquired book of cases and clients, and solicitation letters to poach his client listFCRA litigation vs Equifax, Experian, TransUnion 953 cases. Plus a dedicated Equifax SRAs folder: executed settlements with Equifax LLC, named client by client, alongside their full credit disclosuresCorporate clients/partners in the files: The Mega Agency, Pixsy (exclusive enforcement deals), Signature Health Center / CareHealth (healthcare), Chase debt-buyer packages, Esquire Funding (litigation finance - loan agreements, commission invoices). Case-management dev outsourced to an Indian shop (neuralit.com).Active matters right now: 6,098 (of 30,671 total in the DB).What's inside - value breakdownPractice-side (the firm's jugular)Full ARES DB (2 dumps) - all 30,671 cases with settlement offers/demand ceilings in 13,413 files (up to $4,000,000 per case), statuses, internal notes, deadlines. Publication - burned negotiation positions across every active case at once2,342 executed CONFIDENTIAL settlement agreements (e.g., NationalPhoto v. Entravision + dozens more) - bearing secrecy clauses the firm itself is liable for1,315 documents of the firm's own sanctions and discipline: court orders on sanctions motions, a DFS Disciplinary Stipulation, 6 'Notice of Attorney Sanction' filings, public discipline ordersBanking & trusts11 accounts, 562 statements, incl. attorney trust accounts IOLTA NY (9068) and IOLTA NJ (2302) - bar-mandated audit territory = direct license threat for every named attorneyWire instructions for the client fund 6327 (JPMorgan Chase)Partnership tax returns 20152020 (Form 1065, TurboTax source files), payroll, full HR (I-9s, staff employment contracts, employee handbook)Client PII industrial scale12,803 full credit reports of the firm's own plaintiff-clients20,106 W-9/1099 forms, 520 files: SSN cards / passports / driver licenses / birth certificates1,471+ medical records (named patients, incl. NYUI files)CRM: 5,352 clients + 13,178 leads with phones/emails32,816 executed retainer agreementsOwner-level leverage (Craig B. Sanders)His 2022 divorce: Judgment of Divorce (Michelle Sanders v. Craig Sanders) + settlement stipulation + sworn Net Worth Statement + brokerage/bank statementsBonus: the firm's 78-page FBI IC3 criminal complaint dated 08/22/2026Email 20 years33 legacy PSTs (~120 GB) + 2,479 mailbox dumps + daily email backups (20132014)Freebies: office password lists in plaintext, owner's Chrome password export, court ECF login sheets. More
www.choicegoodwill.com
October 24, 2026
•[ ransomware, hack, retail ]
www.choicegoodwill.com was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-10-24. Sector: Retail & E-Commerce. Country: United States of America. Website: www.choicegoodwill.com. Choice Group (Goodwill Projects) is a prominent Indian real estate developer founded in 1994, headquartered in Tingre Na...
University of New Mexico
October 26, 2026
•[ ransomware, hack, education ]
University of New Mexico was listed as a victim on the leak site of the BYOD ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Education. Country: United States of America. 36,000 Machines Compromised, both AD forests (Main Campus + Hospital Sector(with appointments, patient information + research)) With GPOs, Two Oracle databases, every student + employee PII (including SSNs), research information, entire Entra Tenant, Oracle HR + Payroll + Banner Student Records, Internal Emails, Cerner EHR rosters. This is your entire network and infrastructure compromised, the entire university COMPLETELY. Anyways, you know where to find us (contact tab). We will take you down when communication has been established between our team and yours.
Lanham Associates
October 21, 2026
•[ ransomware, hack, technology ]
Lanham Associates was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-10-21. Sector: Professional Services. [AI generated] N/A
I don't have reliable, verified information about a specific company called "Lanham Associates." There may be multiple businesses using this or similar names, and without confirmed details about which entity you're referencing, its industry, services, or country of operation, I cannot provide an accurate factual description. Please provide additional context or verify the company details.
Technoleads Services Inc.
October 25, 2026
•[ ransomware, technology, hack ]
Technoleads Services Inc. was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-25. Sector: Technology. media production (audio description and accessibility media) Montreal, Quebec, Canada | Current 2026 client production files from your work in progress library, including active projects modified in October 2026; A job candidate resume with full personal contact details from your human resources records; Your archive of finished productions from 2016 through 2021, including a 2.1 GB demonstration archive; Internal technical documentation of your media production platform | [NOT PAID EXPOSED]
Kale Balata A
October 23, 2026
•[ ransomware, manufacturing, hack ]
Kale Balata A was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-23. Sector: Agriculture and Food Production. Country: Turkey. Website: www.kalebalata.com.
Farmacia I
October 30, 2026
•[ ransomware, healthcare, hack ]
Farmacia I was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Healthcare. Country: Mexico. Website: www.farmaciasimas.com.
Trade Union Co
October 26, 2026
•[ ransomware, hack, automotive ]
Trade Union Co was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Other. Country: United States of America. Website: tradeunionco.com. tradeunionco.com tuc-dxb.com Trade Union Co. is a family-owned automotive spare parts wholesaler and retailer founded in 1960 in Beirut, Lebanon, with over 65 years of experience serving customers across the Middle East, Africa, Europe, Asia and the Americas. The group operates through its Beirut headquarters and The Trade Union International LLC in Dubai, a 5000 square meter global re-export hub established in 2007 with offices also in Germany, Russia and Nigeria. With over 150 employees and 20 plus international aftermarket brands including Bosch, Mahle, ZF and Sachs, it supplies parts for European, Japanese and American passenger and commercial vehicles. Led by CEO Walid El Bissani and Head of Strategy Tarek Jamil, the company is a member of NEXUS Automotive International, the world's largest automotive distribution community. It regularly exhibits at Automechanika Dubai and Frankfurt, showcasing its growing brand portfolio and global logistics network.
Hygiena
October 27, 2026
•[ ransomware, healthcare, hack ]
Hygiena was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Healthcare. Country: United States of America. Website: www.hygiena.com. United States
Grupo Ciosa, SAPI de CV
October 30, 2026
•[ ransomware, hack, automotive ]
Grupo Ciosa, SAPI de CV was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Other. Country: Mexico. Website: www.ciosa.com.
Richland Resources Corporation
October 30, 2026
•[ ransomware, energy, hack ]
Richland Resources Corporation was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Energy & Utilities. Country: United States of America. Website: rrcokc.com.
Judicial Branch of the Province of Jujuy
September 5, 2026
•[ ransomware, government, hack ]
Judicial Branch of the Province of Jujuy was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-09-05. Sector: Government & Defense. Country: Argentina. The official website of the Judicial Branch of Jujuy, Argentina. It provides court information, digital case management, mediation services, legal rulings, and judicial news for legal professionals and the public.
Now i have your wordpress databases, login credentials to internal systems(thanks to marcos :)), as well as your email credentials
Respond to us, pay the ransom.(Check your emails & check spam as well.) [Size: 4.2 GB | Sector: Government, Law]
Norwood Law Firm
September 4, 2026
•[ ransomware, hack, leak ]
Norwood Law Firm was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-09-04. Sector: Professional Services. Country: United States of America. Website: norwoodlegal.com. Norwood Law is a Tulsa-based legal firm that specializes in personal injury law, criminal defense, business law, and family law. Founded by attorney Joe Norwood in 2004, the firm is known for its success in high-profile cases and achieving significant legal victories for its clients. The team also includes Todd Maxwell, who specializes in contracts, construction law, and dispute mediation. Norwood Law serves clients in Oklahoma seeking expert legal representation in complex legal matters.
copeplastics.com
September 8, 2026
•[ ransomware, manufacturing, hack ]
copeplastics.com was listed as a victim on the leak site of the chaos ransomware group; the attack is estimated to have taken place on 2026-09-08. Sector: Manufacturing. Country: United Kingdom of Great Britain and Northern Ireland. Website: copeplastics.com. Cope Plastics is a leading U.S. distributor and fabricator of performance plastics, serving industrial and commercial customers since 1946. From our headquarters in Alton, Illinois and through multiple branch locations, we support clients across countless sectorsheavy equipment, transportation, aero
Ozel & Ozel Laws Office
September 2, 2026
•[ ransomware, hack ]
Ozel & Ozel Laws Office was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-09-02. Sector: Professional Services. Country: Turkey. Website: ozel.av.tr/en.
capricornlogistics.com
September 12, 2026
•[ ransomware, hack, manufacturing ]
capricornlogistics.com was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-09-12. Sector: Transportation. Country: South Africa. Website: capricornlogistics.com. Capricorn Logistics Pvt. Ltd. is an Indian comprehensive supply chain and logistics company founded in 2001 in Mumbai, M...
Strad Solutions
September 12, 2026
•[ ransomware, technology, hack ]
Strad Solutions was listed as a victim on the leak site of the Vexy Ransomware ransomware group; the attack is estimated to have taken place on 2026-09-12. Sector: Technology. Country: United Kingdom of Great Britain and Northern Ireland. Website: stradsolutions.com. Strad Solutions provides cloud hosting, dedicated servers, managed IT, cybersecurity, and disaster recovery services for businesses worldwide.
Massey, Stotser & Nichols
September 14, 2026
•[ ransomware, hack ]
Massey, Stotser & Nichols was listed as a victim on the leak site of the insomnia ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Professional Services. Country: United States of America. Website: www.msnattorneys.com. Massey, Stotser & Nichols is a Birmingham, AL law firm offering real estate, family law, and civil/corporate litigation. They serve Fortune 500, businesses, and individuals, delivering personalized solutions with big-firm capability.
