hautarzt-budihardja.de
May 18, 2026
•[ ransomware, healthcare ]
hautarzt-budihardja.de was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-05-18. Sector: Healthcare. Country: Germany. Website: hautarzt-budihardja.de. The clinic is led by Dr. med. Debby Budihardja, a board-certified dermatologist and allergologist with extensive clinical experience gained at
Barclay Damon
April 28, 2026
•[ ransomware, leak, finance ]
Barclay Damon was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-04-28. Sector: Professional Services. Country: United States of America. Website: barclaydamon.com. [AI generated] Barclay Damon is a full-service law firm headquartered in the United States, with offices across New York and other northeastern states. The firm operates in the legal services industry, providing counsel in areas including business law, litigation, real estate, healthcare, energy, and public finance. It serves clients ranging from businesses and municipalities to individuals, offering both transactional and dispute resolution services.
Internal Medicine and Pediatrics of Cullman
May 21, 2026
•[ ransomware, healthcare ]
Internal Medicine and Pediatrics of Cullman was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-05-21. Sector: Healthcare. Country: United States of America. Website: impcullman.com. Internal Medicine and Pediatrics of Cullman provides comprehensive healthcare services for families, focusing on both internal medicine and pediatrics. The practice is staffed by board-certified physicians dedicated to delivering high-quality care using modern medical equipment. They offer a range of services including preventative medicine, in-house lab and radiology, and same-day appointments.
alkaloid.com.mk
May 21, 2026
•[ ransomware, healthcare ]
alkaloid.com.mk was listed as a victim on the leak site of the apt73 ransomware group; the attack is estimated to have taken place on 2026-05-21. Sector: Healthcare. Country: North Macedonia. Website: alkaloid.com.mk. Alkaloid is a pharmaceutical company from Northern Macedonia, founded in Skopje in 1936, producin...
DentaQuest.com
May 23, 2026
•[ ransomware, healthcare ]
DentaQuest.com was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-05-23. Sector: Healthcare. Country: United States of America. Website: DentaQuest.com. You wouldn't want us to describe what data and how much data was compromised publicly. It is in your best interests to reply to us or we are leaking it all by the deadline. This is a final warning to reach out by 27 May 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. Pay or Leak. | Updated: 23 May 2026 | Warning: FINAL WARNING PAY OR LEAK
Prologic Construction
May 24, 2026
•[ ransomware, manufacturing, healthcare ]
Prologic Construction was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-05-24. Sector: Manufacturing. Country: Canada. Website: prologicconstruction.ca. Prologic Construction is a trusted general contractor based in Alberta, specializing in high-quality construction solutions for both public and private sectors since 1999. The company offers a full range of services including commercial, institutional, and municipal projects, ensuring timely completion and adherence to budget. With a commitment to quality craftsmanship and competitive pricing, Prologic Construction has built a strong reputation for reliability and expertise. Their portfolio includes various projects such as school modernizations, arena renovations, and healthcare facilities, reflecting their dedication to excellence and community development
la familia adualt day center
May 24, 2026
•[ ransomware, healthcare ]
la familia adualt day center was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-05-24. Sector: Healthcare. Country: United States of America. Website: www.lafamiliaadultdaycenter.com.
North Dallas Shared Ministries
May 25, 2026
•[ ransomware, healthcare, retail ]
North Dallas Shared Ministries was listed as a victim on the leak site of the cmdorganization ransomware group; the attack is estimated to have taken place on 2026-05-25. Sector: Retail & E-Commerce. Country: United States of America. Website: www.ndsm.org. Now-Forward is a non-profit organization based in Dallas that provides a range of essential services such as financial aid, medical and dental care, food, clothing, and ESL classes to low-income families. Established to effectively serve the urgent needs of the community, they have been a trusted resource for over 40 years, assisting residents facing unexpected life challenges. The organization supports their mission through donations, volunteer work, and partnerships with local entities, ensuring that 96% of their funds are directed toward client services. Their extensive offerings also include tax preparation and school supply assistance, enabling families to achieve greater stability and self-sufficiency.
Open Door Health Center
May 25, 2026
•[ ransomware, healthcare ]
Open Door Health Center was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-05-25. Sector: Healthcare. Country: United States of America. Website: odhc.org. Open Door Health Center of Illinois offers a comprehensive medical home approach to primary health care, focusing on improving community health since 1977. Their services include medical assistance, HIV programs, behavioral health, case management, and community outreach, catering especially to LGBTQI individuals and those living with HIV/AIDS. The center aims to provide affordable and accessible healthcare without discrimination, while also engaging in education and training initiatives. Their intended clients include patients in need of medical care, community members seeking support, and volunteers looking to contribute to health equity.
PILLER AIMMCO
May 25, 2026
•[ ransomware, manufacturing, technology ]
PILLER AIMMCO was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-05-25. Sector: Manufacturing. Country: United States of America. Website: pilleraimmco.com. PILLER AIMMCO is a leading vertically integrated custom plastic injection molding and tool-making company based in Woodland and Washougal, Washington. The company serves as a "one-stop shop" by managing the entire manufacturing lifecycle under one rooffrom initial part design and engineering to mold production, automated high-volume manufacturing, and secondary assembly.
PILLER AIMMCO holds ISO 9001:2015 certifications across both its tooling and molding operations, enabling it to support rigorous industrial regulations:
1. Medical Devices & Biotech: Fluid management components, orthodontic instruments, and lab devices that meet FDA, biocompatibility, and sterilization metrics.
2. Aerospace & Defense: Specialized tooling, gauges, fixtures, and finished components requiring absolute traceability.
3. Consumer Electronics: Complex enclosures, wearable technology components, and carbon-fiber-filled metal replacements.
4. Industrial & Agriculture: Heavy-duty commodities, nursery containers, large housings, and automotive/heavy trucking aftermarket parts
Ramos Rheumatology
May 27, 2026
•[ ransomware, healthcare ]
Ramos Rheumatology was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-05-27. Sector: Healthcare. Country: United States of America. Website: ramosrheumatology.com. Ramos Rheumatology is a leading care center in Avoca, PA, specializing in the diagnosis and treatment of autoimmune diseases such as lupus, rheumatoid arthritis, and fibromyalgia. The practice emphasizes personalized care, ensuring that each patient receives tailored treatment plans in a compassionate environment. Their team, including local specialists, collaborates closely with primary care providers to deliver comprehensive rheumatology services. With a commitment to patient autonomy and immediate appointment availability for emergencies, Ramos Rheumatology prioritizes the well-being of its clients
DentaQuest, LLC
May 28, 2026
•[ ransomware, healthcare ]
DentaQuest, LLC was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-05-28. Sector: Healthcare. Country: United States of America. Website: dentaquest.com. You wouldn't want us to describe what data and how much data was compromised. It is in your best interests to reply to us or we are leaking it all by the deadline. This is a final warning to reach out by 29 May 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. Pay or Leak. | Updated: 28 May 2026 | Warning: FINAL WARNING PAY OR LEAK
Hospice Savannah
May 28, 2026
•[ ransomware, healthcare ]
Hospice Savannah was listed as a victim on the leak site of the cmdorganization ransomware group; the attack is estimated to have taken place on 2026-05-28. Sector: Healthcare. Country: United States of America. Website: www.hospicesavannah.org. Hospice Savannah provides comprehensive hospice and palliative care services to individuals facing serious illnesses, including specialized programs for pediatric patients and advanced cardiac care. Their services extend to in-home care, nursing home assistance, and inpatient hospice units, ensuring a dignified and comfortable end-of-life experience.
L&P Aesthetics
May 28, 2026
•[ ransomware, healthcare ]
L&P Aesthetics was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-05-28. Sector: Healthcare. Country: United States of America. Website: fortheface.com.
Dillon Family Medicine
May 28, 2026
•[ ransomware, healthcare ]
Dillon Family Medicine was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-28. Sector: Healthcare. Country: United States of America. Website: www.dillonfamilymedicine.com.
Providence Medical Group
May 28, 2026
•[ ransomware, healthcare ]
Providence Medical Group was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-28. Sector: Healthcare. Country: United States of America. Website: www.provmedgroup.com.
Mindpath College Health
May 28, 2026
•[ ransomware, healthcare ]
Mindpath College Health was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-28. Sector: Healthcare. Country: United States of America. Website: college.mindpath.com.
Advanced Psychiatry Associates
May 28, 2026
•[ ransomware, healthcare ]
Advanced Psychiatry Associates was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-05-28. Sector: Healthcare. Country: United States of America. Website: advancedpsychiatryassociates.com. [AI generated] Advanced Psychiatry Associates is a psychiatric medical practice based in the United States. The company provides comprehensive mental health services, including evaluation, diagnosis, and treatment of psychiatric conditions such as depression, anxiety, ADHD, and bipolar disorder. It operates within the healthcare and behavioral health industry, offering both medication management and therapy services to adult and adolescent patients across its clinic locations.
belimed.com
May 28, 2026
•[ ransomware, healthcare, finance ]
belimed.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-05-28. Sector: Healthcare. Country: United States of America. Website: belimed.com. We are announcing the successful breach of the secure network of Belimed AG, a leading provider of sterilization equipment. Our team has gained full access to the digital assets of their finance department and has exfiltrated the entire dataset.
Data Volume: 1.5 Terabytes.
In our possession is the complete financial picture of Belimed AG. This isn't just tables or reports; it is the entire nervous system of their business, including:
* **SAP (SUP) Databases:** Full dumps containing all operational and financial information.
* **Accounting Records:** All transactions, entries, and financial operations spanning many years.
* **Client Contracts and Payments:** Detailed information on deals, pricing, and accounts receivable.
* **Employee Data:** Salaries, bonuses, and personal financial information.
* **Internal Audits and Strategic Planning:** Documents revealing their weaknesses, future plans, and trade secrets.
* **Tax Documentation and Banking Details:** All information necessary for a complete understanding of their financial flows.
The management of Belimed AG was given the opportunity to resolve this matter privately and without consequence. They chose silence, believing they could ignore us. This was a fatal mistake. By refusing to engage, they have jeopardized not only their own reputation but also the security of their clients, partners, and employees.
**This is not a threat. It is an announcement of a coming event.**
Exactly one month from the date of this post, the entire 1.5 TB data archive will be published for public access on this resource. Anyonecompetitors, journalists, regulatorswill be able to download and scrutinize the inner workings of Belimed AG.
To the management of Belimed AG: you have made your choice. Now you will serve as an example to all others. Enjoy the consequences. The clock is ticking.
Restorative Therapies, Inc.
May 29, 2026
•[ ransomware, healthcare, technology ]
Restorative Therapies, Inc. was listed as a victim on the leak site of the AiLock ransomware group; the attack is estimated to have taken place on 2026-05-29. Sector: Healthcare. Country: United States of America. Website: restorative-therapies.com. Restorative Therapies was established in 2004 as a partnership between researchers, engineers, and patient advocates to develop and promote Advanced Rehabilitation Technologies (ART).
