dfiretailgroup.com
September 8, 2026
•[ ransomware, leak, retail ]
dfiretailgroup.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-09-08. Sector: Retail & E-Commerce. Country: United States of America. Website: dfiretailgroup.com. DFI RETAIL GROUP 27 Years of Email Archives + 397 Illegal Stores + 40,000 Medical Files Over 160 mai...
Le Centre National de l'Expertise Hospitalière (CNEH)
September 30, 2026
•[ ransomware, healthcare, hack ]
Le Centre National de l'Expertise Hospitalire (CNEH) was listed as a victim on the leak site of the kairos ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Healthcare. Country: France. Website: cneh.fr. Le Centre National de l'Expertise Hospitalire (CNEH) est une cole de rfrence et un organisme franais fond en 1974 qui accompagne les professionnels de sant et les tablissements sanitaires et mdico-sociaux.
Houston Thyroid & Endocrine Specialists
September 30, 2026
•[ ransomware, healthcare, leak ]
Houston Thyroid & Endocrine Specialists was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Healthcare. Country: United States of America. Healthcare - Endocrinology (US) Houston, Texas | 14,441 patient document scans from a Houston endocrinology practice: lab results, medical summaries, diagnoses, insurance records, day sheets; Protected health information of thousands of patients including SSNs, dates of birth, and clinical data; Billing and claims records with financial data | [ACTIVE: deadline 2026-10-04 12:00 UTC]
M. B. Kahn Construction Co.
August 1, 2026
•[ ransomware, manufacturing, healthcare ]
M. B. Kahn Construction Co. was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-08-01. Sector: Manufacturing. Country: United States of America. Website: mbkahn.com. [AI generated] M. B. Kahn Construction Co. is a general contracting and construction management firm based in the United States, headquartered in Columbia, South Carolina. Founded in 1926, the company operates primarily across the southeastern United States. It serves sectors including commercial, industrial, healthcare, education, and government markets, delivering services such as design-build, preconstruction planning, and facility construction.
MIM Fertility
August 1, 2026
•[ ransomware, healthcare, leak ]
MIM Fertility was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-08-01. Sector: Healthcare. Country: United Kingdom of Great Britain and Northern Ireland. Website: mimfertility.ai. [AI generated] MIM Fertility is a US-based fertility clinic network specializing in reproductive medicine and assisted reproductive technologies. The company provides services such as in vitro fertilization, egg freezing, preimplantation genetic testing, and fertility preservation. Operating within the healthcare and reproductive medicine industry, MIM Fertility focuses on personalized patient care and works with fertility specialists to help individuals and couples achieve pregnancy.
Vernon & Waldrep
August 1, 2026
•[ ransomware, healthcare ]
Vernon & Waldrep was listed as a victim on the leak site of the Global Secret Group ransomware group; the attack is estimated to have taken place on 2026-08-01. Sector: Professional Services. Country: United States of America. Website: vernonwaldrep.com. Country: Texas, United States |
Website: vernonwaldrep.com |
Revenue: $5 Million |
Industry: Physicians, Mental Health Specialists |
Employees: 2150 |
Properties: 274 GB (56,006 Files, 3,421 Folders)
Alcon Inc.
August 1, 2026
•[ ransomware, healthcare, technology ]
Alcon Inc. was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-08-01. Sector: Healthcare. Country: Switzerland. Website: alcon.com. Over 25 million Salesforce records containing some PII was compromised.
This is a final warning to reach out by 4 August 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline.
www.prohealth.sg
August 2, 2026
•[ ransomware, healthcare ]
www.prohealth.sg was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-08-02. Sector: Healthcare. Country: Singapore. Website: www.prohealth.sg. ProHealth Medical Group Pte Ltd is a Singaporean private primary healthcare group founded in the 1990s, headquartered at...
PCL Holding
July 18, 2026
•[ ransomware, healthcare, technology ]
PCL Holding was listed as a victim on the leak site of the ransomhouse ransomware group; the attack is estimated to have taken place on 2026-07-18. Sector: Professional Services. Country: Canada. Website: www.pclholding.com. PCL Holding Public Company Limited is a Thai-based holding entity operating as a premier importer and distributor of diagnostic instruments, reagents, and consumables for medical and research laboratories. The company manages a comprehensive portfolio of products across hematology, chemistry, immunology, and laboratory automation systems, representing globally recognized brands such as Beckman Coulter. With over 100 employees, the organization serves a broad client base of hospitals and government sectors throughout the Thai domestic market. Established in 1995 and converted to a public company in 2023, the firm delivers end-to-end service support to the public health sector. The companys structure as a holding company enables strategic management of its diverse operational subsidiaries and product verticals to drive market leadership.
Cameron Regional Medical Center
August 3, 2026
•[ ransomware, healthcare ]
Cameron Regional Medical Center was listed as a victim on the leak site of the anubis ransomware group; the attack is estimated to have taken place on 2026-08-03. Sector: Healthcare. Country: United States of America. Website: cameronregional.org. Patient and employee data breach at a healthcare provider.
BLACKBURN'S
August 3, 2026
•[ ransomware, healthcare ]
BLACKBURN'S was listed as a victim on the leak site of the anubis ransomware group; the attack is estimated to have taken place on 2026-08-03. Sector: Healthcare. Country: United States of America. Website: blackburnsmed.com. Major home healthcare provider data breach.
Cardiology Associates
July 10, 2026
•[ ransomware, healthcare ]
Cardiology Associates was listed as a victim on the leak site of the Orova ransomware group; the attack is estimated to have taken place on 2026-07-10. Sector: Healthcare. Country: United States of America. Website: porthuronheartcenter.com. Serving the community for over 45 years, Cardiology Associates of Port Huron, P.C. offers the latest in cardiac procedures and technology, helping our qualified physicians to detect and provide comprehensive treatment for a wide variety of adult heart and artery conditions.
Wisdom Oral Surgery
July 3, 2026
•[ ransomware, healthcare ]
Wisdom Oral Surgery was listed as a victim on the leak site of the Orova ransomware group; the attack is estimated to have taken place on 2026-07-03. Sector: Healthcare. Country: United States of America. Website: www.wisdom-oralsurgery.com. Wisdom Oral Surgery, located in Fair Lawn, NJ, specializes in a wide range of oral surgery services including dental implants, wisdom teeth extractions, bone grafting, and facial trauma care. The clinic is dedicated to providing exceptional patient comfort and care, utilizing advanced technology for accurate diagnoses and treatments.
Texas Medical Screening
June 26, 2026
•[ ransomware, healthcare ]
Texas Medical Screening was listed as a victim on the leak site of the Orova ransomware group; the attack is estimated to have taken place on 2026-06-26. Sector: Healthcare. Country: United States of America. Website: www.texasmedical.com. Texas Medical has helped organizations deliver health screenings without the overhead. Our self-service kiosks are trusted in workplaces, pharmacies, and community spaces across the country.
ADG Healthcare
May 21, 2026
•[ ransomware, healthcare ]
ADG Healthcare was listed as a victim on the leak site of the Orova ransomware group; the attack is estimated to have taken place on 2026-05-21. Sector: Healthcare. Country: Egypt. Website: www.adg-healthcare.com. ADG Healthcare is a company that operates in the Medical Specialists industry. It employs 250to499 people and has 10Mto25M of revenue. The company is headquartered in Cairo, Cairo, Egypt.
healthcarehighways.com
August 4, 2026
•[ ransomware, healthcare ]
healthcarehighways.com was listed as a victim on the leak site of the chaos ransomware group; the attack is estimated to have taken place on 2026-08-04. Sector: Healthcare. Country: United States of America. Website: healthcarehighways.com. WARNING / DATA LEAK NOTICE
Target: Healthcare Highways (healthcarehighways.com)
Countdown: 24 Hours
If corporate representatives do not establish contact via chat within the next 24 hours, a massive internal data cache comprising 235 GB of sensitive company and client records will be p
PT All Cosmos Biotek
August 5, 2026
•[ ransomware, healthcare, technology ]
PT All Cosmos Biotek was listed as a victim on the leak site of the gunra ransomware group; the attack is estimated to have taken place on 2026-08-05. Sector: Healthcare. Country: Indonesia. Website: allcosmos.com. Sector: Agricultural Biotechnology & Fertilizer | Revenue: US$ 5,000,000
Mansfield Family Dentistry
July 23, 2026
•[ ransomware, healthcare ]
Mansfield Family Dentistry was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-07-23. Sector: Healthcare. Country: United States of America. Website: mansfielddentistry.com. [AI generated] Mansfield Family Dentistry is a dental practice operating in the United States, likely located in Mansfield, Ohio or a similarly named city. The practice provides general and family dentistry services, including routine cleanings, examinations, fillings, and preventive care for patients of all ages. It operates within the healthcare and dental services industry, serving local community members in a private practice setting.
Labpharma
June 25, 2026
•[ ransomware, healthcare, technology ]
Labpharma was listed as a victim on the leak site of the Dark Project ransomware group; the attack is estimated to have taken place on 2026-06-25. Sector: Healthcare. Country: Mexico. Website: labpharmacorp.com. Labpharmacorp Labpharma is a Clinical Laboratory in Miami dedicated to delivering dependable, high-quality laboratory services for clinical trials and research. About Labpharma Labpharma is a laboratory data company supporting clinical research trials. Company offers Local and Central Laboratory testing and data management. Standard Services: Laboratory Manual (electronic and hardcopy), kit production, door to door shipping (IATA certified), research trained and certified (CGP certified), while testing menu includes the following disciplines: Hematology, Clinical Chemistry, Immunochemistry, Infectious Disease, Hemostasis, and Toxicology. From end to end all samples are barcode, tracked and managed to ensure reliable laboratory services for research studies. Download here: http://t2ru74fbgut26xnagtrl4ajeh5vqytrl6cpr6cubmr6sqdxk5guh5mqd.onion/
Ohio Living Home Health & Hospice
June 8, 2026
•[ ransomware, healthcare, financial ]
Ohio Living Home Health & Hospice was listed as a victim on the leak site of the Dark Project ransomware group; the attack is estimated to have taken place on 2026-06-08. Sector: Healthcare. Country: United States of America. Website: ohioliving.org. About Ohio Living Founded in 1922, Ohio Living is an experienced not-for-profit provider of life plan communities and services in Ohio. Due to cyberattack at least 600Gb of sensitive data leaked in "Ohio Living Home Health & Hospice" in April 2026. It known that at least 5000 files with personal data were stolen, among whole it contained employee records, driver licenses, patient personal documents including photos, medical records, social security numbers, insurance information, also files with confidential company financial information and bank records covering period for 2022-2026. Download here: http://3i5px2hibsyityv6jixnqba35yz25jekbwwumjdxjqzt3euqsygjx5id.onion/
